last executing test programs:

3.723850127s ago: executing program 2 (id=327):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000300)=[{&(0x7f0000001440)=""/4114, 0x1012}, {0x0}], 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r7, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

3.507197901s ago: executing program 2 (id=332):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000678af8ff00000000b7080000000000007b8af0ff00000000a1000040ad4a1f6930d8b0a070e1bc5c0248900000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x21, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRES8, @ANYRES64=0x0], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
flistxattr(r1, 0x0, 0x2)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x7, 0x8, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x3, '}'}, @end, @end]}}}}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r3, 0x0, 0xeffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

2.584051469s ago: executing program 2 (id=348):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=<r8=>0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x2a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3c}}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4800)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r9, 0xa, 0x13)
fcntl$setlease(r9, 0x400, 0x0)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r10=>0x0)
timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.824815134s ago: executing program 0 (id=353):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001440)=""/4114, 0x1012}, {0x0}], 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000600000000000000fffa0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000000000041e4b74f37e295e4feffffffffffffff02000000fcfffffd000000002abd70000435000002000100000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2844f1e, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@inlinecrypt}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000002480)="$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")
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r7, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000007102a00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)

1.682466737s ago: executing program 3 (id=355):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
accept4$tipc(r0, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
memfd_create(&(0x7f00000001c0)='\x00', 0x6)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500"], 0x50}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r4], 0x50}}, 0x2)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
fcntl$setlease(r5, 0x400, 0x0)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r6, 0x400, 0x0)

1.652670868s ago: executing program 0 (id=356):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x2bc, 0x30, 0x51b, 0x0, 0x0, {}, [{0x2a8, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1f9, 0x2, 0x4, 0xfffffffc, 0x4}, 0x2000000004}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x3}}}}, @m_csum={0x194, 0x10, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x8001, 0xfffffff0}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xdde, 0x10000000, 0xe63b, 0x1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x2, 0x1, 0x81}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xb7, 0x7, 0x7, 0x385}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x5, 0x8, 0x2874}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x2, 0x5, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x1, 0xf, 0xb3afdec}, 0x10}}]}, {0xa3, 0x6, "ba9f2b31d8999737fc2d9262988b0edcfbdc3d9a88ac91973266d84c3b65340baedf414deb85320c4fae1e443fb48afa2b3fc99b33b9c9ccffb50001fcd3f9fec5396df793f0c7e2e79c6c6b1f074e8126514f863999a3f9c907a77a91c1b3c8ac5f49d178f7468799b2f038343471997e01734ed8370edf72e8293651f8d3159277ac4104e40a2b6eaf21a7fe35b6e074a1ec7765f88b9bfdf3d651054893"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_TYPE={0x6, 0x5, 0x49f}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x7fff, 0x20000000, 0x6, 0xc}}}]}, {0x4c, 0x6, "424271043e3526994161de824bc22eb3728afc8c820740867dae11d09aafa76223d7ce60c9e4b13cbc57797a0cef348c30460194c3b36f6ff306fe4efe3a105097e16e39f8b13419"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xeed1bd769ea22d9c}, 0x0)

1.651601498s ago: executing program 2 (id=357):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
getpid()
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.53236748s ago: executing program 0 (id=358):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000678af8ff00000000b7080000000000007b8af0ff00000000a1000040ad4a1f6930d8b0a070e1bc5c0248900000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x21, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRES8, @ANYRES64=0x0], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
flistxattr(r1, 0x0, 0x2)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x7, 0x8, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x3, '}'}, @end, @end]}}}}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r3, 0x0, 0xeffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

1.072894909s ago: executing program 1 (id=359):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

1.05335337s ago: executing program 3 (id=360):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="410000009d780000"], 0x0)

1.02444367s ago: executing program 3 (id=361):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x24000000)

968.024391ms ago: executing program 1 (id=362):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000004c0)={r3, 0xfff, 0x8ea})

967.515881ms ago: executing program 3 (id=363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)

928.605492ms ago: executing program 3 (id=364):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c4020000020201010000000000000000050000042c0002800c0002800500010006000000060003400000000006000340000200000c000280050001000100000028010a80080001400000000008000140000000015c000280140001800800010064010102080002007f0000010c00028005000100880000000c00028005000100880000002c00018014000300ff010000000000000000000000000001140004002001000000000000000000000000000208000140000000000800014000000000a00002800c000280050001002f000000060003400004000006000340000100000c00028005000100840000000c00028005000100110000002c00018014000300fc010000000000000000000000000000140004000000000000000000000000000000000006000340000000001400018008000100ac1414aa08000200ac1414301400018008000100e000000108000200000000000c0002800500010006000000080001400000000008000840000000020800084000000003fc00038014000180080001006401010108000200ffffffff06000340000300000c00028005000100840000002c00018014000300fe80000000000000000000000000002e14000400ff0100000000000000000000000000010c00028005000100060000002c00018014000300fc00000000000000000000000000000114000400200100000000000000000000000000001400018008000100ac1e000108000200ffffffff2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb2c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb3c000180140001800800010000000000080002000000000006000340000200001400018008000100ac14142e0800020064010102060003400004000006000740000200000900060073797a300000000009c2216a9ba569e555591c09d517741a9097148b7df1db5cd3260e07e0d3a0eba3d7f079341006a08967f324fc85e931d70f94b01eedca2017a8d2f495e91e135dab7a4580e2cf8720cacde6d6fbaca902a26ded0ffd77da4e45bd37fa52af8f541f94e5ac4898fe359848c60ba2487f4a3c9c818d31ae"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4)
close_range(r1, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500fb870000000000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd})
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0)
sendfile(r2, r0, 0x0, 0x3ffff)
sendfile(r2, r0, 0x0, 0x7fffeffd)

927.937362ms ago: executing program 1 (id=365):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000300)=[{&(0x7f0000001440)=""/4114, 0x1012}, {0x0}], 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2844f1e, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@inlinecrypt}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000002480)="$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")
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r6, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

753.008746ms ago: executing program 2 (id=368):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x5, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x24000000)

717.894926ms ago: executing program 4 (id=369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket(0x2, 0x80805, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
truncate(0x0, 0x7fffffff)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd44)

716.937336ms ago: executing program 2 (id=370):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc400000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf250800000008000200080000000800030005000000050005008300000008000300000000001c000180060005004e240000060001000200000005000200000000002c0006800800", @ANYRES32=0x0, @ANYBLOB="080006000e0000000800040001000000480006800800030064010100080006001000000014000400fe8000000000000000000000000000bb08000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000080003000a010100060005004e230000"], 0xcc}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x800)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000004004b64000f0000009502c746f000f7a04e8bca2691bd8d1fe1841eb845ac4cfc7a7391a2668822412ace83f85f3575587ec6fe0ef4c9d2030094ffd2499e40e9f65340c1fc717bd26a33ba6b5b413b59b1bd65fb2c126f4116a12b6d16d4203eb9ab9d2f3a1a32697b909bc66248643831b8084154c6b1c0a3d1eaa13fb6fa344cf515c43f46a33e851f28298772e0328504388e4ee0437ef04de45084cdb62a33a24a206b35692a668cd2014630add89b93649f6dea04db6e219a6c82bfbaaa58fdb2f5382249780d80a58670c76a03bb5e6097ef14652d9dbfc6006a90a08c7ef2b10a4dc3ab2099e119c98588abc5079a7ae5f341908442bd2085867ad214454e0e2d85f8dd460414f6c93d4be443701fd80fb81d431421a5ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000005c0)="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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18)
syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzszzEKwjAUBuBUY9FJj2BnT1F3x95HPImLi4c0ktcIXkCw8H1DXn5C/pDEP9i22ceaW9p3rzLbRB7W7aCUeV6Pw3265Xp/19WO8ZAe51MUfCrT2H+/VJtWsbvkND1//TEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWIJ3AAAA///ZrQ+k")
sendfile(r6, r7, 0x0, 0x8)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xc7, 0x0, 0x0, 0x0, 0x6, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0x0)
r10 = semget(0x3, 0x0, 0x482)
semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000240)=[0x401, 0x0, 0x180, 0x4, 0x7])
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000ff070000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @mcast1, 0xfffffffc}, 0x1c)

690.494377ms ago: executing program 1 (id=371):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
accept4$tipc(r0, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
memfd_create(&(0x7f00000001c0)='\x00', 0x6)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500"], 0x50}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r4], 0x50}}, 0x2)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
fcntl$setlease(r5, 0x400, 0x0)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r6, 0x400, 0x0)

671.560527ms ago: executing program 0 (id=372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001980)=""/195}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xca)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x7, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0xf8, 0x8, 0x7}, {0x7, 0x6, 0x2, 0x7f}]})

634.064058ms ago: executing program 0 (id=373):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

615.961888ms ago: executing program 4 (id=374):
r0 = socket$inet6(0xa, 0x3, 0x7b)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000014c0)={0x84, 0xf, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x2, 0x3c, "73b7009420a11cbb73d99d2847b4cf067d9a0f640506c87abd13776196d16b381bebe9b09e7caec487cf1ba2c0f8eb3001772653270b2e895f97946e"}, @generic={0x6, 0x29, "b334842ecc7735ee554cc2b7233113b9164e2207d42650129632f0dfe4aff88f1dd97d0d07fe9ed0bc"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3ff}]}, 0x88)
connect(r0, &(0x7f0000004000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x1}, 0x80)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

594.841868ms ago: executing program 4 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x7)
perf_event_open(&(0x7f0000000000)={0x8, 0x88, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa)

550.29182ms ago: executing program 0 (id=376):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4)
close_range(r1, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500fb870000000000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd})
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0)
sendfile(r2, r0, 0x0, 0x3ffff)
sendfile(r2, r0, 0x0, 0x7fffeffd)

441.380192ms ago: executing program 4 (id=377):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x2bc, 0x30, 0x51b, 0x0, 0x0, {}, [{0x2a8, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1f9, 0x2, 0x4, 0xfffffffc, 0x4}, 0x2000000004}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x3}}}}, @m_csum={0x194, 0x10, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x8001, 0xfffffff0}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xdde, 0x10000000, 0xe63b, 0x1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x2, 0x1, 0x81}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xb7, 0x7, 0x7, 0x385}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x5, 0x8, 0x2874}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x2, 0x5, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x1, 0xf, 0xb3afdec}, 0x10}}]}, {0xa4, 0x6, "ba9f2b31d8999737fc2d9262988b0edcfbdc3d9a88ac91973266d84c3b65340baedf414deb85320c4fae1e443fb48afa2b3fc99b33b9c9ccffb50001fcd3f9fec5396df793f0c7e2e79c6c6b1f074e8126514f863999a3f9c907a77a91c1b3c8ac5f49d178f7468799b2f038343471997e01734ed8370edf72e8293651f8d3159277ac4104e40a2b6eaf21a7fe35b6e074a1ec7765f88b9bfdf3d6510548932c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_TYPE={0x6, 0x5, 0x49f}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x7fff, 0x20000000, 0x6, 0xc}}}]}, {0x4c, 0x6, "424271043e3526994161de824bc22eb3728afc8c820740867dae11d09aafa76223d7ce60c9e4b13cbc57797a0cef348c30460194c3b36f6ff306fe4efe3a105097e16e39f8b13419"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xeed1bd769ea22d9c}, 0x0)

440.526372ms ago: executing program 4 (id=378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000000000000000000000000000e0000004302cc6da997ba093ee1d73b1f53e0b8579197a8c34b8e0964d89df7dc28fefacc504a244c17f860a70ae4dc85e15ce9de03f4cf1c11df8a82676623206bf03ccc466254c0e0bba192b6c91b17092c792c3d8d2dc91fba68c4e533580c9f21078e253e394596e1d1973d62e57bd64384c7b4cac17fab72e6f06bbfc43768dd7a6a928b238a758d50514f5ce97ccec06405682ce788598c26b4b84d"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f00000000c0)="54c31f4aeb45ce8d3df23d95309007d313aabaeed72e3cc882cd56593a278b", &(0x7f0000000100)=""/33, 0x4}, 0x20)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7, &(0x7f0000002400)=<r5=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

360.827813ms ago: executing program 4 (id=379):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x2, 0x20}, 0xc)
syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0xd7e, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd70, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xd5c, 0x0, @opaque="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"}}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x3, 0xa00, 0x7, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fdffffff00000000b702000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007000000f0ffffffb703000008000000b704000000300000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xfea, &(0x7f0000001e00)=""/4074}, 0x94)

129.315378ms ago: executing program 1 (id=380):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050003"], 0x48}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x4841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1, 0xffffffff}, 0x1c)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r7}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x8, &(0x7f0000000040)=0xa, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
write$qrtrtun(r8, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r11 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='^$-#\x00', r11)
r12 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil)
shmat(r12, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)

16.51293ms ago: executing program 3 (id=381):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000300)=[{&(0x7f0000001440)=""/4114, 0x1012}, {0x0}], 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2844f1e, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@inlinecrypt}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000002480)="$eJzs3M1vFVUbAPBnph980768vK+CqCgxaTS2tKCycKPRxBiMJrrAZW0LabhQQ6sRJFKMwY2JIdG1Ma6M/gXujIlRVyZudePKkBBlA+jmmpk7U9rbe4Ha206lv19y23PunHvneTpfZ84ZCGDd2pv9SCK2RsTPEdHXqC5s0N0o/lWv169fOTuWRL3+8u9J3u7qlbNjZdPyc1uKykAakb6XFCtZaPr0meOjtdrEqaI+NHPi9aHp02ceffPE6LGJYxMnRw4dOnhg+InHRx7rSJ5ZXld3vzO1Z9dzr158YezIxde+/zKLd2uxfH4enbI3S/yPeq552UOdXlnFts0rJ90VBsKSdBWHd09+/PdFV9zYeH3x7LuVBgesqOzatKH94tk6cAdLouoIgGqUF/rs/rd8rVLXY024/FTjBijL+1rxaizpjrRo09N0f9tJeyPiyOyfn2SvWKFxCACA+T4Y+/hwb0S8ff2L57O+R9/ckjT+n//+Nf+5vZhD6Y+I/0TEjoj4b0TsjIj/ReRt74qIu5cZz+L+T3ppmV95U1n/78mIuLao/1f2/qK/q6hty/PvSY5O1ib2F3+TgejZkNWHb7KOr5/56cN2y+b3/7JXtv6yL1jEcam7aYBufHRmNO+UdsDl8xG7u1vln8zNBCQRsSsidi/tq7eXhcmHP9/TrtGt8y9sbvHhDswz1T/N0pvN8p+NpvxLyfz5yclF85NDG6M2sX+o3CsW++HHCy+1W/9t579CLk80fs/b/s1N+pP587XTS1/HhV/eb3tP8w/3/7Q3eSWfZ+4t3ntrdGbm1HBEb3I4ry94f+TGZ8t62T7b/wf2tT7+dxSfyfK/JyKynfjeiLgvIu4vYn8gIh6MiH03yf+7p9svK/OPtKLtfz5ivOX5b27/b9r+Sy90Hf/2q3brv73tfzAvDRTv5Oe/W2gVTna6aA5wOX87AAAA+LdI82fgk3Rwrpymg4ONZ/h3xua0NjU988jRqTdOjjeele+PnrQc6eorxkNrk7WJ4WS2+MbG+OhIMVZcjpceKMaNP+ralNcHx6Zq4xXnDuvdljbHf+a3rqqjA1bYppbvjvSueiBABZrn0dOF1XMvhpMB3Km6r1YdAVCVWzxHl65WHMDq8/+1wPrV6vg/11Q3FwB3Jtd/WJc+C8c/rF/pN1VHAFTI9R/WpeX8u/4VLGxcG2FUU1irGyUvRJSFdE3Eo7BCharPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//dCfrZQ==")
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r6, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

0s ago: executing program 1 (id=382):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sync()
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf2510"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
sync() (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf2510"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts.
[   33.858109][   T29] audit: type=1400 audit(1759029438.438:62): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.859304][ T3289] cgroup: Unknown subsys name 'net'
[   33.880861][   T29] audit: type=1400 audit(1759029438.438:63): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.908266][   T29] audit: type=1400 audit(1759029438.468:64): avc:  denied  { unmount } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.045406][ T3289] cgroup: Unknown subsys name 'cpuset'
[   34.051881][ T3289] cgroup: Unknown subsys name 'rlimit'
[   34.202315][   T29] audit: type=1400 audit(1759029438.778:65): avc:  denied  { setattr } for  pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.225601][   T29] audit: type=1400 audit(1759029438.778:66): avc:  denied  { create } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.246160][   T29] audit: type=1400 audit(1759029438.778:67): avc:  denied  { write } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.266615][   T29] audit: type=1400 audit(1759029438.778:68): avc:  denied  { read } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.275159][ T3292] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.286888][   T29] audit: type=1400 audit(1759029438.788:69): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.320246][   T29] audit: type=1400 audit(1759029438.788:70): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.343687][   T29] audit: type=1400 audit(1759029438.878:71): avc:  denied  { relabelto } for  pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   34.383401][ T3289] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.233467][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   36.293068][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   36.305700][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   36.332213][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   36.355657][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   36.398334][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.405561][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.412728][ T3305] bridge_slave_0: entered allmulticast mode
[   36.419478][ T3305] bridge_slave_0: entered promiscuous mode
[   36.428561][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.435656][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.442892][ T3305] bridge_slave_1: entered allmulticast mode
[   36.449305][ T3305] bridge_slave_1: entered promiscuous mode
[   36.476413][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.483662][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.491821][ T3299] bridge_slave_0: entered allmulticast mode
[   36.498282][ T3299] bridge_slave_0: entered promiscuous mode
[   36.521543][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.528651][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.535956][ T3299] bridge_slave_1: entered allmulticast mode
[   36.542378][ T3299] bridge_slave_1: entered promiscuous mode
[   36.561563][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.571861][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.591425][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.598532][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.605865][ T3298] bridge_slave_0: entered allmulticast mode
[   36.612518][ T3298] bridge_slave_0: entered promiscuous mode
[   36.638034][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.648358][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.655468][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.662688][ T3300] bridge_slave_0: entered allmulticast mode
[   36.669394][ T3300] bridge_slave_0: entered promiscuous mode
[   36.676165][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.683233][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.690486][ T3298] bridge_slave_1: entered allmulticast mode
[   36.697078][ T3298] bridge_slave_1: entered promiscuous mode
[   36.708536][ T3305] team0: Port device team_slave_0 added
[   36.715482][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.724630][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.731684][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.738929][ T3300] bridge_slave_1: entered allmulticast mode
[   36.745481][ T3300] bridge_slave_1: entered promiscuous mode
[   36.762158][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.769298][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.776602][ T3303] bridge_slave_0: entered allmulticast mode
[   36.783158][ T3303] bridge_slave_0: entered promiscuous mode
[   36.790295][ T3305] team0: Port device team_slave_1 added
[   36.816163][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.823255][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.830433][ T3303] bridge_slave_1: entered allmulticast mode
[   36.837110][ T3303] bridge_slave_1: entered promiscuous mode
[   36.854902][ T3299] team0: Port device team_slave_0 added
[   36.866495][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.876719][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.891285][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.898313][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.924298][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.935649][ T3299] team0: Port device team_slave_1 added
[   36.942356][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.952475][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.967668][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.974674][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.000623][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.026929][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.055611][ T3298] team0: Port device team_slave_0 added
[   37.063111][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.073214][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.080208][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.106135][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.117588][ T3300] team0: Port device team_slave_0 added
[   37.123976][ T3298] team0: Port device team_slave_1 added
[   37.154889][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.161843][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.187797][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.201505][ T3300] team0: Port device team_slave_1 added
[   37.212781][ T3303] team0: Port device team_slave_0 added
[   37.219306][ T3303] team0: Port device team_slave_1 added
[   37.227555][ T3305] hsr_slave_0: entered promiscuous mode
[   37.233617][ T3305] hsr_slave_1: entered promiscuous mode
[   37.250689][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.257713][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.283687][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.316395][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.323376][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.349502][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.360545][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.367611][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.393563][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.416938][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.423921][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.449837][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.463188][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.470244][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.496261][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.507247][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.514202][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.540213][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.555323][ T3299] hsr_slave_0: entered promiscuous mode
[   37.561272][ T3299] hsr_slave_1: entered promiscuous mode
[   37.567192][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   37.572932][ T3299] Cannot create hsr debugfs directory
[   37.633063][ T3298] hsr_slave_0: entered promiscuous mode
[   37.639249][ T3298] hsr_slave_1: entered promiscuous mode
[   37.645350][ T3298] debugfs: 'hsr0' already exists in 'hsr'
[   37.651086][ T3298] Cannot create hsr debugfs directory
[   37.699032][ T3303] hsr_slave_0: entered promiscuous mode
[   37.705259][ T3303] hsr_slave_1: entered promiscuous mode
[   37.711205][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   37.717056][ T3303] Cannot create hsr debugfs directory
[   37.727939][ T3300] hsr_slave_0: entered promiscuous mode
[   37.733907][ T3300] hsr_slave_1: entered promiscuous mode
[   37.739964][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   37.745728][ T3300] Cannot create hsr debugfs directory
[   37.900558][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.915438][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.929967][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.946038][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.966261][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.976265][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.991866][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.010389][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.033720][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.043488][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.053709][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.062547][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.094859][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.107134][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.115096][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.124114][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.133607][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.183854][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   38.192694][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.207729][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.214807][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.224927][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.233804][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.242670][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.257331][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.264429][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.308932][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.323078][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.350005][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   38.359598][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   38.371182][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.387541][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.394657][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.403094][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.410257][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.424489][  T125] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.431556][  T125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.449893][  T125] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.457013][  T125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.473221][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   38.483677][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.503350][  T125] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.510594][  T125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.526131][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   38.538339][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.548918][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.566888][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.573970][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.588554][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.598794][  T125] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.605956][  T125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.645246][  T125] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.652549][  T125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.740368][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.761140][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.796854][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.815866][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.912600][ T3300] veth0_vlan: entered promiscuous mode
[   38.929453][ T3300] veth1_vlan: entered promiscuous mode
[   38.969863][ T3299] veth0_vlan: entered promiscuous mode
[   38.987103][ T3299] veth1_vlan: entered promiscuous mode
[   38.999703][ T3300] veth0_macvtap: entered promiscuous mode
[   39.011372][ T3303] veth0_vlan: entered promiscuous mode
[   39.029028][ T3300] veth1_macvtap: entered promiscuous mode
[   39.037891][ T3303] veth1_vlan: entered promiscuous mode
[   39.048288][ T3305] veth0_vlan: entered promiscuous mode
[   39.062932][ T3298] veth0_vlan: entered promiscuous mode
[   39.076452][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.088523][ T3298] veth1_vlan: entered promiscuous mode
[   39.096956][ T3305] veth1_vlan: entered promiscuous mode
[   39.103807][ T3303] veth0_macvtap: entered promiscuous mode
[   39.122908][ T3305] veth0_macvtap: entered promiscuous mode
[   39.131244][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.139005][ T3303] veth1_macvtap: entered promiscuous mode
[   39.150046][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.159648][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.169353][ T3305] veth1_macvtap: entered promiscuous mode
[   39.185957][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.194715][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.212879][ T3299] veth0_macvtap: entered promiscuous mode
[   39.222788][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.230889][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.239131][ T3299] veth1_macvtap: entered promiscuous mode
[   39.248934][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   39.248946][   T29] audit: type=1400 audit(1759029443.828:81): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.wtrFjx/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.259617][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.291000][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.301462][ T3298] veth0_macvtap: entered promiscuous mode
[   39.307320][   T29] audit: type=1400 audit(1759029443.828:82): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.320557][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.329610][   T29] audit: type=1400 audit(1759029443.828:83): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.wtrFjx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.361986][   T29] audit: type=1400 audit(1759029443.828:84): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.383853][   T29] audit: type=1400 audit(1759029443.828:85): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.wtrFjx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.410608][   T29] audit: type=1400 audit(1759029443.838:86): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.wtrFjx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.438024][   T29] audit: type=1400 audit(1759029443.838:87): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.457543][   T29] audit: type=1400 audit(1759029443.878:88): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.480407][   T29] audit: type=1400 audit(1759029443.878:89): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.512248][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.522585][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.523327][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.547790][   T29] audit: type=1400 audit(1759029444.128:90): avc:  denied  { read write } for  pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.554251][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.581505][ T3298] veth1_macvtap: entered promiscuous mode
[   39.597203][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.614179][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.626504][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.635615][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.642595][ T3469] loop2: detected capacity change from 0 to 1024
[   39.657406][ T3469] =======================================================
[   39.657406][ T3469] WARNING: The mand mount option has been deprecated and
[   39.657406][ T3469]          and is ignored by this kernel. Remove the mand
[   39.657406][ T3469]          option from the mount to silence this warning.
[   39.657406][ T3469] =======================================================
[   39.698890][   T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.704254][ T3469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.731986][  T125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.755489][  T125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.794241][  T125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.807959][  T125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.861354][  T125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.905692][  T125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.945063][  T125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.970887][  T125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.980194][  T125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.989589][  T125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.999737][  T125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.035704][ T3489] loop3: detected capacity change from 0 to 512
[   40.054743][ T3489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.067318][ T3489] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.104865][ T3495] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[   40.129434][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'.
[   40.150140][ T3495] SELinux: failed to load policy
[   40.158424][ T3497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.257975][ T3504] loop1: detected capacity change from 0 to 512
[   40.265197][ T3504] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.272555][ T3504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.285787][ T3504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   40.298402][ T3504] EXT4-fs (loop1): 1 truncate cleaned up
[   40.312053][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.375090][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   40.455356][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.647492][ T3531] bridge0: entered allmulticast mode
[   40.712890][ T3544] loop2: detected capacity change from 0 to 256
[   40.738038][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.746982][ T3544] bridge_slave_0: left allmulticast mode
[   40.747072][ T3544] bridge_slave_0: left promiscuous mode
[   40.747217][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.771172][ T3544] bridge_slave_1: left allmulticast mode
[   40.776955][ T3544] bridge_slave_1: left promiscuous mode
[   40.782645][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.835863][ T3544] bond0: (slave bond_slave_0): Releasing backup interface
[   40.849494][ T3544] bond0: (slave bond_slave_1): Releasing backup interface
[   40.930553][ T3544] team0: Port device team_slave_0 removed
[   40.938212][ T3547] SELinux: failed to load policy
[   40.945315][ T3544] team0: Port device team_slave_1 removed
[   40.952601][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.960088][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.969961][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.977437][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.040786][ T3497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.066049][ T3546] team0: Mode changed to "loadbalance"
[   41.140548][ T3497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.168347][ T3556] loop0: detected capacity change from 0 to 512
[   41.186500][ T3556] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.193341][ T3556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   41.213532][ T3556] EXT4-fs (loop0): 1 truncate cleaned up
[   41.220106][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.254375][ T3559] loop3: detected capacity change from 0 to 256
[   41.266354][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.299580][ T3559] bridge_slave_0: left allmulticast mode
[   41.305365][ T3559] bridge_slave_0: left promiscuous mode
[   41.311171][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.320966][ T3559] bridge_slave_1: left allmulticast mode
[   41.326761][ T3559] bridge_slave_1: left promiscuous mode
[   41.332501][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.466341][ T3559] bond0: (slave bond_slave_0): Releasing backup interface
[   41.476862][ T3559] bond0: (slave bond_slave_1): Releasing backup interface
[   41.490345][ T3559] team0: Port device team_slave_0 removed
[   41.499398][ T3559] team0: Port device team_slave_1 removed
[   41.506743][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.514164][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.522928][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.530396][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.703717][ T3544] syz.2.13 (3544) used greatest stack depth: 10760 bytes left
[   41.903900][ T3564] team0: Mode changed to "loadbalance"
[   41.966941][ T3497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.987809][ T3570] loop2: detected capacity change from 0 to 1024
[   41.998968][ T3570] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   42.052841][  T125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.077017][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.105777][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.123554][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.261265][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.267666][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   42.285483][ T3578] loop4: detected capacity change from 0 to 1024
[   42.299375][ T3576] loop2: detected capacity change from 0 to 512
[   42.311935][ T3578] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   42.345018][ T3576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.357726][ T3576] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.413175][ T3588] tipc: Started in network mode
[   42.418286][ T3588] tipc: Node identity ac14140f, cluster identity 4711
[   42.425605][ T3588] tipc: New replicast peer: 255.255.255.255
[   42.426954][ T3582] SELinux: failed to load policy
[   42.431700][ T3588] tipc: Enabled bearer <udp:s>, priority 10
[   43.015596][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.166300][ T3616] SELinux: failed to load policy
[   43.265272][ T3632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.35'.
[   43.412971][ T3644] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   43.509860][ T3656] loop4: detected capacity change from 0 to 1024
[   43.537280][ T3656] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   43.545396][ T3381] tipc: Node number set to 2886997007
[   43.718003][ T3659] SELinux: failed to load policy
[   43.733950][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'.
[   43.751109][ T3665] Zero length message leads to an empty skb
[   43.767694][ T3665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.830755][ T3633] bridge1: entered promiscuous mode
[   43.908903][ T3665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.961128][ T3675] netlink: 'syz.4.46': attribute type 6 has an invalid length.
[   43.981182][ T3675] netlink: 'syz.4.46': attribute type 6 has an invalid length.
[   44.029165][ T3665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.049079][ T3678] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[   44.101806][ T3665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.128122][ T3680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.47'.
[   44.179894][ T3684] loop4: detected capacity change from 0 to 128
[   44.202988][ T1840] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.222558][ T3684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   44.244554][ T1840] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.266233][   T29] kauditd_printk_skb: 313 callbacks suppressed
[   44.266270][   T29] audit: type=1400 audit(1759029448.848:404): avc:  denied  { create } for  pid=3692 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   44.296579][ T3684] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   44.331055][ T1840] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.354501][ T1840] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.355034][ T3693] loop1: detected capacity change from 0 to 1024
[   44.388382][   T29] audit: type=1400 audit(1759029448.958:405): avc:  denied  { read append } for  pid=3681 comm="syz.4.49" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   44.412418][   T29] audit: type=1400 audit(1759029448.958:406): avc:  denied  { open } for  pid=3681 comm="syz.4.49" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   44.436205][   T29] audit: type=1400 audit(1759029448.968:407): avc:  denied  { write } for  pid=3681 comm="syz.4.49" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   44.492383][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   44.503133][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.531888][   T29] audit: type=1400 audit(1759029449.098:408): avc:  denied  { read } for  pid=3699 comm="syz.3.54" dev="nsfs" ino=4026532616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   44.552918][   T29] audit: type=1400 audit(1759029449.098:409): avc:  denied  { open } for  pid=3699 comm="syz.3.54" path="net:[4026532616]" dev="nsfs" ino=4026532616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   44.576062][   T29] audit: type=1400 audit(1759029449.098:410): avc:  denied  { unmount } for  pid=3699 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   44.595863][   T29] audit: type=1326 audit(1759029449.098:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d82beec9 code=0x7ffc0000
[   44.619346][   T29] audit: type=1326 audit(1759029449.098:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d82beec9 code=0x7ffc0000
[   44.642703][   T29] audit: type=1326 audit(1759029449.098:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07d82beec9 code=0x7ffc0000
[   44.653285][ T3670] delete_channel: no stack
[   44.698514][ T3711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.707127][ T3711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.772663][ T3712] loop4: detected capacity change from 0 to 8192
[   44.814747][ T3484]  loop4: p1[EZD] p2 p4
[   44.819054][ T3484] loop4: p1 start 150996992 is beyond EOD, truncated
[   44.826936][ T3484] loop4: p4 size 281856 extends beyond EOD, truncated
[   44.835986][ T3712]  loop4: p1[EZD] p2 p4
[   44.840406][ T3712] loop4: p1 start 150996992 is beyond EOD, truncated
[   44.847907][ T3712] loop4: p4 size 281856 extends beyond EOD, truncated
[   45.103351][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.125080][ T3714] loop1: detected capacity change from 0 to 128
[   45.134337][ T3714] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.147889][ T3714] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.235349][ T3714] FAULT_INJECTION: forcing a failure.
[   45.235349][ T3714] name failslab, interval 1, probability 0, space 0, times 0
[   45.248125][ T3714] CPU: 1 UID: 0 PID: 3714 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.248154][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   45.248167][ T3714] Call Trace:
[   45.248172][ T3714]  <TASK>
[   45.248179][ T3714]  __dump_stack+0x1d/0x30
[   45.248274][ T3714]  dump_stack_lvl+0xe8/0x140
[   45.248298][ T3714]  dump_stack+0x15/0x1b
[   45.248318][ T3714]  should_fail_ex+0x265/0x280
[   45.248347][ T3714]  should_failslab+0x8c/0xb0
[   45.248448][ T3714]  __kmalloc_noprof+0xa5/0x3e0
[   45.248479][ T3714]  ? lsm_fill_user_ctx+0x91/0x1e0
[   45.248511][ T3714]  lsm_fill_user_ctx+0x91/0x1e0
[   45.248542][ T3714]  selinux_getselfattr+0x87/0xd0
[   45.248614][ T3714]  security_getselfattr+0x24d/0x500
[   45.248685][ T3714]  __x64_sys_lsm_get_self_attr+0x51/0x60
[   45.248788][ T3714]  x64_sys_call+0xeb8/0x2ff0
[   45.248878][ T3714]  do_syscall_64+0xd2/0x200
[   45.248910][ T3714]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   45.248940][ T3714]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.248976][ T3714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.249033][ T3714] RIP: 0033:0x7f4b1551eec9
[   45.249047][ T3714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.249069][ T3714] RSP: 002b:00007f4b13f7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb
[   45.249093][ T3714] RAX: ffffffffffffffda RBX: 00007f4b15775fa0 RCX: 00007f4b1551eec9
[   45.249108][ T3714] RDX: 0000200000000040 RSI: ffffffffffffffff RDI: 0000000000000064
[   45.249124][ T3714] RBP: 00007f4b13f7f090 R08: 0000000000000000 R09: 0000000000000000
[   45.249197][ T3714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.249208][ T3714] R13: 00007f4b15776038 R14: 00007f4b15775fa0 R15: 00007ffccfb24e88
[   45.249234][ T3714]  </TASK>
[   45.438401][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.612843][ T3730] netlink: 'syz.0.65': attribute type 6 has an invalid length.
[   45.644714][ T3730] netlink: 'syz.0.65': attribute type 6 has an invalid length.
[   45.705107][ T3730] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[   45.750920][ T3730] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   45.759881][ T3730] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   45.781355][ T3726] netlink: 'syz.4.63': attribute type 2 has an invalid length.
[   45.790265][ T3742] netlink: 272 bytes leftover after parsing attributes in process `syz.1.68'.
[   45.823515][ T3730] +}[@ (3730) used greatest stack depth: 10712 bytes left
[   45.850645][ T3746] loop0: detected capacity change from 0 to 512
[   45.851933][ T3726] loop4: detected capacity change from 0 to 8192
[   45.859976][ T3746] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.873300][ T3746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.893839][ T3746] EXT4-fs (loop0): 1 truncate cleaned up
[   45.899915][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.901078][ T3726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.63'.
[   46.668894][ T3743] delete_channel: no stack
[   46.710420][ T3749] syz.0.70 (3749) used greatest stack depth: 9752 bytes left
[   46.741780][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.769215][ T3755] loop0: detected capacity change from 0 to 256
[   46.967868][ T3759] loop0: detected capacity change from 0 to 512
[   46.987135][ T3759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.999834][ T3759] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.016056][ T3762] loop2: detected capacity change from 0 to 8192
[   47.055880][ T3484]  loop2: p1[EZD] p2 p4
[   47.062606][ T3484] loop2: p1 start 150996992 is beyond EOD, truncated
[   47.070238][ T3484] loop2: p4 size 281856 extends beyond EOD, truncated
[   47.166034][ T3762]  loop2: p1[EZD] p2 p4
[   47.170662][ T3762] loop2: p1 start 150996992 is beyond EOD, truncated
[   47.178110][ T3762] loop2: p4 size 281856 extends beyond EOD, truncated
[   47.682279][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.828628][ T3782] loop2: detected capacity change from 0 to 512
[   47.836702][ T3782] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.846413][ T3782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   47.858121][ T3782] EXT4-fs (loop2): 1 truncate cleaned up
[   47.864187][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.139119][ T3796] loop4: detected capacity change from 0 to 8192
[   48.194798][ T3484]  loop4: p1[EZD] p2 p4
[   48.200312][ T3484] loop4: p1 start 150996992 is beyond EOD, truncated
[   48.208171][ T3484] loop4: p4 size 281856 extends beyond EOD, truncated
[   48.218009][ T3796]  loop4: p1[EZD] p2 p4
[   48.222323][ T3796] loop4: p1 start 150996992 is beyond EOD, truncated
[   48.231506][ T3796] loop4: p4 size 281856 extends beyond EOD, truncated
[   48.672276][ T3783] delete_channel: no stack
[   48.736335][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.753406][ T3815] SELinux:  Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped).
[   48.915601][ T3823] netlink: 48 bytes leftover after parsing attributes in process `syz.4.90'.
[   48.929673][ T3821] loop2: detected capacity change from 0 to 512
[   48.952914][ T3821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.965507][ T3821] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.209926][   T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.259812][ T3835] SELinux: failed to load policy
[   49.269330][ T3838] loop4: detected capacity change from 0 to 256
[   49.279521][   T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.321387][   T29] kauditd_printk_skb: 170 callbacks suppressed
[   49.321440][   T29] audit: type=1400 audit(1759029453.898:584): avc:  denied  { mounton } for  pid=3839 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   49.338111][ T3838] bridge_slave_0: left allmulticast mode
[   49.354915][ T3838] bridge_slave_0: left promiscuous mode
[   49.360641][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.379249][ T3844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'.
[   49.389603][ T3838] bridge_slave_1: left allmulticast mode
[   49.395311][ T3838] bridge_slave_1: left promiscuous mode
[   49.400995][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.410413][ T3838] bond0: (slave bond_slave_0): Releasing backup interface
[   49.420805][ T3838] bond0: (slave bond_slave_1): Releasing backup interface
[   49.430457][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'.
[   49.441308][ T3838] team0: Port device team_slave_0 removed
[   49.450137][ T3838] team0: Port device team_slave_1 removed
[   49.457301][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.464786][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.473253][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.480743][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.501257][ T3843] team0: Mode changed to "loadbalance"
[   49.516227][   T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.533648][   T29] audit: type=1400 audit(1759029454.108:585): avc:  denied  { ioctl } for  pid=3840 comm="syz.1.97" path="socket:[5633]" dev="sockfs" ino=5633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.540366][ T3844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'.
[   49.578310][ T3844] hsr_slave_1 (unregistering): left promiscuous mode
[   49.588618][   T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.659499][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.692713][ T3839] chnl_net:caif_netlink_parms(): no params data found
[   49.707831][   T29] audit: type=1400 audit(1759029454.288:586): avc:  denied  { search } for  pid=3028 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.729618][   T29] audit: type=1400 audit(1759029454.288:587): avc:  denied  { search } for  pid=3028 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.751220][   T29] audit: type=1400 audit(1759029454.288:588): avc:  denied  { search } for  pid=3028 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.777342][   T29] audit: type=1400 audit(1759029454.348:589): avc:  denied  { read open } for  pid=3860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.802912][   T29] audit: type=1400 audit(1759029454.348:590): avc:  denied  { getattr } for  pid=3860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.829884][ T3857] FAULT_INJECTION: forcing a failure.
[   49.829884][ T3857] name failslab, interval 1, probability 0, space 0, times 0
[   49.842717][ T3857] CPU: 0 UID: 0 PID: 3857 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   49.842761][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   49.842777][ T3857] Call Trace:
[   49.842784][ T3857]  <TASK>
[   49.842793][ T3857]  __dump_stack+0x1d/0x30
[   49.842839][ T3857]  dump_stack_lvl+0xe8/0x140
[   49.842866][ T3857]  dump_stack+0x15/0x1b
[   49.842886][ T3857]  should_fail_ex+0x265/0x280
[   49.842990][ T3857]  should_failslab+0x8c/0xb0
[   49.843023][ T3857]  kmem_cache_alloc_node_noprof+0x57/0x320
[   49.843102][ T3857]  ? __alloc_skb+0x101/0x320
[   49.843129][ T3857]  __alloc_skb+0x101/0x320
[   49.843165][ T3857]  inet_netconf_notify_devconf+0x173/0x230
[   49.843223][ T3857]  inetdev_event+0x743/0xc10
[   49.843249][ T3857]  ? __pfx_ib_netdevice_event+0x10/0x10
[   49.843318][ T3857]  ? ib_netdevice_event+0x186/0x5f0
[   49.843388][ T3857]  ? __pfx_inetdev_event+0x10/0x10
[   49.843426][ T3857]  raw_notifier_call_chain+0x6c/0x1b0
[   49.843487][ T3857]  ? call_netdevice_notifiers_info+0x9c/0x100
[   49.843530][ T3857]  call_netdevice_notifiers_info+0xae/0x100
[   49.843570][ T3857]  unregister_netdevice_many_notify+0xda9/0x15d0
[   49.843612][ T3857]  unregister_netdevice_queue+0x1f5/0x220
[   49.843722][ T3857]  __tun_detach+0x7db/0xad0
[   49.843753][ T3857]  ? __pfx_tun_chr_close+0x10/0x10
[   49.843778][ T3857]  tun_chr_close+0x5a/0x100
[   49.843801][ T3857]  __fput+0x29b/0x650
[   49.843920][ T3857]  fput_close_sync+0x6e/0x120
[   49.844017][ T3857]  __x64_sys_close+0x56/0xf0
[   49.844040][ T3857]  x64_sys_call+0x2738/0x2ff0
[   49.844068][ T3857]  do_syscall_64+0xd2/0x200
[   49.844131][ T3857]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   49.844163][ T3857]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   49.844336][ T3857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.844364][ T3857] RIP: 0033:0x7f9d33c8eec9
[   49.844382][ T3857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.844411][ T3857] RSP: 002b:00007f9d326ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   49.844436][ T3857] RAX: ffffffffffffffda RBX: 00007f9d33ee5fa0 RCX: 00007f9d33c8eec9
[   49.844507][ T3857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   49.844523][ T3857] RBP: 00007f9d326ef090 R08: 0000000000000000 R09: 0000000000000000
[   49.844539][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.844603][ T3857] R13: 00007f9d33ee6038 R14: 00007f9d33ee5fa0 R15: 00007ffe3114f2a8
[   49.844626][ T3857]  </TASK>
[   50.120981][   T29] audit: type=1400 audit(1759029454.698:591): avc:  denied  { add_name } for  pid=3859 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.178097][   T29] audit: type=1400 audit(1759029454.748:592): avc:  denied  { remove_name } for  pid=3872 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1397 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.226763][   T51] bond0 (unregistering): Released all slaves
[   50.257664][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.264812][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.272071][ T3839] bridge_slave_0: entered allmulticast mode
[   50.280229][ T3839] bridge_slave_0: entered promiscuous mode
[   50.291365][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.298521][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.337016][ T3839] bridge_slave_1: entered allmulticast mode
[   50.357260][ T3839] bridge_slave_1: entered promiscuous mode
[   50.361068][ T3882] process 'syz.4.101' launched './file1' with NULL argv: empty string added
[   50.363404][   T29] audit: type=1400 audit(1759029454.938:593): avc:  denied  { execute } for  pid=3881 comm="syz.4.101" name="file1" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.443437][ T3888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.102'.
[   50.526778][ T3839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.583969][ T3882] loop4: detected capacity change from 0 to 2048
[   50.616525][ T3839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.649372][ T3895] IPv6: addrconf: prefix option has invalid lifetime
[   50.681918][ T3882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.751985][ T3839] team0: Port device team_slave_0 added
[   50.777750][ T3882] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.796663][ T3839] team0: Port device team_slave_1 added
[   50.845013][ T3902] IPv6: NLM_F_CREATE should be specified when creating new route
[   50.880954][ T3882] smc: net device bond0 applied user defined pnetid SYZ0
[   50.892355][ T3839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.899389][ T3839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.919644][ T3905] smc: net device bond0 erased user defined pnetid SYZ0
[   50.925385][ T3839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.949291][ T3839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.956361][ T3839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.982489][ T3839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.009014][   T51] hsr_slave_0: left promiscuous mode
[   51.015571][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.055840][ T3913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.070947][ T3913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.098429][   T51] hsr_slave_1: left promiscuous mode
[   51.110581][   T51] veth1_macvtap: left promiscuous mode
[   51.120939][   T51] veth0_macvtap: left promiscuous mode
[   51.128014][   T51] veth1_vlan: left promiscuous mode
[   51.133396][   T51] veth0_vlan: left promiscuous mode
[   51.173117][ T3921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=3921 comm=syz.1.106
[   51.299878][ T3839] hsr_slave_0: entered promiscuous mode
[   51.312283][ T3839] hsr_slave_1: entered promiscuous mode
[   51.326420][ T3839] debugfs: 'hsr0' already exists in 'hsr'
[   51.327137][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   51.332198][ T3839] Cannot create hsr debugfs directory
[   51.359217][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   51.367408][ T3928] SELinux: failed to load policy
[   51.414317][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   51.610725][ T3958] serio: Serial port ptm0
[   52.165010][ T3984] loop2: detected capacity change from 0 to 512
[   52.172410][ T3984] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.181719][ T3984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.208946][ T3984] EXT4-fs (loop2): 1 truncate cleaned up
[   52.226445][ T3984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.545933][ T3839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   52.659423][ T4011] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[   52.662537][ T3839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   52.686961][ T3839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   52.709548][ T4011] SELinux: failed to load policy
[   52.774757][ T3839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   52.781891][ T4016] SELinux: failed to load policy
[   52.982165][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.015920][ T3839] 8021q: adding VLAN 0 to HW filter on device team0
[   53.027266][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.034434][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.090067][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.097255][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.242756][ T3839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.316262][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.384902][ T4066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.126'.
[   53.449548][ T3839] veth0_vlan: entered promiscuous mode
[   53.472759][ T3839] veth1_vlan: entered promiscuous mode
[   53.510451][ T3839] veth0_macvtap: entered promiscuous mode
[   53.527866][ T3839] veth1_macvtap: entered promiscuous mode
[   53.560511][ T3839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.592991][ T3839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.616390][ T1840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.651704][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.693260][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.707870][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   53.807171][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.875636][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   53.904754][ T4096] loop1: detected capacity change from 0 to 256
[   53.913841][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   53.947785][ T4085] hsr_slave_1 (unregistering): left promiscuous mode
[   53.962459][ T4096] team0: No ports can be present during mode change
[   54.096887][ T4110] loop3: detected capacity change from 0 to 1024
[   54.131035][ T4100] SELinux: failed to load policy
[   54.138677][ T4110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.196622][ T4117] tipc: Started in network mode
[   54.201532][ T4117] tipc: Node identity ac14140f, cluster identity 4711
[   54.235631][ T4117] tipc: New replicast peer: 255.255.255.255
[   54.241821][ T4117] tipc: Enabled bearer <udp:s>, priority 10
[   54.574513][   T29] kauditd_printk_skb: 44 callbacks suppressed
[   54.574531][   T29] audit: type=1326 audit(1759029459.138:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.603999][   T29] audit: type=1326 audit(1759029459.138:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.627442][   T29] audit: type=1326 audit(1759029459.138:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.650766][   T29] audit: type=1326 audit(1759029459.138:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.674163][   T29] audit: type=1326 audit(1759029459.138:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.711824][   T29] audit: type=1326 audit(1759029459.178:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.735240][   T29] audit: type=1326 audit(1759029459.178:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.737637][ T4157] loop2: detected capacity change from 0 to 128
[   54.758584][   T29] audit: type=1326 audit(1759029459.178:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.758617][   T29] audit: type=1326 audit(1759029459.178:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.802822][    C1] hrtimer: interrupt took 46822 ns
[   54.811525][   T29] audit: type=1326 audit(1759029459.278:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   54.923246][ T3839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.001854][ T4162] SELinux: failed to load policy
[   55.060729][ T4169] syz.3.148 uses obsolete (PF_INET,SOCK_PACKET)
[   55.076710][ T4173] loop2: detected capacity change from 0 to 256
[   55.090228][ T4173] team0: Unable to change to the same mode the team is in
[   55.114415][ T4175] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   55.120982][ T4175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   55.128709][ T4175] vhci_hcd vhci_hcd.0: Device attached
[   55.140756][ T4164] netlink: 'syz.3.148': attribute type 10 has an invalid length.
[   55.156451][ T4164] team0 (unregistering): Port device team_slave_0 removed
[   55.165895][ T4164] team0 (unregistering): Port device team_slave_1 removed
[   55.203205][ T4169] loop3: detected capacity change from 0 to 512
[   55.354529][ T1044] tipc: Node number set to 2886997007
[   55.384520][ T3363] usb 1-1: new high-speed USB device number 2 using vhci_hcd
[   55.397584][ T4182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.155'.
[   55.597715][ T4193] netlink: 'syz.1.160': attribute type 10 has an invalid length.
[   55.610697][ T4193] team0 (unregistering): Port device team_slave_0 removed
[   55.620447][ T4193] team0 (unregistering): Port device team_slave_1 removed
[   55.659169][ T4198] loop1: detected capacity change from 0 to 512
[   55.698012][ T4199] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[   55.707778][ T4203] loop2: detected capacity change from 0 to 1024
[   55.708969][ T4199] SELinux: failed to load policy
[   55.719463][ T4203] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   55.732306][ T4203] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.164: Invalid block bitmap block 0 in block_group 0
[   55.746006][ T4203] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.164: Failed to acquire dquot type 0
[   55.757674][ T4203] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.164: Freeing blocks not in datazone - block = 0, count = 4096
[   55.771632][ T4203] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.164: Invalid inode bitmap blk 0 in block_group 0
[   55.791930][ T3443] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0
[   55.803599][ T4203] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   55.813600][ T4203] EXT4-fs (loop2): 1 orphan inode deleted
[   55.819962][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.845336][ T4203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.955905][ T4176] vhci_hcd: connection reset by peer
[   55.961532][   T37] vhci_hcd: stop threads
[   55.966124][   T37] vhci_hcd: release socket
[   55.970548][   T37] vhci_hcd: disconnect device
[   55.974262][ T4203] infiniband syz2: set down
[   55.979846][ T4203] infiniband syz2: added bond0
[   56.030244][ T4203] RDS/IB: syz2: added
[   56.037087][ T4203] smc: adding ib device syz2 with port count 1
[   56.043380][ T4203] smc:    ib device syz2 port 1 has pnetid 
[   56.220899][ T4203] syz.2.164 (4203) used greatest stack depth: 9312 bytes left
[   56.247507][ T4216] FAULT_INJECTION: forcing a failure.
[   56.247507][ T4216] name failslab, interval 1, probability 0, space 0, times 0
[   56.260243][ T4216] CPU: 1 UID: 0 PID: 4216 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.260272][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   56.260282][ T4216] Call Trace:
[   56.260287][ T4216]  <TASK>
[   56.260293][ T4216]  __dump_stack+0x1d/0x30
[   56.260310][ T4216]  dump_stack_lvl+0xe8/0x140
[   56.260393][ T4216]  dump_stack+0x15/0x1b
[   56.260406][ T4216]  should_fail_ex+0x265/0x280
[   56.260434][ T4216]  should_failslab+0x8c/0xb0
[   56.260517][ T4216]  kmem_cache_alloc_node_noprof+0x57/0x320
[   56.260541][ T4216]  ? __alloc_skb+0x101/0x320
[   56.260578][ T4216]  __alloc_skb+0x101/0x320
[   56.260593][ T4216]  netlink_alloc_large_skb+0xba/0xf0
[   56.260610][ T4216]  netlink_sendmsg+0x3cf/0x6b0
[   56.260631][ T4216]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.260676][ T4216]  __sock_sendmsg+0x145/0x180
[   56.260702][ T4216]  ____sys_sendmsg+0x31e/0x4e0
[   56.260732][ T4216]  ___sys_sendmsg+0x17b/0x1d0
[   56.260764][ T4216]  __x64_sys_sendmsg+0xd4/0x160
[   56.260787][ T4216]  x64_sys_call+0x191e/0x2ff0
[   56.260848][ T4216]  do_syscall_64+0xd2/0x200
[   56.260873][ T4216]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   56.260892][ T4216]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   56.260934][ T4216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.260951][ T4216] RIP: 0033:0x7f9d33c8eec9
[   56.260962][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.260978][ T4216] RSP: 002b:00007f9d326ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.260993][ T4216] RAX: ffffffffffffffda RBX: 00007f9d33ee5fa0 RCX: 00007f9d33c8eec9
[   56.261021][ T4216] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[   56.261072][ T4216] RBP: 00007f9d326ef090 R08: 0000000000000000 R09: 0000000000000000
[   56.261083][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.261093][ T4216] R13: 00007f9d33ee6038 R14: 00007f9d33ee5fa0 R15: 00007ffe3114f2a8
[   56.261140][ T4216]  </TASK>
[   56.703666][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'.
[   56.774016][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'.
[   56.791490][ T4228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.827952][ T4228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.878058][ T4228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.927461][ T4228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.981428][ T3443] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.992900][ T3443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.005312][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.017145][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.159421][ T4237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.175'.
[   57.189189][ T4233] loop1: detected capacity change from 0 to 512
[   57.213546][ T4233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.226305][ T4233] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.262577][ T4245] loop0: detected capacity change from 0 to 512
[   57.273185][ T4245] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.282237][ T4243] capability: warning: `syz.3.177' uses deprecated v2 capabilities in a way that may be insecure
[   57.293529][ T4245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   57.306142][ T4245] EXT4-fs (loop0): 1 truncate cleaned up
[   57.312337][ T4245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.359781][ T4250] loop3: detected capacity change from 0 to 128
[   57.465951][ T4254] loop2: detected capacity change from 0 to 1024
[   57.526324][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.919545][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.164656][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.192080][ T4272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'.
[   58.201088][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   58.217080][ T4272] bridge0: port 3(macsec1) entered blocking state
[   58.223669][ T4272] bridge0: port 3(macsec1) entered disabled state
[   58.231831][ T4272] macsec1: entered allmulticast mode
[   58.238486][ T4272] macsec1: left allmulticast mode
[   58.266052][ T4267] loop1: detected capacity change from 0 to 512
[   58.351008][ T4267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.363574][ T4267] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.401204][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.469689][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.512425][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'.
[   58.654308][ T4292] netlink: 'syz.1.192': attribute type 10 has an invalid length.
[   58.666763][ T4292] loop1: detected capacity change from 0 to 512
[   59.205577][ T4301] serio: Serial port ptm0
[   59.216625][ T4303] serio: Serial port ptm1
[   59.442323][ T4309] loop1: detected capacity change from 0 to 256
[   59.994083][ T4318] FAULT_INJECTION: forcing a failure.
[   59.994083][ T4318] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   60.007225][ T4318] CPU: 1 UID: 0 PID: 4318 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.007313][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   60.007329][ T4318] Call Trace:
[   60.007336][ T4318]  <TASK>
[   60.007344][ T4318]  __dump_stack+0x1d/0x30
[   60.007367][ T4318]  dump_stack_lvl+0xe8/0x140
[   60.007393][ T4318]  dump_stack+0x15/0x1b
[   60.007478][ T4318]  should_fail_ex+0x265/0x280
[   60.007508][ T4318]  should_fail+0xb/0x20
[   60.007536][ T4318]  should_fail_usercopy+0x1a/0x20
[   60.007642][ T4318]  _copy_to_user+0x20/0xa0
[   60.007680][ T4318]  simple_read_from_buffer+0xb5/0x130
[   60.007701][ T4318]  proc_fail_nth_read+0x10e/0x150
[   60.007737][ T4318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   60.007814][ T4318]  vfs_read+0x1a5/0x770
[   60.007834][ T4318]  ? __rcu_read_unlock+0x4f/0x70
[   60.007856][ T4318]  ? __fget_files+0x184/0x1c0
[   60.007889][ T4318]  ksys_read+0xda/0x1a0
[   60.007910][ T4318]  __x64_sys_read+0x40/0x50
[   60.008061][ T4318]  x64_sys_call+0x27bc/0x2ff0
[   60.008140][ T4318]  do_syscall_64+0xd2/0x200
[   60.008166][ T4318]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.008237][ T4318]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   60.008328][ T4318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.008350][ T4318] RIP: 0033:0x7f4b1551d8dc
[   60.008363][ T4318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   60.008440][ T4318] RSP: 002b:00007f4b13f7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   60.008456][ T4318] RAX: ffffffffffffffda RBX: 00007f4b15775fa0 RCX: 00007f4b1551d8dc
[   60.008534][ T4318] RDX: 000000000000000f RSI: 00007f4b13f7f0a0 RDI: 0000000000000005
[   60.008545][ T4318] RBP: 00007f4b13f7f090 R08: 0000000000000000 R09: 0000000000000000
[   60.008555][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.008566][ T4318] R13: 00007f4b15776038 R14: 00007f4b15775fa0 R15: 00007ffccfb24e88
[   60.008625][ T4318]  </TASK>
[   60.270216][   T29] kauditd_printk_skb: 87 callbacks suppressed
[   60.270235][   T29] audit: type=1326 audit(1759029464.848:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   60.299889][   T29] audit: type=1326 audit(1759029464.848:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   60.323605][   T29] audit: type=1326 audit(1759029464.848:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   60.346935][   T29] audit: type=1326 audit(1759029464.848:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d33c8eec9 code=0x7ffc0000
[   60.484218][ T4333] loop3: detected capacity change from 0 to 8192
[   60.514640][ T3363] vhci_hcd: vhci_device speed not set
[   60.562012][ T4333]  loop3: p1[EZD] p2 p4
[   60.566428][ T4333] loop3: p1 start 150996992 is beyond EOD, truncated
[   60.573824][ T4333] loop3: p4 size 281856 extends beyond EOD, truncated
[   60.628279][ T4344] netlink: 'syz.2.208': attribute type 10 has an invalid length.
[   60.876200][ T4348] loop2: detected capacity change from 0 to 512
[   61.296452][   T29] audit: type=1326 audit(1759029465.878:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.303917][ T4350] loop3: detected capacity change from 0 to 1024
[   61.327997][ T4350] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   61.337596][   T29] audit: type=1326 audit(1759029465.878:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.361102][   T29] audit: type=1326 audit(1759029465.878:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.384386][   T29] audit: type=1326 audit(1759029465.878:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.407715][   T29] audit: type=1326 audit(1759029465.878:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.430970][   T29] audit: type=1326 audit(1759029465.878:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   61.568861][ T4362] serio: Serial port ptm0
[   61.677760][ T4371] netlink: 'syz.2.218': attribute type 10 has an invalid length.
[   61.823218][ T4382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.222'.
[   62.014996][ T4394] loop1: detected capacity change from 0 to 512
[   62.327796][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.340525][ T4394] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.406060][ T4402] netlink: 'syz.4.226': attribute type 10 has an invalid length.
[   62.508950][ T4403] loop4: detected capacity change from 0 to 512
[   62.665920][ T4408] loop2: detected capacity change from 0 to 512
[   62.672692][ T4408] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.680880][ T4408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.749464][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.769124][ T4408] EXT4-fs (loop2): 1 truncate cleaned up
[   62.776225][ T4410] FAULT_INJECTION: forcing a failure.
[   62.776225][ T4410] name failslab, interval 1, probability 0, space 0, times 0
[   62.788917][ T4410] CPU: 1 UID: 0 PID: 4410 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.788956][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   62.789039][ T4410] Call Trace:
[   62.789097][ T4410]  <TASK>
[   62.789107][ T4410]  __dump_stack+0x1d/0x30
[   62.789134][ T4410]  dump_stack_lvl+0xe8/0x140
[   62.789156][ T4410]  dump_stack+0x15/0x1b
[   62.789176][ T4410]  should_fail_ex+0x265/0x280
[   62.789231][ T4410]  should_failslab+0x8c/0xb0
[   62.789306][ T4410]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   62.789348][ T4410]  ? __d_alloc+0x3d/0x340
[   62.789385][ T4410]  __d_alloc+0x3d/0x340
[   62.789430][ T4410]  d_alloc_parallel+0x53/0xc60
[   62.789523][ T4410]  ? selinux_inode_permission+0x62d/0x740
[   62.789566][ T4410]  ? make_vfsuid+0x49/0xa0
[   62.789605][ T4410]  ? lockref_get_not_dead+0x120/0x1c0
[   62.789638][ T4410]  ? __rcu_read_unlock+0x4f/0x70
[   62.789660][ T4410]  __lookup_slow+0x8c/0x250
[   62.789770][ T4410]  lookup_slow+0x3c/0x60
[   62.789837][ T4410]  walk_component+0x1ec/0x220
[   62.789866][ T4410]  path_lookupat+0xfe/0x2a0
[   62.789903][ T4410]  filename_lookup+0x147/0x340
[   62.790001][ T4410]  user_path_at+0x3e/0x130
[   62.790032][ T4410]  do_utimes+0xd9/0x210
[   62.790057][ T4410]  __x64_sys_utime+0xbc/0x140
[   62.790123][ T4410]  x64_sys_call+0x2b0b/0x2ff0
[   62.790150][ T4410]  do_syscall_64+0xd2/0x200
[   62.790181][ T4410]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   62.790205][ T4410]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   62.790243][ T4410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.790345][ T4410] RIP: 0033:0x7fd20a0eeec9
[   62.790362][ T4410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.790380][ T4410] RSP: 002b:00007fd208b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
[   62.790399][ T4410] RAX: ffffffffffffffda RBX: 00007fd20a345fa0 RCX: 00007fd20a0eeec9
[   62.790459][ T4410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[   62.790473][ T4410] RBP: 00007fd208b57090 R08: 0000000000000000 R09: 0000000000000000
[   62.790484][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.790496][ T4410] R13: 00007fd20a346038 R14: 00007fd20a345fa0 R15: 00007ffecf140bc8
[   62.790572][ T4410]  </TASK>
[   62.791212][ T4408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.118430][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'.
[   63.181827][ T4419] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.272769][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'.
[   63.281719][ T4419] netlink: 3 bytes leftover after parsing attributes in process `syz.1.230'.
[   63.419803][ T4435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.235'.
[   63.434629][ T4437] loop0: detected capacity change from 0 to 512
[   63.441955][ T4437] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.450525][ T4437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   63.464748][ T4433] loop3: detected capacity change from 0 to 512
[   63.474418][ T4437] EXT4-fs (loop0): 1 truncate cleaned up
[   63.482824][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.486197][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.495636][ T4433] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.541300][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'.
[   63.591035][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'.
[   63.628376][ T4442] hsr_slave_1 (unregistering): left promiscuous mode
[   63.837929][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.063248][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[   64.128697][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[   64.197088][ T3839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.222865][ T4456] FAULT_INJECTION: forcing a failure.
[   64.222865][ T4456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.236131][ T4456] CPU: 0 UID: 0 PID: 4456 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.236165][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   64.236190][ T4456] Call Trace:
[   64.236197][ T4456]  <TASK>
[   64.236206][ T4456]  __dump_stack+0x1d/0x30
[   64.236246][ T4456]  dump_stack_lvl+0xe8/0x140
[   64.236263][ T4456]  dump_stack+0x15/0x1b
[   64.236346][ T4456]  should_fail_ex+0x265/0x280
[   64.236368][ T4456]  should_fail+0xb/0x20
[   64.236386][ T4456]  should_fail_usercopy+0x1a/0x20
[   64.236409][ T4456]  _copy_to_user+0x20/0xa0
[   64.236497][ T4456]  simple_read_from_buffer+0xb5/0x130
[   64.236518][ T4456]  proc_fail_nth_read+0x10e/0x150
[   64.236560][ T4456]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   64.236636][ T4456]  vfs_read+0x1a5/0x770
[   64.236654][ T4456]  ? __rcu_read_unlock+0x4f/0x70
[   64.236673][ T4456]  ? __fget_files+0x184/0x1c0
[   64.236698][ T4456]  ksys_read+0xda/0x1a0
[   64.236769][ T4456]  __x64_sys_read+0x40/0x50
[   64.236788][ T4456]  x64_sys_call+0x27bc/0x2ff0
[   64.236807][ T4456]  do_syscall_64+0xd2/0x200
[   64.236833][ T4456]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   64.236913][ T4456]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.236939][ T4456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.237022][ T4456] RIP: 0033:0x7f283f92d8dc
[   64.237035][ T4456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   64.237055][ T4456] RSP: 002b:00007f283e38f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   64.237072][ T4456] RAX: ffffffffffffffda RBX: 00007f283fb85fa0 RCX: 00007f283f92d8dc
[   64.237083][ T4456] RDX: 000000000000000f RSI: 00007f283e38f0a0 RDI: 0000000000000006
[   64.237094][ T4456] RBP: 00007f283e38f090 R08: 0000000000000000 R09: 0000000000000000
[   64.237104][ T4456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.237115][ T4456] R13: 00007f283fb86038 R14: 00007f283fb85fa0 R15: 00007ffeaed25478
[   64.237132][ T4456]  </TASK>
[   64.473554][ T4454] SELinux: failed to load policy
[   64.517317][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.127224][ T4495] loop0: detected capacity change from 0 to 512
[   65.157993][ T4495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.170604][ T4495] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.477263][ T4502] loop3: detected capacity change from 0 to 1024
[   65.515871][ T4502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.841705][ T4509] loop4: detected capacity change from 0 to 512
[   65.849768][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.850024][ T4509] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.868787][ T4509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   65.969369][ T4513] loop1: detected capacity change from 0 to 1024
[   65.976732][ T4513] EXT4-fs: Ignoring removed bh option
[   65.982350][ T4513] EXT4-fs: inline encryption not supported
[   65.988893][ T4513] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   65.999913][ T4509] EXT4-fs (loop4): 1 truncate cleaned up
[   66.000021][ T4513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   66.009147][ T4509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.027879][ T4513] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.257: lblock 2 mapped to illegal pblock 2 (length 1)
[   66.248259][ T4513] __quota_error: 72 callbacks suppressed
[   66.248281][ T4513] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   66.363425][ T4513] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.257: lblock 0 mapped to illegal pblock 48 (length 1)
[   66.382733][ T3839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.447717][ T4522] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[   66.526970][ T4522] SELinux: failed to load policy
[   66.537845][ T4513] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   66.546682][ T4513] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.257: Failed to acquire dquot type 0
[   66.681971][ T4513] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   66.753765][ T4513] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.257: mark_inode_dirty error
[   66.766136][ T4513] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   66.778417][ T4513] EXT4-fs (loop1): 1 orphan inode deleted
[   66.785669][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.799515][ T1678] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   66.815870][ T1678] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   66.824356][ T1678] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0
[   66.838201][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.865707][   T29] audit: type=1400 audit(1759029471.448:814): avc:  denied  { relabelfrom } for  pid=4512 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   66.885541][   T29] audit: type=1400 audit(1759029471.448:815): avc:  denied  { relabelto } for  pid=4512 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   66.911214][   T29] audit: type=1400 audit(1759029471.488:816): avc:  denied  { remount } for  pid=4512 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   66.914925][ T4537] loop4: detected capacity change from 0 to 256
[   66.944601][ T4513] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   67.014492][ T4543] tipc: Started in network mode
[   67.019427][ T4543] tipc: Node identity ac14140f, cluster identity 4711
[   67.026483][ T4543] tipc: New replicast peer: 255.255.255.255
[   67.032552][ T4543] tipc: Enabled bearer <udp:s>, priority 10
[   67.104384][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.139926][ T4552] loop0: detected capacity change from 0 to 512
[   67.192582][   T29] audit: type=1326 audit(1759029471.768:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   67.216009][   T29] audit: type=1326 audit(1759029471.768:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   67.250928][ T4552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.263527][ T4552] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.276476][ T4555] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[   67.277048][   T29] audit: type=1326 audit(1759029471.828:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   67.307222][   T29] audit: type=1326 audit(1759029471.828:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283f92eec9 code=0x7ffc0000
[   67.335899][ T4556] loop2: detected capacity change from 0 to 512
[   67.356248][ T4556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.368898][ T4556] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.876766][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.956164][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.044574][   T10] tipc: Node number set to 2886997007
[   68.105493][ T4586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'.
[   68.157466][ T4592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.283'.
[   68.210948][ T4597] loop4: detected capacity change from 0 to 512
[   68.222449][ T4597] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.250821][ T4599] loop2: detected capacity change from 0 to 256
[   68.258036][ T4597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   68.291281][ T4597] EXT4-fs (loop4): 1 truncate cleaned up
[   68.297459][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.347907][ T4610] serio: Serial port ptm0
[   68.476743][ T4615] netlink: 'syz.1.292': attribute type 10 has an invalid length.
[   68.630521][ T4630] loop3: detected capacity change from 0 to 512
[   68.645585][ T4630] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.665100][ T4630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   68.708055][ T4630] EXT4-fs (loop3): 1 truncate cleaned up
[   68.714526][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.898763][ T4635] bridge0: entered allmulticast mode
[   69.107798][ T4644] netlink: 'syz.2.304': attribute type 10 has an invalid length.
[   69.123658][ T4644] loop2: detected capacity change from 0 to 512
[   69.187111][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.368264][ T4662] loop0: detected capacity change from 0 to 256
[   69.374827][ T4658] loop1: detected capacity change from 0 to 8192
[   69.396139][ T4651] SELinux: failed to load policy
[   69.396565][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   69.412509][ T4662] team0: No ports can be present during mode change
[   69.419522][ T4658]  loop1: p1[EZD] p2 p4
[   69.424539][ T4658] loop1: p1 start 150996992 is beyond EOD, truncated
[   69.472925][ T4658] loop1: p4 size 281856 extends beyond EOD, truncated
[   69.499002][ T3839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.589277][ T4676] loop2: detected capacity change from 0 to 1024
[   70.426962][ T3300] EXT4-fs unmount: 1 callbacks suppressed
[   70.427042][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.532300][ T4694] loop4: detected capacity change from 0 to 512
[   70.555559][ T4694] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.585811][ T4694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   70.606053][ T4695] SELinux: failed to load policy
[   70.629402][ T4694] EXT4-fs (loop4): 1 truncate cleaned up
[   70.648977][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.727834][ T4707] netlink: 'syz.2.327': attribute type 10 has an invalid length.
[   70.750555][ T4708] loop3: detected capacity change from 0 to 8192
[   70.768945][ T4713] loop1: detected capacity change from 0 to 256
[   70.788222][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'.
[   70.797679][ T4708]  loop3: p1[EZD] p2 p4
[   70.801958][ T4708] loop3: p1 start 150996992 is beyond EOD, truncated
[   70.829097][ T4717] loop2: detected capacity change from 0 to 1024
[   70.839994][ T4708] loop3: p4 size 281856 extends beyond EOD, truncated
[   70.888521][ T4717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.986665][ T4725] bridge0: entered allmulticast mode
[   71.380362][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.451876][ T4732] netlink: 'syz.1.336': attribute type 10 has an invalid length.
[   71.463337][ T4732] loop1: detected capacity change from 0 to 512
[   71.519233][   T29] kauditd_printk_skb: 115 callbacks suppressed
[   71.519306][   T29] audit: type=1326 audit(1759029476.098:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.554966][   T29] audit: type=1326 audit(1759029476.128:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.578399][   T29] audit: type=1326 audit(1759029476.128:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.601791][   T29] audit: type=1326 audit(1759029476.128:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.625125][   T29] audit: type=1326 audit(1759029476.128:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.631222][ T4752] loop4: detected capacity change from 0 to 512
[   71.648396][   T29] audit: type=1326 audit(1759029476.128:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1551eec9 code=0x7ffc0000
[   71.683844][ T4749] serio: Serial port ptm0
[   71.697160][ T4755] loop1: detected capacity change from 0 to 256
[   71.701111][ T4752] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.711039][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.713016][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'.
[   71.744324][ T4752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   71.757197][ T4752] EXT4-fs (loop4): 1 truncate cleaned up
[   71.763249][ T4752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.783178][ T4760] serio: Serial port ptm1
[   72.404244][ T4774] loop1: detected capacity change from 0 to 8192
[   72.444961][ T4774]  loop1: p1[EZD] p2 p4
[   72.449775][ T4774] loop1: p1 start 150996992 is beyond EOD, truncated
[   72.460015][ T4774] loop1: p4 size 281856 extends beyond EOD, truncated
[   72.516602][ T4778] netlink: 'syz.0.353': attribute type 10 has an invalid length.
[   72.526202][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.541430][ T4778] team0 (unregistering): Port device team_slave_0 removed
[   72.545604][ T4782] loop4: detected capacity change from 0 to 512
[   72.555484][ T4782] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.557059][ T4778] team0 (unregistering): Port device team_slave_1 removed
[   72.562549][ T4782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   72.580443][ T4783] loop0: detected capacity change from 0 to 512
[   72.588851][ T4782] EXT4-fs (loop4): 1 truncate cleaned up
[   72.598400][ T4782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.626229][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'.
[   72.648415][   T29] audit: type=1326 audit(1759029477.228:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20a0eeec9 code=0x7ffc0000
[   72.671868][   T29] audit: type=1326 audit(1759029477.248:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20a0eeec9 code=0x7ffc0000
[   72.695840][   T29] audit: type=1326 audit(1759029477.278:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20a0eeec9 code=0x7ffc0000
[   72.719198][   T29] audit: type=1326 audit(1759029477.278:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20a0eeec9 code=0x7ffc0000
[   72.771780][ T4795] loop0: detected capacity change from 0 to 1024
[   72.787240][ T4795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.353032][ T4812] loop3: detected capacity change from 0 to 512
[   73.370259][ T4812] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.383599][ T4812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   73.398131][ T4812] EXT4-fs (loop3): 1 truncate cleaned up
[   73.404384][ T4812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.418231][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.468382][ T4818] netlink: 'syz.1.365': attribute type 10 has an invalid length.
[   73.479754][ T4818] loop1: detected capacity change from 0 to 512
[   73.512774][ T4817] SELinux: failed to load policy
[   73.612939][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'.
[   73.622951][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.654875][ T4826] SELinux: failed to load policy
[   73.721094][ T4835] loop2: detected capacity change from 0 to 8192
[   73.729985][ T4841] loop0: detected capacity change from 0 to 512
[   73.736712][ T4841] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.743798][ T4841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   73.756094][ T4841] EXT4-fs (loop0): 1 truncate cleaned up
[   73.762358][ T4841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.764687][ T4835]  loop2: p1[EZD] p2 p4
[   73.784981][ T4835] loop2: p1 start 150996992 is beyond EOD, truncated
[   73.792799][ T4835] loop2: p4 size 281856 extends beyond EOD, truncated
[   74.277772][ T3839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.335863][ T4845] ==================================================================
[   74.344001][ T4845] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[   74.353241][ T4845] 
[   74.355572][ T4845] write to 0xffff888119110ea8 of 4 bytes by task 4841 on cpu 1:
[   74.363213][ T4845]  writeback_single_inode+0x14a/0x3e0
[   74.368613][ T4845]  sync_inode_metadata+0x5b/0x90
[   74.373568][ T4845]  generic_buffers_fsync_noflush+0xd9/0x120
[   74.379495][ T4845]  ext4_sync_file+0x1ab/0x690
[   74.384191][ T4845]  vfs_fsync_range+0x10a/0x130
[   74.388984][ T4845]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.394559][ T4845]  ext4_file_write_iter+0xdbf/0xf00
[   74.399796][ T4845]  iter_file_splice_write+0x666/0xa60
[   74.405185][ T4845]  direct_splice_actor+0x156/0x2a0
[   74.410303][ T4845]  splice_direct_to_actor+0x312/0x680
[   74.415691][ T4845]  do_splice_direct+0xda/0x150
[   74.420463][ T4845]  do_sendfile+0x380/0x650
[   74.424893][ T4845]  __x64_sys_sendfile64+0x105/0x150
[   74.430106][ T4845]  x64_sys_call+0x2bb0/0x2ff0
[   74.434799][ T4845]  do_syscall_64+0xd2/0x200
[   74.439327][ T4845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.445319][ T4845] 
[   74.447650][ T4845] read to 0xffff888119110ea8 of 4 bytes by task 4845 on cpu 0:
[   74.455198][ T4845]  generic_buffers_fsync_noflush+0x80/0x120
[   74.461103][ T4845]  ext4_sync_file+0x1ab/0x690
[   74.465785][ T4845]  vfs_fsync_range+0x10a/0x130
[   74.470559][ T4845]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.476125][ T4845]  ext4_file_write_iter+0xdbf/0xf00
[   74.481339][ T4845]  iter_file_splice_write+0x666/0xa60
[   74.486715][ T4845]  direct_splice_actor+0x156/0x2a0
[   74.491871][ T4845]  splice_direct_to_actor+0x312/0x680
[   74.497252][ T4845]  do_splice_direct+0xda/0x150
[   74.502027][ T4845]  do_sendfile+0x380/0x650
[   74.506457][ T4845]  __x64_sys_sendfile64+0x105/0x150
[   74.511678][ T4845]  x64_sys_call+0x2bb0/0x2ff0
[   74.516366][ T4845]  do_syscall_64+0xd2/0x200
[   74.520889][ T4845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.526785][ T4845] 
[   74.529123][ T4845] value changed: 0x00000028 -> 0x00000002
[   74.534837][ T4845] 
[   74.537164][ T4845] Reported by Kernel Concurrency Sanitizer on:
[   74.543315][ T4845] CPU: 0 UID: 0 PID: 4845 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.552965][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   74.563073][ T4845] ==================================================================
[   74.580874][ T4855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'.
[   74.615150][ T4856] netlink: 'syz.3.381': attribute type 10 has an invalid length.
[   74.625989][ T4856] loop3: detected capacity change from 0 to 512
[   74.636266][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.