last executing test programs:

24.001798089s ago: executing program 4 (id=1031):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}})

23.961164703s ago: executing program 4 (id=1034):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000200000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20)
sendfile(r2, r3, 0x0, 0x20000023896)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)

23.475422392s ago: executing program 4 (id=1055):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r2 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x2b, 0x4, 0x1, 0x22, 0xac, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400, 0xb453]}, @rr={0x7, 0x3, 0x2d}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}})
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8001}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x0)
r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x20, 0x0)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=")
open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40)

22.547918815s ago: executing program 4 (id=1064):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200280, 0xdbf96b033ba6e483)
readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=""/196, 0xc4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
gettid()
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="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", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4)

22.451930444s ago: executing program 4 (id=1070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0xc1, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2086dd0000000000ac141416e0885a049a179424", 0x0, 0x3000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000c00e00000021400030076657468305f746f5f62726964676500281032494e99a8a98dc6621025dede9096db84a65a83a1bbcaa8fc10ec"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

21.481861121s ago: executing program 4 (id=1080):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200280, 0xdbf96b033ba6e483)
readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=""/196, 0xc4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
gettid()
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="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", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4)

6.314556768s ago: executing program 32 (id=1080):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200280, 0xdbf96b033ba6e483)
readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=""/196, 0xc4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
gettid()
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="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", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4)

3.20029277s ago: executing program 1 (id=1429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=")
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
sendfile(r3, r3, 0x0, 0x100000000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x31, 0x0, 0x100000000)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x21c, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe3c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xecec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x208}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d742102}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d9b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x850}, 0x8090)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x1, 0x3})
socket$nl_route(0x10, 0x3, 0x0)

3.113930808s ago: executing program 1 (id=1431):
read$ptp(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="cf865e00a5dc3a9297679a3f16cbd15ff4a3ce2748ccc0becf833f5f03000000000000003d9a32a632cbec1f27b02c0867ba8ecdc094f4b0db680d38248c12545bad2ece3bb9fadbcefca7f1e0f3a39cb8a86d9d92d1836a935ad921502614d43307116b4d1be260cbc9064d81f32c0226a78e57efc8000000000000000db12ba10900000000000000af10652c9bb8d9da631a4a6928c401819edf723979f16fb06170377668b9646276b1bc36e57f34e33070f15316922a37b5a58e04c533f8b278b973fc41323de788227284b9cb27b60de2b121f6f3901c12c1d1d303"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000180)={{0x3, 0x8}, {0x7, 0x9}, 0x2, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x1)
flock(r3, 0x2)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0xb)

1.941806945s ago: executing program 0 (id=1447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
epoll_create1(0x0)
inotify_init1(0x80800)
dup(r1)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x10)
r3 = socket(0x1d, 0x803, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="6ec2f6c8bb2b32b6894a4e9e08de2321ae84d9fd08e89587d717ebeb7b1a9e2a5a57adfd045f948436394187f83d6b4f84f0514f8ec87d91d79624a22db2201000eafb15c59a4a00b1cd78079d561d037fdb1bd04aaa83b28fc9d25d2a4b2901dc33e4e907427e2e7b7f1111101fbab0961d709d3900d24dfeee037fd836a72b922254ea5c29b0e535a3728d514f47b278e1531efb90c4c6ec8467c194601b9383e3bd892c3f333874c12a4bbf445b9987711ba24744e71888edc9beff2b4ab467bee41093f3ccc986637c5e8b87014fcdebdb578afac62de457597848350aabc8be8b3aec0d898628a84dc1d83d3fd55d", @ANYRESOCT=r2, @ANYRES8=r1, @ANYRES32=r0], 0x1b0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0xfffffffc}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, <r5=>0x0})
sched_getattr(r5, &(0x7f0000000200)={0x38}, 0x38, 0x0)
dup(r4)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000060101"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1999323062b0be24, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRES32=r6], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
gettid()

1.90678015s ago: executing program 0 (id=1448):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)

1.071297973s ago: executing program 3 (id=1465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

1.018219958s ago: executing program 0 (id=1468):
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xcd}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x71, &(0x7f00000002c0)=""/113, 0x41100, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x4, 0x7ff, 0x6f85}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x4, 0x4, 0x10, 0x5}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000280))
r6 = io_uring_setup(0x491, &(0x7f0000000240)={0x0, 0x3a29, 0x800, 0x2, 0x4000157})
close_range(r6, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r4, 0x823, 0x3ffb, 0xd, 0x0, 0x17)

990.274841ms ago: executing program 3 (id=1471):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)

974.394672ms ago: executing program 3 (id=1473):
prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0)

963.038134ms ago: executing program 2 (id=1474):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r2 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x33, 0x4, 0x1, 0x22, 0xcc, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x1c, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}})
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8001}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x0)
r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x20, 0x0)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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")
open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40)

957.811584ms ago: executing program 3 (id=1475):
read$ptp(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="cf865e00a5dc3a9297679a3f16cbd15ff4a3ce2748ccc0becf833f5f03000000000000003d9a32a632cbec1f27b02c0867ba8ecdc094f4b0db680d38248c12545bad2ece3bb9fadbcefca7f1e0f3a39cb8a86d9d92d1836a935ad921502614d43307116b4d1be260cbc9064d81f32c0226a78e57efc8000000000000000db12ba10900000000000000af10652c9bb8d9da631a4a6928c401819edf723979f16fb06170377668b9646276b1bc36e57f34e33070f15316922a37b5a58e04c533f8b278b973fc41323de788227284b9cb27b60de2b121f6f3901c12c1d1d303"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000180)={{0x3, 0x8}, {0x7, 0x9}, 0x2, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x1)
dup3(r3, r2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0xb)

939.060196ms ago: executing program 2 (id=1476):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0xc6c}}, {@journal_dev={'journal_dev', 0x3d, 0x80003}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0)
syz_io_uring_complete(r5)

881.836842ms ago: executing program 2 (id=1477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000001400391b3009f391f91b9a41d8a91753ffd003f17a006d6120e838087094094ce35fa0b873da1e49bbdd06a7d674911feb99dc792cb3ca085ba3cff9211bf1e1176b1d163eb47968a0fc39b17e51f42c89", @ANYRES32=0x0, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004042)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="d37a6d95c1918502000001fffc000000000001410001001c001700000000000000006574683a73797a6b616c6c65723052b17ee034879dfbb093c267e524e5ca6fc3dc0af3957bc9cef1c32a2ab4ac89bf879c621b31cfca92bf4988ba5c08ee142534ede41fb094dc19472a780e59cad7180f4c77b6b1f1679f34a0c54220592375f8e5a07d79b90b66d1befec5d7f7e059c83ad5ea02a81e91be835c42078ff7e613c453c2af2eeeeb7477dfd8183222a764ae5a53ee28"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014)

881.597632ms ago: executing program 2 (id=1478):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)

587.495391ms ago: executing program 5 (id=1481):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0xa96)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)

572.028363ms ago: executing program 5 (id=1482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0)

514.000349ms ago: executing program 5 (id=1483):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

470.740463ms ago: executing program 0 (id=1484):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)

449.842925ms ago: executing program 0 (id=1485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
sendfile(r3, r3, 0x0, 0x100000000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x31, 0x0, 0x100000000)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x21c, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe3c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xecec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x208}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d742102}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d9b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x850}, 0x8090)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x1, 0x3})
socket$nl_route(0x10, 0x3, 0x0)

446.895175ms ago: executing program 5 (id=1486):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r2 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x90, 0x68, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r3}}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040040}, 0x804)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8, 0x8, 0x8, 0xffffffff, {{0x33, 0x4, 0x1, 0x22, 0xcc, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x8, [{@loopback, 0x1}, {@multicast1, 0x8e9}]}, @timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x0, [{@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfa69}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x10000}, {@private=0xa010100, 0xb2c9}, {@remote, 0xe78f}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x31, [@loopback]}, @timestamp={0x44, 0x1c, 0x23, 0x0, 0xa, [0xfad, 0x3, 0x10, 0x1ff, 0x8, 0x400]}, @rr={0x7, 0x27, 0x2d, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @remote, @rand_addr=0x64010102]}, @generic={0x83, 0xc, "4dc1187193500fd5607b"}, @noop]}}}}})
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8001}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x5, 0x9, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0xc, &(0x7f00000001c0)=""/12, 0x41100, 0x15, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000540)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x0)
r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x20, 0x0)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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")
open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40)

343.791896ms ago: executing program 5 (id=1487):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = inotify_init()
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x200000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x7fff, '\x00', 0x0, r1, 0x2, 0x2, 0x2}, 0x50)
fadvise64(r2, 0x0, 0x4, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x0, 0x0, {0x5, 0x4, 0x2, 0x5, 0x2, 0x66, 0x330, 0x2, 0x1, 0x81, @multicast1, @multicast2}}}}}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8040)

275.573512ms ago: executing program 0 (id=1488):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a24", 0x44}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0xfe, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

264.834563ms ago: executing program 5 (id=1489):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ead7b15de239ce0aceb5530c80610e2f866e3fc66cc9c4bed6690bbe5dd1f7cff08f0a88bceb98d659b643128478d19d4e40a81f2fd169cd4ea3a1f87d9b452bf3706cb90a71a62b1606c4489227d34affeb9315439b592d42f6ea4741789d26b214b5bdc8e4d06af4e0bdbb9d4732434c47da2a6b56f04084259a7ed84b76bfb5c0c5451ec9a291e96ff98bdf2318e610d97ce0f004ba623d3a1e96737609b238b4696896ae53f563e3739e2c5d442d46aa1a635449a22654a6e9caa10df8b002c253e428687398be5616961d0715fdb8f76af57524b351df186e5850340137a06ffc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x6d6, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x3573ea99, 0x0, 0x5, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x7, 0x0, 0x0, 0x8b0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x1, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x9, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0xc9, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x61, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x1, 0x4, 0x8000000, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000003, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x81, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x1, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)

208.577739ms ago: executing program 3 (id=1490):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==")
socket$nl_netfilter(0x10, 0x3, 0xc)
listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000)

149.159385ms ago: executing program 3 (id=1491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg$unix(r2, &(0x7f0000000900)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000840)}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0xf}, 0x5, 0x40, &(0x7f0000000280)="bd554a782c8b8c108671d55b56b993af5c7c738ece626a8b6a9bc54169ece50b6d6912f604e86f1ec89ec0c77d5c2f0d39d20e5ea8c6172b4fb3e8ffe6df42c980ff7d48c1342dcdd916fb132af578", 0x4f, 0x1, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000300)="45fd98a121cd12246d9b7520dc4e921a91f163fc10e5f51f3881b42960f513f58d1ee565b81ce7a60e0c17feb74c8a40aa329f187db7894fcbc9383912efc763fd13a78cab67a8f6c6a9068e3fd6bb6f8c4f3313b7"})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)

58.081774ms ago: executing program 1 (id=1492):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0xa96)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)

40.478756ms ago: executing program 1 (id=1493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0)

24.125188ms ago: executing program 2 (id=1494):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

2.836279ms ago: executing program 1 (id=1495):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)

2.517039ms ago: executing program 2 (id=1496):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

0s ago: executing program 1 (id=1497):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0) (async)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) (async)
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) (async)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x647, &(0x7f0000000d40)="$eJzs3VtoXGkdAPD/ObnUdmNTQUVXWCLCIqiTW1Hik+uLiK52XVEQpYZ0moTMZLK5QBJF7YOyLBZlBVdwES/7oK6XAR9UUFYE8WEX14VFEaGIsiBKqa0FpQiRk5lJQnPaRHM5ac/vByf9vu9M8v3P/PnPOfN1LgGU1kD2I414bUScSSL6t+zrjvbOgdbtmqPNqWxLYm3t4StJJBHx1GhzqnP7pP3vPe1fe01EvPP1ETO92+ddWFmdGa/VqvPt/uBifW5wYWX1LdP18cnqZHX29PDQ6bGRsbG37t+xvvj4b3797x+/q/n5J9/9ePeHHvttFm9fe9/W49gvAzHQvk964szWHUnE2/d7soKlu7zdq6pf+PkBh8Iu1T/99Ne623Xek+Um+qOrXfXfev6j1/pjarboGIGDs3YsYg0oqUT9Q0l1rgOy57+d7bCuPW788bBm4lYuP9B6AvhUe22nuZH/7tbaULxs/bnhiX8m7WeGLUln7WgPLj6U/Y1vf+TNv/vSX7ItDmgdhqOp+eeiI6BIvaeLjoAi3ftQ0RFQpOcfLToCPnMhIoa6u7df/yd7vr57xw77f/qp7Prv4v1bx1z/lccHHi46Aor0vn38v33uPF+9UnQE/OKB7Pyft/6Xbqz/RM76T1/r1/bk2FR2/v/yE1vHnP8PV2f9r7lt/W8z/123WP/7+C7nuPGff/0hb/ylJ7L8/+M7nfW/bMvm76wFcvAuX4i4Nzf/yUb+k5z8pxExt8s5Hvnwc+/PG//+s1n+T43If3HWvhFxf2zP/8mNV3O2av3Wr88cPD9dqw61fubPcd8vf3g1b3z5bVn+Fy7Kf3Gy+j+Rk/+t9Z/7+J/sfo6n0z8t541/77NZ/o8/e/v8p3/rTT64PlvnZcTL44uL88MRvcl7t4+P/E+HXzqd+6hzH2b5f+Mbbn/+z3v8Px4RX9zlnC/84OpY3vhXaln+X7ig/ouT5f/cDvWfl/9s7Ou7nCOdePXf88ZPPpnl/2OPdXL/s/s++ZL8AwAAAAAAAAAAAAAAAAAAAAAAcDdL1z/LN0krG+00rVRa3+H9yjiR1hoLi28631iaPdf6zN9T0ZN2Puqxv9VPsv7wenuzP3JTfzQiXhERj3YdX+9XJhq1c0UfPJRUX8SlHz0ykfPN/AAAAAAAAAAAAAAAAAAAQFHuuen9/3/tar3/H7h79UVcevFXP3kma1/vKjoa4DBl9f/d6/X3hPqH0lH/UF7qH8pL/UN5qX8oL/UP5aX+oby+2ROh/qGcnP+hvNQ/lNfW+gcAAAAAAAAAAAAAAAAAAAAAAAAADtaZBx/MtrXmaHMq6882JqdnpubGRoYq9aWJykRjfq4y2WhM1qqViUZ9579XazTmhkdiaXlwsbqwOLiwsnq23liaXTw7XR+frJ6t9hzCMQE7e+ba7z9XdAwAAAAAAAAAAAAAAAAAAMCmvvUtSSsRka6307RSiXh5RJyKnuT8dK06FBEnI+K5rp5jWX+46KCBPemLuPS64bFPFB0HAAAAAAAAAAAAAAAAAACwaWFldWa8VqvOaxzZRhIRRyCMO7Vx+WiEcac1in5kAgAAAAAAAAAAAAAAAACA8tl802/RkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcTa////gGkUfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/478BAAD//8WiZL0=")

kernel console output (not intermixed with test programs):

f888106d230e0: logic 48, phys. 177, len 21
[   42.907992][ T4252] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   42.938841][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.987006][ T4282] loop3: detected capacity change from 0 to 1024
[   42.999471][ T4282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.019843][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.753851][ T4319] pim6reg: entered allmulticast mode
[   43.766066][ T4319] pim6reg: left allmulticast mode
[   43.855380][ T4324] loop0: detected capacity change from 0 to 1024
[   43.871629][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.927566][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.947250][ T4327] netlink: 'syz.3.280': attribute type 12 has an invalid length.
[   44.034827][ T4331] lo speed is unknown, defaulting to 1000
[   44.042535][ T4335] Driver unsupported XDP return value 0 on prog  (id 191) dev N/A, expect packet loss!
[   44.336299][ T4373] __nla_validate_parse: 3 callbacks suppressed
[   44.336316][ T4373] netlink: 204 bytes leftover after parsing attributes in process `syz.2.289'.
[   44.380500][ T4375] netlink: 204 bytes leftover after parsing attributes in process `syz.2.290'.
[   44.662293][ T4318] syz.1.277 (4318) used greatest stack depth: 6184 bytes left
[   44.849995][ T4387] loop0: detected capacity change from 0 to 1024
[   44.866149][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.891039][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.941079][ T4391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[   44.947700][ T4391] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   44.955385][ T4391] vhci_hcd vhci_hcd.0: Device attached
[   44.966151][ T4392] vhci_hcd: connection closed
[   44.966518][  T266] vhci_hcd: stop threads
[   44.975496][  T266] vhci_hcd: release socket
[   44.979942][  T266] vhci_hcd: disconnect device
[   45.017718][ T4395] sd 0:0:1:0: device reset
[   45.150374][ T4403] FAULT_INJECTION: forcing a failure.
[   45.150374][ T4403] name failslab, interval 1, probability 0, space 0, times 0
[   45.163080][ T4403] CPU: 0 UID: 0 PID: 4403 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.163174][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   45.163188][ T4403] Call Trace:
[   45.163195][ T4403]  <TASK>
[   45.163202][ T4403]  __dump_stack+0x1d/0x30
[   45.163240][ T4403]  dump_stack_lvl+0xe8/0x140
[   45.163260][ T4403]  dump_stack+0x15/0x1b
[   45.163280][ T4403]  should_fail_ex+0x265/0x280
[   45.163349][ T4403]  should_failslab+0x8c/0xb0
[   45.163383][ T4403]  __kmalloc_noprof+0xa5/0x570
[   45.163419][ T4403]  ? context_struct_to_string+0x24d/0x3a0
[   45.163515][ T4403]  context_struct_to_string+0x24d/0x3a0
[   45.163548][ T4403]  security_sid_to_context_core+0x215/0x2e0
[   45.163592][ T4403]  security_sid_to_context+0x27/0x40
[   45.163632][ T4403]  avc_audit_post_callback+0x10f/0x520
[   45.163669][ T4403]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   45.163732][ T4403]  common_lsm_audit+0x1bb/0x230
[   45.163758][ T4403]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   45.163866][ T4403]  slow_avc_audit+0x104/0x140
[   45.164034][ T4403]  avc_has_perm+0x13a/0x180
[   45.164059][ T4403]  sel_write_load+0xf8/0x380
[   45.164201][ T4403]  ? __pfx_sel_write_load+0x10/0x10
[   45.164223][ T4403]  vfs_write+0x269/0x960
[   45.164252][ T4403]  ? __rcu_read_unlock+0x4f/0x70
[   45.164282][ T4403]  ? __fget_files+0x184/0x1c0
[   45.164323][ T4403]  ksys_write+0xda/0x1a0
[   45.164426][ T4403]  __x64_sys_write+0x40/0x50
[   45.164454][ T4403]  x64_sys_call+0x2802/0x3000
[   45.164488][ T4403]  do_syscall_64+0xd2/0x200
[   45.164564][ T4403]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   45.164598][ T4403]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   45.164689][ T4403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.164715][ T4403] RIP: 0033:0x7f4e151cf6c9
[   45.164731][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.164751][ T4403] RSP: 002b:00007f4e13c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   45.164773][ T4403] RAX: ffffffffffffffda RBX: 00007f4e15425fa0 RCX: 00007f4e151cf6c9
[   45.164787][ T4403] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000003
[   45.164832][ T4403] RBP: 00007f4e13c37090 R08: 0000000000000000 R09: 0000000000000000
[   45.164847][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.164862][ T4403] R13: 00007f4e15426038 R14: 00007f4e15425fa0 R15: 00007ffee4fa5188
[   45.164944][ T4403]  </TASK>
[   45.166723][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[   45.199078][ T4403] SELinux: failed to load policy
[   45.213065][ T4397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.296'.
[   45.454884][ T4408] netlink: 204 bytes leftover after parsing attributes in process `syz.4.300'.
[   45.499055][ T4412] Cannot find del_set index 3 as target
[   45.507052][ T4412] ip6t_rpfilter: unknown options
[   45.591590][ T4418] loop0: detected capacity change from 0 to 1024
[   45.608730][ T4418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.633843][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.702458][ T4429] loop0: detected capacity change from 0 to 2048
[   45.704548][ T4431] netlink: 204 bytes leftover after parsing attributes in process `syz.1.308'.
[   45.730979][ T4429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.747890][ T4429] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm GPL: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   45.776452][ T4429] EXT4-fs (loop0): Remounting filesystem read-only
[   45.790666][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.818634][ T4438] netlink: 204 bytes leftover after parsing attributes in process `syz.3.311'.
[   45.838326][ T4441] loop0: detected capacity change from 0 to 512
[   45.845150][ T4441] EXT4-fs: Ignoring removed bh option
[   45.850668][ T4441] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.861034][ T4441] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   45.872443][ T4443] loop3: detected capacity change from 0 to 512
[   45.876448][ T4441] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   45.889192][ T4441] EXT4-fs (loop0): orphan cleanup on readonly fs
[   45.896138][ T4441] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.310: Failed to acquire dquot type 1
[   45.896994][ T4443] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   45.916239][ T4441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.310: Invalid block bitmap block 0 in block_group 0
[   45.935419][ T4441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.310: Invalid block bitmap block 0 in block_group 0
[   45.936011][ T4443] EXT4-fs (loop3): mount failed
[   45.948926][ T4441] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.310: Invalid block bitmap block 0 in block_group 0
[   45.967649][ T4441] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.310: Failed to acquire dquot type 1
[   45.979264][ T4441] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.310: Failed to acquire dquot type 1
[   45.990737][ T4441] EXT4-fs (loop0): 1 orphan inode deleted
[   45.997074][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.392118][ T4470] netlink: 204 bytes leftover after parsing attributes in process `syz.4.318'.
[   46.461283][ T4474] loop4: detected capacity change from 0 to 1024
[   46.487424][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.511212][ T4474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.629437][ T4478] SELinux:  policydb magic number 0x200 does not match expected magic number 0xf97cff8c
[   46.639438][ T4478] SELinux: failed to load policy
[   46.683480][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.699653][ T4483] lo speed is unknown, defaulting to 1000
[   46.853012][ T4490] loop4: detected capacity change from 0 to 1024
[   46.883516][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.902585][ T4485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'.
[   46.911830][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.913285][ T4485] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[   46.931136][ T4485] SELinux: failed to load policy
[   47.045554][ T4499] loop0: detected capacity change from 0 to 512
[   47.072762][ T4499] EXT4-fs: inline encryption not supported
[   47.103853][ T4499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.133191][ T4499] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   47.149636][ T4497] x_tables: ip6_tables: mh match: only valid for protocol 135
[   47.154688][ T4499] EXT4-fs (loop0): 1 truncate cleaned up
[   47.163755][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.186058][ T4509] pim6reg1: entered promiscuous mode
[   47.191492][ T4509] pim6reg1: entered allmulticast mode
[   47.262455][ T4512] loop3: detected capacity change from 0 to 512
[   47.274728][ T4512] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   47.291078][ T4512] EXT4-fs (loop3): orphan cleanup on readonly fs
[   47.304679][ T4512] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.333: Block bitmap for bg 0 marked uninitialized
[   47.318968][ T4512] EXT4-fs (loop3): Remounting filesystem read-only
[   47.325985][ T4512] EXT4-fs (loop3): 1 orphan inode deleted
[   47.341243][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   47.355499][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.414454][ T4519] lo speed is unknown, defaulting to 1000
[   47.450235][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.488702][ T4527] loop0: detected capacity change from 0 to 512
[   47.512481][   T29] kauditd_printk_skb: 725 callbacks suppressed
[   47.512530][   T29] audit: type=1326 audit(1763041802.089:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4520 comm="syz.4.338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ac208f6c9 code=0x0
[   47.518544][ T4532] netlink: 204 bytes leftover after parsing attributes in process `syz.3.339'.
[   47.560225][ T4527] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   47.575437][ T4527] EXT4-fs (loop0): orphan cleanup on readonly fs
[   47.583631][ T4527] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.340: corrupted inode contents
[   47.597595][ T4527] EXT4-fs (loop0): Remounting filesystem read-only
[   47.604290][ T4527] EXT4-fs (loop0): 1 truncate cleaned up
[   47.610865][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   47.621533][   T12] Quota error (device loop0): write_blk: dquota write failed
[   47.628988][   T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[   47.639087][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   47.649710][   T12] Quota error (device loop0): write_blk: dquota write failed
[   47.657091][   T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[   47.668448][   T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   47.678595][   T12] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   47.695322][   T29] audit: type=1400 audit(1763041802.269:1747): avc:  denied  { name_bind } for  pid=4500 comm="syz.2.330" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   47.712956][   T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   47.726312][ T4527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.761413][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.044013][  T266] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.080152][  T266] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.157317][  T266] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.236462][  T266] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.403345][ T4581] loop4: detected capacity change from 0 to 512
[   48.445283][   T29] audit: type=1400 audit(1763041803.019:1748): avc:  denied  { create } for  pid=4588 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   48.469016][ T4581] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[   48.479714][ T4581] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   48.497769][ T4581] EXT4-fs (loop4): mount failed
[   48.540585][ T4595] lo speed is unknown, defaulting to 1000
[   48.594434][ T4600] loop3: detected capacity change from 0 to 512
[   48.607629][ T4600] EXT4-fs (loop3): orphan cleanup on readonly fs
[   48.618589][ T4600] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.361: bad orphan inode 13
[   48.630057][ T4600] ext4_test_bit(bit=12, block=18) = 1
[   48.635444][ T4600] is_bad_inode(inode)=0
[   48.639674][ T4600] NEXT_ORPHAN(inode)=2130706432
[   48.644530][ T4600] max_ino=32
[   48.647711][ T4600] i_nlink=1
[   48.651641][ T4600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.718914][ T4603] SELinux: security_context_str_to_sid (ËØ–x#w^úÙUéi¾ûý.,)ìbU Mé—×) failed with errno=-22
[   48.747247][ T4603] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   48.767804][ T4605] loop4: detected capacity change from 0 to 764
[   48.779147][ T4603] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   48.793826][ T4605] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   48.803203][ T4605] Symlink component flag not implemented
[   48.809054][ T4605] Symlink component flag not implemented (7)
[   48.869379][ T4610] loop4: detected capacity change from 0 to 512
[   48.878734][ T4610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   48.893705][ T4610] EXT4-fs (loop4): 1 truncate cleaned up
[   48.900107][ T4610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.996277][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.017601][ T4613] vlan2: entered promiscuous mode
[   49.022708][ T4613] macvtap0: entered promiscuous mode
[   49.036672][ T4613] loop4: detected capacity change from 0 to 764
[   49.053183][ T4613] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   49.174717][ T4615] loop4: detected capacity change from 0 to 1024
[   49.189855][ T4615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.214663][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.406679][ T4627] __nla_validate_parse: 7 callbacks suppressed
[   49.406736][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[   49.442433][ T4627] vlan2: entered promiscuous mode
[   49.447474][ T4627] macvtap0: entered promiscuous mode
[   49.455604][ T4629] netlink: 'syz.2.372': attribute type 4 has an invalid length.
[   49.465692][ T4629] netlink: 'syz.2.372': attribute type 4 has an invalid length.
[   49.508778][ T4627] loop0: detected capacity change from 0 to 764
[   49.549599][ T4627] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   49.562256][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.582789][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[   49.591582][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[   49.971625][ T4644] loop0: detected capacity change from 0 to 1024
[   49.993546][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.083181][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.179098][ T4664] netlink: 204 bytes leftover after parsing attributes in process `syz.0.385'.
[   50.196236][ T4662] atomic_op ffff88811abeb528 conn xmit_atomic 0000000000000000
[   50.285762][ T4673] lo speed is unknown, defaulting to 1000
[   50.328112][ T4681] loop4: detected capacity change from 0 to 512
[   50.340953][ T4681] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   50.355840][ T4681] EXT4-fs (loop4): mount failed
[   50.470296][ T4697] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   50.491940][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[   50.500808][ T4700] netlink: 556 bytes leftover after parsing attributes in process `syz.1.397'.
[   50.850135][ T4710] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[   51.091055][ T4713] netlink: 'syz.2.400': attribute type 10 has an invalid length.
[   51.099078][ T4713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.400'.
[   51.122999][ T4713] team0: Port device geneve1 added
[   51.131308][   T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.140451][   T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.149626][   T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.169763][   T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.243845][ T4719] netlink: 'syz.2.403': attribute type 12 has an invalid length.
[   51.298053][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'.
[   51.370300][ T4730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.484926][ T4738] lo speed is unknown, defaulting to 1000
[   51.517579][ T4730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.589061][ T4730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.624781][ T4749] loop3: detected capacity change from 0 to 1024
[   51.710578][ T4730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.723714][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   51.748684][ T4749] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   51.829422][  T266] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.863837][  T266] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.918003][  T266] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.935426][ T4756] 9pnet_fd: Insufficient options for proto=fd
[   51.964374][  T266] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.054027][ T4760] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   52.064952][ T4760] SELinux: failed to load policy
[   52.095734][ T4760] loop4: detected capacity change from 0 to 2048
[   52.103152][ T4760] EXT4-fs: Ignoring removed i_version option
[   52.144984][ T4760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.165068][ T4760] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.414: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   52.181623][ T4763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[   52.184741][ T4760] EXT4-fs (loop4): Remounting filesystem read-only
[   52.210725][ T4765] loop3: detected capacity change from 0 to 512
[   52.226921][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.232298][ T4765] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   52.255443][ T4765] EXT4-fs (loop3): mount failed
[   52.434601][ T4776] serio: Serial port ptm0
[   52.525189][   T29] kauditd_printk_skb: 195 callbacks suppressed
[   52.525205][   T29] audit: type=1326 audit(1763041807.099:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.555139][   T29] audit: type=1326 audit(1763041807.099:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.578480][   T29] audit: type=1326 audit(1763041807.099:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.602221][   T29] audit: type=1326 audit(1763041807.099:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.625645][   T29] audit: type=1326 audit(1763041807.099:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.649001][   T29] audit: type=1326 audit(1763041807.099:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.672389][   T29] audit: type=1326 audit(1763041807.099:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.695579][   T29] audit: type=1326 audit(1763041807.099:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.718908][   T29] audit: type=1326 audit(1763041807.099:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   52.742183][   T29] audit: type=1326 audit(1763041807.099:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   54.083102][ T4828] siw: device registration error -23
[   54.260088][ T4838] netlink: 'syz.4.440': attribute type 12 has an invalid length.
[   54.335289][ T4848] loop4: detected capacity change from 0 to 1024
[   54.442288][ T4848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.467708][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.624810][ T4880] __nla_validate_parse: 14 callbacks suppressed
[   54.624826][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[   54.639868][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[   55.570809][ T4889] sd 0:0:1:0: device reset
[   55.638768][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'.
[   55.647585][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'.
[   55.686752][ T4895] loop0: detected capacity change from 0 to 1024
[   55.687196][ T4893] infiniband syz0: set down
[   55.697620][ T4893] infiniband syz0: added bond_slave_0
[   55.712073][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.712437][ T4893] RDS/IB: syz0: added
[   55.728619][ T4893] smc: adding ib device syz0 with port count 1
[   55.734778][ T4893] smc:    ib device syz0 port 1 has no pnetid
[   55.830302][ T4902] random: crng reseeded on system resumption
[   55.839967][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.919103][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'.
[   55.967454][ T4913] loop3: detected capacity change from 0 to 512
[   56.018846][ T4913] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   56.048501][ T4913] EXT4-fs (loop3): mount failed
[   56.138108][ T4905] FAULT_INJECTION: forcing a failure.
[   56.138108][ T4905] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   56.144825][ T4921] loop3: detected capacity change from 0 to 512
[   56.151199][ T4905] CPU: 0 UID: 0 PID: 4905 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.151227][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   56.151240][ T4905] Call Trace:
[   56.151247][ T4905]  <TASK>
[   56.151255][ T4905]  __dump_stack+0x1d/0x30
[   56.151354][ T4905]  dump_stack_lvl+0xe8/0x140
[   56.151412][ T4905]  dump_stack+0x15/0x1b
[   56.151432][ T4905]  should_fail_ex+0x265/0x280
[   56.151454][ T4905]  should_fail+0xb/0x20
[   56.151552][ T4905]  should_fail_usercopy+0x1a/0x20
[   56.151666][ T4905]  _copy_to_user+0x20/0xa0
[   56.151695][ T4905]  simple_read_from_buffer+0xb5/0x130
[   56.151798][ T4905]  proc_fail_nth_read+0x10e/0x150
[   56.151890][ T4905]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   56.152088][ T4905]  vfs_read+0x1a8/0x770
[   56.152115][ T4905]  ? __rcu_read_unlock+0x4f/0x70
[   56.152151][ T4905]  ? __fget_files+0x184/0x1c0
[   56.152180][ T4905]  ? _copy_from_user+0x89/0xb0
[   56.152272][ T4905]  ksys_read+0xda/0x1a0
[   56.152312][ T4905]  __x64_sys_read+0x40/0x50
[   56.152341][ T4905]  x64_sys_call+0x27c0/0x3000
[   56.152366][ T4905]  do_syscall_64+0xd2/0x200
[   56.152389][ T4905]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   56.152449][ T4905]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   56.152553][ T4905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.152577][ T4905] RIP: 0033:0x7f86f8f8e0dc
[   56.152594][ T4905] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   56.152614][ T4905] RSP: 002b:00007f86f79f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   56.152635][ T4905] RAX: ffffffffffffffda RBX: 00007f86f91e5fa0 RCX: 00007f86f8f8e0dc
[   56.152649][ T4905] RDX: 000000000000000f RSI: 00007f86f79f70a0 RDI: 0000000000000005
[   56.152663][ T4905] RBP: 00007f86f79f7090 R08: 0000000000000000 R09: 0000000000000000
[   56.152699][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.152713][ T4905] R13: 00007f86f91e6038 R14: 00007f86f91e5fa0 R15: 00007ffcb2d4ffc8
[   56.152733][ T4905]  </TASK>
[   56.519543][ T4941] netlink: 204 bytes leftover after parsing attributes in process `syz.2.473'.
[   56.672167][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   56.681026][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   57.039750][    T9] IPVS: starting estimator thread 0...
[   57.128127][ T4946] IPVS: using max 2544 ests per chain, 127200 per kthread
[   57.188037][ T4961] netlink: 14 bytes leftover after parsing attributes in process `syz.3.477'.
[   57.368980][ T4970] loop0: detected capacity change from 0 to 128
[   57.382542][ T4970] syz.0.484: attempt to access beyond end of device
[   57.382542][ T4970] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[   57.451889][ T4974] loop3: detected capacity change from 0 to 764
[   57.473741][ T4974] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   57.500661][ T4974] Symlink component flag not implemented
[   57.516316][ T4974] Symlink component flag not implemented (7)
[   57.533448][   T29] kauditd_printk_skb: 192 callbacks suppressed
[   57.533462][   T29] audit: type=1326 audit(1763041812.109:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   57.582894][   T29] audit: type=1326 audit(1763041812.139:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   57.606287][   T29] audit: type=1326 audit(1763041812.139:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   57.629754][   T29] audit: type=1326 audit(1763041812.139:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   57.765632][ T4994] netlink: 204 bytes leftover after parsing attributes in process `syz.0.492'.
[   57.816583][ T4996] loop4: detected capacity change from 0 to 512
[   57.852547][ T4996] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   57.931957][   T29] audit: type=1400 audit(1763041812.509:2147): avc:  denied  { read write } for  pid=4997 comm="syz.0.495" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.955441][   T29] audit: type=1400 audit(1763041812.509:2148): avc:  denied  { open } for  pid=4997 comm="syz.0.495" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.980923][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.998436][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.010519][ T4996] loop4: detected capacity change from 0 to 128
[   58.050361][   T29] audit: type=1400 audit(1763041812.559:2149): avc:  denied  { ioctl } for  pid=4997 comm="syz.0.495" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.075228][   T29] audit: type=1400 audit(1763041812.599:2150): avc:  denied  { ioctl } for  pid=4997 comm="syz.0.495" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.240405][ T5012] loop4: detected capacity change from 0 to 764
[   58.247588][ T5012] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   58.257035][ T5012] Symlink component flag not implemented
[   58.262904][ T5012] Symlink component flag not implemented (7)
[   58.706982][   T29] audit: type=1400 audit(1763041813.269:2151): avc:  denied  { write } for  pid=5024 comm="syz.3.505" lport=42116 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   58.731144][   T29] audit: type=1400 audit(1763041813.269:2152): avc:  denied  { getopt } for  pid=5024 comm="syz.3.505" lport=42116 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   58.773856][ T5027] dvmrp1: entered allmulticast mode
[   58.783856][ T5027] dvmrp1: left allmulticast mode
[   58.835524][ T5032] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96
[   58.847130][ T5031] lo speed is unknown, defaulting to 1000
[   59.080899][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.088319][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.109822][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.117228][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.192070][ T5056] lo speed is unknown, defaulting to 1000
[   59.299134][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.307796][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.449432][ T5094] SELinux:  Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped).
[   59.945647][ T5111] x_tables: unsorted underflow at hook 1
[   60.116709][ T5130] bridge0: port 3(gretap0) entered blocking state
[   60.123449][ T5130] bridge0: port 3(gretap0) entered disabled state
[   60.148235][ T5130] gretap0: entered allmulticast mode
[   60.158458][ T5130] gretap0: entered promiscuous mode
[   60.168452][ T5130] bridge0: port 3(gretap0) entered blocking state
[   60.174922][ T5130] bridge0: port 3(gretap0) entered forwarding state
[   60.183678][ T5124] loop0: detected capacity change from 0 to 8192
[   60.270029][ T5146] serio: Serial port ptm0
[   60.377448][ T5150] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   60.386001][ T5150] FAT-fs (loop0): Filesystem has been set read-only
[   60.692648][ T5159] __nla_validate_parse: 7 callbacks suppressed
[   60.692702][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'.
[   60.734433][ T5163] loop3: detected capacity change from 0 to 256
[   60.741715][ T5163] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.214217][ T5170] sd 0:0:1:0: device reset
[   61.304862][ T3450] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.305344][ T5177] loop3: detected capacity change from 0 to 1024
[   61.322017][ T3380] IPVS: starting estimator thread 0...
[   61.334714][ T5179] loop0: detected capacity change from 0 to 1024
[   61.352992][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.380750][ T5179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.393390][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.417250][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.431416][ T5180] IPVS: using max 2592 ests per chain, 129600 per kthread
[   61.811050][ T5210] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   61.913140][ T5218] netlink: 76 bytes leftover after parsing attributes in process `syz.2.579'.
[   61.978383][ T5224] capability: warning: `syz.1.582' uses deprecated v2 capabilities in a way that may be insecure
[   62.021660][ T5226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.583'.
[   62.078659][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'.
[   62.088191][ T5232] netlink: 'syz.2.586': attribute type 11 has an invalid length.
[   62.095926][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'.
[   62.147845][ T5230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.163509][ T1045] lo speed is unknown, defaulting to 1000
[   62.609869][ T5241] lo speed is unknown, defaulting to 1000
[   62.692798][ T5247] loop0: detected capacity change from 0 to 1024
[   62.699761][ T5247] EXT4-fs: Ignoring removed orlov option
[   62.705903][ T5247] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   62.719980][ T5247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.738777][ T5247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.780908][   T29] kauditd_printk_skb: 388 callbacks suppressed
[   62.780924][   T29] audit: type=1400 audit(1763041817.359:2541): avc:  denied  { setopt } for  pid=5250 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.811724][   T29] audit: type=1326 audit(1763041817.389:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   62.835079][   T29] audit: type=1326 audit(1763041817.389:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   62.858426][   T29] audit: type=1326 audit(1763041817.389:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   62.881806][   T29] audit: type=1326 audit(1763041817.389:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   62.906151][   T29] audit: type=1326 audit(1763041817.409:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   62.932222][ T5247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.981703][ T5261] futex_wake_op: syz.1.597 tries to shift op by 32; fix this program
[   62.993663][ T5247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.019023][   T29] audit: type=1326 audit(1763041817.599:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   63.042012][   T29] audit: type=1326 audit(1763041817.599:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   63.074085][ T5247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.127151][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.147892][ T2189] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.156111][ T2189] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.164458][ T2189] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.187603][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.235592][ T5273] lo speed is unknown, defaulting to 1000
[   63.326326][ T5278] loop0: detected capacity change from 0 to 1024
[   63.328187][ T3502] Bluetooth: hci0: command 0x1003 tx timeout
[   63.339150][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.423452][ T5282] loop4: detected capacity change from 0 to 1024
[   63.513466][   T29] audit: type=1326 audit(1763041818.089:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.3.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e151cf6c9 code=0x0
[   63.537833][   T29] audit: type=1400 audit(1763041818.109:2550): avc:  denied  { bind } for  pid=5290 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   63.545272][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'.
[   63.629434][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   63.638459][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   63.648671][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   63.666974][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   63.683335][ T5291] rdma_op ffff8881011de980 conn xmit_rdma 0000000000000000
[   63.780114][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.877701][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.888931][ T5310] bond1 (unregistering): Released all slaves
[   64.323332][ T5347] lo speed is unknown, defaulting to 1000
[   64.589898][ T5364] loop4: detected capacity change from 0 to 512
[   64.611301][ T5364] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.628658][ T5364] EXT4-fs (loop4): mount failed
[   64.723887][ T5369] Bluetooth: hci1: Frame reassembly failed (-90)
[   64.849840][ T5375] loop4: detected capacity change from 0 to 764
[   64.857107][ T5375] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   64.865690][ T5375] Symlink component flag not implemented
[   64.871590][ T5375] Symlink component flag not implemented (7)
[   64.915444][ T5380] lo speed is unknown, defaulting to 1000
[   65.435101][ T5398] loop4: detected capacity change from 0 to 512
[   65.471718][ T5398] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   65.494171][ T5398] EXT4-fs (loop4): mount failed
[   65.553055][ T5407] loop4: detected capacity change from 0 to 764
[   65.579288][ T5407] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   65.606689][ T5407] Symlink component flag not implemented
[   65.637743][ T5407] Symlink component flag not implemented (7)
[   65.694526][ T5420] loop4: detected capacity change from 0 to 1024
[   65.712179][ T5420] EXT4-fs mount: 4 callbacks suppressed
[   65.712263][ T5420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.748579][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.798387][ T3502] Bluetooth: hci0: command 0x1003 tx timeout
[   65.804866][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   65.849867][ T5438] loop4: detected capacity change from 0 to 1024
[   65.860670][ T5443] __nla_validate_parse: 9 callbacks suppressed
[   65.860686][ T5443] netlink: 204 bytes leftover after parsing attributes in process `syz.0.658'.
[   65.979281][ T5438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.042481][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.496954][ T5475] lo speed is unknown, defaulting to 1000
[   66.539869][ T5477] netlink: 'syz.2.671': attribute type 1 has an invalid length.
[   66.548980][ T5478] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[   66.556710][ T5478] netlink: 224 bytes leftover after parsing attributes in process `syz.4.670'.
[   66.569964][ T5480] netlink: 204 bytes leftover after parsing attributes in process `syz.3.672'.
[   66.616625][ T5484] loop4: detected capacity change from 0 to 1024
[   66.626307][ T5484] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.633038][ T5484] EXT4-fs: Ignoring removed orlov option
[   66.638830][ T5484] ext2: Bad value for 'mb_optimize_scan'
[   66.681373][ T5492] loop3: detected capacity change from 0 to 512
[   66.699856][ T5490] lo speed is unknown, defaulting to 1000
[   66.705120][ T5492] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   66.721437][ T5492] EXT4-fs (loop3): mount failed
[   66.766211][ T5497] loop3: detected capacity change from 0 to 1024
[   66.774465][ T5497] EXT4-fs: inline encryption not supported
[   66.794294][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.828819][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.860728][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.679'.
[   67.215597][ T5514] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.254176][ T5516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'.
[   67.374896][ T5520] netlink: 204 bytes leftover after parsing attributes in process `syz.4.685'.
[   67.452942][ T5526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'.
[   67.496783][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[   67.505623][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[   67.519223][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[   67.603637][ T5533] rdma_op ffff888119b48980 conn xmit_rdma 0000000000000000
[   67.759131][ T5545] lo speed is unknown, defaulting to 1000
[   67.805256][ T5543] loop0: detected capacity change from 0 to 8192
[   67.836051][ T5543] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   67.890726][ T5543] smc: net device bond0 applied user defined pnetid SYZ0
[   67.990405][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   67.990418][   T29] audit: type=1400 audit(1763041822.569:2687): avc:  denied  { ioctl } for  pid=5566 comm="syz.2.700" path="socket:[11745]" dev="sockfs" ino=11745 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.021378][   T29] audit: type=1400 audit(1763041822.569:2688): avc:  denied  { read } for  pid=5566 comm="syz.2.700" path="socket:[11745]" dev="sockfs" ino=11745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.048571][ T5573] loop0: detected capacity change from 0 to 128
[   68.062092][ T5573] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   68.147151][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.147151][ T3463] loop0: rw=1, sector=201, nr_sectors = 8 limit=128
[   68.176620][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.176620][ T3463] loop0: rw=1, sector=217, nr_sectors = 8 limit=128
[   68.200275][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.200275][ T3463] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[   68.200770][ T5581] lo speed is unknown, defaulting to 1000
[   68.224610][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.224610][ T3463] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[   68.263241][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.263241][ T3463] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[   68.290596][   T29] audit: type=1326 audit(1763041822.839:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917886f6c9 code=0x0
[   68.301127][ T5569] syz.0.696: attempt to access beyond end of device
[   68.301127][ T5569] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[   68.327074][ T5569] syz.0.696: attempt to access beyond end of device
[   68.327074][ T5569] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128
[   68.341051][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.341051][ T3463] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[   68.354916][ T3463] kworker/u8:8: attempt to access beyond end of device
[   68.354916][ T3463] loop0: rw=1, sector=345, nr_sectors = 8 limit=128
[   68.368407][ T5569] syz.0.696: attempt to access beyond end of device
[   68.368407][ T5569] loop0: rw=2049, sector=329, nr_sectors = 8 limit=128
[   68.384700][ T3463] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   68.440628][ T5516] syz.1.683 (5516) used greatest stack depth: 5080 bytes left
[   68.492498][ T5588] loop3: detected capacity change from 0 to 512
[   68.508617][ T5588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   68.531522][ T5588] EXT4-fs (loop3): 1 truncate cleaned up
[   68.538114][ T5588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.577608][ T5596] lo speed is unknown, defaulting to 1000
[   68.585287][ T5598] program syz.4.707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.597063][   T29] audit: type=1326 audit(1763041823.169:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.643153][   T29] audit: type=1326 audit(1763041823.169:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.666677][   T29] audit: type=1326 audit(1763041823.169:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.690411][   T29] audit: type=1326 audit(1763041823.169:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.713842][   T29] audit: type=1326 audit(1763041823.169:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.737232][   T29] audit: type=1326 audit(1763041823.169:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.760661][   T29] audit: type=1326 audit(1763041823.169:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   68.941486][ T5616] loop4: detected capacity change from 0 to 512
[   68.963905][ T5616] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   69.002972][ T5616] EXT4-fs (loop4): mount failed
[   69.102070][ T5632] infiniband syz!: set active
[   69.106747][ T5632] infiniband syz!: added team_slave_0
[   69.116804][ T5632] RDS/IB: syz!: added
[   69.120961][ T5632] smc: adding ib device syz! with port count 1
[   69.127122][ T5632] smc:    ib device syz! port 1 has no pnetid
[   69.140153][ T5635] batadv0: entered promiscuous mode
[   69.145905][ T5635] batadv0: entered allmulticast mode
[   69.190056][ T5637] loop0: detected capacity change from 0 to 512
[   69.196755][ T5637] EXT4-fs: dax option not supported
[   69.302357][ T5639] syz.0.720 uses obsolete (PF_INET,SOCK_PACKET)
[   69.331269][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.357012][ T5641] loop3: detected capacity change from 0 to 1024
[   69.370006][ T5641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.397419][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.823391][ T5661] IPv6: NLM_F_CREATE should be specified when creating new route
[   69.943780][ T5667] loop4: detected capacity change from 0 to 512
[   69.982617][ T5667] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   70.103480][ T5667] EXT4-fs (loop4): mount failed
[   70.160330][ T5678] loop4: detected capacity change from 0 to 128
[   70.187502][ T5680] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   70.201028][ T5680] batadv1: entered promiscuous mode
[   70.206286][ T5680] batadv1: entered allmulticast mode
[   70.333086][ T5694] sd 0:0:1:0: device reset
[   70.360138][ T5696] loop3: detected capacity change from 0 to 1024
[   70.369287][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.412645][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.584196][ T5709] netlink: 'syz.2.743': attribute type 4 has an invalid length.
[   70.873384][ T5709] netlink: 'syz.2.743': attribute type 4 has an invalid length.
[   70.919943][ T5714] __nla_validate_parse: 13 callbacks suppressed
[   70.919960][ T5714] netlink: 7 bytes leftover after parsing attributes in process `syz.4.745'.
[   70.947882][ T5714] netlink: 7 bytes leftover after parsing attributes in process `syz.4.745'.
[   71.034911][ T5719] loop4: detected capacity change from 0 to 512
[   71.070849][ T5719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.100815][ T5719] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.178810][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.192856][ T5723] x_tables: unsorted underflow at hook 1
[   71.230515][ T5730] netlink: 'syz.2.750': attribute type 4 has an invalid length.
[   71.247813][ T5732] netlink: 204 bytes leftover after parsing attributes in process `syz.0.751'.
[   71.253182][ T5730] netlink: 'syz.2.750': attribute type 4 has an invalid length.
[   71.264562][ T5728] loop4: detected capacity change from 0 to 512
[   71.280851][ T5734] netlink: 'syz.1.752': attribute type 4 has an invalid length.
[   71.299539][ T5736] netlink: 188 bytes leftover after parsing attributes in process `syz.2.753'.
[   71.310393][ T5734] netlink: 'syz.1.752': attribute type 4 has an invalid length.
[   71.322835][ T5738] Bluetooth: hci0: Frame reassembly failed (-90)
[   71.332353][    T9] IPVS: starting estimator thread 0...
[   71.334444][   T36] lo speed is unknown, defaulting to 1000
[   71.344299][ T3380] lo speed is unknown, defaulting to 1000
[   71.350804][ T5728] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.749: error while reading EA inode 32 err=-116
[   71.366051][ T5728] EXT4-fs (loop4): Remounting filesystem read-only
[   71.372725][ T5728] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   71.386969][ T5728] EXT4-fs (loop4): 1 orphan inode deleted
[   71.393278][ T5728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.431463][ T5742] IPVS: using max 2592 ests per chain, 129600 per kthread
[   71.441003][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.485578][ T5762] netlink: 204 bytes leftover after parsing attributes in process `syz.4.763'.
[   71.509838][ T5765] netlink: 'syz.4.764': attribute type 4 has an invalid length.
[   71.538937][ T5765] netlink: 'syz.4.764': attribute type 4 has an invalid length.
[   71.562092][ T5769] lo speed is unknown, defaulting to 1000
[   71.569580][ T5771] sd 0:0:1:0: device reset
[   71.601710][ T5774] bridge0: port 3(gretap0) entered blocking state
[   71.608186][ T5774] bridge0: port 3(gretap0) entered disabled state
[   71.615067][ T5774] gretap0: entered allmulticast mode
[   71.623716][ T5774] gretap0: entered promiscuous mode
[   71.640239][ T5774] gretap0: left allmulticast mode
[   71.645285][ T5774] gretap0: left promiscuous mode
[   71.650341][ T5774] bridge0: port 3(gretap0) entered disabled state
[   71.667728][ T5776] --map-set only usable from mangle table
[   71.692857][ T5781] xt_hashlimit: max too large, truncated to 1048576
[   71.719530][ T5783] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   71.821764][ T5792] netlink: 204 bytes leftover after parsing attributes in process `syz.2.775'.
[   71.862560][ T5796] netlink: 'syz.2.777': attribute type 4 has an invalid length.
[   71.872002][ T5796] netlink: 'syz.2.777': attribute type 4 has an invalid length.
[   71.983684][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'.
[   71.992481][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'.
[   72.169226][ T5807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'.
[   72.284266][ T5810] tc_dump_action: action bad kind
[   72.400177][ T5814] siw: device registration error -23
[   72.521393][ T5818] netlink: 204 bytes leftover after parsing attributes in process `syz.1.786'.
[   72.701749][ T5834] xt_hashlimit: max too large, truncated to 1048576
[   72.770024][ T5829] lo speed is unknown, defaulting to 1000
[   73.318262][ T3770] Bluetooth: hci0: command 0x1003 tx timeout
[   73.338132][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   73.501589][   T29] kauditd_printk_skb: 321 callbacks suppressed
[   73.501605][   T29] audit: type=1326 audit(1763041828.079:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   73.539127][   T29] audit: type=1326 audit(1763041828.119:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   73.541829][ T5879] loop0: detected capacity change from 0 to 512
[   73.562517][   T29] audit: type=1326 audit(1763041828.119:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86f8f8f703 code=0x7ffc0000
[   73.562637][   T29] audit: type=1326 audit(1763041828.119:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86f8f8e17f code=0x7ffc0000
[   73.615035][   T29] audit: type=1326 audit(1763041828.119:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f86f8f8f757 code=0x7ffc0000
[   73.638472][   T29] audit: type=1326 audit(1763041828.119:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86f8f8df10 code=0x7ffc0000
[   73.649884][ T5879] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.810: bad orphan inode 13
[   73.662322][   T29] audit: type=1326 audit(1763041828.119:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86f8f8f2cb code=0x7ffc0000
[   73.681916][ T5879] ext4_test_bit(bit=12, block=4) = 1
[   73.700668][ T5879] is_bad_inode(inode)=0
[   73.704813][ T5879] NEXT_ORPHAN(inode)=0
[   73.708886][ T5879] max_ino=32
[   73.712079][ T5879] i_nlink=1
[   73.715620][ T5879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.733590][   T29] audit: type=1326 audit(1763041828.169:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86f8f8e32a code=0x7ffc0000
[   73.756849][   T29] audit: type=1326 audit(1763041828.169:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86f8f8e32a code=0x7ffc0000
[   73.779994][   T29] audit: type=1326 audit(1763041828.169:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86f8f8de17 code=0x7ffc0000
[   73.868308][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.875421][ T5892] loop3: detected capacity change from 0 to 1024
[   73.891699][ T5892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.915279][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.950114][ T5899] loop0: detected capacity change from 0 to 512
[   73.960850][ T5899] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   73.975885][ T5899] EXT4-fs (loop0): mount failed
[   74.016523][ T5912] syzkaller1: entered promiscuous mode
[   74.022087][ T5912] syzkaller1: entered allmulticast mode
[   74.359283][ T5923] loop3: detected capacity change from 0 to 512
[   74.359343][ T5921] loop0: detected capacity change from 0 to 764
[   74.372166][ T5921] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   74.381655][ T5921] Symlink component flag not implemented
[   74.387362][ T5921] Symlink component flag not implemented (7)
[   74.399497][ T5923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.412811][ T5923] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.431212][ T5927] loop0: detected capacity change from 0 to 1024
[   74.432229][ T5923] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1073741833 (only 1 groups)
[   74.449721][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.472571][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.472893][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.318146][ T3502] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   75.346713][ T5958] syzkaller1: entered promiscuous mode
[   75.352285][ T5958] syzkaller1: entered allmulticast mode
[   75.435502][ T5964] sd 0:0:1:0: device reset
[   75.480024][ T5969] loop3: detected capacity change from 0 to 1024
[   75.493432][ T5970] loop4: detected capacity change from 0 to 764
[   75.501022][ T5970] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   75.509971][ T5970] Symlink component flag not implemented
[   75.510261][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.515660][ T5970] Symlink component flag not implemented (7)
[   75.559980][ T5962] loop0: detected capacity change from 0 to 128
[   75.579573][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.685059][ T5986] loop4: detected capacity change from 0 to 512
[   75.692326][ T5986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   75.704254][ T5986] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.849: corrupted xattr entries
[   75.716222][ T5986] EXT4-fs (loop4): Remounting filesystem read-only
[   75.723221][ T5986] EXT4-fs (loop4): 1 truncate cleaned up
[   75.730197][ T5986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.806289][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.501310][ T6028] loop0: detected capacity change from 0 to 764
[   76.513955][ T6028] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   76.532502][ T6028] Symlink component flag not implemented
[   76.548469][ T6028] Symlink component flag not implemented (7)
[   76.555103][ T6033] validate_nla: 6 callbacks suppressed
[   76.555118][ T6033] netlink: 'syz.2.869': attribute type 4 has an invalid length.
[   76.562261][ T6035] sd 0:0:1:0: device reset
[   76.570695][ T6033] netlink: 'syz.2.869': attribute type 4 has an invalid length.
[   76.611468][ T6040] pim6reg1: entered promiscuous mode
[   76.616870][ T6040] pim6reg1: entered allmulticast mode
[   76.931907][ T6061] FAULT_INJECTION: forcing a failure.
[   76.931907][ T6061] name failslab, interval 1, probability 0, space 0, times 0
[   76.944599][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.880 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.944655][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   76.944671][ T6061] Call Trace:
[   76.944678][ T6061]  <TASK>
[   76.944686][ T6061]  __dump_stack+0x1d/0x30
[   76.944712][ T6061]  dump_stack_lvl+0xe8/0x140
[   76.944736][ T6061]  dump_stack+0x15/0x1b
[   76.944759][ T6061]  should_fail_ex+0x265/0x280
[   76.944781][ T6061]  ? __pfx___bpf_trace_kfree+0x10/0x10
[   76.944814][ T6061]  should_failslab+0x8c/0xb0
[   76.944843][ T6061]  __kmalloc_noprof+0xa5/0x570
[   76.944930][ T6061]  ? tracepoint_probe_unregister+0x168/0x650
[   76.945043][ T6061]  ? __pfx___bpf_trace_kfree+0x10/0x10
[   76.945133][ T6061]  tracepoint_probe_unregister+0x168/0x650
[   76.945161][ T6061]  ? __pfx_bpf_link_release+0x10/0x10
[   76.945186][ T6061]  bpf_probe_unregister+0x37/0x50
[   76.945223][ T6061]  bpf_raw_tp_link_release+0x27/0x50
[   76.945278][ T6061]  bpf_link_free+0xae/0x340
[   76.945297][ T6061]  ? __pfx_bpf_link_release+0x10/0x10
[   76.945321][ T6061]  bpf_link_release+0x45/0x60
[   76.945393][ T6061]  __fput+0x29b/0x650
[   76.945457][ T6061]  ____fput+0x1c/0x30
[   76.945479][ T6061]  task_work_run+0x131/0x1a0
[   76.945514][ T6061]  exit_to_user_mode_loop+0xed/0x110
[   76.945547][ T6061]  do_syscall_64+0x1d6/0x200
[   76.945573][ T6061]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   76.945669][ T6061]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   76.945712][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.945738][ T6061] RIP: 0033:0x7f86f8f8f6c9
[   76.945756][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.945813][ T6061] RSP: 002b:00007f86f79f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   76.945831][ T6061] RAX: 0000000000000000 RBX: 00007f86f91e5fa0 RCX: 00007f86f8f8f6c9
[   76.945870][ T6061] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[   76.945885][ T6061] RBP: 00007f86f79f7090 R08: 0000000000000000 R09: 0000000000000000
[   76.945899][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.945976][ T6061] R13: 00007f86f91e6038 R14: 00007f86f91e5fa0 R15: 00007ffcb2d4ffc8
[   76.945996][ T6061]  </TASK>
[   77.185600][ T6063] loop3: detected capacity change from 0 to 512
[   77.195371][ T6063] EXT4-fs: Invalid want_extra_isize 34200
[   77.209161][ T6065] netlink: 'syz.0.883': attribute type 4 has an invalid length.
[   77.217367][ T6067] sd 0:0:1:0: device reset
[   77.230121][ T6065] netlink: 'syz.0.883': attribute type 4 has an invalid length.
[   77.352557][ T6077] loop4: detected capacity change from 0 to 1024
[   77.496320][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.541027][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.619287][ T6093] loop4: detected capacity change from 0 to 764
[   77.658917][ T6093] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   77.667502][ T6093] Symlink component flag not implemented
[   77.677995][ T6093] Symlink component flag not implemented (7)
[   77.709257][ T6101] netlink: 'syz.2.895': attribute type 4 has an invalid length.
[   77.730886][ T6101] netlink: 'syz.2.895': attribute type 4 has an invalid length.
[   77.900329][ T6117] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   77.908634][ T6117] __nla_validate_parse: 6 callbacks suppressed
[   77.908647][ T6117] netlink: 124 bytes leftover after parsing attributes in process `syz.1.900'.
[   77.952082][ T6124] sd 0:0:1:0: device reset
[   77.965602][ T6126] netlink: 'syz.2.906': attribute type 4 has an invalid length.
[   77.974823][ T6126] netlink: 'syz.2.906': attribute type 4 has an invalid length.
[   78.438274][ T6155] sd 0:0:1:0: device reset
[   78.459303][ T6157] netlink: 'syz.3.918': attribute type 4 has an invalid length.
[   78.487524][ T6157] netlink: 'syz.3.918': attribute type 4 has an invalid length.
[   78.622979][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[   78.631856][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[   79.561676][ T6171] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.581640][   T29] kauditd_printk_skb: 249 callbacks suppressed
[   79.581654][   T29] audit: type=1400 audit(1763041834.159:3274): avc:  denied  { create } for  pid=6175 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   79.608177][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'.
[   79.616947][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'.
[   79.639638][ T6171] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.678996][ T6183] SELinux: security_context_str_to_sid (œÜ®7½–H\6r™þ8´!.Äà0™LáY) failed with errno=-22
[   79.679852][   T29] audit: type=1400 audit(1763041834.259:3275): avc:  denied  { mounton } for  pid=6175 comm="syz.2.924" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   79.690009][ T6171] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.721475][   T29] audit: type=1400 audit(1763041834.289:3276): avc:  denied  { mounton } for  pid=6181 comm="syz.4.927" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   79.829909][ T6171] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.855347][   T29] audit: type=1326 audit(1763041834.429:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.4.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   79.878784][   T29] audit: type=1326 audit(1763041834.429:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.4.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   79.902148][   T29] audit: type=1326 audit(1763041834.429:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.4.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac208f6c9 code=0x7ffc0000
[   79.936183][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'.
[   80.028233][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.085201][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.098739][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.107133][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.175122][ T6209] loop0: detected capacity change from 0 to 1024
[   80.345030][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[   80.353904][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[   80.365843][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.516139][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.657713][ T6219] loop0: detected capacity change from 0 to 1024
[   80.700225][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.761382][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.803056][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'.
[   80.811958][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'.
[   80.847520][   T29] audit: type=1326 audit(1763041835.409:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   80.870950][   T29] audit: type=1326 audit(1763041835.409:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   80.894272][   T29] audit: type=1326 audit(1763041835.409:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   80.917644][   T29] audit: type=1326 audit(1763041835.409:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.0.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   81.084327][ T6263] loop0: detected capacity change from 0 to 512
[   81.101551][ T6263] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   81.120999][ T6263] EXT4-fs (loop0): mount failed
[   81.281379][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.290199][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.344038][ T6288] tc_dump_action: action bad kind
[   82.325364][ T6300] tc_dump_action: action bad kind
[   82.570454][ T6323] loop3: detected capacity change from 0 to 2048
[   82.654937][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.668119][ T6323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.656571][ T6360] loop4: detected capacity change from 0 to 512
[   83.688839][ T6360] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.706539][ T6360] EXT4-fs (loop4): mount failed
[   83.832755][ T6392] syzkaller1: entered promiscuous mode
[   83.838292][ T6392] syzkaller1: entered allmulticast mode
[   84.542602][ T6405] sd 0:0:1:0: device reset
[   84.567394][ T6407] loop3: detected capacity change from 0 to 512
[   84.588835][ T6407] __quota_error: 229 callbacks suppressed
[   84.588851][ T6407] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[   84.606971][   T29] audit: type=1326 audit(1763041839.189:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178866567 code=0x7ffc0000
[   84.630390][   T29] audit: type=1326 audit(1763041839.189:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f917880b779 code=0x7ffc0000
[   84.653762][   T29] audit: type=1326 audit(1763041839.189:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   84.684501][ T6380] delete_channel: no stack
[   84.691787][ T6407] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.721557][ T6407] EXT4-fs (loop3): mount failed
[   84.726694][   T29] audit: type=1326 audit(1763041839.269:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178866567 code=0x7ffc0000
[   84.750166][   T29] audit: type=1326 audit(1763041839.269:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f917880b779 code=0x7ffc0000
[   84.774037][   T29] audit: type=1326 audit(1763041839.269:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   84.797633][   T29] audit: type=1326 audit(1763041839.289:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178866567 code=0x7ffc0000
[   84.821073][   T29] audit: type=1326 audit(1763041839.289:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f917880b779 code=0x7ffc0000
[   84.844425][   T29] audit: type=1326 audit(1763041839.289:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[   84.914313][ T6420] __nla_validate_parse: 14 callbacks suppressed
[   84.914326][ T6420] netlink: 60 bytes leftover after parsing attributes in process `+}[@'.
[   84.929492][ T6420] unsupported nlmsg_type 40
[   84.986760][ T6427] netlink: 'syz.3.1019': attribute type 4 has an invalid length.
[   85.004840][ T6427] netlink: 'syz.3.1019': attribute type 4 has an invalid length.
[   85.387821][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'.
[   85.396763][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'.
[   85.704457][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'.
[   85.739704][ T6457] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1028'.
[   85.961900][ T6491] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1043'.
[   87.044911][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[   87.053791][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[   87.114924][ T6521] loop4: detected capacity change from 0 to 764
[   87.142551][ T6521] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   87.151437][ T6521] Symlink component flag not implemented
[   87.157340][ T6521] Symlink component flag not implemented (7)
[   87.180002][ T6532] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1059'.
[   87.283931][ T6548] netlink: 'syz.1.1067': attribute type 13 has an invalid length.
[   87.343358][ T6540] loop3: detected capacity change from 0 to 1024
[   87.353894][ T6540] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   87.381183][ T6554] loop4: detected capacity change from 0 to 512
[   87.432295][ T6554] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   87.454824][ T6554] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1070: invalid indirect mapped block 2683928664 (level 1)
[   87.475626][ T6554] EXT4-fs (loop4): Remounting filesystem read-only
[   87.483696][ T6554] EXT4-fs (loop4): 1 truncate cleaned up
[   87.490205][ T6554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.531838][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.539087][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.628210][ T6590] loop3: detected capacity change from 0 to 764
[   87.656944][ T6590] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   87.675731][ T6590] Symlink component flag not implemented
[   87.695916][ T6590] Symlink component flag not implemented (7)
[   88.269138][ T3380] lo speed is unknown, defaulting to 1000
[   88.274973][ T3380] syz2: Port: 1 Link DOWN
[   88.297650][ T6592] tipc: Started in network mode
[   88.302564][ T6592] tipc: Node identity 4, cluster identity 4711
[   88.308748][ T6592] tipc: Node number set to 4
[   88.334724][ T3463] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.362946][ T3463] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.373344][ T6599] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1079'.
[   88.392480][ T3463] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.418440][ T3463] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.435477][ T6606] netlink: 'syz.2.1084': attribute type 4 has an invalid length.
[   88.493645][ T6568] kernel write not supported for file bpf-prog (pid: 6568 comm: kworker/1:14)
[   88.505337][ T6606] netlink: 'syz.2.1084': attribute type 4 has an invalid length.
[   88.584973][ T6618] netlink: 'syz.1.1088': attribute type 6 has an invalid length.
[   88.650671][ T6628] sd 0:0:1:0: device reset
[   88.839776][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.866615][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.635892][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   89.865077][   T29] kauditd_printk_skb: 129 callbacks suppressed
[   89.865093][   T29] audit: type=1326 audit(1763041844.439:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.2.1097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917886f6c9 code=0x0
[   89.920356][ T6647] loop0: detected capacity change from 0 to 512
[   89.958257][ T6647] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[   89.968468][ T6647] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   89.993597][ T6647] EXT4-fs (loop0): mount failed
[   90.745918][ T6656] netlink: 'syz.2.1100': attribute type 4 has an invalid length.
[   90.968145][   T41] Bluetooth: hci1: Frame reassembly failed (-90)
[   91.104606][ T6682] vxcan3: entered promiscuous mode
[   91.109862][ T6682] vxcan3: entered allmulticast mode
[   91.177994][ T6683] __nla_validate_parse: 5 callbacks suppressed
[   91.178011][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[   91.193023][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[   91.367541][   T29] audit: type=1326 audit(1763041845.939:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.2.1112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917886f6c9 code=0x0
[   91.638097][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   91.644310][ T3770] Bluetooth: hci0: command 0x1003 tx timeout
[   91.670681][ T6690] netlink: 'syz.3.1113': attribute type 4 has an invalid length.
[   91.934083][ T6694] netlink: 'syz.3.1115': attribute type 8 has an invalid length.
[   91.942019][ T6694] bridge0: entered promiscuous mode
[   91.949805][ T6694] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   91.984152][   T29] audit: type=1400 audit(1763041846.559:3651): avc:  denied  { listen } for  pid=6692 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   92.061408][ T6701] loop3: detected capacity change from 0 to 1024
[   92.079815][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.110980][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.169395][   T29] audit: type=1326 audit(1763041846.749:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.3.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   92.192914][   T29] audit: type=1326 audit(1763041846.749:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.3.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   92.216773][   T29] audit: type=1326 audit(1763041846.749:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.3.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   92.240300][   T29] audit: type=1326 audit(1763041846.749:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.3.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   92.263879][   T29] audit: type=1326 audit(1763041846.749:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.3.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[   92.307741][ T6717] netlink: 'syz.2.1125': attribute type 4 has an invalid length.
[   92.311757][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1124'.
[   92.360085][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'.
[   92.729873][   T29] audit: type=1326 audit(1763041847.289:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   92.777274][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1137'.
[   92.811626][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1137'.
[   92.959264][ T6751] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[   92.967869][ T6568] lo speed is unknown, defaulting to 1000
[   92.973637][ T6568] syz2: Port: 1 Link ACTIVE
[   93.013556][ T3533] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   93.051537][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'.
[   93.617236][ T6778] netlink: 'syz.2.1153': attribute type 4 has an invalid length.
[   93.932282][ T6787] loop3: detected capacity change from 0 to 2048
[   93.991125][ T6794] loop0: detected capacity change from 0 to 1024
[   94.029782][ T6787] Alternate GPT is invalid, using primary GPT.
[   94.036095][ T6787]  loop3: p2 p3 p7
[   94.040535][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.056163][ T6784] Set syz1 is full, maxelem 65536 reached
[   94.100227][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.193459][ T6806] syzkaller1: entered promiscuous mode
[   94.199041][ T6806] syzkaller1: entered allmulticast mode
[   94.213662][ T6808] netlink: 'syz.2.1164': attribute type 4 has an invalid length.
[   94.444734][ T6790] Set syz1 is full, maxelem 65536 reached
[   94.606333][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.615028][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.777411][ T6849] loop3: detected capacity change from 0 to 512
[   94.799713][ T6849] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   94.860560][ T6857] vlan2: entered allmulticast mode
[   94.866040][ T6849] EXT4-fs (loop3): mount failed
[   94.875860][ T6857] dummy0: entered allmulticast mode
[   94.914226][ T6862] netlink: 'syz.2.1186': attribute type 4 has an invalid length.
[   94.922023][ T6862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1186'.
[   94.953935][ T6862] .`: renamed from bond0
[   94.960646][ T6865] loop3: detected capacity change from 0 to 2048
[   95.011671][ T6865] Alternate GPT is invalid, using primary GPT.
[   95.018030][ T6865]  loop3: p2 p3 p7
[   95.186401][   T29] kauditd_printk_skb: 199 callbacks suppressed
[   95.186414][   T29] audit: type=1326 audit(1763041849.759:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.2.1197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917886f6c9 code=0x0
[   95.218364][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1200'.
[   95.240276][ T6887] loop0: detected capacity change from 0 to 2048
[   95.270325][ T6887] Alternate GPT is invalid, using primary GPT.
[   95.276688][ T6887]  loop0: p2 p3 p7
[   95.367936][   T29] audit: type=1326 audit(1763041849.939:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   95.392030][   T29] audit: type=1326 audit(1763041849.939:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   95.415456][   T29] audit: type=1326 audit(1763041849.939:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   95.438940][   T29] audit: type=1326 audit(1763041849.949:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239799f6c9 code=0x7ffc0000
[   96.085094][ T6928] syzkaller1: entered promiscuous mode
[   96.090618][ T6928] syzkaller1: entered allmulticast mode
[   96.109427][ T6931] tipc: New replicast peer: 255.255.255.255
[   96.115586][ T6931] tipc: Enabled bearer <udp:s>, priority 10
[   96.148814][   T29] audit: type=1326 audit(1763041850.729:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.1216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f917886f6c9 code=0x0
[   96.205749][   T29] audit: type=1326 audit(1763041850.779:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   96.229403][   T29] audit: type=1326 audit(1763041850.779:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   96.253661][   T29] audit: type=1326 audit(1763041850.809:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   96.277169][   T29] audit: type=1326 audit(1763041850.809:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f8f8f6c9 code=0x7ffc0000
[   96.322434][ T6941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6941 comm=syz.0.1218
[   96.367573][ T6945] loop0: detected capacity change from 0 to 764
[   96.374964][ T6945] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   96.383687][ T6945] Symlink component flag not implemented
[   96.389412][ T6945] Symlink component flag not implemented (7)
[   96.437312][ T6947] loop3: detected capacity change from 0 to 1024
[   96.448720][ T6949] loop0: detected capacity change from 0 to 512
[   96.459954][ T6949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1220: bg 0: block 248: padding at end of block bitmap is not set
[   96.475591][ T6947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.487860][ T6949] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1220: Failed to acquire dquot type 1
[   96.499924][ T6949] EXT4-fs (loop0): 1 truncate cleaned up
[   96.505981][ T6949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.520765][ T6949] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.543477][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.563908][ T6956] loop3: detected capacity change from 0 to 512
[   96.572389][ T6956] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   96.580866][ T6956] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1222: invalid indirect mapped block 2683928664 (level 1)
[   96.595212][ T6956] EXT4-fs (loop3): Remounting filesystem read-only
[   96.602562][ T6956] EXT4-fs (loop3): 1 truncate cleaned up
[   96.608805][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.629000][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.646757][ T3463] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1
[   96.658824][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.708884][ T3463] Bluetooth: hci0: Frame reassembly failed (-84)
[   96.738524][ T6967] syzkaller1: entered promiscuous mode
[   96.744015][ T6967] syzkaller1: entered allmulticast mode
[   96.973730][ T6975] loop0: detected capacity change from 0 to 764
[   96.981211][ T6975] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   97.003239][ T6975] Symlink component flag not implemented
[   97.009763][ T6975] Symlink component flag not implemented (7)
[   97.105640][ T6986] loop0: detected capacity change from 0 to 1024
[   97.112482][ T6986] EXT4-fs: Ignoring removed i_version option
[   97.118784][ T6986] EXT4-fs: Ignoring removed nobh option
[   97.143858][ T6986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.200451][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.233907][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'.
[   97.252445][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[   98.268509][ T7008] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1245'.
[   98.353759][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[   98.362717][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[   98.758283][ T3533] Bluetooth: hci0: command 0x1003 tx timeout
[   98.764440][ T3770] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.776096][ T7015] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   99.347726][ T7034] loop3: detected capacity change from 0 to 1024
[   99.359801][ T7034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.386261][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.415039][ T7039] loop3: detected capacity change from 0 to 2048
[   99.470331][ T7039] Alternate GPT is invalid, using primary GPT.
[   99.476748][ T7039]  loop3: p2 p3 p7
[   99.546867][ T7045] netlink: 'syz.3.1259': attribute type 13 has an invalid length.
[  100.179625][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'.
[  100.188531][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'.
[  100.527104][ T7073] netlink: 'syz.2.1271': attribute type 4 has an invalid length.
[  100.643313][   T29] kauditd_printk_skb: 147 callbacks suppressed
[  100.643327][   T29] audit: type=1326 audit(1763041855.219:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.692244][   T29] audit: type=1326 audit(1763041855.249:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.715748][   T29] audit: type=1326 audit(1763041855.249:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.832526][   T29] audit: type=1326 audit(1763041855.389:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.855962][   T29] audit: type=1326 audit(1763041855.389:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.879530][   T29] audit: type=1326 audit(1763041855.389:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.903072][   T29] audit: type=1326 audit(1763041855.389:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.926532][   T29] audit: type=1326 audit(1763041855.389:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.949951][   T29] audit: type=1326 audit(1763041855.389:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  100.973687][   T29] audit: type=1326 audit(1763041855.389:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e151cf6c9 code=0x7ffc0000
[  101.112799][ T7102] netlink: 'syz.1.1283': attribute type 4 has an invalid length.
[  101.150563][ T7087] cgroup: fork rejected by pids controller in /syz3
[  101.333020][ T7374] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1289'.
[  101.365132][ T7340] netlink: 'syz.0.1288': attribute type 1 has an invalid length.
[  101.375567][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  101.414217][ T7340] bond1: (slave bridge1): making interface the new active one
[  101.422417][ T7340] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  101.452201][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  101.835026][ T7602] FAULT_INJECTION: forcing a failure.
[  101.835026][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.848227][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.0.1292 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  101.848302][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  101.848316][ T7602] Call Trace:
[  101.848323][ T7602]  <TASK>
[  101.848330][ T7602]  __dump_stack+0x1d/0x30
[  101.848354][ T7602]  dump_stack_lvl+0xe8/0x140
[  101.848379][ T7602]  dump_stack+0x15/0x1b
[  101.848397][ T7602]  should_fail_ex+0x265/0x280
[  101.848462][ T7602]  should_fail+0xb/0x20
[  101.848481][ T7602]  should_fail_usercopy+0x1a/0x20
[  101.848504][ T7602]  _copy_from_user+0x1c/0xb0
[  101.848529][ T7602]  bpf_obj_get_info_by_fd+0x318/0x1fe0
[  101.848633][ T7602]  ? kstrtoull+0x111/0x140
[  101.848716][ T7602]  __sys_bpf+0x50f/0x7c0
[  101.848740][ T7602]  __x64_sys_bpf+0x41/0x50
[  101.848777][ T7602]  x64_sys_call+0x2aee/0x3000
[  101.848875][ T7602]  do_syscall_64+0xd2/0x200
[  101.848963][ T7602]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  101.848992][ T7602]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  101.849065][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.849091][ T7602] RIP: 0033:0x7f86f8f8f6c9
[  101.849108][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.849127][ T7602] RSP: 002b:00007f86f79f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  101.849145][ T7602] RAX: ffffffffffffffda RBX: 00007f86f91e5fa0 RCX: 00007f86f8f8f6c9
[  101.849157][ T7602] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 000000000000000f
[  101.849220][ T7602] RBP: 00007f86f79f7090 R08: 0000000000000000 R09: 0000000000000000
[  101.849234][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.849249][ T7602] R13: 00007f86f91e6038 R14: 00007f86f91e5fa0 R15: 00007ffcb2d4ffc8
[  101.849315][ T7602]  </TASK>
[  102.119577][ T8140] loop0: detected capacity change from 0 to 512
[  102.134769][ T8140] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  102.175672][ T8146] loop3: detected capacity change from 0 to 512
[  102.185471][ T8140] EXT4-fs (loop0): mount failed
[  102.192044][ T8146] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1296: Failed to acquire dquot type 1
[  102.214027][ T8146] EXT4-fs (loop3): 1 truncate cleaned up
[  102.224011][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.237737][ T8146] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.258532][ T8146] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.275993][ T8155] __nla_validate_parse: 1 callbacks suppressed
[  102.276008][ T8155] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1300'.
[  102.281883][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.283760][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'.
[  102.301538][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.501489][ T8180] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1311'.
[  102.510621][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  102.583418][ T8189] loop0: detected capacity change from 0 to 164
[  102.680570][ T8189] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125
[  102.699629][ T8189] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  102.754749][ T8209] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1323'.
[  102.766071][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'.
[  102.775067][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  102.852815][ T8216] loop0: detected capacity change from 0 to 2048
[  102.890230][ T8216] Alternate GPT is invalid, using primary GPT.
[  102.892420][ T8227] loop3: detected capacity change from 0 to 128
[  102.896681][ T8216]  loop0: p2 p3 p7
[  102.999429][ T8231] loop3: detected capacity change from 0 to 512
[  103.015315][ T8231] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.028970][ T8238] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1335'.
[  103.030166][ T8236] loop0: detected capacity change from 0 to 164
[  103.038382][ T8231] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.051114][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'.
[  103.060101][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'.
[  103.070298][ T8231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.078812][ T8231] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.088267][ T8236] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  103.108594][ T8231] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1332: Allocating blocks 41-42 which overlap fs metadata
[  103.122586][ T8231] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1332: Allocating blocks 41-42 which overlap fs metadata
[  103.122845][ T8236] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  103.148326][ T8236] Symlink component flag not implemented
[  103.154014][ T8236] Symlink component flag not implemented
[  103.159973][ T8236] Symlink component flag not implemented (7)
[  103.165948][ T8236] Symlink component flag not implemented (116)
[  103.167734][ T8231] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1332: Failed to acquire dquot type 1
[  103.187300][ T8231] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  103.232644][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1332: corrupted inode contents
[  103.259270][ T8231] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.1332: mark_inode_dirty error
[  103.273359][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1332: corrupted inode contents
[  103.285534][ T8231] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1332: mark_inode_dirty error
[  103.297442][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1332: corrupted inode contents
[  103.309795][ T8231] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  103.318830][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1332: corrupted inode contents
[  103.330910][ T8231] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.1332: mark_inode_dirty error
[  103.342597][ T8231] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  103.351996][ T8231] EXT4-fs (loop3): 1 truncate cleaned up
[  103.358082][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.399324][ T8231] netlink: 'syz.3.1332': attribute type 30 has an invalid length.
[  103.477770][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.518232][ T4363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.647626][ T8260] lo speed is unknown, defaulting to 1000
[  103.744890][ T3463] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.787665][ T8260] chnl_net:caif_netlink_parms(): no params data found
[  103.802320][ T3463] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.838574][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.845620][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.852966][ T8260] bridge_slave_0: entered allmulticast mode
[  103.859293][ T8260] bridge_slave_0: entered promiscuous mode
[  103.866605][ T3463] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.877391][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.884498][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.891847][ T8260] bridge_slave_1: entered allmulticast mode
[  103.898208][ T8260] bridge_slave_1: entered promiscuous mode
[  103.913908][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.923785][ T3463] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.935454][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.954387][ T8260] team0: Port device team_slave_0 added
[  103.960985][ T8260] team0: Port device team_slave_1 added
[  103.975286][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.982367][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.008274][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.019363][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.026341][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.052308][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.085933][ T8260] hsr_slave_0: entered promiscuous mode
[  104.091983][ T8260] hsr_slave_1: entered promiscuous mode
[  104.097988][ T8260] debugfs: 'hsr0' already exists in 'hsr'
[  104.103780][ T8260] Cannot create hsr debugfs directory
[  104.120100][ T3463] gretap0: left allmulticast mode
[  104.125166][ T3463] gretap0: left promiscuous mode
[  104.130292][ T3463] bridge0: port 3(gretap0) entered disabled state
[  104.148304][ T3463] bridge_slave_1: left allmulticast mode
[  104.153995][ T3463] bridge_slave_1: left promiscuous mode
[  104.159720][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.169823][ T3463] bridge_slave_0: left allmulticast mode
[  104.175573][ T3463] bridge_slave_0: left promiscuous mode
[  104.181301][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.249898][ T3463] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.258743][ T3463] bond_slave_0: left promiscuous mode
[  104.265060][ T3463] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.273973][ T3463] bond_slave_1: left promiscuous mode
[  104.280304][ T3463] $Hÿ (unregistering): Released all slaves
[  104.360396][ T8260] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.369780][ T8260] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  104.383660][ T8320] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  104.448477][ T8323] netlink: 'syz.0.1359': attribute type 33 has an invalid length.
[  104.458189][ T3463] hsr_slave_0: left promiscuous mode
[  104.463810][ T3463] hsr_slave_1: left promiscuous mode
[  104.469656][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.477024][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.485531][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.492944][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.509425][ T3463] veth1_macvtap: left promiscuous mode
[  104.515020][ T3463] veth0_macvtap: left promiscuous mode
[  104.521219][ T3463] veth1_vlan: left promiscuous mode
[  104.530465][ T3463] veth0_vlan: left promiscuous mode
[  104.535809][ T8331] loop3: detected capacity change from 0 to 2048
[  104.580798][ T8331] Alternate GPT is invalid, using primary GPT.
[  104.587274][ T8331]  loop3: p2 p3 p7
[  104.602844][ T3463] team0 (unregistering): Port device team_slave_1 removed
[  104.612591][ T3463] team0 (unregistering): Port device team_slave_0 removed
[  104.641029][ T8260] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  104.650069][ T8260] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  104.699084][   T41] Bluetooth: hci0: Frame reassembly failed (-84)
[  104.709219][ T8345] Bluetooth: hci0: Frame reassembly failed (-90)
[  104.739939][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.753591][ T8260] 8021q: adding VLAN 0 to HW filter on device team0
[  104.762898][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.769959][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.781902][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.789065][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.861996][ T3463] IPVS: stop unused estimator thread 0...
[  104.882214][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.991168][ T8260] veth0_vlan: entered promiscuous mode
[  104.998728][ T8260] veth1_vlan: entered promiscuous mode
[  105.012704][ T8260] veth0_macvtap: entered promiscuous mode
[  105.025668][ T8260] veth1_macvtap: entered promiscuous mode
[  105.036390][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.046960][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.057978][ T3463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.077142][ T3463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.088303][ T3463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.097070][ T8384] netlink: 'syz.2.1377': attribute type 30 has an invalid length.
[  105.097533][ T3463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.146867][ T8387] loop5: detected capacity change from 0 to 764
[  105.153959][ T8387] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  105.163094][ T8387] Symlink component flag not implemented
[  105.168831][ T8387] Symlink component flag not implemented (7)
[  105.195506][ T8390] loop5: detected capacity change from 0 to 512
[  105.209399][ T8390] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  105.227747][ T8390] EXT4-fs (loop5): mount failed
[  105.273090][ T8402] loop5: detected capacity change from 0 to 512
[  105.279759][ T8402] EXT4-fs: Ignoring removed nobh option
[  105.289953][ T8402] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.1383: corrupted inode contents
[  105.301935][ T8402] EXT4-fs (loop5): Remounting filesystem read-only
[  105.309028][ T8402] EXT4-fs (loop5): 1 truncate cleaned up
[  105.315187][ T8402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.327991][ T8402] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.350348][ T8260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.366417][ T8414] batman_adv: batadv0: Adding interface: dummy0
[  105.372730][ T8414] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.399098][ T8414] batman_adv: batadv0: Interface activated: dummy0
[  105.425019][ T8414] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  105.478760][ T8420] loop5: detected capacity change from 0 to 764
[  105.486076][ T8420] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  105.494711][ T8420] Symlink component flag not implemented
[  105.500488][ T8420] Symlink component flag not implemented (7)
[  105.623830][ T8435] loop5: detected capacity change from 0 to 256
[  105.808490][   T29] kauditd_printk_skb: 559 callbacks suppressed
[  105.808535][   T29] audit: type=1400 audit(1763041860.389:4569): avc:  denied  { lock } for  pid=8457 comm="syz.2.1407" path="socket:[18535]" dev="sockfs" ino=18535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  105.871230][   T29] audit: type=1326 audit(1763041860.449:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  105.897005][   T29] audit: type=1326 audit(1763041860.449:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  105.920502][   T29] audit: type=1326 audit(1763041860.459:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  105.943968][   T29] audit: type=1326 audit(1763041860.459:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  105.967457][   T29] audit: type=1326 audit(1763041860.459:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  105.990824][   T29] audit: type=1326 audit(1763041860.459:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  106.014179][   T29] audit: type=1326 audit(1763041860.459:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  106.037616][   T29] audit: type=1326 audit(1763041860.459:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  106.061281][   T29] audit: type=1326 audit(1763041860.459:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f917886f6c9 code=0x7ffc0000
[  106.610002][ T8507] loop5: detected capacity change from 0 to 512
[  106.617854][ T8507] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  106.626060][ T8507] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1430: invalid indirect mapped block 2683928664 (level 1)
[  106.640344][ T8507] EXT4-fs (loop5): Remounting filesystem read-only
[  106.646960][ T8507] EXT4-fs (loop5): 1 truncate cleaned up
[  106.652904][ T8507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.676361][ T8260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.744748][ T8513] xt_policy: output policy not valid in PREROUTING and INPUT
[  106.758163][ T3770] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  106.758237][ T3533] Bluetooth: hci0: command 0x1003 tx timeout
[  106.787042][ T8519] FAULT_INJECTION: forcing a failure.
[  106.787042][ T8519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.800200][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.3.1434 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  106.800229][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  106.800243][ T8519] Call Trace:
[  106.800249][ T8519]  <TASK>
[  106.800257][ T8519]  __dump_stack+0x1d/0x30
[  106.800281][ T8519]  dump_stack_lvl+0xe8/0x140
[  106.800333][ T8519]  dump_stack+0x15/0x1b
[  106.800354][ T8519]  should_fail_ex+0x265/0x280
[  106.800377][ T8519]  should_fail+0xb/0x20
[  106.800395][ T8519]  should_fail_usercopy+0x1a/0x20
[  106.800480][ T8519]  _copy_to_user+0x20/0xa0
[  106.800508][ T8519]  simple_read_from_buffer+0xb5/0x130
[  106.800536][ T8519]  proc_fail_nth_read+0x10e/0x150
[  106.800573][ T8519]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.800663][ T8519]  vfs_read+0x1a8/0x770
[  106.800691][ T8519]  ? __rcu_read_unlock+0x4f/0x70
[  106.800763][ T8519]  ? __fget_files+0x184/0x1c0
[  106.800799][ T8519]  ksys_read+0xda/0x1a0
[  106.800838][ T8519]  __x64_sys_read+0x40/0x50
[  106.800869][ T8519]  x64_sys_call+0x27c0/0x3000
[  106.800936][ T8519]  do_syscall_64+0xd2/0x200
[  106.800961][ T8519]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  106.800997][ T8519]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  106.801088][ T8519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.801114][ T8519] RIP: 0033:0x7f4e151ce0dc
[  106.801132][ T8519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  106.801155][ T8519] RSP: 002b:00007f4e13c37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  106.801178][ T8519] RAX: ffffffffffffffda RBX: 00007f4e15425fa0 RCX: 00007f4e151ce0dc
[  106.801194][ T8519] RDX: 000000000000000f RSI: 00007f4e13c370a0 RDI: 0000000000000004
[  106.801210][ T8519] RBP: 00007f4e13c37090 R08: 0000000000000000 R09: 0000000000000000
[  106.801227][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.801291][ T8519] R13: 00007f4e15426038 R14: 00007f4e15425fa0 R15: 00007ffee4fa5188
[  106.801312][ T8519]  </TASK>
[  107.016822][ T8521] loop5: detected capacity change from 0 to 2048
[  107.030824][ T8521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.042966][ T8521] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.063238][ T8260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.544585][ T8541] loop0: detected capacity change from 0 to 512
[  107.613019][ T8541] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  107.677812][ T8541] EXT4-fs (loop0): mount failed
[  107.728950][ T8552] loop0: detected capacity change from 0 to 128
[  107.737004][ T8552] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.749431][ T8552] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.796593][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.823581][ T8556] can: request_module (can-proto-4) failed.
[  107.831259][ T8556] __nla_validate_parse: 13 callbacks suppressed
[  107.831271][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  108.076817][ T8572] loop5: detected capacity change from 0 to 732
[  108.077196][ T8572] iso9660: Unknown parameter ''
[  108.173849][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.189937][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.192374][ T8583] loop5: detected capacity change from 0 to 1024
[  108.224068][ T8583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.249290][ T8260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.566329][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'.
[  108.581150][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  108.737862][ T8608] syzkaller1: entered promiscuous mode
[  108.743425][ T8608] syzkaller1: entered allmulticast mode
[  108.867813][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'.
[  109.038191][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.046747][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.241436][ T8646] syzkaller1: entered promiscuous mode
[  109.246932][ T8646] syzkaller1: entered allmulticast mode
[  109.377770][ T8652] loop0: detected capacity change from 0 to 2048
[  109.393124][ T8650] loop5: detected capacity change from 0 to 764
[  109.400450][ T8650] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  109.408965][ T8650] Symlink component flag not implemented
[  109.414777][ T8650] Symlink component flag not implemented (7)
[  109.430509][ T8652] Alternate GPT is invalid, using primary GPT.
[  109.436845][ T8652]  loop0: p2 p3 p7
[  109.527805][ T8658] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.569736][ T8658] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.589430][ T8662] loop3: detected capacity change from 0 to 1024
[  109.599500][ T8662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.619561][ T8658] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.630952][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.754355][ T8658] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.795472][ T8682] ==================================================================
[  109.803569][ T8682] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  109.811125][ T8682] 
[  109.813436][ T8682] write to 0xffff8881042c0a00 of 8 bytes by task 8679 on cpu 1:
[  109.821058][ T8682]  mas_wr_store_entry+0x1e0d/0x2750
[  109.826258][ T8682]  mas_store_prealloc+0x760/0xa90
[  109.831281][ T8682]  vma_iter_store_new+0x1c5/0x200
[  109.836304][ T8682]  vma_complete+0x125/0x580
[  109.840801][ T8682]  __split_vma+0x591/0x650
[  109.845215][ T8682]  vma_modify+0x21e/0xc80
[  109.849541][ T8682]  vma_modify_flags+0x101/0x130
[  109.854387][ T8682]  mprotect_fixup+0x2cc/0x570
[  109.859061][ T8682]  do_mprotect_pkey+0x6d6/0x980
[  109.863915][ T8682]  __x64_sys_mprotect+0x48/0x60
[  109.868768][ T8682]  x64_sys_call+0x2752/0x3000
[  109.873445][ T8682]  do_syscall_64+0xd2/0x200
[  109.877940][ T8682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.883823][ T8682] 
[  109.886132][ T8682] read to 0xffff8881042c0a00 of 8 bytes by task 8682 on cpu 0:
[  109.893663][ T8682]  mas_state_walk+0x485/0x650
[  109.898355][ T8682]  mas_walk+0x60/0x150
[  109.902429][ T8682]  lock_vma_under_rcu+0x95/0x170
[  109.907373][ T8682]  do_user_addr_fault+0x233/0x1080
[  109.912481][ T8682]  exc_page_fault+0x62/0xa0
[  109.916985][ T8682]  asm_exc_page_fault+0x26/0x30
[  109.921823][ T8682] 
[  109.924131][ T8682] value changed: 0xffff88810492490e -> 0xffff8881042c0a00
[  109.931220][ T8682] 
[  109.933525][ T8682] Reported by Kernel Concurrency Sanitizer on:
[  109.939656][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.1.1497 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.949367][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  109.959408][ T8682] ==================================================================
[  110.103586][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.130793][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.143759][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.169450][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0