last executing test programs:

12m22.735295176s ago: executing program 3 (id=245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'veth0_to_batadv\x00'})

12m22.645197864s ago: executing program 3 (id=252):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close(r1)

12m22.57714404s ago: executing program 3 (id=255):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

12m22.521628584s ago: executing program 3 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

12m22.393790975s ago: executing program 3 (id=262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

12m22.149594077s ago: executing program 3 (id=271):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000500)=[{&(0x7f0000002000)=""/4101, 0x1005}], 0x1)

12m22.11119883s ago: executing program 32 (id=271):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000500)=[{&(0x7f0000002000)=""/4101, 0x1005}], 0x1)

12m4.79767236s ago: executing program 4 (id=840):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

12m4.014652159s ago: executing program 4 (id=867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x81)
vmsplice(r3, &(0x7f0000000040), 0x100000000000000c, 0x6)

12m3.933876186s ago: executing program 4 (id=871):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000140)='%pS    \x00'}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xcb0, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xc9c, 0x1, [@m_police={0xc98, 0x1, 0x0, 0x0, {{0xb}, {0xc6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb3, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0xffff48fb, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x7, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcb0}}, 0x0)

12m3.933407256s ago: executing program 4 (id=872):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x8)

12m3.898876339s ago: executing program 4 (id=875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
flistxattr(r3, 0x0, 0x0)

12m3.617743364s ago: executing program 4 (id=886):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f00000004c0)=ANY=[], 0x0)

12m3.609596765s ago: executing program 33 (id=886):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f00000004c0)=ANY=[], 0x0)

11m28.258737209s ago: executing program 5 (id=1733):
unshare(0x68040200)
unshare(0x300)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000940)=ANY=[@ANYBLOB="000202"], 0x18)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffe, 0x0, 0xfffffff3})
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x0)
mq_open(&(0x7f0000000140)=')-\x00', 0x2, 0x38, &(0x7f0000000180)={0x1, 0x401, 0x5, 0x7})
sendmsg$nl_route(r1, 0x0, 0x0)

11m28.069863515s ago: executing program 5 (id=1737):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)

11m26.823024964s ago: executing program 5 (id=1751):
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
lseek(r1, 0x100, 0x1)
getdents64(r1, &(0x7f0000000180)=""/183, 0xb7)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)

11m26.680625157s ago: executing program 5 (id=1754):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@nojournal_checksum}]}, 0x7, 0x4ba, &(0x7f0000000740)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_setup(0x202, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0])
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x4000000)

11m26.527855341s ago: executing program 5 (id=1759):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x4, 0x2d5, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_getres(0xfffffffffffffff5, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

11m26.130113936s ago: executing program 5 (id=1765):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000093d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
close_range(r2, r3, 0x0)

11m26.101995428s ago: executing program 34 (id=1765):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000093d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
close_range(r2, r3, 0x0)

11m24.467980722s ago: executing program 2 (id=1787):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r1, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrlimit(0x0, &(0x7f0000000040))

11m24.021417671s ago: executing program 2 (id=1789):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xc7}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14)

11m23.893719032s ago: executing program 2 (id=1793):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc2, &(0x7f0000000040), 0x0, 0x0, 0x74, 0x10, 0x2b, 0x4})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r4}, 0x18)
dup2(r0, r1)

11m23.716420057s ago: executing program 2 (id=1802):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@nojournal_checksum}]}, 0x7, 0x4ba, &(0x7f0000000740)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_setup(0x202, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0])
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x4000000)

11m23.378277767s ago: executing program 2 (id=1809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

11m23.23454172s ago: executing program 2 (id=1812):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1)
socket$kcm(0xa, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

11m23.23412526s ago: executing program 35 (id=1812):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1)
socket$kcm(0xa, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2.779545564s ago: executing program 6 (id=9863):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000001}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002500)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x96, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x20dc755}]}}}]}, 0x40}}, 0x40000c0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)

2.152428819s ago: executing program 6 (id=9870):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @void}, 0x10)

2.118210352s ago: executing program 6 (id=9872):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c895}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0)
splice(r4, 0x0, r7, 0x0, 0x80, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
unshare(0xa000200)

1.599033059s ago: executing program 7 (id=9894):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0xd9a0}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xab2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100))
close(0x3)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)

1.502016667s ago: executing program 7 (id=9899):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='mm_page_free\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x81}, 0x38)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x9}, 0x100000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3, 0x0, 0xfffffffffffffffe}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0xfffffffffffffdda, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)

1.491470779s ago: executing program 0 (id=9900):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x737, &(0x7f0000000ac0)="$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")

1.395356127s ago: executing program 0 (id=9902):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

1.032559439s ago: executing program 1 (id=9905):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000001500)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18})

1.01889135s ago: executing program 7 (id=9906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")

1.007181871s ago: executing program 1 (id=9907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x71a, 0x20000000, 0x0, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x310000, 0x103f, 0x101, 0x2}, 0x20)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="492a8937bc15"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x100000c1)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x4}, 0x18)
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0)

957.367516ms ago: executing program 7 (id=9908):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x4800)
syz_read_part_table(0x628, &(0x7f0000000000)="$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")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x110200, 0x318, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
r5 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r1, r2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
r8 = socket(0x29, 0x5, 0x4000)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='X\x00\x00', 0x3}], 0x1)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r11, 0x0, 0x0)
connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26)
writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
unshare(0x22020600)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f00000006c0)=""/147, 0x93, <r12=>0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000002c0)={r13, 0x81, 0x2, 0x2})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

929.807218ms ago: executing program 1 (id=9909):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c895}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x9, 0x1, 0x5, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x80, 0x9, 0x6}})
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r7, 0x110, 0x7, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
unshare(0xa000200)

929.365708ms ago: executing program 8 (id=9910):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)

892.545231ms ago: executing program 8 (id=9911):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

855.170325ms ago: executing program 0 (id=9912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0)

854.283045ms ago: executing program 6 (id=9913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)

800.316819ms ago: executing program 8 (id=9914):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000d80)='./file0\x00', 0x8000, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="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", @ANYBLOB="feb1b40a6b1166170a5bb0dcca210d99e6d5eb14790776389ecabe48af72a6beee50f15eafbdd8134eb70d9a84f7435b03932e0151706ce8bc1462ff0602e2bc4e860a360458de7c5ded2f01783da40081dac600069cf1fc1227087f0a332548ea9e548c7086e543d4dfa982fe64caa39aed19c64448a0b69e8c0c753a8b6800487f924da757c3fcd508c71002afe40f30f1691153a5808ec95618bb07b16bfc0dcb7aa45adbe603cde60fe02b84aa8dc1ed4ea32063316440472b702aeea9445f2c19"], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)

799.69155ms ago: executing program 6 (id=9915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000740)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r4)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',w&eno='])
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000340)="6a814b35320a00aa58dcc6117a310d8cb31b8da54fc4bf172b7eb002ab702b1f", 0x20}, {&(0x7f0000000280)}], 0x3)

799.15625ms ago: executing program 0 (id=9916):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18)
r1 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xf36c, 0x1000, 0x5, 0x20e}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r1, 0x5fdd, 0x217, 0xa5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

798.84966ms ago: executing program 1 (id=9917):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setitimer(0x1, &(0x7f0000000100)={{0x77359400}}, 0x0)

761.175753ms ago: executing program 1 (id=9918):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0), 0x400)

718.823877ms ago: executing program 1 (id=9919):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0)

709.611247ms ago: executing program 8 (id=9920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
close(0x3)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)

622.487715ms ago: executing program 7 (id=9921):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800596100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x57, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r7, &(0x7f0000000740)="2ae0e710", 0x4, 0x24000040, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c)
recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180e20001006f7366000c000280080000400000000428000180080001006e6174001c000280080001400000000008000340533edba35214087cf02412b8000000140800024000000030000000000900020073797a3200000000140000001100010000000000000000000000000a0000000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
close_range(r8, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400050000"], 0x48)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x6, 0x42}}, './file0\x00'})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x2000000000000242, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r13, 0x0, 0x9}, 0x18)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)

621.418495ms ago: executing program 7 (id=9922):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000005b4df2ff0000", @ANYRES32, @ANYRESDEC=r0], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad0", 0x1a, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r5 = request_key(&(0x7f0000000500)='rxrpc\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)=':\x00', r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

605.576907ms ago: executing program 8 (id=9923):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setuid(0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25021820ff", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

453.81738ms ago: executing program 0 (id=9924):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x21, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x20000800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

187.616564ms ago: executing program 0 (id=9925):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20810}, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x9}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e22, @multicast1}}, [0x5, 0x3, 0x7fffffffffffffff, 0x80000001, 0x80000000, 0xa49, 0x3, 0x1000, 0x5, 0xfffffffffffffffe, 0x9, 0x3, 0x8d, 0x8000000000000001, 0x2]}, &(0x7f0000000340)=0x100)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x6c3a, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x3010}, &(0x7f0000000040), &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0}, 0x94)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r2, 0xc0000)
r4 = dup3(r3, r2, 0x0)
r5 = getpid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0x2}, 0x18)
rmdir(0x0)
syz_pidfd_open(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x3a, 0x3, 0x2, 0x1, 0x2, "299a40ffa617083bbb0967b0a4e7d25ef92284"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004)
io_setup(0x8, &(0x7f0000004200))

141.828888ms ago: executing program 8 (id=9926):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)

0s ago: executing program 6 (id=9927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64=<r2=>0xffffffffffffffff], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = dup(r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$binfmt_misc(r4, &(0x7f0000000540)="e3883f30dcdd53319b9884229a32dc097c09a52205983bbb661bdc822a4672d4e7b0882858dc3db71631c506802f5672651e758079c09c663cb15273668dc0f6b1b76d0bf69a12d006d31e1328d02659f58dc800972b2bdac2321b6d5a1a4f95b781b4fdf36b3346df1f9e2c3e7d21376a3d9c71ea6857753d088bac06", 0x7d)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_GET_PACK_ID(r7, 0x227c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYRES8=r2], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
ioctl$GIO_UNISCRNMAP(r4, 0x43403d0e, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x15c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8010}, 0x60000800)

kernel console output (not intermixed with test programs):

e=0x7ffc0000
[  717.313655][   T29] audit: type=1326 audit(1767599557.754:67119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20362 comm="syz.1.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93da58f749 code=0x7ffc0000
[  717.337584][   T29] audit: type=1326 audit(1767599557.754:67120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20362 comm="syz.1.8946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93da58f749 code=0x7ffc0000
[  717.521712][T20396] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.8961'.
[  717.621596][T20412] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  717.733283][T20426] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.8974'.
[  718.126398][T20466] wg1 speed is unknown, defaulting to 1000
[  718.243958][T20466] lo speed is unknown, defaulting to 1000
[  718.979331][T20531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  719.201390][T20539] wg1 speed is unknown, defaulting to 1000
[  719.325538][T20539] lo speed is unknown, defaulting to 1000
[  719.925668][T20567] wg1 speed is unknown, defaulting to 1000
[  720.102160][T20567] lo speed is unknown, defaulting to 1000
[  720.464941][T20604] validate_nla: 20 callbacks suppressed
[  720.464961][T20604] netlink: 'syz.7.9007': attribute type 6 has an invalid length.
[  720.876596][T20638] __nla_validate_parse: 17 callbacks suppressed
[  720.876613][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9022'.
[  720.892049][T20638] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9022'.
[  720.922418][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9022'.
[  720.940739][T20638] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9022'.
[  720.949929][T20638] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9022'.
[  720.987952][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'.
[  720.996968][T20645] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9025'.
[  721.032753][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'.
[  721.059186][T20645] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9025'.
[  721.068387][T20645] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9025'.
[  721.150520][T20655] netlink: 'syz.8.9030': attribute type 1 has an invalid length.
[  721.301976][T20674] netlink: 'syz.6.9036': attribute type 6 has an invalid length.
[  721.395249][T20680] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  721.491420][T20693] netlink: 'syz.0.9043': attribute type 6 has an invalid length.
[  721.628747][T20708] netlink: 'syz.7.9048': attribute type 13 has an invalid length.
[  721.812565][   T29] kauditd_printk_skb: 550 callbacks suppressed
[  721.812581][   T29] audit: type=1326 audit(1767599562.563:67671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.846882][T20700] wg1 speed is unknown, defaulting to 1000
[  721.846906][T20712] netlink: 'syz.1.9050': attribute type 4 has an invalid length.
[  721.876101][   T29] audit: type=1326 audit(1767599562.605:67672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.899815][   T29] audit: type=1326 audit(1767599562.605:67673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.923528][   T29] audit: type=1326 audit(1767599562.605:67674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.947260][   T29] audit: type=1326 audit(1767599562.605:67675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.970924][   T29] audit: type=1326 audit(1767599562.605:67676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  721.994454][   T29] audit: type=1326 audit(1767599562.605:67677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  722.018205][   T29] audit: type=1326 audit(1767599562.605:67678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  722.041910][   T29] audit: type=1326 audit(1767599562.605:67679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  722.065371][   T29] audit: type=1326 audit(1767599562.605:67680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20715 comm="syz.8.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257c38f749 code=0x7ffc0000
[  722.118097][T20700] lo speed is unknown, defaulting to 1000
[  722.167779][T20731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20731 comm=syz.6.9056
[  722.187492][T20731] netlink: 'syz.6.9056': attribute type 21 has an invalid length.
[  722.196187][T20731] netlink: 'syz.6.9056': attribute type 1 has an invalid length.
[  722.233414][T20749] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  722.396793][T20767] netlink: 'syz.6.9066': attribute type 4 has an invalid length.
[  722.455078][T20774] gretap0: left allmulticast mode
[  722.460198][T20774] gretap0: left promiscuous mode
[  722.465424][T20774] bridge0: port 1(gretap0) entered disabled state
[  722.496238][T20774] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  722.510692][T20774] bond_slave_0: left promiscuous mode
[  722.517940][T20774] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  722.526220][T20774] bond_slave_1: left promiscuous mode
[  722.533995][T20774] team0: Port device team_slave_0 removed
[  722.544724][T20774] team0: Port device team_slave_1 removed
[  722.555232][T20782] netlink: 'syz.7.9071': attribute type 6 has an invalid length.
[  722.606544][T20791] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  722.663905][T20785] wg1 speed is unknown, defaulting to 1000
[  722.746293][T20785] lo speed is unknown, defaulting to 1000
[  722.996926][T20825] wg1 speed is unknown, defaulting to 1000
[  723.114215][T20825] lo speed is unknown, defaulting to 1000
[  723.543432][T20850] Set syz1 is full, maxelem 14 reached
[  723.563914][T20865] 9p: Bad value for 'rfdno'
[  725.023447][T20897] wg1 speed is unknown, defaulting to 1000
[  725.098712][T20897] lo speed is unknown, defaulting to 1000
[  725.245943][T20936] validate_nla: 1 callbacks suppressed
[  725.245959][T20936] netlink: 'syz.6.9103': attribute type 4 has an invalid length.
[  725.483385][T20930] wg1 speed is unknown, defaulting to 1000
[  725.562830][T20930] lo speed is unknown, defaulting to 1000
[  725.636609][T20930] chnl_net:caif_netlink_parms(): no params data found
[  725.680722][T20930] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.687954][T20930] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.695405][T20930] bridge_slave_0: entered allmulticast mode
[  725.701797][T20930] bridge_slave_0: entered promiscuous mode
[  725.710379][T20930] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.717507][T20930] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.724936][T20930] bridge_slave_1: entered allmulticast mode
[  725.732039][T20930] bridge_slave_1: entered promiscuous mode
[  725.753082][T20930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  725.763936][T20930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  725.794053][T20930] team0: Port device team_slave_0 added
[  725.803945][T20930] team0: Port device team_slave_1 added
[  725.824475][T20930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.831540][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  725.857513][T20930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.871437][T20930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  725.878459][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  725.904505][T20930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  725.918541][T19465] gretap0: left allmulticast mode
[  725.923734][T19465] gretap0: left promiscuous mode
[  725.928876][T19465] bridge0: port 1(gretap0) entered disabled state
[  725.948086][T19465] tipc: Disabling bearer <eth:ip6_vti0>
[  726.502609][T20930] hsr_slave_0: entered promiscuous mode
[  726.508856][T20930] hsr_slave_1: entered promiscuous mode
[  726.514860][T20930] debugfs: 'hsr0' already exists in 'hsr'
[  726.520611][T20930] Cannot create hsr debugfs directory
[  726.526125][T19465] tipc: Disabling bearer <udp:syz2>
[  726.531366][T19465] tipc: Left network mode
[  726.616047][T19465] hsr_slave_0: left promiscuous mode
[  726.622027][T19465] hsr_slave_1: left promiscuous mode
[  726.627901][T19465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.635355][T19465] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.643619][T19465] batman_adv: batadv0: Removing interface: ipvlan2
[  726.964280][T19465] IPVS: stop unused estimator thread 0...
[  727.024682][T20930] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  727.033607][T20930] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  727.042481][T20930] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  727.051944][T20930] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  727.086869][T20930] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.100013][T20930] 8021q: adding VLAN 0 to HW filter on device team0
[  727.109874][ T2012] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.116965][ T2012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.129159][T19465] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.136284][T19465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.199018][T20930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  727.264592][T20930] veth0_vlan: entered promiscuous mode
[  727.272718][T20930] veth1_vlan: entered promiscuous mode
[  727.288265][T20930] veth0_macvtap: entered promiscuous mode
[  727.295958][T20930] veth1_macvtap: entered promiscuous mode
[  727.307212][T20930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  727.318017][T20930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  727.329010][T19457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.338479][T19457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.349274][T19457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.360899][T19457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.376849][   T29] kauditd_printk_skb: 286 callbacks suppressed
[  727.376868][   T29] audit: type=1400 audit(1767599568.411:67967): avc:  denied  { mounton } for  pid=20930 comm="syz-executor" path="/root/syzkaller.qy5GDV/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  727.408413][   T29] audit: type=1400 audit(1767599568.411:67968): avc:  denied  { mount } for  pid=20930 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  727.430737][   T29] audit: type=1400 audit(1767599568.411:67969): avc:  denied  { mounton } for  pid=20930 comm="syz-executor" path="/root/syzkaller.qy5GDV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  727.457846][   T29] audit: type=1400 audit(1767599568.411:67970): avc:  denied  { mounton } for  pid=20930 comm="syz-executor" path="/root/syzkaller.qy5GDV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=116706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  727.485985][   T29] audit: type=1400 audit(1767599568.442:67971): avc:  denied  { mounton } for  pid=20930 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  727.509260][   T29] audit: type=1400 audit(1767599568.442:67972): avc:  denied  { mount } for  pid=20930 comm="syz-executor" name="/" dev="gadgetfs" ino=116707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  727.532234][   T29] audit: type=1400 audit(1767599568.474:67973): avc:  denied  { write } for  pid=20930 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  727.558010][   T29] audit: type=1400 audit(1767599568.474:67974): avc:  denied  { open } for  pid=20930 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  748.849665][   T29] audit: type=1326 audit(1767599590.952:67975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  748.994952][   T29] audit: type=1326 audit(1767599590.984:67976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.018667][   T29] audit: type=1326 audit(1767599590.984:67977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.043604][   T29] audit: type=1326 audit(1767599591.162:67978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.073503][T21359] __nla_validate_parse: 16 callbacks suppressed
[  749.073522][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9120'.
[  749.088992][T21359] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9120'.
[  749.261924][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9120'.
[  749.304745][   T29] audit: type=1326 audit(1767599591.183:67979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.328444][   T29] audit: type=1326 audit(1767599591.183:67980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.352306][   T29] audit: type=1326 audit(1767599591.183:67981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.375906][   T29] audit: type=1326 audit(1767599591.183:67982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.399594][   T29] audit: type=1326 audit(1767599591.183:67983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.423293][   T29] audit: type=1326 audit(1767599591.183:67984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21357 comm="syz.6.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4732f749 code=0x7ffc0000
[  749.476516][T21359] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9120'.
[  749.485659][T21359] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9120'.
[  749.574894][T21365] wg1 speed is unknown, defaulting to 1000
[  750.234605][T21414] wg1 speed is unknown, defaulting to 1000
[  750.488261][T21363] wg1 speed is unknown, defaulting to 1000
[  750.602039][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9130'.
[  750.643479][T19457] dvmrp6 (unregistering): left allmulticast mode
[  750.698065][T21470] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  750.797558][T21482] netlink: 'syz.6.9138': attribute type 3 has an invalid length.
[  750.805379][T21482] netlink: 'syz.6.9138': attribute type 1 has an invalid length.
[  750.813158][T21482] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.9138'.
[  750.917496][T19457] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  750.926247][T19457] bond_slave_0: left promiscuous mode
[  750.932363][T19457] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  750.941238][T19457] bond_slave_1: left promiscuous mode
[  750.947104][T19457] $Hÿ (unregistering): Released all slaves
[  750.956022][T19457] bond1 (unregistering): Released all slaves
[  750.971097][T21488] netlink: 'syz.6.9140': attribute type 4 has an invalid length.
[  751.014403][T19457] tipc: Left network mode
[  751.124813][T21511] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  751.232981][T21514] ªªªªªª: renamed from vlan0 (while UP)
[  751.282991][T19457] hsr_slave_0: left promiscuous mode
[  751.289472][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9143'.
[  751.304737][T19457] hsr_slave_1: left promiscuous mode
[  751.311029][T19457] batman_adv: batadv0: Removing interface: batadv_slave_0
[  751.317550][T21530] netlink: 'syz.8.9148': attribute type 3 has an invalid length.
[  751.326053][T21530] netlink: 'syz.8.9148': attribute type 1 has an invalid length.
[  751.333986][T21530] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.9148'.
[  751.524160][T19457] batman_adv: batadv0: Removing interface: batadv_slave_1
[  751.543242][T19457] pim6reg (unregistering): left allmulticast mode
[  751.776602][T21537] wg1 speed is unknown, defaulting to 1000
[  751.905724][T21539] netlink: 'syz.7.9151': attribute type 4 has an invalid length.
[  752.013087][T21363] chnl_net:caif_netlink_parms(): no params data found
[  752.062183][T21666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9153'.
[  752.103999][T21363] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.111203][T21363] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.124024][T21363] bridge_slave_0: entered allmulticast mode
[  752.130603][T21363] bridge_slave_0: entered promiscuous mode
[  752.137762][T21363] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.144943][T21363] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.152408][T21363] bridge_slave_1: entered allmulticast mode
[  752.158940][T21363] bridge_slave_1: entered promiscuous mode
[  752.187255][T21363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.211394][T21363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.225449][T21728] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  752.262660][T21363] team0: Port device team_slave_0 added
[  752.271269][T21363] team0: Port device team_slave_1 added
[  752.329634][T21363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  752.336691][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.362944][T21363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  752.374910][T21363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  752.377324][T19457] IPVS: stop unused estimator thread 0...
[  752.382111][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.413767][T21363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  752.468516][T21363] hsr_slave_0: entered promiscuous mode
[  752.480462][T21363] hsr_slave_1: entered promiscuous mode
[  752.521072][T21820] netlink: 'syz.6.9164': attribute type 4 has an invalid length.
[  752.624255][T21868] netlink: 'syz.6.9166': attribute type 6 has an invalid length.
[  752.805460][T21910] netlink: 'syz.8.9171': attribute type 6 has an invalid length.
[  752.900907][T21939] netlink: 'syz.7.9176': attribute type 4 has an invalid length.
[  752.913692][T21363] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  752.930098][T21363] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  752.942772][T21363] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  752.959348][T21363] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  753.008395][T21363] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.020544][T21363] 8021q: adding VLAN 0 to HW filter on device team0
[  753.043201][T21363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  753.053630][T21363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  753.068378][T19457] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.075491][T19457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  753.085377][T19457] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.092517][T19457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  753.212125][T21363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.264131][T21974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21974 comm=syz.0.9183
[  753.336763][T21363] veth0_vlan: entered promiscuous mode
[  753.357447][T21363] veth1_vlan: entered promiscuous mode
[  753.375708][T21363] veth0_macvtap: entered promiscuous mode
[  753.383917][T21363] veth1_macvtap: entered promiscuous mode
[  753.396244][T21363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.422862][T21363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  753.444542][T19457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.483542][T19457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.512336][T19457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.537782][T19457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.624090][   T29] kauditd_printk_skb: 376 callbacks suppressed
[  753.624108][   T29] audit: type=1326 audit(1767599595.971:68361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  753.724424][   T29] audit: type=1326 audit(1767599595.971:68362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  753.747635][   T29] audit: type=1326 audit(1767599595.971:68363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  753.771098][   T29] audit: type=1326 audit(1767599595.971:68364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  753.794253][   T29] audit: type=1326 audit(1767599595.971:68365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  753.817480][   T29] audit: type=1326 audit(1767599595.971:68366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6df35c1667 code=0x7ffc0000
[  753.840661][   T29] audit: type=1326 audit(1767599595.971:68367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6df35c15dc code=0x7ffc0000
[  753.863741][   T29] audit: type=1326 audit(1767599595.971:68368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6df35c1514 code=0x7ffc0000
[  753.886802][   T29] audit: type=1326 audit(1767599595.971:68369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6df35c1514 code=0x7ffc0000
[  753.909929][   T29] audit: type=1326 audit(1767599595.971:68370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6df35be3aa code=0x7ffc0000
[  754.047877][T22052] __nla_validate_parse: 3 callbacks suppressed
[  754.047930][T22052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9204'.
[  754.079472][T22054] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9205'.
[  754.098444][T22021] wg1 speed is unknown, defaulting to 1000
[  754.264625][T22076] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  754.374446][T22021] chnl_net:caif_netlink_parms(): no params data found
[  754.401166][T22173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  754.478644][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9213'.
[  754.528572][T22021] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.535802][T22021] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.551441][T22021] bridge_slave_0: entered allmulticast mode
[  754.555417][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9216'.
[  754.567646][T22021] bridge_slave_0: entered promiscuous mode
[  754.594329][T22021] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.601820][T22021] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.603556][T22247] loop1: detected capacity change from 0 to 512
[  754.609828][T22021] bridge_slave_1: entered allmulticast mode
[  754.622036][T22021] bridge_slave_1: entered promiscuous mode
[  754.632539][T22247] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  754.641715][T22247] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  754.653433][T22247] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  754.661750][T22247] System zones: 0-2, 18-18, 34-35
[  754.668173][T22247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  754.688732][T22021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.703106][T22021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.705913][T22277] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  754.747661][T22021] team0: Port device team_slave_0 added
[  754.755738][T22021] team0: Port device team_slave_1 added
[  754.773032][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.800556][T22021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.807568][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.833811][T22021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.837368][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9227'.
[  754.868843][T22021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.875912][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.901980][T22021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.268680][   T31] $Hÿ (unregistering): Released all slaves
[  755.277808][   T31] bond1 (unregistering): Released all slaves
[  755.289235][T22021] hsr_slave_0: entered promiscuous mode
[  755.295582][T22021] hsr_slave_1: entered promiscuous mode
[  755.301547][T22021] debugfs: 'hsr0' already exists in 'hsr'
[  755.307397][T22021] Cannot create hsr debugfs directory
[  755.332685][   T31] tipc: Left network mode
[  756.047745][T22021] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  756.060747][T22507] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  756.097459][T22021] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  756.129840][T22512] validate_nla: 11 callbacks suppressed
[  756.129858][T22512] netlink: 'syz.0.9236': attribute type 4 has an invalid length.
[  756.149123][T22021] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  756.162398][   T31] IPVS: stop unused estimator thread 0...
[  756.169544][T22021] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  756.193884][T22522] netlink: 'syz.7.9239': attribute type 3 has an invalid length.
[  756.201772][T22522] netlink: 'syz.7.9239': attribute type 1 has an invalid length.
[  756.209565][T22522] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.9239'.
[  756.247438][T22529] netlink: 'syz.7.9241': attribute type 4 has an invalid length.
[  756.385430][T22021] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.422597][T22021] 8021q: adding VLAN 0 to HW filter on device team0
[  756.451233][T22541] netlink: 'syz.7.9243': attribute type 6 has an invalid length.
[  756.460916][T22021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  756.471512][T22021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  756.497450][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.504639][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  756.515878][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.523170][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.584377][T22021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  756.701834][T22021] veth0_vlan: entered promiscuous mode
[  756.710060][T22021] veth1_vlan: entered promiscuous mode
[  756.726495][T22021] veth0_macvtap: entered promiscuous mode
[  756.733883][T22021] veth1_macvtap: entered promiscuous mode
[  756.745092][T22021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  756.757341][T22021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  756.769483][T13655] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.778680][T13655] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.788378][T13655] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.799001][T13655] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  758.025440][T22586] chnl_net:caif_netlink_parms(): no params data found
[  758.137627][T22758] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  758.207228][T22586] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.214543][T22586] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.219529][T22788] netlink: 'syz.1.9263': attribute type 6 has an invalid length.
[  758.223252][T22586] bridge_slave_0: entered allmulticast mode
[  758.237389][T22586] bridge_slave_0: entered promiscuous mode
[  758.244112][T22763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9259'.
[  758.253173][T22763] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9259'.
[  758.263124][T22763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9259'.
[  758.272313][T22763] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9259'.
[  758.283316][T22586] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.290504][T22586] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.297923][T22586] bridge_slave_1: entered allmulticast mode
[  758.304643][T22586] bridge_slave_1: entered promiscuous mode
[  758.351269][T22586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.364365][T22586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.399985][T22586] team0: Port device team_slave_0 added
[  758.403390][T22860] netlink: 'syz.1.9264': attribute type 13 has an invalid length.
[  758.414689][T22586] team0: Port device team_slave_1 added
[  758.514685][T22860] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.522055][T22860] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.570955][T22860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  758.581160][T22860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  758.817791][T22586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.824861][T22586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.850991][T22586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.890214][T22586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.897280][T22586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.923291][T22586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  759.038571][   T29] kauditd_printk_skb: 485 callbacks suppressed
[  759.038588][   T29] audit: type=1326 audit(1767599601.641:68856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.068464][   T29] audit: type=1326 audit(1767599601.641:68857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.092248][   T29] audit: type=1326 audit(1767599601.641:68858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.115966][   T29] audit: type=1326 audit(1767599601.641:68859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.139597][   T29] audit: type=1326 audit(1767599601.641:68860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.163195][   T29] audit: type=1326 audit(1767599601.641:68861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.186915][   T29] audit: type=1326 audit(1767599601.641:68862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.210555][   T29] audit: type=1326 audit(1767599601.641:68863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.234359][   T29] audit: type=1326 audit(1767599601.641:68864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.8.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.273045][   T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  759.300841][   T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  759.310104][   T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  759.319434][   T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  759.338456][   T29] audit: type=1326 audit(1767599601.903:68865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.8.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  759.422837][T22586] hsr_slave_0: entered promiscuous mode
[  759.430257][T22586] hsr_slave_1: entered promiscuous mode
[  759.443467][T22586] debugfs: 'hsr0' already exists in 'hsr'
[  759.449286][T22586] Cannot create hsr debugfs directory
[  759.492959][T22936] loop8: detected capacity change from 0 to 164
[  759.504446][T22936] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  759.522997][T22936] __nla_validate_parse: 2 callbacks suppressed
[  759.523018][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9271'.
[  759.546242][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9271'.
[  759.558393][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9271'.
[  759.580146][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9271'.
[  759.691608][T23059] netlink: 'syz.8.9274': attribute type 46 has an invalid length.
[  759.779567][T23067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9275'.
[  759.788754][T23067] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9275'.
[  759.798597][T23067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9275'.
[  759.809043][T23067] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9275'.
[  759.818173][T23067] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9275'.
[  759.860100][T23076] netlink: 'syz.8.9278': attribute type 4 has an invalid length.
[  759.895820][T23074] 9p: Bad value for 'rfdno'
[  759.970157][T22586] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  759.980824][T22586] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  759.996050][T22586] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  760.008574][T22586] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  760.083148][T22586] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.145324][T22586] 8021q: adding VLAN 0 to HW filter on device team0
[  760.152109][T23117] netlink: 'syz.6.9283': attribute type 13 has an invalid length.
[  760.167327][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.174454][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  760.198227][ T2887] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.205371][ T2887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  760.236135][T22586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  760.246719][T22586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  760.860386][T22586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  760.996676][T23191] loop1: detected capacity change from 0 to 1024
[  761.025824][T23191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  761.028097][T23198] validate_nla: 1 callbacks suppressed
[  761.028203][T23198] netlink: 'syz.8.9293': attribute type 4 has an invalid length.
[  761.038174][T23191] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  761.080399][T23191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9292'.
[  761.205525][T22586] veth0_vlan: entered promiscuous mode
[  761.220667][T22586] veth1_vlan: entered promiscuous mode
[  761.247348][T22586] veth0_macvtap: entered promiscuous mode
[  761.254575][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  761.267258][T22586] veth1_macvtap: entered promiscuous mode
[  761.280104][T22586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  761.292166][T22586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  761.319771][T19433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  761.335434][T19433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  761.349380][T19433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  761.366864][T19433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  761.384124][T23221] netlink: 'syz.1.9297': attribute type 6 has an invalid length.
[  761.397399][T23223] loop8: detected capacity change from 0 to 512
[  761.410248][T23223] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  761.419379][T23223] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  761.462804][T23223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  761.471037][T23223] System zones: 0-2, 18-18, 34-35
[  761.477498][T23223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  761.511478][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.556074][T23233] loop7: detected capacity change from 0 to 1024
[  761.593381][T23233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  761.651426][T23233] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.383483][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  762.611765][T23315] netlink: 'syz.1.9312': attribute type 3 has an invalid length.
[  762.619783][T23315] netlink: 'syz.1.9312': attribute type 1 has an invalid length.
[  762.680929][T23367] loop7: detected capacity change from 0 to 512
[  762.688756][T23367] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  762.697956][T23367] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  762.717710][T23367] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  762.728665][T23367] System zones: 0-2, 18-18, 34-35
[  762.739968][T23367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  762.758221][T23244] chnl_net:caif_netlink_parms(): no params data found
[  762.789827][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.861029][T19429] bridge_slave_1: left allmulticast mode
[  762.861142][T19429] bridge_slave_1: left promiscuous mode
[  762.872510][T19429] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.881583][T19429] bridge_slave_0: left allmulticast mode
[  762.887325][T19429] bridge_slave_0: left promiscuous mode
[  762.893049][T19429] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.945941][T23474] netlink: 'syz.0.9318': attribute type 13 has an invalid length.
[  763.202381][T23482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23482 comm=syz.1.9321
[  763.317418][T19429] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  763.326478][T19429] bond_slave_0: left promiscuous mode
[  763.332773][T19429] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  763.342047][T19429] bond_slave_1: left promiscuous mode
[  763.348338][T19429] $Hÿ (unregistering): (slave batadv0): Releasing backup interface
[  763.356993][T19429] batadv0: left promiscuous mode
[  763.362644][T19429] $Hÿ (unregistering): Released all slaves
[  763.371316][T19429] bond1 (unregistering): Released all slaves
[  763.430668][T23474] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.437876][T23474] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.481403][T23474] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.491941][T23474] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  763.571835][T23479] sch_fq: defrate 0 ignored.
[  763.594971][T19429] tipc: Disabling bearer <udp:syz2>
[  763.600275][T19429] tipc: Disabling bearer <udp:s>
[  763.605483][T19429] tipc: Left network mode
[  763.605503][T19465] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  763.619406][T19465] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  763.628475][T23244] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.635699][T23244] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.643324][T23244] bridge_slave_0: entered allmulticast mode
[  763.650066][T23244] bridge_slave_0: entered promiscuous mode
[  763.657117][T23244] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.664244][T23244] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.674065][T23244] bridge_slave_1: entered allmulticast mode
[  763.680753][T23244] bridge_slave_1: entered promiscuous mode
[  763.695583][T19465] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  763.719024][T23526] option changes via remount are deprecated (pid=23522 comm=syz.7.9324)
[  763.744849][T19465] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  763.755583][T23244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  763.769239][T23244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.813236][T23244] team0: Port device team_slave_0 added
[  763.823340][T23244] team0: Port device team_slave_1 added
[  763.859310][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.866314][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.892339][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.912669][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.919740][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.945733][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.968902][T23607] netlink: 'syz.7.9330': attribute type 4 has an invalid length.
[  764.007007][T23632] loop7: detected capacity change from 0 to 512
[  764.013357][T23244] hsr_slave_0: entered promiscuous mode
[  764.019646][T23632] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  764.025272][T23244] hsr_slave_1: entered promiscuous mode
[  764.029050][T23632] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  764.043879][T23244] debugfs: 'hsr0' already exists in 'hsr'
[  764.049817][T23244] Cannot create hsr debugfs directory
[  764.065037][T23632] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  764.078828][T23632] System zones: 0-2, 18-18, 34-35
[  764.094052][   T29] kauditd_printk_skb: 479 callbacks suppressed
[  764.094074][   T29] audit: type=1400 audit(1767599606.953:69345): avc:  denied  { create } for  pid=23646 comm="syz.1.9332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  764.121997][T23632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  764.122822][T19429] hsr_slave_0: left promiscuous mode
[  764.165388][   T29] audit: type=1326 audit(1767599607.037:69346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.172738][T19429] hsr_slave_1: left promiscuous mode
[  764.189008][   T29] audit: type=1326 audit(1767599607.037:69347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.204530][   T29] audit: type=1326 audit(1767599607.037:69348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.241759][   T29] audit: type=1326 audit(1767599607.037:69349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.265542][   T29] audit: type=1326 audit(1767599607.037:69350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.289367][   T29] audit: type=1326 audit(1767599607.037:69351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.312969][   T29] audit: type=1326 audit(1767599607.037:69352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.316077][T19429] batman_adv: batadv0: Removing interface: batadv_slave_0
[  764.336577][   T29] audit: type=1326 audit(1767599607.037:69353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.336648][   T29] audit: type=1326 audit(1767599607.037:69354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23630 comm="syz.7.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  764.395105][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.410920][T19429] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.422153][T19429] batman_adv: batadv0: Removing interface: ipvlan2
[  764.440111][T23666] loop7: detected capacity change from 0 to 1024
[  764.448380][T23666] journal_path: Non-blockdev passed as './file1'
[  764.454820][T23666] EXT4-fs: error: could not find journal device path
[  764.480541][T23666] 9p: Bad value for 'rfdno'
[  764.488566][T23666] loop7: detected capacity change from 0 to 512
[  764.503883][T23666] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.9334: ea_inode file size=6 entry size=458758
[  764.526717][T19429] team0 (unregistering): Port device team_slave_1 removed
[  764.538759][T19429] team0 (unregistering): Port device C removed
[  764.545488][T23666] EXT4-fs (loop7): 1 orphan inode deleted
[  764.551858][T19465] smc: removing ib device syz!
[  764.558491][T23675] 9p: Bad value for 'rfdno'
[  764.561389][T23666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  764.579514][T19442] smc: removing ib device syû
[  764.622998][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.654829][T23684] loop7: detected capacity change from 0 to 1024
[  764.665662][T23684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  764.681373][T23684] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9337: Failed to acquire dquot type 0
[  764.706149][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.755931][T23714] netlink: 'syz.7.9338': attribute type 3 has an invalid length.
[  764.763813][T23714] netlink: 'syz.7.9338': attribute type 1 has an invalid length.
[  764.771562][T23714] __nla_validate_parse: 8 callbacks suppressed
[  764.771579][T23714] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.9338'.
[  764.934671][T23741] FAULT_INJECTION: forcing a failure.
[  764.934671][T23741] name failslab, interval 1, probability 0, space 0, times 1
[  764.947443][T23741] CPU: 1 UID: 0 PID: 23741 Comm: syz.7.9341 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  764.947478][T23741] Tainted: [W]=WARN
[  764.947486][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  764.947504][T23741] Call Trace:
[  764.947512][T23741]  <TASK>
[  764.947560][T23741]  __dump_stack+0x1d/0x30
[  764.947592][T23741]  dump_stack_lvl+0x95/0xd0
[  764.947620][T23741]  dump_stack+0x15/0x1b
[  764.947646][T23741]  should_fail_ex+0x265/0x280
[  764.947759][T23741]  should_failslab+0x8c/0xb0
[  764.947862][T23741]  __kmalloc_cache_node_noprof+0x6a/0x4d0
[  764.947894][T23741]  ? __get_vm_area_node+0x106/0x1d0
[  764.947918][T23741]  __get_vm_area_node+0x106/0x1d0
[  764.948005][T23741]  __vmalloc_node_range_noprof+0x28e/0x1310
[  764.948036][T23741]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  764.948075][T23741]  ? __rcu_read_unlock+0x4f/0x70
[  764.948100][T23741]  ? avc_has_perm_noaudit+0xab/0x130
[  764.948302][T23741]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  764.948348][T23741]  __vmalloc_noprof+0xa4/0xf0
[  764.948461][T23741]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  764.948498][T23741]  bpf_prog_alloc_no_stats+0x47/0x390
[  764.948540][T23741]  ? bpf_prog_alloc+0x2a/0x150
[  764.948563][T23741]  bpf_prog_alloc+0x3c/0x150
[  764.948639][T23741]  bpf_prog_load+0x506/0x1140
[  764.948728][T23741]  ? security_bpf+0x2b/0x90
[  764.948763][T23741]  __sys_bpf+0x469/0x7c0
[  764.948798][T23741]  __x64_sys_bpf+0x41/0x50
[  764.948902][T23741]  x64_sys_call+0x28e1/0x3000
[  764.948935][T23741]  do_syscall_64+0xca/0x2b0
[  764.948979][T23741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.949066][T23741] RIP: 0033:0x7f5733c2f749
[  764.949093][T23741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  764.949112][T23741] RSP: 002b:00007f5732697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  764.949132][T23741] RAX: ffffffffffffffda RBX: 00007f5733e85fa0 RCX: 00007f5733c2f749
[  764.949145][T23741] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  764.949162][T23741] RBP: 00007f5732697090 R08: 0000000000000000 R09: 0000000000000000
[  764.949256][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  764.949272][T23741] R13: 00007f5733e86038 R14: 00007f5733e85fa0 R15: 00007ffc20f16418
[  764.949296][T23741]  </TASK>
[  764.949304][T23741] syz.7.9341: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  765.198579][T23741] CPU: 1 UID: 0 PID: 23741 Comm: syz.7.9341 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  765.198700][T23741] Tainted: [W]=WARN
[  765.198709][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  765.198725][T23741] Call Trace:
[  765.198731][T23741]  <TASK>
[  765.198741][T23741]  __dump_stack+0x1d/0x30
[  765.198772][T23741]  dump_stack_lvl+0x95/0xd0
[  765.198817][T23741]  dump_stack+0x15/0x1b
[  765.198843][T23741]  warn_alloc+0x12b/0x1a0
[  765.198898][T23741]  __vmalloc_node_range_noprof+0x2b3/0x1310
[  765.198929][T23741]  ? __rcu_read_unlock+0x4f/0x70
[  765.198957][T23741]  ? avc_has_perm_noaudit+0xab/0x130
[  765.199048][T23741]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  765.199085][T23741]  __vmalloc_noprof+0xa4/0xf0
[  765.199136][T23741]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  765.199177][T23741]  bpf_prog_alloc_no_stats+0x47/0x390
[  765.199265][T23741]  ? bpf_prog_alloc+0x2a/0x150
[  765.199290][T23741]  bpf_prog_alloc+0x3c/0x150
[  765.199314][T23741]  bpf_prog_load+0x506/0x1140
[  765.199352][T23741]  ? security_bpf+0x2b/0x90
[  765.199388][T23741]  __sys_bpf+0x469/0x7c0
[  765.199424][T23741]  __x64_sys_bpf+0x41/0x50
[  765.199466][T23741]  x64_sys_call+0x28e1/0x3000
[  765.199499][T23741]  do_syscall_64+0xca/0x2b0
[  765.199568][T23741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.199594][T23741] RIP: 0033:0x7f5733c2f749
[  765.199613][T23741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  765.199637][T23741] RSP: 002b:00007f5732697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  765.199678][T23741] RAX: ffffffffffffffda RBX: 00007f5733e85fa0 RCX: 00007f5733c2f749
[  765.199694][T23741] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  765.199711][T23741] RBP: 00007f5732697090 R08: 0000000000000000 R09: 0000000000000000
[  765.199725][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.199737][T23741] R13: 00007f5733e86038 R14: 00007f5733e85fa0 R15: 00007ffc20f16418
[  765.199757][T23741]  </TASK>
[  765.199777][T23741] Mem-Info:
[  765.408787][T23741] active_anon:9535 inactive_anon:10 isolated_anon:0
[  765.408787][T23741]  active_file:15723 inactive_file:13132 isolated_file:0
[  765.408787][T23741]  unevictable:19777 dirty:287 writeback:0
[  765.408787][T23741]  slab_reclaimable:4144 slab_unreclaimable:182989
[  765.408787][T23741]  mapped:29599 shmem:4031 pagetables:1210
[  765.408787][T23741]  sec_pagetables:0 bounce:0
[  765.408787][T23741]  kernel_misc_reclaimable:0
[  765.408787][T23741]  free:1691439 free_pcp:6095 free_cma:0
[  765.454307][T23741] Node 0 active_anon:34428kB inactive_anon:40kB active_file:62892kB inactive_file:52528kB unevictable:79108kB isolated(anon):0kB isolated(file):0kB mapped:118396kB dirty:1148kB writeback:0kB shmem:12412kB kernel_stack:4832kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  765.482249][T23741] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  765.512095][T23741] lowmem_reserve[]: 0 2880 7859 7859
[  765.517481][T23741] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  765.548905][T23741] lowmem_reserve[]: 0 0 4978 4978
[  765.554033][T23741] Node 0 Normal free:3825556kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28512kB inactive_anon:40kB active_file:62892kB inactive_file:52528kB unevictable:79108kB writepending:1148kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:9764kB local_pcp:9516kB free_cma:0kB
[  765.587694][T23741] lowmem_reserve[]: 0 0 0 0
[  765.592357][T23741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  765.605464][T23741] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB
[  765.621728][T23741] Node 0 Normal: 4831*4kB (UME) 3145*8kB (UME) 1355*16kB (UME) 1689*32kB (UME) 923*64kB (UME) 529*128kB (UME) 349*256kB (UME) 125*512kB (UME) 89*1024kB (UM) 74*2048kB (UME) 777*4096kB (UM) = 3825620kB
[  765.641742][T23741] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  765.651103][T23741] 50084 total pagecache pages
[  765.655815][T23741] 10 pages in swap cache
[  765.660147][T23741] Free swap  = 124444kB
[  765.664324][T23741] Total swap = 124996kB
[  765.668544][T23741] 2097051 pages RAM
[  765.672368][T23741] 0 pages HighMem/MovableOnly
[  765.677066][T23741] 81272 pages reserved
[  765.681930][T23750] netlink: 'syz.1.9342': attribute type 4 has an invalid length.
[  765.835773][T23774] loop1: detected capacity change from 0 to 1024
[  765.842216][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9343'.
[  765.851510][T23760] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9343'.
[  765.876566][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9343'.
[  765.887474][T23760] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9343'.
[  765.896600][T23760] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9343'.
[  765.906124][T23776] ªªªªªª: renamed from vlan0 (while UP)
[  765.912764][T23774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  765.926083][T23774] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  765.958684][T19429] IPVS: stop unused estimator thread 0...
[  765.975657][T23774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9348'.
[  766.044198][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  766.102849][T23244] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  766.162825][T23244] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  766.237364][T23244] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  766.246553][T23830] sch_fq: defrate 0 ignored.
[  766.251680][T23244] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  766.340234][T23839] loop1: detected capacity change from 0 to 164
[  766.351046][T23839] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  766.427283][T23244] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.442268][T23244] 8021q: adding VLAN 0 to HW filter on device team0
[  766.459529][T19451] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.466687][T19451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  766.492505][T23244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  766.502986][T23244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  766.517651][T19451] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.524888][T19451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  766.628637][T23244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  766.777006][T23854] netlink: 'syz.8.9355': attribute type 4 has an invalid length.
[  766.825606][T23861] netlink: 'syz.8.9357': attribute type 3 has an invalid length.
[  766.833514][T23861] netlink: 'syz.8.9357': attribute type 1 has an invalid length.
[  766.841351][T23861] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.9357'.
[  766.973905][T23244] veth0_vlan: entered promiscuous mode
[  766.981361][T23877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  766.985996][T23244] veth1_vlan: entered promiscuous mode
[  767.003014][T23881] loop7: detected capacity change from 0 to 1024
[  767.017462][T23244] veth0_macvtap: entered promiscuous mode
[  767.026366][T23881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  767.041165][T23244] veth1_macvtap: entered promiscuous mode
[  767.049179][T23881] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.062895][T23244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  767.077000][T23889] netlink: 'syz.1.9363': attribute type 6 has an invalid length.
[  767.079965][T23244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  767.104354][ T2887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  767.114930][ T2887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  767.123976][ T2887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  767.134119][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  767.145830][ T2887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.184544][T23893] loop7: detected capacity change from 0 to 1024
[  767.193574][T23893] journal_path: Non-blockdev passed as './file1'
[  767.200046][T23893] EXT4-fs: error: could not find journal device path
[  767.212272][T23902] loop6: detected capacity change from 0 to 512
[  767.219973][T23902] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  767.229065][T23902] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  767.242307][T23902] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  767.252041][T23902] System zones: 0-2, 18-18, 34-35
[  767.257648][T23902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  767.326263][T23896] batman_adv: batadv0: Adding interface: dummy0
[  767.332652][T23896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.358058][T23896] batman_adv: batadv0: Interface activated: dummy0
[  767.359038][T23244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.393596][T23915] netlink: 'syz.6.9368': attribute type 3 has an invalid length.
[  767.401478][T23915] netlink: 'syz.6.9368': attribute type 1 has an invalid length.
[  767.409257][T23915] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.9368'.
[  767.436056][T23919] loop8: detected capacity change from 0 to 512
[  767.443494][T23919] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  767.452627][T23919] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  767.462086][T23919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  767.470499][T23919] System zones: 0-2, 18-18, 34-35
[  767.476673][T23919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  767.509462][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.531210][T19465] Bluetooth: hci0: Frame reassembly failed (-84)
[  767.819446][T23956] loop1: detected capacity change from 0 to 512
[  767.828152][T23956] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  767.837304][T23956] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  767.846817][T23956] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  767.858813][T23956] System zones: 0-2, 18-18, 34-35
[  767.871320][T23963] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  767.871822][T23956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  767.919855][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.072980][T23989] netlink: 'syz.8.9391': attribute type 13 has an invalid length.
[  768.091281][T23997] netlink: 'syz.0.9392': attribute type 6 has an invalid length.
[  768.127608][T23989] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.134919][T23989] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.149956][T23989] batman_adv: batadv0: Interface deactivated: dummy0
[  768.207068][T23989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  768.219390][T24005] netlink: 'syz.7.9395': attribute type 3 has an invalid length.
[  768.219763][T23989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  768.227547][T24005] netlink: 'syz.7.9395': attribute type 1 has an invalid length.
[  768.243010][T24005] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.9395'.
[  768.393373][  T838] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.428095][  T838] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.443271][  T838] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.452860][  T838] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.557134][T24031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  768.571793][T24031] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  768.667763][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  768.693524][T24046] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  768.702896][T24046] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  768.720251][T24046] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  768.729425][T24046] System zones: 0-2, 18-18, 34-35
[  768.736818][T24049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  768.743424][T24046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  768.749686][T24049] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  768.787052][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.797385][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  768.842377][T24066] FAULT_INJECTION: forcing a failure.
[  768.842377][T24066] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  768.855681][T24066] CPU: 1 UID: 0 PID: 24066 Comm: syz.8.9412 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  768.855720][T24066] Tainted: [W]=WARN
[  768.855728][T24066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  768.855747][T24066] Call Trace:
[  768.855754][T24066]  <TASK>
[  768.855763][T24066]  __dump_stack+0x1d/0x30
[  768.855801][T24066]  dump_stack_lvl+0x95/0xd0
[  768.855824][T24066]  dump_stack+0x15/0x1b
[  768.855844][T24066]  should_fail_ex+0x265/0x280
[  768.856001][T24066]  should_fail+0xb/0x20
[  768.856036][T24066]  should_fail_usercopy+0x1a/0x20
[  768.856126][T24066]  _copy_from_user+0x1c/0xb0
[  768.856164][T24066]  __sys_bpf+0x183/0x7c0
[  768.856231][T24066]  __x64_sys_bpf+0x41/0x50
[  768.856274][T24066]  x64_sys_call+0x28e1/0x3000
[  768.856307][T24066]  do_syscall_64+0xca/0x2b0
[  768.856353][T24066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.856456][T24066] RIP: 0033:0x7f24574ef749
[  768.856477][T24066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  768.856501][T24066] RSP: 002b:00007f2455f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  768.856597][T24066] RAX: ffffffffffffffda RBX: 00007f2457745fa0 RCX: 00007f24574ef749
[  768.856619][T24066] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000001c
[  768.856633][T24066] RBP: 00007f2455f57090 R08: 0000000000000000 R09: 0000000000000000
[  768.856646][T24066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.856658][T24066] R13: 00007f2457746038 R14: 00007f2457745fa0 R15: 00007ffc488727a8
[  768.856748][T24066]  </TASK>
[  768.879467][   T29] kauditd_printk_skb: 807 callbacks suppressed
[  768.879555][   T29] audit: type=1326 audit(1767599867.972:70160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  769.051582][   T29] audit: type=1326 audit(1767599867.993:70161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5733c2f749 code=0x7ffc0000
[  769.091077][T24076] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  769.129992][T24076] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  769.149407][T24076] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  769.160628][T24076] EXT4-fs (loop1): invalid journal inode
[  769.172940][T24076] EXT4-fs (loop1): can't get journal size
[  769.180013][T24076] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 17104912: comm syz.1.9415: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  769.196134][T24076] EXT4-fs (loop1): failed to initialize system zone (-117)
[  769.208851][T24076] EXT4-fs (loop1): mount failed
[  769.231056][   T29] audit: type=1326 audit(1767599868.350:70162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.258802][T24106] set_capacity_and_notify: 4 callbacks suppressed
[  769.258821][T24106] loop8: detected capacity change from 0 to 512
[  769.292025][   T29] audit: type=1326 audit(1767599868.350:70163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.315788][   T29] audit: type=1326 audit(1767599868.360:70164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.327230][T24106] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  769.339509][   T29] audit: type=1326 audit(1767599868.360:70165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.371293][   T29] audit: type=1326 audit(1767599868.360:70166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.395001][   T29] audit: type=1326 audit(1767599868.360:70167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.399846][T24106] EXT4-fs (loop8): invalid journal inode
[  769.418523][   T29] audit: type=1326 audit(1767599868.360:70168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.447790][   T29] audit: type=1326 audit(1767599868.360:70169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24105 comm="syz.8.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24574ef749 code=0x7ffc0000
[  769.451248][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  769.477636][ T3629] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  769.505125][T24106] EXT4-fs (loop8): can't get journal size
[  769.513502][T24106] EXT4-fs (loop8): 1 truncate cleaned up
[  769.519830][T24106] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  769.565420][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.585059][T24132] loop8: detected capacity change from 0 to 1024
[  769.607169][T24132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  769.607283][T24132] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.647724][T24132] __nla_validate_parse: 10 callbacks suppressed
[  769.647741][T24132] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9426'.
[  769.687270][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  769.744017][T24155] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  769.763642][T24156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9429'.
[  769.772852][T24156] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9429'.
[  769.782508][T24156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9429'.
[  769.792167][T24156] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9429'.
[  769.801281][T24156] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9429'.
[  769.838704][T24162] loop7: detected capacity change from 0 to 512
[  769.839701][T24162] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  769.839736][T24162] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  769.846927][T24162] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  769.846956][T24162] System zones: 0-2, 18-18, 34-35
[  769.847542][T24162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  769.910387][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.961353][T24179] loop8: detected capacity change from 0 to 1024
[  769.981887][T24182] loop7: detected capacity change from 0 to 1024
[  769.990219][T24179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  770.018264][T24179] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.043816][T24182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  770.043890][T24182] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.049052][T24182] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9440'.
[  770.069144][T24195] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9444'.
[  770.129708][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  770.209367][T24210] loop7: detected capacity change from 0 to 512
[  770.217637][T24210] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  770.217677][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  770.226820][T24210] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  770.230632][T24210] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  770.252613][T24210] System zones: 0-2, 18-18, 34-35
[  770.265184][T24210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  770.313008][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.325553][T24221] loop8: detected capacity change from 0 to 512
[  770.332474][T24221] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  770.349614][T24221] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9450: inode has both inline data and extents flags
[  770.364508][T24221] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9450: couldn't read orphan inode 15 (err -117)
[  770.382350][T24221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  770.416370][T24234] loop7: detected capacity change from 0 to 1024
[  770.434184][T24234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  770.457289][T24234] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.474845][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9455'.
[  770.518793][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  770.612538][T24250] Cannot find del_set index 286 as target
[  770.707997][T24261] loop7: detected capacity change from 0 to 512
[  770.715622][T24261] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  770.724719][T24261] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  770.893579][T24261] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  770.953228][T24261] System zones: 0-2, 18-18, 34-35
[  770.975065][T24261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  771.150872][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.185261][T24292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9464'.
[  771.262327][T24300] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  771.304561][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.386703][T24318] loop1: detected capacity change from 0 to 512
[  771.397862][T24318] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  771.407160][T24318] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  771.416295][T24318] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  771.424530][T24318] System zones: 0-2, 18-18, 34-35
[  771.430264][T24318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  771.457739][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.498668][T24333] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  771.509821][T24333] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  771.521535][T24333] EXT4-fs (loop6): invalid journal inode
[  771.528749][T24335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  771.547752][T24333] EXT4-fs (loop6): can't get journal size
[  771.561204][T24335] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.573649][T24333] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9478: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  771.597020][T24333] EXT4-fs (loop6): failed to initialize system zone (-117)
[  771.602584][T24347] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  771.613624][T24333] EXT4-fs (loop6): mount failed
[  771.623665][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  771.633031][T24347] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  771.646495][T24347] EXT4-fs (loop8): invalid journal inode
[  771.661356][T24347] EXT4-fs (loop8): can't get journal size
[  771.671073][T24347] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 17104912: comm syz.8.9481: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  771.686694][T24347] EXT4-fs (loop8): failed to initialize system zone (-117)
[  771.695616][T24347] EXT4-fs (loop8): mount failed
[  771.805135][T24368] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  771.814524][T24368] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  772.078991][T24368] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  772.133152][T24368] System zones: 0-2, 18-18, 34-35
[  772.196367][T24368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  772.299695][T23244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.339951][T24414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  772.377827][T24414] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  772.433244][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  772.485744][T24422] EXT4-fs (loop8): failed to initialize system zone (-117)
[  772.494985][T24422] EXT4-fs (loop8): mount failed
[  772.557935][T24442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  772.577909][T24442] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  772.603012][T24447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  772.615724][T24437] sch_fq: defrate 0 ignored.
[  772.671380][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.692834][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  772.820252][T24490] validate_nla: 12 callbacks suppressed
[  772.820271][T24490] netlink: 'syz.0.9517': attribute type 3 has an invalid length.
[  772.833935][T24490] netlink: 'syz.0.9517': attribute type 1 has an invalid length.
[  772.842460][T24493] FAULT_INJECTION: forcing a failure.
[  772.842460][T24493] name failslab, interval 1, probability 0, space 0, times 0
[  772.855321][T24493] CPU: 1 UID: 0 PID: 24493 Comm: syz.7.9512 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  772.855403][T24493] Tainted: [W]=WARN
[  772.855413][T24493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  772.855430][T24493] Call Trace:
[  772.855439][T24493]  <TASK>
[  772.855450][T24493]  __dump_stack+0x1d/0x30
[  772.855489][T24493]  dump_stack_lvl+0x95/0xd0
[  772.855564][T24493]  dump_stack+0x15/0x1b
[  772.855588][T24493]  should_fail_ex+0x265/0x280
[  772.855611][T24493]  should_failslab+0x8c/0xb0
[  772.855634][T24493]  __kmalloc_cache_noprof+0x65/0x4c0
[  772.855663][T24493]  ? resv_map_alloc+0x32/0x190
[  772.855718][T24493]  ? vfs_write+0x7e8/0x960
[  772.855737][T24493]  resv_map_alloc+0x32/0x190
[  772.855826][T24493]  hugetlbfs_get_inode+0x67/0x370
[  772.855855][T24493]  ? mutex_unlock+0x4f/0x90
[  772.855891][T24493]  hugetlb_file_setup+0x192/0x3d0
[  772.855990][T24493]  ksys_mmap_pgoff+0x157/0x310
[  772.856028][T24493]  x64_sys_call+0x16bb/0x3000
[  772.856057][T24493]  do_syscall_64+0xca/0x2b0
[  772.856092][T24493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.856193][T24493] RIP: 0033:0x7f5733c2f749
[  772.856214][T24493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  772.856239][T24493] RSP: 002b:00007f5732676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  772.856259][T24493] RAX: ffffffffffffffda RBX: 00007f5733e86090 RCX: 00007f5733c2f749
[  772.856271][T24493] RDX: 0000000003000003 RSI: 0000000000400000 RDI: 0000200000000000
[  772.856286][T24493] RBP: 00007f5732676090 R08: ffffffffffffffff R09: 0000000000000000
[  772.856303][T24493] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000001
[  772.856336][T24493] R13: 00007f5733e86128 R14: 00007f5733e86090 R15: 00007ffc20f16418
[  772.856356][T24493]  </TASK>
[  773.149294][T24502] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  773.200724][T22586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.238028][T24522] netlink: 'syz.8.9529': attribute type 3 has an invalid length.
[  773.393481][T24549] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  773.403175][T24549] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  773.414037][T24549] EXT4-fs (loop8): invalid journal inode
[  773.419723][T24549] EXT4-fs (loop8): can't get journal size
[  773.428646][T24549] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 17104912: comm syz.8.9541: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  773.450845][T24549] EXT4-fs (loop8): failed to initialize system zone (-117)
[  773.458299][T24549] EXT4-fs (loop8): mount failed
[  773.490394][T24564] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  773.519919][T24578] nft_compat: unsupported protocol 0
[  773.547978][T24582] FAULT_INJECTION: forcing a failure.
[  773.547978][T24582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  773.562460][T24582] CPU: 1 UID: 0 PID: 24582 Comm: syz.6.9551 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  773.562594][T24582] Tainted: [W]=WARN
[  773.562600][T24582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  773.562672][T24582] Call Trace:
[  773.562697][T24582]  <TASK>
[  773.562707][T24582]  __dump_stack+0x1d/0x30
[  773.562739][T24582]  dump_stack_lvl+0x95/0xd0
[  773.562765][T24582]  dump_stack+0x15/0x1b
[  773.562840][T24582]  should_fail_ex+0x265/0x280
[  773.562864][T24582]  should_fail+0xb/0x20
[  773.562887][T24582]  should_fail_usercopy+0x1a/0x20
[  773.562912][T24582]  _copy_from_user+0x1c/0xb0
[  773.563080][T24582]  __sys_bpf+0x183/0x7c0
[  773.563180][T24582]  __x64_sys_bpf+0x41/0x50
[  773.563225][T24582]  x64_sys_call+0x28e1/0x3000
[  773.563276][T24582]  do_syscall_64+0xca/0x2b0
[  773.563311][T24582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.563337][T24582] RIP: 0033:0x7f3a508bf749
[  773.563357][T24582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  773.563405][T24582] RSP: 002b:00007f3a4f31f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  773.563475][T24582] RAX: ffffffffffffffda RBX: 00007f3a50b15fa0 RCX: 00007f3a508bf749
[  773.563509][T24582] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012
[  773.563523][T24582] RBP: 00007f3a4f31f090 R08: 0000000000000000 R09: 0000000000000000
[  773.563538][T24582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.563550][T24582] R13: 00007f3a50b16038 R14: 00007f3a50b15fa0 R15: 00007ffec0bb3418
[  773.563630][T24582]  </TASK>
[  773.755042][T24591] EXT4-fs: Ignoring removed bh option
[  773.760707][T24591] EXT4-fs: inline encryption not supported
[  773.767240][T24591] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  773.778431][T24591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  773.787933][T24591] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.9554: lblock 2 mapped to illegal pblock 2 (length 1)
[  773.802331][T24591] __quota_error: 582 callbacks suppressed
[  773.802346][T24591] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  773.816334][T24591] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.9554: lblock 0 mapped to illegal pblock 48 (length 1)
[  773.831451][T24591] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  773.840366][T24591] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9554: Failed to acquire dquot type 0
[  773.852286][T24591] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  773.862398][T24591] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.9554: mark_inode_dirty error
[  773.874125][T24591] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  773.884694][T24591] EXT4-fs (loop6): 1 orphan inode deleted
[  773.892319][T24591] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 16: comm syz.6.9554: lblock 0 mapped to illegal pblock 16 (length 1)
[  773.906600][   T31] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  773.920949][   T31] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  773.929471][   T31] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  773.941233][T24591] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.9554: Invalid inode table block 1 in block_group 0
[  773.955745][T24591] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  773.965397][T24591] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.9554: mark_inode_dirty error
[  773.986970][T24591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24591 comm=syz.6.9554
[  774.061162][T19442] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm kworker/u8:46: Invalid inode table block 1 in block_group 0
[  774.075550][T23244] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  774.089053][T23244] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  774.098822][T23244] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  774.153195][T24613] set_capacity_and_notify: 13 callbacks suppressed
[  774.153212][T24613] loop7: detected capacity change from 0 to 512
[  774.167891][   T29] audit: type=1326 audit(1767599873.536:70752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  774.192118][T24613] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  774.201313][T24613] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  774.202918][   T29] audit: type=1326 audit(1767599873.557:70753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  774.217151][T24613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  774.232689][   T29] audit: type=1326 audit(1767599873.557:70754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  774.241108][T24613] System zones: 0-2, 18-18, 34-35
[  774.264137][   T29] audit: type=1326 audit(1767599873.557:70755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a508c1667 code=0x7ffc0000
[  774.264172][   T29] audit: type=1326 audit(1767599873.557:70756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3a508c15dc code=0x7ffc0000
[  774.264215][   T29] audit: type=1326 audit(1767599873.557:70757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3a508c1514 code=0x7ffc0000
[  774.264261][   T29] audit: type=1326 audit(1767599873.557:70758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3a508c1514 code=0x7ffc0000
[  774.444817][T24636] netlink: 'syz.8.9564': attribute type 3 has an invalid length.
[  774.452654][T24636] __nla_validate_parse: 11 callbacks suppressed
[  774.452676][T24636] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9564'.
[  774.486239][T24628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9561'.
[  774.495354][T24628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9561'.
[  774.512672][T24628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9561'.
[  774.522295][T24628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9561'.
[  774.531521][T24628] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9561'.
[  774.541029][T24640] netlink: 'syz.6.9566': attribute type 4 has an invalid length.
[  774.558093][T24647] loop7: detected capacity change from 0 to 512
[  774.575612][T24644] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9568'.
[  774.615191][T24653] loop6: detected capacity change from 0 to 1024
[  774.621994][T24647] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  774.638360][T24653] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  774.648204][T24647] EXT4-fs (loop7): mount failed
[  774.653310][T24653] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  774.665537][T24653] EXT4-fs (loop6): invalid journal inode
[  774.671295][T24653] EXT4-fs (loop6): can't get journal size
[  774.679014][T24653] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9570: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  774.698425][T24653] EXT4-fs (loop6): failed to initialize system zone (-117)
[  774.732229][T24670] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9573'.
[  774.752940][T24653] EXT4-fs (loop6): mount failed
[  774.806914][T24686] netlink: 'syz.6.9579': attribute type 3 has an invalid length.
[  774.814909][T24686] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9579'.
[  774.832456][T24687] random: crng reseeded on system resumption
[  774.897014][T24697] loop6: detected capacity change from 0 to 1024
[  774.904436][T24697] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  774.914356][T24697] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  774.925502][T24697] EXT4-fs (loop6): invalid journal inode
[  774.931402][T24697] EXT4-fs (loop6): can't get journal size
[  774.937625][T24697] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9583: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  774.953460][T24697] EXT4-fs (loop6): failed to initialize system zone (-117)
[  774.960816][T24697] EXT4-fs (loop6): mount failed
[  775.061767][T24708] sch_fq: defrate 0 ignored.
[  775.074354][T24719] netlink: 'syz.6.9591': attribute type 3 has an invalid length.
[  775.082232][T24719] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9591'.
[  775.185905][T24741] loop6: detected capacity change from 0 to 512
[  775.194410][T24739] loop1: detected capacity change from 0 to 1024
[  775.201424][T24741] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  775.210581][T24741] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  775.220021][T24741] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  775.228282][T24741] System zones: 0-2, 18-18, 34-35
[  775.237469][T24739] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  775.361607][T24766] xt_hashlimit: max too large, truncated to 1048576
[  775.369390][T24766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  775.510922][T24778] loop1: detected capacity change from 0 to 1024
[  775.538208][T24778] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  775.546440][T24786] loop8: detected capacity change from 0 to 512
[  775.584571][T24786] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  775.593682][T24786] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  775.859185][T24786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  775.944922][T24786] System zones: 0-2, 18-18, 34-35
[  776.007081][T24819] loop6: detected capacity change from 0 to 2048
[  776.053928][T24819] EXT4-fs (loop6): failed to initialize system zone (-117)
[  776.069326][T24829] loop1: detected capacity change from 0 to 1024
[  776.075892][T24819] EXT4-fs (loop6): mount failed
[  776.091372][T24829] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  776.341924][T24862] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  776.357178][T24857] sch_fq: defrate 0 ignored.
[  776.365544][T24862] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  776.382369][T24873] random: crng reseeded on system resumption
[  776.389157][T24862] EXT4-fs (loop7): invalid journal inode
[  776.395109][T24862] EXT4-fs (loop7): can't get journal size
[  776.411200][T24862] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 17104912: comm syz.7.9629: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  776.444755][T24880] netlink: 'syz.1.9633': attribute type 4 has an invalid length.
[  776.454127][T24862] EXT4-fs (loop7): failed to initialize system zone (-117)
[  776.461641][T24862] EXT4-fs (loop7): mount failed
[  776.900246][T24905] EXT4-fs (loop1): failed to initialize system zone (-117)
[  776.955558][T24905] EXT4-fs (loop1): mount failed
[  777.112392][T24942] netlink: 'syz.0.9649': attribute type 4 has an invalid length.
[  777.359413][T24966] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  777.369508][T24966] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  777.380843][T24966] EXT4-fs (loop6): invalid journal inode
[  777.386579][T24966] EXT4-fs (loop6): can't get journal size
[  777.393076][T24966] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9655: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  777.408728][T24966] EXT4-fs (loop6): failed to initialize system zone (-117)
[  777.416087][T24966] EXT4-fs (loop6): mount failed
[  777.727842][T24992] random: crng reseeded on system resumption
[  778.389438][T25031] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  778.412723][T25043] random: crng reseeded on system resumption
[  778.555169][T25068] netlink: 'syz.7.9681': attribute type 13 has an invalid length.
[  778.651578][   T29] kauditd_printk_skb: 640 callbacks suppressed
[  778.651718][   T29] audit: type=1326 audit(1767599878.249:71398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  778.685039][   T29] audit: type=1326 audit(1767599878.281:71399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df35bf749 code=0x7ffc0000
[  778.762346][   T29] audit: type=1326 audit(1767599878.354:71400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.805332][T25085] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  778.815401][T25085] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  778.823327][   T29] audit: type=1326 audit(1767599878.386:71401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.828797][T25068] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.849573][   T29] audit: type=1326 audit(1767599878.386:71402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.856747][T25068] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.880112][   T29] audit: type=1326 audit(1767599878.386:71403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.888693][T25085] EXT4-fs (loop6): invalid journal inode
[  778.911026][   T29] audit: type=1326 audit(1767599878.386:71404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.920830][T25085] EXT4-fs (loop6): can't get journal size
[  778.940251][   T29] audit: type=1326 audit(1767599878.386:71405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  778.947246][T25085] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9683: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  778.969659][   T29] audit: type=1326 audit(1767599878.386:71406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  779.003220][T25085] EXT4-fs (loop6): failed to initialize system zone (-117)
[  779.008600][   T29] audit: type=1326 audit(1767599878.386:71407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25086 comm="syz.1.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f344d87f749 code=0x7ffc0000
[  779.016763][T25085] EXT4-fs (loop6): mount failed
[  779.110936][T25068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.128036][T25068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.162388][T25109] netlink: 'syz.0.9693': attribute type 3 has an invalid length.
[  779.222818][T14573] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.253783][T25120] set_capacity_and_notify: 5 callbacks suppressed
[  779.253807][T25120] loop6: detected capacity change from 0 to 1024
[  779.282457][T25120] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.302715][T14573] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.315746][T25120] __nla_validate_parse: 5 callbacks suppressed
[  779.315762][T25120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9696'.
[  779.332376][T14573] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.365621][T14573] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.450761][T25144] loop1: detected capacity change from 0 to 1024
[  779.458108][T25144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  779.477281][T25144] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  779.498087][T25144] EXT4-fs (loop1): invalid journal inode
[  779.517707][T25144] EXT4-fs (loop1): can't get journal size
[  779.527050][T25144] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 17104912: comm syz.1.9703: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  779.546618][T25144] EXT4-fs (loop1): failed to initialize system zone (-117)
[  779.554139][T25159] netlink: 'syz.7.9708': attribute type 4 has an invalid length.
[  779.561955][T25144] EXT4-fs (loop1): mount failed
[  779.607486][T25169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9712'.
[  779.660873][T25177] loop1: detected capacity change from 0 to 1024
[  779.674719][T25177] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.683766][T25177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9716'.
[  779.697038][T25183] sch_fq: defrate 0 ignored.
[  779.724160][T25188] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9717'.
[  779.760076][T25194] loop1: detected capacity change from 0 to 1024
[  779.778043][T25194] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.808548][T25202] netlink: 'syz.8.9722': attribute type 4 has an invalid length.
[  779.869321][T25211] netlink: 'syz.8.9726': attribute type 3 has an invalid length.
[  779.877188][T25211] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9726'.
[  779.912608][T25215] loop1: detected capacity change from 0 to 1024
[  779.941230][T25215] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.955556][T25215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9727'.
[  779.986552][T25227] loop8: detected capacity change from 0 to 2048
[  780.016395][T25227] EXT4-fs (loop8): failed to initialize system zone (-117)
[  780.032822][T25227] EXT4-fs (loop8): mount failed
[  780.081007][T25251] loop8: detected capacity change from 0 to 1024
[  780.103329][T25251] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  780.171576][T25263] netlink: 'syz.6.9742': attribute type 6 has an invalid length.
[  780.268650][T25274] 9pnet_fd: Insufficient options for proto=fd
[  780.287729][T25274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9746'.
[  780.300960][T25284] random: crng reseeded on system resumption
[  780.425619][T25297] loop6: detected capacity change from 0 to 1024
[  780.453162][T25297] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  780.961186][T25334] sch_fq: defrate 0 ignored.
[  781.217930][T25348] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9761'.
[  781.304754][T25364] netlink: 'syz.6.9769': attribute type 3 has an invalid length.
[  781.312690][T25364] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9769'.
[  781.335385][T25365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9763'.
[  782.004689][T25433] netlink: 'syz.6.9780': attribute type 3 has an invalid length.
[  782.045359][T25435] loop6: detected capacity change from 0 to 1024
[  782.052916][T25435] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  782.063180][T25435] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  782.073942][T25435] EXT4-fs (loop6): invalid journal inode
[  782.079692][T25435] EXT4-fs (loop6): can't get journal size
[  782.127680][T25439] netlink: 'syz.1.9782': attribute type 4 has an invalid length.
[  782.147325][T25435] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.9781: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  782.168679][T25435] EXT4-fs (loop6): failed to initialize system zone (-117)
[  782.179081][T25435] EXT4-fs (loop6): mount failed
[  782.339821][T25466] loop7: detected capacity change from 0 to 1024
[  782.376313][T25466] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.471915][T25483] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.566914][T25488] sch_fq: defrate 0 ignored.
[  782.682310][T25518] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.760011][T25534] vhci_hcd vhci_hcd.4: invalid port number 0
[  782.849061][T25544] netlink: 'syz.6.9809': attribute type 13 has an invalid length.
[  782.918583][T25544] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.925797][T25544] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.001523][T25544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  783.015283][T25544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.025841][T14768] hid_parser_main: 43 callbacks suppressed
[  783.025861][T14768] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  783.039300][T14768] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  783.046971][T14768] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  783.054469][T14768] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  783.062112][T14768] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  783.070171][T14768] hid-generic 00A0:0006:0003.000A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  783.109961][T25562] bridge0: port 3(gretap0) entered blocking state
[  783.116536][T25562] bridge0: port 3(gretap0) entered disabled state
[  783.123371][T25562] gretap0: entered allmulticast mode
[  783.129582][T25562] gretap0: entered promiscuous mode
[  783.136166][T19457] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.163604][T19457] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.186816][T19457] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.225662][T19457] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  783.273767][T25607] EXT4-fs mount: 36 callbacks suppressed
[  783.273788][T25607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  783.295132][T25607] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  783.401223][T23244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  783.423195][   T29] kauditd_printk_skb: 761 callbacks suppressed
[  783.423210][   T29] audit: type=1326 audit(1767599883.246:72169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.459576][T25644] netlink: 'syz.7.9832': attribute type 6 has an invalid length.
[  783.471976][   T29] audit: type=1326 audit(1767599883.288:72170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.495901][   T29] audit: type=1326 audit(1767599883.288:72171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.519575][   T29] audit: type=1326 audit(1767599883.288:72172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.543239][   T29] audit: type=1326 audit(1767599883.288:72173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.567053][   T29] audit: type=1326 audit(1767599883.288:72174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.590809][   T29] audit: type=1326 audit(1767599883.288:72175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.614433][   T29] audit: type=1326 audit(1767599883.288:72176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.638052][   T29] audit: type=1326 audit(1767599883.288:72177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.661840][   T29] audit: type=1326 audit(1767599883.288:72178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25639 comm="syz.6.9834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a508bf749 code=0x7ffc0000
[  783.769017][T25665] team0: Port device team_slave_1 removed
[  783.860210][T25683] sch_fq: defrate 0 ignored.
[  783.938148][T25698] netlink: 'syz.0.9854': attribute type 4 has an invalid length.
[  783.950266][T25692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  783.975489][T25692] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  784.068745][T23244] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  784.509842][T25767] netlink: 'syz.6.9863': attribute type 13 has an invalid length.
[  784.798514][T25801] __nla_validate_parse: 46 callbacks suppressed
[  784.798564][T25801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9872'.
[  784.815139][T25802] random: crng reseeded on system resumption
[  784.907703][T25807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9873'.
[  784.916749][T25807] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9873'.
[  784.933553][T25807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9873'.
[  784.947222][T25807] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9873'.
[  784.956342][T25807] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9873'.
[  785.016069][T25820] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9880'.
[  785.032228][T25814] bridge0: port 3(batadv1) entered blocking state
[  785.038870][T25814] bridge0: port 3(batadv1) entered disabled state
[  785.045772][T25814] batadv1: entered allmulticast mode
[  785.051882][T25814] batadv1: entered promiscuous mode
[  785.229604][T25852] sch_fq: defrate 0 ignored.
[  785.237305][T25859] set_capacity_and_notify: 5 callbacks suppressed
[  785.237325][T25859] loop8: detected capacity change from 0 to 1024
[  785.251195][T25859] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  785.251719][T25856] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9894'.
[  785.269966][T25859] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  785.286374][T25859] EXT4-fs (loop8): invalid journal inode
[  785.292590][T25859] EXT4-fs (loop8): can't get journal size
[  785.298811][T25859] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 17104912: comm syz.8.9895: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  785.314388][T25859] EXT4-fs (loop8): failed to initialize system zone (-117)
[  785.333068][T25859] EXT4-fs (loop8): mount failed
[  785.346341][T25870] loop1: detected capacity change from 0 to 512
[  785.365993][T25870] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  785.375108][T25870] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  785.406803][T25870] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  785.420570][T25870] System zones: 0-2, 18-18, 34-35
[  785.426518][T25870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  785.453861][T21363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.472082][T25888] FAULT_INJECTION: forcing a failure.
[  785.472082][T25888] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  785.485541][T25888] CPU: 1 UID: 0 PID: 25888 Comm: syz.1.9903 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  785.485582][T25888] Tainted: [W]=WARN
[  785.485591][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  785.485609][T25888] Call Trace:
[  785.485616][T25888]  <TASK>
[  785.485623][T25888]  __dump_stack+0x1d/0x30
[  785.485692][T25888]  dump_stack_lvl+0x95/0xd0
[  785.485722][T25888]  dump_stack+0x15/0x1b
[  785.485748][T25888]  should_fail_ex+0x265/0x280
[  785.485776][T25888]  should_fail_alloc_page+0xf2/0x100
[  785.485800][T25888]  __alloc_frozen_pages_noprof+0x109/0x360
[  785.485889][T25888]  alloc_pages_mpol+0xb3/0x260
[  785.485924][T25888]  ? avc_has_perm+0xf7/0x180
[  785.486040][T25888]  alloc_pages_noprof+0x90/0x130
[  785.486072][T25888]  __pud_alloc+0x47/0x4b0
[  785.486125][T25888]  handle_mm_fault+0x18b5/0x2c60
[  785.486164][T25888]  ? __rcu_read_unlock+0x4f/0x70
[  785.486184][T25888]  ? mt_find+0x21b/0x330
[  785.486211][T25888]  do_user_addr_fault+0x3fe/0x1080
[  785.486270][T25888]  exc_page_fault+0x62/0xa0
[  785.486296][T25888]  asm_exc_page_fault+0x26/0x30
[  785.486316][T25888] RIP: 0010:__get_user_4+0x14/0x20
[  785.486380][T25888] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 d0 0a 02 00 90 90 90 90 90 90 90 90 90 90
[  785.486400][T25888] RSP: 0018:ffffc90009d53db8 EFLAGS: 00050283
[  785.486416][T25888] RAX: 0000200000001080 RBX: 0000200000001080 RCX: 0000000000000005
[  785.486431][T25888] RDX: 00007ffffffff000 RSI: ffffffff86994840 RDI: 0000000000005421
[  785.486448][T25888] RBP: 0000000000005421 R08: ffff88814792d280 R09: 0000000000000013
[  785.486484][T25888] R10: 00000000c020660b R11: 0000000000000000 R12: 0000000000000003
[  785.486501][T25888] R13: 0000000000000003 R14: ffff88810510e0c0 R15: ffff8881061810c0
[  785.486527][T25888]  do_vfs_ioctl+0x410/0xe10
[  785.486564][T25888]  ? selinux_file_ioctl+0x195/0x3a0
[  785.486621][T25888]  ? __fget_files+0x184/0x1c0
[  785.486662][T25888]  __se_sys_ioctl+0x82/0x140
[  785.486698][T25888]  __x64_sys_ioctl+0x43/0x50
[  785.486761][T25888]  x64_sys_call+0x14b0/0x3000
[  785.486792][T25888]  do_syscall_64+0xca/0x2b0
[  785.486911][T25888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.486945][T25888] RIP: 0033:0x7f344d87f749
[  785.486959][T25888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  785.487040][T25888] RSP: 002b:00007f344c2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  785.487062][T25888] RAX: ffffffffffffffda RBX: 00007f344dad5fa0 RCX: 00007f344d87f749
[  785.487131][T25888] RDX: 0000200000001080 RSI: 0000000000005421 RDI: 0000000000000003
[  785.487143][T25888] RBP: 00007f344c2e7090 R08: 0000000000000000 R09: 0000000000000000
[  785.487162][T25888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  785.487174][T25888] R13: 00007f344dad6038 R14: 00007f344dad5fa0 R15: 00007ffcdca70cd8
[  785.487199][T25888]  </TASK>
[  785.548109][T19429] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  785.734561][T25882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9902'.
[  785.741216][T19429] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  785.856789][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9907'.
[  785.873973][T25923] loop7: detected capacity change from 0 to 2048
[  785.892503][T14768] IPVS: starting estimator thread 0...
[  785.937047][T25929] sch_fq: defrate 0 ignored.
[  785.995508][T25925] IPVS: using max 1920 ests per chain, 96000 per kthread
[  786.029593][T25938] loop8: detected capacity change from 0 to 128
[  786.140600][T25950] netlink: 'syz.6.9915': attribute type 6 has an invalid length.
[  786.277092][T25970] loop8: detected capacity change from 0 to 1024
[  786.364642][T25970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  786.380773][T25970] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  786.447831][T25978] netlink: 'syz.0.9924': attribute type 4 has an invalid length.
[  786.668082][T22021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  786.853088][T19457] ==================================================================
[  786.861250][T19457] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  786.869819][T19457] 
[  786.872170][T19457] write to 0xffff88811c2ea508 of 44 bytes by task 26005 on cpu 0:
[  786.880006][T19457]  tty_set_termios+0xc0/0x8c0
[  786.884717][T19457]  set_termios+0x490/0x4d0
[  786.889192][T19457]  tty_mode_ioctl+0x379/0x5c0
[  786.893910][T19457]  n_tty_ioctl_helper+0x91/0x210
[  786.898889][T19457]  n_tty_ioctl+0x101/0x230
[  786.903380][T19457]  tty_ioctl+0x83f/0xb80
[  786.907676][T19457]  __se_sys_ioctl+0xce/0x140
[  786.912318][T19457]  __x64_sys_ioctl+0x43/0x50
[  786.916961][T19457]  x64_sys_call+0x14b0/0x3000
[  786.921693][T19457]  do_syscall_64+0xca/0x2b0
[  786.926257][T19457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.932180][T19457] 
[  786.934523][T19457] read to 0xffff88811c2ea522 of 1 bytes by task 19457 on cpu 1:
[  786.942167][T19457]  n_tty_receive_char_flow_ctrl+0x59/0x1d0
[  786.948011][T19457]  n_tty_lookahead_flow_ctrl+0xed/0x130
[  786.953586][T19457]  tty_port_default_lookahead_buf+0x91/0xc0
[  786.959517][T19457]  flush_to_ldisc+0x288/0x340
[  786.964224][T19457]  process_scheduled_works+0x4ce/0x9d0
[  786.969704][T19457]  worker_thread+0x582/0x770
[  786.974316][T19457]  kthread+0x489/0x510
[  786.978418][T19457]  ret_from_fork+0x149/0x290
[  786.983043][T19457]  ret_from_fork_asm+0x1a/0x30
[  786.987835][T19457] 
[  786.990167][T19457] value changed: 0x13 -> 0x09
[  786.994861][T19457] 
[  786.997200][T19457] Reported by Kernel Concurrency Sanitizer on:
[  787.003375][T19457] CPU: 1 UID: 0 PID: 19457 Comm: kworker/u8:56 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  787.015056][T19457] Tainted: [W]=WARN
[  787.018872][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  787.028952][T19457] Workqueue: events_unbound flush_to_ldisc
[  787.034797][T19457] ==================================================================
[  787.105128][T26010] loop6: detected capacity change from 0 to 764
[  787.116622][T26010] rock: directory entry would overflow storage
[  787.122844][T26010] rock: sig=0x4f50, size=4, remaining=3
[  787.128499][T26010] iso9660: Corrupted directory entry in block 6 of inode 1792