last executing test programs:

4.043852425s ago: executing program 1 (id=393):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='fsi_master_acf_send_request\x00', r0}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')

4.009704716s ago: executing program 1 (id=395):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f34", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000000c0)={r5, 0x1, 0x6, @remote}, 0x10)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x44)
syz_read_part_table(0x1063, &(0x7f0000002100)="$eJzsz7FtAkEQBdC/ujv7LrI7sMtw6MyBY1fgQq4fWiBApJRARh9Ii/ZOUAIQvBfMSjPztZrwUFNJ0vVfJalza7y/roM+0/J2Sx2yPfT7U/KRObUuO+O6uPsdxtS3bkxKjj9TC3y3wUsr5/p//aqsnc9yi+Zvc8dTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpXQIAAP//DFsO/A==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
clock_settime(0x4, 0x0)

2.900563254s ago: executing program 1 (id=418):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)

2.059408407s ago: executing program 1 (id=426):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
fremovexattr(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="747275737465642e73797a6b55d7d3aa9429"])

1.982345458s ago: executing program 3 (id=427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.976948068s ago: executing program 1 (id=428):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(0x0, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)

1.89018453s ago: executing program 0 (id=430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x8}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
r3 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0)

1.8622451s ago: executing program 3 (id=431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000440)={@empty, r2}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000980)={'sit0\x00', <r4=>0x0, 0x8, 0x10, 0xfb36, 0x3, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@end, @cipso={0x86, 0x16, 0x3, [{0x2, 0x5, "9c8483"}, {0x1, 0xb, "f4b45df485cc17375b"}]}, @timestamp_prespec={0x44, 0x3c, 0x69, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x100}, {@local, 0xc}, {@empty, 0x51db}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@rand_addr=0x64010101, 0xd1f}, {@local, 0xa3e8}]}]}}}}})
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x7, 0xff}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=@newtfilter={0x3c, 0x2c, 0xd29, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {}, {0xc, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}]}, 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'gre0\x00', <r7=>0x0, 0x7800, 0x700, 0x6, 0xfffffffe, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x86, 0x2}, @ssrr={0x89, 0x13, 0x52, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x0, [{@rand_addr=0x64010100}, {@local, 0x1}, {@multicast2, 0x3}, {@rand_addr=0x64010101, 0x5}, {@local, 0x7}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', <r8=>0x0, 0x29, 0x8, 0x0, 0x4, 0x8, @mcast1, @loopback, 0x10, 0x700, 0x8, 0xeb}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', <r9=>0x0, 0x4, 0x4, 0x8, 0xc, 0x2, @private1, @mcast2, 0x7, 0x7, 0x7, 0x2b0}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000c80)={@rand_addr, @remote, <r12=>0x0}, &(0x7f0000000cc0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'syztnl1\x00', <r13=>0x0, 0x2f, 0xa6, 0x7, 0x9, 0x4a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, 0x7897, 0x40, 0x1, 0x2}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1d8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r14, 0x0, 0xffffffffffffffff}, 0x18)
r15 = syz_io_uring_setup(0x15d0, &(0x7f0000000900)={0x0, 0xbb98, 0x400, 0xfffffffe, 0xffdffffe}, &(0x7f0000000300)=<r16=>0x0, &(0x7f0000000540)=<r17=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r16, r17, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r15, 0x6c38, 0x0, 0x0, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r18 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$UHID_CREATE2(r18, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138)
write$UHID_DESTROY(r18, &(0x7f0000000340), 0x4)

1.84860414s ago: executing program 0 (id=432):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0})
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1})
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)={[{@fat=@errors_remount}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@numtail}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@errors_remount}, {@fat=@errors_continue}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@tz_utc}, {@numtail}, {@shortname_mixed}, {@fat=@errors_remount}, {@numtail}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==")
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r3, 0xd831)
sync_file_range(r3, 0x6, 0xa00, 0x6)
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r9 = dup(r5)
r10 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
sendfile(r9, r10, 0x0, 0x8000fffffffe)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r11}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x6}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)

1.712920573s ago: executing program 1 (id=435):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x7, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) (fail_nth: 1)

1.359631878s ago: executing program 2 (id=436):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e000100697036677265746170000000340002801400060020010000000000000000000000000002060002000c00000014000700fc00000000000000000000000000000108000a0009"], 0x70}}, 0x0)

1.192127871s ago: executing program 2 (id=438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

1.173357851s ago: executing program 4 (id=440):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='fsi_master_acf_send_request\x00', r0}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')

1.107982092s ago: executing program 4 (id=441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x10}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x9, 0x1000, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x8}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
r3 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0)
socket(0x26, 0x6, 0x10001)

1.092621842s ago: executing program 2 (id=442):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x8}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
r3 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0)

1.072332313s ago: executing program 4 (id=443):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.064937413s ago: executing program 0 (id=444):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "347882c6c46d0631", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}, 0x0)

1.032467443s ago: executing program 2 (id=445):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfe33)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f00000002c0)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0xb832, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x2404000d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0x7, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)
write$P9_RWRITE(r9, &(0x7f0000000040)={0xb}, 0x11000)
read(r8, &(0x7f0000032440)=""/102364, 0x18fdc)
r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r10, 0x0, 0xd2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000340)={[0xfffffffffffe]}, 0x0, 0x8)
gettid()

972.345405ms ago: executing program 0 (id=446):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0xd335}], 0x1, 0x2120, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xb, 0x80, 0xffffffff, 0x17a})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r6, &(0x7f0000000640)="7cf02d2d", 0x4)
sendfile(r6, r5, 0x0, 0x7ffff000)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x13f, 0xa}}, 0x20)
listen(r4, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xfff7fffd}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x321002)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000240)=0xfe)
socket$netlink(0x10, 0x3, 0x14)

971.478765ms ago: executing program 4 (id=447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x13)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0)

965.256134ms ago: executing program 3 (id=448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x821c8000)
socket$inet_udplite(0x2, 0x2, 0x88)

908.009305ms ago: executing program 3 (id=449):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0))
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0)

887.803666ms ago: executing program 3 (id=450):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10, 0xfffffffd, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100000, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x2, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x3, 0x0, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00')
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x300, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
write$sndseq(r3, &(0x7f00000004c0)=[{0x84, 0x77, 0x1, 0x0, @time={0x203ff00, 0x8b}, {}, {}, @raw32={[0x7]}}, {0x3, 0xc, 0x80, 0x10, @time={0x5c, 0x3}, {0x6, 0x7}, {0x0, 0x9}, @time=@time={0x5, 0xb}}, {0x9, 0xcc, 0x88, 0x2, @tick=0x8001, {0xe, 0x5}, {0x9, 0xf6}, @time=@tick=0xfffffffe}], 0x54)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8)
dup2(r8, r9)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

887.020126ms ago: executing program 4 (id=451):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e0000004e0081880400e3bd6efb440009030e000a0010000000ba8000001201199cfb2472e0bcbae16854fd46a7", 0x2e}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d6"], &(0x7f0000000100)='GPL\x00', 0x4b7901da, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getcwd(0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2)
sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20)
pwritev2(r7, 0x0, 0x0, 0x9, 0xffffffff, 0x7)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
r10 = socket(0x10, 0x3, 0x0)
unshare(0x24020400)
connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)

800.626987ms ago: executing program 4 (id=452):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010040000000032c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000001400000011000100"/111], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getgroups(0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendfile(r2, r1, 0x0, 0x7ffff000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000000a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003400000000a080004400000000f08000140000000001c000580090001006d657461000000000c00fe8008000240000000010900010073797a30000000000900020073"], 0xa8}}, 0x0)

104.051038ms ago: executing program 2 (id=453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x10}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x9, 0x1000, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x8}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
r3 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0)
socket(0x26, 0x6, 0x10001)

103.348128ms ago: executing program 0 (id=454):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x5f9}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
listen(0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0)

51.805459ms ago: executing program 0 (id=455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0x100, @empty}, 0x1c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe)
sendfile(r5, r6, &(0x7f00000000c0)=0x4, 0x100000005)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000100000611167000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
r11 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001004000000000000000000000006000078fc42915b18a00407c0ca79edf826c326db30c210431cb6160ed98080e269706f8e8cbe2d189b81a1cdb4dd21fba7d0e6ea974630283530b38463f571ea15cce4ab35d06d21649cf3b3b5bfb8f2f4b5418429199605f485cdae00a16ba142d7a2e703bf2045a5f76bb0bb425fc914ee8714ba0c6a01541f5c3bb95e0acf0e73ae2242da12fa3963819b874b8a726665", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e00010077697265677561726400000004000280"], 0x44}}, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000000000000000000000420400120008000a"], 0x58}}, 0x8000)

20.41518ms ago: executing program 3 (id=456):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd3}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000"], 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7], 0x20}}, 0x4080)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x532ab2c360f99af9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x218, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x229}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x4000084)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={0x154, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "1d32166b405c93c318830b197df094d799c2228455b65b90bac712ee7e2ef8e074795cb0dbb8b8d3f7fe343eed0f665fa4ed99d7dbd6bac812d04949a65aebf825bdc68b0a01cdfa042e63c1c2f403550344b9e22c15c22a627786efeffecbf2a598a0eee6d6133b48ca618da608433f226e7fdce2d6da293eb0cc216a5816be2ad628b61ff9501c279e5116110ca406be05fa3fc078"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\x95\\}@/}$]!%-\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'activeport\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x2}, 0x4)

0s ago: executing program 2 (id=457):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts.
[   27.392936][   T29] audit: type=1400 audit(1749150484.208:62): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.394057][ T3303] cgroup: Unknown subsys name 'net'
[   27.415800][   T29] audit: type=1400 audit(1749150484.208:63): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.443438][   T29] audit: type=1400 audit(1749150484.238:64): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.595301][ T3303] cgroup: Unknown subsys name 'cpuset'
[   27.601547][ T3303] cgroup: Unknown subsys name 'rlimit'
[   27.772747][   T29] audit: type=1400 audit(1749150484.588:65): avc:  denied  { setattr } for  pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.796255][   T29] audit: type=1400 audit(1749150484.588:66): avc:  denied  { create } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.816746][   T29] audit: type=1400 audit(1749150484.588:67): avc:  denied  { write } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.837487][   T29] audit: type=1400 audit(1749150484.588:68): avc:  denied  { read } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.858265][   T29] audit: type=1400 audit(1749150484.608:69): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.867204][ T3308] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.883089][   T29] audit: type=1400 audit(1749150484.608:70): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.915301][   T29] audit: type=1400 audit(1749150484.718:71): avc:  denied  { relabelto } for  pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.953978][ T3303] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.067754][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   29.156840][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.164125][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.171518][ T3314] bridge_slave_0: entered allmulticast mode
[   29.178037][ T3314] bridge_slave_0: entered promiscuous mode
[   29.187521][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.194643][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.201850][ T3314] bridge_slave_1: entered allmulticast mode
[   29.208418][ T3314] bridge_slave_1: entered promiscuous mode
[   29.244383][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.276015][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.298844][ T3314] team0: Port device team_slave_0 added
[   29.308896][ T3314] team0: Port device team_slave_1 added
[   29.340215][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.347240][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.373979][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.393637][ T3325] chnl_net:caif_netlink_parms(): no params data found
[   29.402428][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   29.411495][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.418477][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.444544][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.503606][ T3314] hsr_slave_0: entered promiscuous mode
[   29.509936][ T3314] hsr_slave_1: entered promiscuous mode
[   29.518138][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   29.526848][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   29.597627][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.604749][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.611923][ T3322] bridge_slave_0: entered allmulticast mode
[   29.618468][ T3322] bridge_slave_0: entered promiscuous mode
[   29.627504][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.634752][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.642034][ T3322] bridge_slave_1: entered allmulticast mode
[   29.648602][ T3322] bridge_slave_1: entered promiscuous mode
[   29.659724][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.666900][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.674147][ T3325] bridge_slave_0: entered allmulticast mode
[   29.680611][ T3325] bridge_slave_0: entered promiscuous mode
[   29.699164][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.706479][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.713760][ T3325] bridge_slave_1: entered allmulticast mode
[   29.720204][ T3325] bridge_slave_1: entered promiscuous mode
[   29.758454][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.775087][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.782182][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.789524][ T3316] bridge_slave_0: entered allmulticast mode
[   29.796870][ T3316] bridge_slave_0: entered promiscuous mode
[   29.804096][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.818648][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.825917][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.833142][ T3321] bridge_slave_0: entered allmulticast mode
[   29.839705][ T3321] bridge_slave_0: entered promiscuous mode
[   29.847112][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.868422][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.875627][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.882814][ T3316] bridge_slave_1: entered allmulticast mode
[   29.889284][ T3316] bridge_slave_1: entered promiscuous mode
[   29.896350][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.911395][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.918520][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.926749][ T3321] bridge_slave_1: entered allmulticast mode
[   29.933255][ T3321] bridge_slave_1: entered promiscuous mode
[   29.966880][ T3322] team0: Port device team_slave_0 added
[   29.973787][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.993226][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.003194][ T3322] team0: Port device team_slave_1 added
[   30.009927][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.026920][ T3325] team0: Port device team_slave_0 added
[   30.033674][ T3325] team0: Port device team_slave_1 added
[   30.040667][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.066302][ T3321] team0: Port device team_slave_0 added
[   30.087381][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.094357][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.120323][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.132370][ T3321] team0: Port device team_slave_1 added
[   30.144452][ T3316] team0: Port device team_slave_0 added
[   30.153595][ T3316] team0: Port device team_slave_1 added
[   30.166014][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.172983][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.198989][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.214599][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.221732][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.247982][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.259388][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.266416][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.292398][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.321830][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.328828][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.355278][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.369059][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.376155][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.402329][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.416776][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.423768][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.450035][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.461397][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.468446][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.494476][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.537730][ T3322] hsr_slave_0: entered promiscuous mode
[   30.543759][ T3322] hsr_slave_1: entered promiscuous mode
[   30.549862][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.557555][ T3322] Cannot create hsr debugfs directory
[   30.569839][ T3325] hsr_slave_0: entered promiscuous mode
[   30.576014][ T3325] hsr_slave_1: entered promiscuous mode
[   30.581871][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.589490][ T3325] Cannot create hsr debugfs directory
[   30.621499][ T3321] hsr_slave_0: entered promiscuous mode
[   30.627590][ T3321] hsr_slave_1: entered promiscuous mode
[   30.633303][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.641012][ T3321] Cannot create hsr debugfs directory
[   30.646593][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.671100][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.682520][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.693863][ T3316] hsr_slave_0: entered promiscuous mode
[   30.700206][ T3316] hsr_slave_1: entered promiscuous mode
[   30.706346][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.713910][ T3316] Cannot create hsr debugfs directory
[   30.727000][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.886360][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.895530][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.906692][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.915745][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.942703][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.952411][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.970706][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.979477][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.002397][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.022568][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.033344][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   31.041745][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.059373][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.066535][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.074706][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.083517][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.107038][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.114309][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.142830][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.151789][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.177328][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.186274][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.209325][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.235479][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.247163][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.260821][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.274009][ T3325] 8021q: adding VLAN 0 to HW filter on device team0
[   31.287095][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   31.298508][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.305669][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.316498][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.323689][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.341141][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.348926][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.365553][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.372977][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.396745][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   31.409952][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.428597][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.435703][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.452591][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.459823][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.538441][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.552586][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.581256][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   31.600528][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.607911][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.619975][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.645458][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.652628][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.691345][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.718190][ T3314] veth0_vlan: entered promiscuous mode
[   31.738582][ T3314] veth1_vlan: entered promiscuous mode
[   31.774204][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.812908][ T3325] veth0_vlan: entered promiscuous mode
[   31.822247][ T3314] veth0_macvtap: entered promiscuous mode
[   31.843352][ T3314] veth1_macvtap: entered promiscuous mode
[   31.855279][ T3322] veth0_vlan: entered promiscuous mode
[   31.863793][ T3322] veth1_vlan: entered promiscuous mode
[   31.879177][ T3325] veth1_vlan: entered promiscuous mode
[   31.893700][ T3322] veth0_macvtap: entered promiscuous mode
[   31.919580][ T3321] veth0_vlan: entered promiscuous mode
[   31.927684][ T3321] veth1_vlan: entered promiscuous mode
[   31.935773][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.949324][ T3322] veth1_macvtap: entered promiscuous mode
[   31.957072][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.974049][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.982945][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.991795][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.000551][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.027327][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.040032][ T3325] veth0_macvtap: entered promiscuous mode
[   32.050806][ T3321] veth0_macvtap: entered promiscuous mode
[   32.061297][ T3325] veth1_macvtap: entered promiscuous mode
[   32.071153][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.086432][ T3321] veth1_macvtap: entered promiscuous mode
[   32.094074][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.102860][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.111777][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.120697][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.146361][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.156068][ T3316] veth0_vlan: entered promiscuous mode
[   32.171367][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.187065][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.187892][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.213006][ T3316] veth1_vlan: entered promiscuous mode
[   32.226767][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.241169][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.249376][ T3455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.249967][ T3321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.267599][ T3321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.276391][ T3321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.295835][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.304830][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.313637][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.322494][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.342642][ T3455] lo: entered promiscuous mode
[   32.351569][ T3316] veth0_macvtap: entered promiscuous mode
[   32.367923][ T3458] loop3: detected capacity change from 0 to 1024
[   32.375112][ T3458] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.383918][ T3458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   32.395566][ T3316] veth1_macvtap: entered promiscuous mode
[   32.413845][ T3458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.471060][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   32.471078][   T29] audit: type=1400 audit(1749150489.288:106): avc:  denied  { mount } for  pid=3457 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.498903][ T3462] loop0: detected capacity change from 0 to 8192
[   32.506018][   T29] audit: type=1400 audit(1749150489.308:107): avc:  denied  { setattr } for  pid=3457 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.510541][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.549867][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.561026][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.569836][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.578677][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.587482][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.608300][ T3307]  loop0: p1 p2 p3
[   32.612116][ T3307] loop0: p1 start 51379968 is beyond EOD, truncated
[   32.623784][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.630377][ T3307] loop0: p3 size 100663552 extends beyond EOD, truncated
[   32.647261][ T3469] SELinux: syz.2.3 (3469) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   32.665889][ T3462]  loop0: p1 p2 p3
[   32.669717][ T3462] loop0: p1 start 51379968 is beyond EOD, truncated
[   32.675649][   T29] audit: type=1400 audit(1749150489.488:108): avc:  denied  { mount } for  pid=3466 comm="syz.1.2" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   32.696570][ T3469] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.698338][   T29] audit: type=1400 audit(1749150489.488:109): avc:  denied  { unmount } for  pid=3466 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   32.732238][   T29] audit: type=1400 audit(1749150489.508:110): avc:  denied  { read } for  pid=3467 comm="syz.2.3" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.753193][   T29] audit: type=1400 audit(1749150489.508:111): avc:  denied  { open } for  pid=3467 comm="syz.2.3" path="net:[4026532633]" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.776265][   T29] audit: type=1400 audit(1749150489.518:112): avc:  denied  { create } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.786143][ T3462] loop0: p3 size 100663552 extends beyond EOD, 
[   32.796677][   T29] audit: type=1400 audit(1749150489.518:113): avc:  denied  { write } for  pid=3467 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.823352][ T3462] truncated
[   32.864073][   T29] audit: type=1326 audit(1749150489.558:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3467 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   32.887577][   T29] audit: type=1326 audit(1749150489.558:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3467 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   32.898156][ T3475] loop1: detected capacity change from 0 to 128
[   33.081563][ T3454] lo: left promiscuous mode
[   33.142556][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   33.145667][ T3496] loop4: detected capacity change from 0 to 128
[   33.174132][ T3498] lo: entered promiscuous mode
[   33.192211][ T3504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'.
[   33.204394][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   33.217973][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   33.255802][ T3504] lo: entered promiscuous mode
[   33.418855][ T3513] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   33.431164][ T3507] loop3: detected capacity change from 0 to 8192
[   33.457228][ T3511] loop1: detected capacity change from 0 to 8192
[   33.494984][ T3511]  loop1: p1 p2 p3
[   33.495308][ T3507]  loop3: p1 p2 p3
[   33.498856][ T3511] loop1: p1 start 51379968 is beyond EOD, truncated
[   33.507378][ T3507] loop3: p1 start 51379968 is beyond EOD, truncated
[   33.518962][ T3511] loop1: p3 size 100663552 extends beyond EOD, truncated
[   33.527564][ T3507] loop3: p3 size 100663552 extends beyond EOD, truncated
[   33.626209][ T3527] loop2: detected capacity change from 0 to 512
[   33.637511][ T3527] EXT4-fs (loop2): too many log groups per flexible block group
[   33.645461][ T3527] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   33.652501][ T3527] EXT4-fs (loop2): mount failed
[   33.662358][ T3527] netlink: 208 bytes leftover after parsing attributes in process `syz.2.19'.
[   33.671527][ T3527] unsupported nla_type 8573
[   33.682999][ T3527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.757803][ T3535] netlink: 14 bytes leftover after parsing attributes in process `syz.2.22'.
[   33.840092][ T3535] infiniband syz!: set active
[   33.844989][ T3535] infiniband syz!: added team_slave_0
[   33.855903][ T3535] RDS/IB: syz!: added
[   33.860143][ T3535] smc: adding ib device syz! with port count 1
[   33.867613][ T3535] smc:    ib device syz! port 1 has pnetid 
[   33.867981][ T3538] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   33.974928][ T3497] lo: left promiscuous mode
[   34.023476][ T3540] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   34.024003][ T3503] lo: left promiscuous mode
[   34.063297][ T3535] +}[@ (3535) used greatest stack depth: 10616 bytes left
[   34.071705][ T3540] smc: net device bond0 applied user defined pnetid SYZ2
[   34.079491][ T3540] smc: net device bond0 erased user defined pnetid SYZ2
[   34.132567][ T3547] loop1: detected capacity change from 0 to 128
[   34.248090][ T3561] tipc: Started in network mode
[   34.253024][ T3561] tipc: Node identity ac14140f, cluster identity 4711
[   34.261262][ T3561] tipc: New replicast peer: 0.0.255.255
[   34.267186][ T3561] tipc: Enabled bearer <udp:s>, priority 10
[   34.282028][ T3565] Zero length message leads to an empty skb
[   34.295560][ T3565] netlink: 'syz.0.32': attribute type 10 has an invalid length.
[   34.303311][ T3565] netlink: 2 bytes leftover after parsing attributes in process `syz.0.32'.
[   34.322528][ T3564] loop3: detected capacity change from 0 to 1024
[   34.324653][ T3565] team0: entered promiscuous mode
[   34.329615][ T3564] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.333940][ T3565] team_slave_0: entered promiscuous mode
[   34.334104][ T3565] team_slave_1: entered promiscuous mode
[   34.352696][ T3564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   34.364019][ T3565] bridge0: port 3(team0) entered blocking state
[   34.370437][ T3565] bridge0: port 3(team0) entered disabled state
[   34.385604][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.389380][ T3565] team0: entered allmulticast mode
[   34.403656][ T3565] team_slave_0: entered allmulticast mode
[   34.409674][ T3565] team_slave_1: entered allmulticast mode
[   34.418070][ T3565] bridge0: port 3(team0) entered blocking state
[   34.424389][ T3565] bridge0: port 3(team0) entered forwarding state
[   34.440273][ T3577] loop2: detected capacity change from 0 to 512
[   34.453871][ T3575] loop1: detected capacity change from 0 to 128
[   34.500579][ T3569] netlink: 'syz.4.35': attribute type 10 has an invalid length.
[   34.508654][ T3569] netlink: 2 bytes leftover after parsing attributes in process `syz.4.35'.
[   34.524647][ T3577] EXT4-fs (loop2): too many log groups per flexible block group
[   34.532413][ T3577] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   34.543237][ T3569] team0: entered promiscuous mode
[   34.546250][ T3582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[   34.548541][ T3569] team_slave_0: entered promiscuous mode
[   34.562920][ T3569] team_slave_1: entered promiscuous mode
[   34.569618][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.579929][ T3577] EXT4-fs (loop2): mount failed
[   34.583402][ T3569] bridge0: port 3(team0) entered blocking state
[   34.591365][ T3569] bridge0: port 3(team0) entered disabled state
[   34.598339][ T3569] team0: entered allmulticast mode
[   34.603578][ T3569] team_slave_0: entered allmulticast mode
[   34.609492][ T3569] team_slave_1: entered allmulticast mode
[   34.611225][ T3577] netlink: 208 bytes leftover after parsing attributes in process `syz.2.38'.
[   34.617487][ T3569] bridge0: port 3(team0) entered blocking state
[   34.630667][ T3569] bridge0: port 3(team0) entered forwarding state
[   34.640487][ T3577] SELinux:  Context Ü is not valid (left unmapped).
[   34.696753][ T3584] can0: slcan on ttyS3.
[   34.706859][ T3591] 9pnet_fd: Insufficient options for proto=fd
[   34.715851][ T3579] lo: entered promiscuous mode
[   34.800335][ T3579] loop1: detected capacity change from 0 to 8192
[   34.829845][ T3595] tipc: Started in network mode
[   34.834957][ T3595] tipc: Node identity ac14140f, cluster identity 4711
[   34.842098][ T3595] tipc: New replicast peer: 0.0.255.255
[   34.847892][ T3595] tipc: Enabled bearer <udp:s>, priority 10
[   34.871978][ T3579]  loop1: p1 p2 p3
[   34.875984][ T3579] loop1: p1 start 51379968 is beyond EOD, truncated
[   34.883293][ T3579] loop1: p3 size 100663552 extends beyond EOD, truncated
[   34.907350][ T3584] can0 (unregistered): slcan off ttyS3.
[   34.913064][ T3584] Falling back ldisc for ttyS3.
[   35.044454][ T3614] loop4: detected capacity change from 0 to 128
[   35.085054][ T3612] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   35.097506][ T3612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   35.116030][ T3618] lo: entered promiscuous mode
[   35.209346][ T3628] can0: slcan on ttyS3.
[   35.231879][ T3625] loop2: detected capacity change from 0 to 8192
[   35.264620][   T36] tipc: Node number set to 2886997007
[   35.295420][ T3625]  loop2: p1 p2 p3
[   35.299280][ T3625] loop2: p1 start 51379968 is beyond EOD, truncated
[   35.306614][ T3625] loop2: p3 size 100663552 extends beyond EOD, truncated
[   35.325895][ T3578] lo: left promiscuous mode
[   35.334635][ T3628] can0 (unregistered): slcan off ttyS3.
[   35.340497][ T3591] syz.3.41 (3591) used greatest stack depth: 9136 bytes left
[   35.343884][ T3628] Falling back ldisc for ttyS3.
[   35.382967][ T3632] loop7: detected capacity change from 0 to 16384
[   35.414073][ T3634] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   35.434743][ T3636] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   35.444786][ T3637] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   35.447558][ T3632] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[   35.454341][ T3637] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   35.466710][ T3632] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   35.483243][ T3632] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   35.493025][ T3632] Buffer I/O error on dev loop7, logical block 992, async page read
[   35.536972][ T3631] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.546849][ T3631] Buffer I/O error on dev loop7, logical block 1, lost async page write
[   35.555264][ T3631] Buffer I/O error on dev loop7, logical block 2, lost async page write
[   35.563619][ T3631] Buffer I/O error on dev loop7, logical block 3, lost async page write
[   35.572083][ T3631] Buffer I/O error on dev loop7, logical block 4, lost async page write
[   35.580835][ T3631] Buffer I/O error on dev loop7, logical block 5, lost async page write
[   35.589410][ T3631] Buffer I/O error on dev loop7, logical block 6, lost async page write
[   35.598149][ T3631] Buffer I/O error on dev loop7, logical block 7, lost async page write
[   35.606842][ T3631] Buffer I/O error on dev loop7, logical block 8, lost async page write
[   35.620011][ T3631] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.633695][ T3631] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.646939][ T3631] I/O error, dev loop7, sector 3080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.660537][ T3631] I/O error, dev loop7, sector 4104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.674883][ T3631] I/O error, dev loop7, sector 5128 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   35.684181][ T3650] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   35.696751][ T3652] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   35.709755][ T3648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   35.735761][ T3654] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   35.917432][ T3616] lo: left promiscuous mode
[   35.965998][   T10] tipc: Node number set to 2886997007
[   36.077051][ T3691] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   36.085049][ T3700] loop1: detected capacity change from 0 to 128
[   36.089009][ T3691] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   36.164027][ T3708] loop1: detected capacity change from 0 to 128
[   36.825171][ T3723] tipc: Started in network mode
[   36.830088][ T3723] tipc: Node identity ac14140f, cluster identity 4711
[   36.838723][ T3723] tipc: New replicast peer: 0.0.255.255
[   36.844455][ T3723] tipc: Enabled bearer <udp:s>, priority 10
[   36.857958][ T3727] can0: slcan on ttyS3.
[   36.918022][ T3731] SELinux: syz.2.93 (3731) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   36.919628][ T3729] tipc: Started in network mode
[   36.936696][ T3729] tipc: Node identity ac14140f, cluster identity 4711
[   36.958082][ T3729] tipc: New replicast peer: 0.0.255.255
[   36.963765][ T3729] tipc: Enabled bearer <udp:s>, priority 10
[   36.991460][ T3733] lo: entered promiscuous mode
[   37.025001][ T3727] can0 (unregistered): slcan off ttyS3.
[   37.031976][ T3727] Falling back ldisc for ttyS3.
[   37.116977][ T3739] loop4: detected capacity change from 0 to 8192
[   37.130745][ T3750] loop0: detected capacity change from 0 to 128
[   37.143135][ T3752] loop3: detected capacity change from 0 to 128
[   37.159744][ T3739]  loop4: p1 p2 p3
[   37.163612][ T3739] loop4: p1 start 51379968 is beyond EOD, truncated
[   37.172405][ T3739] loop4: p3 size 100663552 extends beyond EOD, truncated
[   37.318667][ T3767] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   37.343830][ T3768] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   37.792362][ T3732] lo: left promiscuous mode
[   37.832134][ T3770] can0: slcan on ttyS3.
[   37.934780][ T3770] can0 (unregistered): slcan off ttyS3.
[   37.940883][ T3770] Falling back ldisc for ttyS3.
[   37.954653][ T3391] tipc: Node number set to 2886997007
[   37.983685][ T3391] tipc: Node number set to 2886997007
[   38.007530][   T29] kauditd_printk_skb: 749 callbacks suppressed
[   38.007548][   T29] audit: type=1326 audit(1749150494.828:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.053372][   T29] audit: type=1326 audit(1749150494.858:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.076904][   T29] audit: type=1326 audit(1749150494.858:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.100702][   T29] audit: type=1326 audit(1749150494.858:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.108388][ T3780] loop2: detected capacity change from 0 to 128
[   38.124156][   T29] audit: type=1326 audit(1749150494.858:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.124192][   T29] audit: type=1326 audit(1749150494.858:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.124271][   T29] audit: type=1326 audit(1749150494.858:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.201523][   T29] audit: type=1326 audit(1749150494.858:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.213680][ T3785] netlink: 'syz.4.109': attribute type 10 has an invalid length.
[   38.225025][   T29] audit: type=1326 audit(1749150494.858:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.232729][ T3785] __nla_validate_parse: 11 callbacks suppressed
[   38.232744][ T3785] netlink: 2 bytes leftover after parsing attributes in process `syz.4.109'.
[   38.256109][   T29] audit: type=1326 audit(1749150494.858:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5525e8e929 code=0x7ffc0000
[   38.527839][ T3806] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   38.543266][ T3803] loop0: detected capacity change from 0 to 1024
[   38.550280][ T3803] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.557404][ T3803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   38.576272][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.607640][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'.
[   39.030159][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.073131][ T3823] loop3: detected capacity change from 0 to 512
[   39.080030][ T3821] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   39.094984][ T3825] loop2: detected capacity change from 0 to 128
[   39.102073][ T3821] smc: net device bond0 applied user defined pnetid SYZ2
[   39.111267][ T3827] loop0: detected capacity change from 0 to 128
[   39.115755][ T3823] EXT4-fs (loop3): too many log groups per flexible block group
[   39.124854][ T3821] smc: net device bond0 erased user defined pnetid SYZ2
[   39.125432][ T3823] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   39.143142][ T3823] EXT4-fs (loop3): mount failed
[   39.234107][ T3841] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   39.309729][ T3844] netlink: 'syz.2.131': attribute type 10 has an invalid length.
[   39.317642][ T3844] netlink: 2 bytes leftover after parsing attributes in process `syz.2.131'.
[   39.321781][ T3848] can0: slcan on ttyS3.
[   39.342002][ T3851] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   39.395400][ T3844] team0: entered promiscuous mode
[   39.400573][ T3844] team_slave_0: entered promiscuous mode
[   39.406454][ T3844] team_slave_1: entered promiscuous mode
[   39.412303][ T3844] bridge0: port 3(team0) entered blocking state
[   39.418909][ T3844] bridge0: port 3(team0) entered disabled state
[   39.425461][ T3844] team0: entered allmulticast mode
[   39.430672][ T3844] team_slave_0: entered allmulticast mode
[   39.436612][ T3844] team_slave_1: entered allmulticast mode
[   39.444148][ T3844] bridge0: port 3(team0) entered blocking state
[   39.450542][ T3844] bridge0: port 3(team0) entered forwarding state
[   39.462710][ T3839] tipc: Started in network mode
[   39.467891][ T3839] tipc: Node identity ac14140f, cluster identity 4711
[   39.475312][ T3839] tipc: New replicast peer: 0.0.255.255
[   39.480967][ T3839] tipc: Enabled bearer <udp:s>, priority 10
[   39.524700][ T3848] can0 (unregistered): slcan off ttyS3.
[   39.530561][ T3848] Falling back ldisc for ttyS3.
[   39.629837][ T3861] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   39.638991][ T3861] smc: net device bond0 applied user defined pnetid SYZ2
[   39.646323][ T3861] smc: net device bond0 erased user defined pnetid SYZ2
[   39.651240][ T3864] netlink: 'syz.4.140': attribute type 10 has an invalid length.
[   39.661471][ T3864] netlink: 2 bytes leftover after parsing attributes in process `syz.4.140'.
[   39.680492][ T3866] loop3: detected capacity change from 0 to 512
[   39.693296][ T3870] loop2: detected capacity change from 0 to 128
[   39.718436][ T3866] EXT4-fs (loop3): too many log groups per flexible block group
[   39.726260][ T3866] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   39.734151][ T3866] EXT4-fs (loop3): mount failed
[   39.753159][ T3874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.146'.
[   39.769128][ T3878] loop3: detected capacity change from 0 to 128
[   39.828131][ T3874] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   39.838637][ T3874] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   39.865229][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'.
[   39.901328][ T3893] loop2: detected capacity change from 0 to 512
[   39.918043][ T3893] EXT4-fs (loop2): too many log groups per flexible block group
[   39.926005][ T3893] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   39.935035][ T3893] EXT4-fs (loop2): mount failed
[   39.944651][ T3883] 9pnet_fd: Insufficient options for proto=fd
[   39.978661][ T3898] loop0: detected capacity change from 0 to 128
[   40.011673][ T3893] netlink: 208 bytes leftover after parsing attributes in process `syz.2.152'.
[   40.037881][ T3883] syz.3.150 (3883) used greatest stack depth: 8880 bytes left
[   40.080946][ T3906] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   40.104622][ T3906] smc: net device bond0 applied user defined pnetid SYZ2
[   40.421861][ T3909] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   40.439838][ T3912] smc: net device bond0 erased user defined pnetid SYZ2
[   40.485231][ T3391] tipc: Node number set to 2886997007
[   40.550543][ T3914] loop1: detected capacity change from 0 to 512
[   40.579981][ T3916] netlink: 14 bytes leftover after parsing attributes in process `syz.2.159'.
[   40.626912][ T3914] EXT4-fs (loop1): too many log groups per flexible block group
[   40.634783][ T3914] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   40.751194][ T3914] EXT4-fs (loop1): mount failed
[   40.785259][ T3923] syz!: rxe_newlink: already configured on team_slave_0
[   40.808694][ T3923] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   40.886135][ T3935] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   40.902162][ T3933] netlink: 'syz.3.162': attribute type 10 has an invalid length.
[   40.910087][ T3933] netlink: 2 bytes leftover after parsing attributes in process `syz.3.162'.
[   40.925765][ T3933] team0: entered promiscuous mode
[   40.931234][ T3933] team_slave_0: entered promiscuous mode
[   40.937047][ T3933] team_slave_1: entered promiscuous mode
[   40.943200][ T3933] bridge0: port 3(team0) entered blocking state
[   40.945891][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[   40.949556][ T3933] bridge0: port 3(team0) entered disabled state
[   40.964852][ T3933] team0: entered allmulticast mode
[   40.970057][ T3933] team_slave_0: entered allmulticast mode
[   40.975927][ T3933] team_slave_1: entered allmulticast mode
[   40.982974][ T3933] bridge0: port 3(team0) entered blocking state
[   40.989307][ T3933] bridge0: port 3(team0) entered forwarding state
[   41.073553][ T3943] loop1: detected capacity change from 0 to 1024
[   41.079733][ T3948] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   41.080740][ T3943] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.096671][ T3943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   41.108039][ T3943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.156543][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.206852][ T3957] loop3: detected capacity change from 0 to 512
[   41.213548][ T3955] loop1: detected capacity change from 0 to 128
[   41.226517][ T3957] EXT4-fs (loop3): too many log groups per flexible block group
[   41.234288][ T3957] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   41.239191][ T3953] syz!: rxe_newlink: already configured on team_slave_0
[   41.252872][ T3957] EXT4-fs (loop3): mount failed
[   41.252908][ T3953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   41.283866][ T3962] SELinux: syz.1.173 (3962) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   41.308113][ T3964] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   41.359720][ T3973] SELinux: syz.2.177 (3973) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   41.406215][ T3977] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   42.003994][ T3988] loop0: detected capacity change from 0 to 128
[   42.052541][ T3990] loop0: detected capacity change from 0 to 1024
[   42.060094][ T3990] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.067387][ T3990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   42.078886][ T3990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.093364][ T3993] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   42.105002][ T3993] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   42.139586][ T3996] loop4: detected capacity change from 0 to 128
[   42.147715][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.183572][ T4002] SELinux: syz.4.187 (4002) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   42.226766][ T4007] SELinux: syz.4.188 (4007) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   42.243499][ T4005] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   42.251372][ T4008] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   42.279939][ T3998] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   42.291062][ T4000] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   42.359226][ T4021] can0: slcan on ttyS3.
[   42.359237][ T4014] lo: entered promiscuous mode
[   42.537961][ T4024] loop2: detected capacity change from 0 to 8192
[   42.564898][ T4021] can0 (unregistered): slcan off ttyS3.
[   42.570793][ T4021] Falling back ldisc for ttyS3.
[   42.927336][ T4033] loop7: detected capacity change from 0 to 16384
[   42.963706][ T4024]  loop2: p1 p2 p3
[   42.980794][ T4024] loop2: p1 start 51379968 is beyond EOD, truncated
[   43.037069][ T4038] blk_print_req_error: 2 callbacks suppressed
[   43.037085][ T4038] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   43.052831][ T4038] buffer_io_error: 983 callbacks suppressed
[   43.052896][ T4038] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   43.077661][ T4033] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0
[   43.088625][ T4033] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0
[   43.098646][ T4033] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.108290][ T4033] Buffer I/O error on dev loop7, logical block 192, async page read
[   43.119581][   T29] kauditd_printk_skb: 461 callbacks suppressed
[   43.119597][   T29] audit: type=1326 audit(1749150499.938:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbab6e929 code=0x7ffc0000
[   43.149354][ T4024] loop2: p3 size 100663552 extends beyond EOD, truncated
[   43.150742][ T4013] lo: left promiscuous mode
[   43.182139][   T29] audit: type=1326 audit(1749150499.998:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.207746][ T4030] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   43.217705][ T4030] Buffer I/O error on dev loop7, logical block 1, lost async page write
[   43.226102][ T4030] Buffer I/O error on dev loop7, logical block 2, lost async page write
[   43.234878][ T4030] Buffer I/O error on dev loop7, logical block 3, lost async page write
[   43.239653][   T29] audit: type=1326 audit(1749150500.028:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbab6e929 code=0x7ffc0000
[   43.243234][ T4030] Buffer I/O error on dev loop7, logical block 4, lost async page write
[   43.271412][   T29] audit: type=1326 audit(1749150499.998:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.275402][ T4030] Buffer I/O error on dev loop7, logical block 5, lost async page write
[   43.307341][ T4030] Buffer I/O error on dev loop7, logical block 6, lost async page write
[   43.315947][ T4030] Buffer I/O error on dev loop7, logical block 7, lost async page write
[   43.317330][   T29] audit: type=1326 audit(1749150500.128:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97f777d290 code=0x7ffc0000
[   43.324307][ T4030] Buffer I/O error on dev loop7, logical block 8, lost async page write
[   43.356293][   T29] audit: type=1326 audit(1749150500.128:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.379869][   T29] audit: type=1326 audit(1749150500.128:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.403267][   T29] audit: type=1326 audit(1749150500.128:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.426722][   T29] audit: type=1326 audit(1749150500.128:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.450100][   T29] audit: type=1326 audit(1749150500.128:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   43.476662][ T4030] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x800 phys_seg 63 prio class 0
[   43.495349][ T4045] can0: slcan on ttyS3.
[   43.554614][ T4047] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   43.567656][ T4049] __nla_validate_parse: 10 callbacks suppressed
[   43.567673][ T4049] netlink: 14 bytes leftover after parsing attributes in process `syz.1.202'.
[   43.574330][ T4044] loop4: detected capacity change from 0 to 128
[   43.601413][ T4052] SELinux: syz.0.203 (4052) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   43.615996][ T4052] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.203'.
[   43.636028][ T4049] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   43.645189][ T4049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   43.694949][ T4045] can0 (unregistered): slcan off ttyS3.
[   43.703973][ T4045] Falling back ldisc for ttyS3.
[   43.712519][ T4062] loop7: detected capacity change from 0 to 16384
[   43.778211][ T4066] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   43.778421][ T4062] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[   43.806764][ T4062] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[   43.821806][ T4062] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.861577][ T4073] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   43.909407][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'.
[   43.945840][ T4081] SELinux: syz.1.215 (4081) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   43.950942][ T4083] loop7: detected capacity change from 0 to 16384
[   43.991774][ T4081] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.215'.
[   44.002317][ T4087] netlink: 14 bytes leftover after parsing attributes in process `syz.0.217'.
[   44.035165][ T4087] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   44.046302][ T4087] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   44.069563][ T4086] loop4: detected capacity change from 0 to 128
[   44.081603][ T4094] can0: slcan on ttyS3.
[   44.187886][ T4108] FAULT_INJECTION: forcing a failure.
[   44.187886][ T4108] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.189570][ T4107] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   44.201045][ T4108] CPU: 0 UID: 0 PID: 4108 Comm: syz.2.224 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   44.201146][ T4108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   44.201166][ T4108] Call Trace:
[   44.201175][ T4108]  <TASK>
[   44.201185][ T4108]  __dump_stack+0x1d/0x30
[   44.201217][ T4108]  dump_stack_lvl+0xe8/0x140
[   44.201242][ T4108]  dump_stack+0x15/0x1b
[   44.201303][ T4108]  should_fail_ex+0x265/0x280
[   44.201330][ T4108]  should_fail+0xb/0x20
[   44.201351][ T4108]  should_fail_usercopy+0x1a/0x20
[   44.201381][ T4108]  _copy_from_user+0x1c/0xb0
[   44.201413][ T4108]  io_register_clone_buffers+0x4e/0x750
[   44.201482][ T4108]  ? __fget_files+0x184/0x1c0
[   44.201512][ T4108]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   44.201543][ T4108]  __se_sys_io_uring_register+0x733/0xeb0
[   44.201570][ T4108]  ? fput+0x8f/0xc0
[   44.201595][ T4108]  ? ksys_write+0x192/0x1a0
[   44.201629][ T4108]  __x64_sys_io_uring_register+0x55/0x70
[   44.201660][ T4108]  x64_sys_call+0xc91/0x2fb0
[   44.201720][ T4108]  do_syscall_64+0xd2/0x200
[   44.201757][ T4108]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   44.201792][ T4108]  ? clear_bhb_loop+0x40/0x90
[   44.201819][ T4108]  ? clear_bhb_loop+0x40/0x90
[   44.201885][ T4108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.201914][ T4108] RIP: 0033:0x7f5525e8e929
[   44.201938][ T4108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.202039][ T4108] RSP: 002b:00007f55244f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   44.202097][ T4108] RAX: ffffffffffffffda RBX: 00007f55260b5fa0 RCX: 00007f5525e8e929
[   44.202114][ T4108] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000003
[   44.202129][ T4108] RBP: 00007f55244f7090 R08: 0000000000000000 R09: 0000000000000000
[   44.202168][ T4108] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   44.202189][ T4108] R13: 0000000000000000 R14: 00007f55260b5fa0 R15: 00007ffdbcbdbee8
[   44.202212][ T4108]  </TASK>
[   44.262218][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   44.313232][ T4116] loop7: detected capacity change from 0 to 16384
[   44.489440][ T4123] netlink: 14 bytes leftover after parsing attributes in process `syz.1.230'.
[   44.504769][ T4094] can0 (unregistered): slcan off ttyS3.
[   44.515684][ T4094] Falling back ldisc for ttyS3.
[   44.545356][ T4123] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   44.555761][ T4123] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   44.608214][ T4127] loop1: detected capacity change from 0 to 512
[   44.626109][ T4127] SELinux: security_context_str_to_sid (sysadm_uaudit,measure,fowner>00000000000000000000,hash,,errors=continue) failed with errno=-22
[   44.647716][ T4129] loop0: detected capacity change from 0 to 128
[   44.666002][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.236'.
[   44.692642][ T4135] lo: entered promiscuous mode
[   44.709922][ T4139] loop7: detected capacity change from 0 to 16384
[   44.735528][ T4141] loop0: detected capacity change from 0 to 512
[   44.756863][ T4144] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   44.781730][ T4141] EXT4-fs (loop0): too many log groups per flexible block group
[   44.789544][ T4141] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   44.798630][ T4142] loop3: detected capacity change from 0 to 8192
[   44.808696][ T4141] EXT4-fs (loop0): mount failed
[   44.847395][ T4150] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   44.849041][ T4142]  loop3: p1 p2 p3
[   44.858075][ T4142] loop3: p1 start 51379968 is beyond EOD, truncated
[   44.868664][ T4142] loop3: p3 size 100663552 extends beyond EOD, truncated
[   44.895373][ T4155] netlink: 14 bytes leftover after parsing attributes in process `syz.2.243'.
[   44.900900][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'.
[   44.954742][ T4159] can0: slcan on ttyS3.
[   45.019002][ T4155] syz!: rxe_newlink: already configured on team_slave_0
[   45.032391][ T4155] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   45.075090][ T4159] can0 (unregistered): slcan off ttyS3.
[   45.081141][ T4159] Falling back ldisc for ttyS3.
[   45.346541][ T4166] loop2: detected capacity change from 0 to 512
[   45.367292][ T4168] loop7: detected capacity change from 0 to 16384
[   45.407002][ T4166] EXT4-fs (loop2): too many log groups per flexible block group
[   45.414774][ T4166] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   45.448827][ T4166] EXT4-fs (loop2): mount failed
[   45.494988][ T4134] lo: left promiscuous mode
[   45.531837][ T4174] netlink: 'syz.0.247': attribute type 10 has an invalid length.
[   45.565725][ T4176] loop2: detected capacity change from 0 to 128
[   45.670401][ T4188] SELinux: syz.0.254 (4188) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   45.750923][ T4198] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   45.922251][ T4206] capability: warning: `syz.1.258' uses deprecated v2 capabilities in a way that may be insecure
[   46.306344][ T4211] lo: entered promiscuous mode
[   46.370260][ T4221] loop0: detected capacity change from 0 to 512
[   46.407043][ T4221] EXT4-fs (loop0): too many log groups per flexible block group
[   46.414915][ T4221] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   46.446285][ T4221] EXT4-fs (loop0): mount failed
[   46.470514][ T4222] loop1: detected capacity change from 0 to 8192
[   46.520675][ T4229] can0: slcan on ttyS3.
[   46.526798][ T4222]  loop1: p1 p2 p3
[   46.530910][ T4222] loop1: p1 start 51379968 is beyond EOD, truncated
[   46.548366][ T4222] loop1: p3 size 100663552 extends beyond EOD, truncated
[   46.559073][ T4231] SELinux: syz.3.267 (4231) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   46.644424][ T4237] loop3: detected capacity change from 0 to 128
[   46.668955][ T4229] can0 (unregistered): slcan off ttyS3.
[   46.679684][ T4229] Falling back ldisc for ttyS3.
[   46.760882][ T4241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   46.784881][ T4250] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   46.802987][ T4252] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   46.811004][ T4252] smc: net device bond0 applied user defined pnetid SYZ2
[   46.820625][ T4252] smc: net device bond0 erased user defined pnetid SYZ2
[   46.995212][ T4267] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   47.077964][ T4210] lo: left promiscuous mode
[   47.112931][ T4276] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   47.166785][ T4279] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   47.174564][ T4279] smc: net device bond0 applied user defined pnetid SYZ2
[   47.181973][ T4279] smc: net device bond0 erased user defined pnetid SYZ2
[   47.222620][ T4283] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   47.339724][ T4303] netlink: 'syz.2.293': attribute type 10 has an invalid length.
[   47.358911][ T4305] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   47.391229][ T4307] syz.1.297 uses obsolete (PF_INET,SOCK_PACKET)
[   47.447111][ T4313] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   47.454915][ T4313] smc: net device bond0 applied user defined pnetid SYZ2
[   47.462375][ T4313] smc: net device bond0 erased user defined pnetid SYZ2
[   47.553072][ T4325] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   47.565208][ T4325] mmap: syz.3.304 (4325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   47.603035][ T4328] loop7: detected capacity change from 0 to 16384
[   47.682389][ T4335] loop3: detected capacity change from 0 to 128
[   47.760651][ T4339] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   47.892265][ T4355] FAULT_INJECTION: forcing a failure.
[   47.892265][ T4355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.905529][ T4355] CPU: 0 UID: 0 PID: 4355 Comm: syz.0.317 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   47.905564][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   47.905579][ T4355] Call Trace:
[   47.905584][ T4355]  <TASK>
[   47.905658][ T4355]  __dump_stack+0x1d/0x30
[   47.905679][ T4355]  dump_stack_lvl+0xe8/0x140
[   47.905698][ T4355]  dump_stack+0x15/0x1b
[   47.905789][ T4355]  should_fail_ex+0x265/0x280
[   47.905809][ T4355]  should_fail+0xb/0x20
[   47.905824][ T4355]  should_fail_usercopy+0x1a/0x20
[   47.905907][ T4355]  _copy_from_iter+0xcf/0xe40
[   47.905935][ T4355]  ? __build_skb_around+0x1a0/0x200
[   47.906032][ T4355]  ? __alloc_skb+0x223/0x320
[   47.906066][ T4355]  netlink_sendmsg+0x471/0x6b0
[   47.906108][ T4355]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.906217][ T4355]  __sock_sendmsg+0x145/0x180
[   47.906244][ T4355]  ____sys_sendmsg+0x31e/0x4e0
[   47.906285][ T4355]  ___sys_sendmsg+0x17b/0x1d0
[   47.906411][ T4355]  __x64_sys_sendmsg+0xd4/0x160
[   47.906471][ T4355]  x64_sys_call+0x2999/0x2fb0
[   47.906498][ T4355]  do_syscall_64+0xd2/0x200
[   47.906534][ T4355]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.906579][ T4355]  ? clear_bhb_loop+0x40/0x90
[   47.906602][ T4355]  ? clear_bhb_loop+0x40/0x90
[   47.906625][ T4355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.906650][ T4355] RIP: 0033:0x7f6ba21ee929
[   47.906669][ T4355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.906724][ T4355] RSP: 002b:00007f6ba0857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.906742][ T4355] RAX: ffffffffffffffda RBX: 00007f6ba2415fa0 RCX: 00007f6ba21ee929
[   47.906752][ T4355] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[   47.906763][ T4355] RBP: 00007f6ba0857090 R08: 0000000000000000 R09: 0000000000000000
[   47.906773][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.906784][ T4355] R13: 0000000000000000 R14: 00007f6ba2415fa0 R15: 00007ffe7e867f58
[   47.906801][ T4355]  </TASK>
[   47.950431][ T4357] lo speed is unknown, defaulting to 1000
[   48.037371][ T4360] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   48.039057][ T3390] IPVS: starting estimator thread 0...
[   48.069269][ T4357] lo speed is unknown, defaulting to 1000
[   48.146512][ T4357] lo speed is unknown, defaulting to 1000
[   48.152644][ T4357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   48.160483][ T4357] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   48.164729][ T4358] IPVS: using max 1968 ests per chain, 98400 per kthread
[   48.171477][ T4357] lo speed is unknown, defaulting to 1000
[   48.181131][ T4357] lo speed is unknown, defaulting to 1000
[   48.187528][ T4357] lo speed is unknown, defaulting to 1000
[   48.193672][ T4357] lo speed is unknown, defaulting to 1000
[   48.199854][ T4357] lo speed is unknown, defaulting to 1000
[   48.226765][   T29] kauditd_printk_skb: 662 callbacks suppressed
[   48.226784][   T29] audit: type=1326 audit(1749150505.048:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   48.233422][ T4363] loop4: detected capacity change from 0 to 128
[   48.270260][   T29] audit: type=1326 audit(1749150505.048:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   48.293714][   T29] audit: type=1326 audit(1749150505.048:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   48.317283][   T29] audit: type=1326 audit(1749150505.048:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   48.340624][   T29] audit: type=1326 audit(1749150505.048:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f97f777e929 code=0x7ffc0000
[   48.363993][   T29] audit: type=1326 audit(1749150505.048:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f97f777e963 code=0x7ffc0000
[   48.387253][   T29] audit: type=1326 audit(1749150505.048:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f97f777d3df code=0x7ffc0000
[   48.410551][   T29] audit: type=1326 audit(1749150505.048:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f97f777e9b7 code=0x7ffc0000
[   48.433897][   T29] audit: type=1326 audit(1749150505.048:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97f777d290 code=0x7ffc0000
[   48.457482][   T29] audit: type=1326 audit(1749150505.048:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f777e52b code=0x7ffc0000
[   48.568108][ T4373] lo speed is unknown, defaulting to 1000
[   48.587502][ T4378] netlink: 'syz.2.324': attribute type 10 has an invalid length.
[   48.595446][ T4378] __nla_validate_parse: 10 callbacks suppressed
[   48.595515][ T4378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.324'.
[   48.597444][ T4380] netlink: 'syz.4.323': attribute type 10 has an invalid length.
[   48.618742][ T4380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.323'.
[   48.634028][ T4372] lo speed is unknown, defaulting to 1000
[   48.651156][ T4381] can0: slcan on ttyS3.
[   48.803968][ T4393] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   48.812938][ T4398] FAULT_INJECTION: forcing a failure.
[   48.812938][ T4398] name failslab, interval 1, probability 0, space 0, times 1
[   48.825937][ T4398] CPU: 0 UID: 0 PID: 4398 Comm: syz.0.333 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   48.825988][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   48.826003][ T4398] Call Trace:
[   48.826011][ T4398]  <TASK>
[   48.826067][ T4398]  __dump_stack+0x1d/0x30
[   48.826087][ T4398]  dump_stack_lvl+0xe8/0x140
[   48.826151][ T4398]  dump_stack+0x15/0x1b
[   48.826167][ T4398]  should_fail_ex+0x265/0x280
[   48.826186][ T4398]  should_failslab+0x8c/0xb0
[   48.826267][ T4398]  kmem_cache_alloc_node_noprof+0x57/0x320
[   48.826324][ T4398]  ? dup_task_struct+0x70/0x6a0
[   48.826358][ T4398]  dup_task_struct+0x70/0x6a0
[   48.826388][ T4398]  ? _parse_integer+0x27/0x40
[   48.826500][ T4398]  copy_process+0x399/0x1fe0
[   48.826528][ T4398]  ? kstrtouint+0x76/0xc0
[   48.826563][ T4398]  ? kstrtouint_from_user+0x9f/0xf0
[   48.826591][ T4398]  ? __rcu_read_unlock+0x4f/0x70
[   48.826617][ T4398]  kernel_clone+0x16c/0x5b0
[   48.826642][ T4398]  ? vfs_write+0x75e/0x8e0
[   48.826665][ T4398]  __x64_sys_clone+0xe6/0x120
[   48.826742][ T4398]  x64_sys_call+0x2c59/0x2fb0
[   48.826768][ T4398]  do_syscall_64+0xd2/0x200
[   48.826810][ T4398]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.826860][ T4398]  ? clear_bhb_loop+0x40/0x90
[   48.826885][ T4398]  ? clear_bhb_loop+0x40/0x90
[   48.826905][ T4398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.826973][ T4398] RIP: 0033:0x7f6ba21ee929
[   48.826990][ T4398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.827013][ T4398] RSP: 002b:00007f6ba0856fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   48.827035][ T4398] RAX: ffffffffffffffda RBX: 00007f6ba2415fa0 RCX: 00007f6ba21ee929
[   48.827094][ T4398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080
[   48.827180][ T4398] RBP: 00007f6ba0857090 R08: ffffffffffffffff R09: ffffffffffffffff
[   48.827196][ T4398] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   48.827211][ T4398] R13: 0000000000000000 R14: 00007f6ba2415fa0 R15: 00007ffe7e867f58
[   48.827234][ T4398]  </TASK>
[   48.827336][ T4381] can0 (unregistered): slcan off ttyS3.
[   49.039294][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   49.044749][ T4381] Falling back ldisc for ttyS3.
[   49.052209][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   49.119349][ T4405] loop0: detected capacity change from 0 to 128
[   49.163195][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.171215][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.179169][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.187061][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.194817][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.202490][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.210347][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.218162][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.225898][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.233606][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.241406][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.249147][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.257259][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.265041][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0
[   49.280429][   T10] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   49.303777][ T4410] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   49.418164][ T4414] lo speed is unknown, defaulting to 1000
[   49.531742][ T4414] netlink: 'syz.0.339': attribute type 10 has an invalid length.
[   49.539597][ T4414] netlink: 2 bytes leftover after parsing attributes in process `syz.0.339'.
[   49.622802][ T4426] : renamed from bond0 (while UP)
[   49.688729][ T4433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.346'.
[   49.753403][ T4435] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   49.800546][ T4438] can0: slcan on ttyS3.
[   49.836351][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'.
[   49.885583][ T4444] blk_print_req_error: 50 callbacks suppressed
[   49.885603][ T4444] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   49.886016][ T4443] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   49.891923][ T4444] buffer_io_error: 4348 callbacks suppressed
[   49.891939][ T4444] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   49.930504][ T4443] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 0
[   49.942055][ T4443] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.951523][ T4443] Buffer I/O error on dev loop7, logical block 512, async page read
[   49.983852][ T4442] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   49.993661][ T4442] Buffer I/O error on dev loop7, logical block 1, lost async page write
[   50.002082][ T4442] Buffer I/O error on dev loop7, logical block 2, lost async page write
[   50.010551][ T4442] Buffer I/O error on dev loop7, logical block 3, lost async page write
[   50.019003][ T4442] Buffer I/O error on dev loop7, logical block 4, lost async page write
[   50.027450][ T4442] Buffer I/O error on dev loop7, logical block 5, lost async page write
[   50.035824][ T4442] Buffer I/O error on dev loop7, logical block 6, lost async page write
[   50.044263][ T4442] Buffer I/O error on dev loop7, logical block 7, lost async page write
[   50.052780][ T4442] Buffer I/O error on dev loop7, logical block 8, lost async page write
[   50.064195][ T4442] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   50.066821][ T4438] can0 (unregistered): slcan off ttyS3.
[   50.079004][ T4442] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[   50.090033][ T4438] Falling back ldisc for ttyS3.
[   50.094341][ T4442] I/O error, dev loop7, sector 3080 op 0x1:(WRITE) flags 0x800 phys_seg 127 prio class 0
[   50.145062][ T4446] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   50.238501][ T4457] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   50.239024][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'.
[   50.286226][ T4460] netlink: 'syz.2.352': attribute type 10 has an invalid length.
[   50.294095][ T4460] netlink: 2 bytes leftover after parsing attributes in process `syz.2.352'.
[   50.311140][ T4450] lo speed is unknown, defaulting to 1000
[   50.398302][ T4472] netlink: 'syz.1.355': attribute type 10 has an invalid length.
[   50.406211][ T4472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.355'.
[   50.454612][ T4472] team0: entered promiscuous mode
[   50.460660][ T4472] team_slave_0: entered promiscuous mode
[   50.466490][ T4472] team_slave_1: entered promiscuous mode
[   50.472590][ T4472] bridge0: port 3(team0) entered blocking state
[   50.478972][ T4472] bridge0: port 3(team0) entered disabled state
[   50.498275][ T4472] team0: entered allmulticast mode
[   50.503546][ T4472] team_slave_0: entered allmulticast mode
[   50.509351][ T4472] team_slave_1: entered allmulticast mode
[   50.516799][ T4472] bridge0: port 3(team0) entered blocking state
[   50.523159][ T4472] bridge0: port 3(team0) entered forwarding state
[   50.530169][ T4459] lo speed is unknown, defaulting to 1000
[   50.585502][ T4477] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   50.674356][ T4479] lo speed is unknown, defaulting to 1000
[   51.181907][ T3391] IPVS: starting estimator thread 0...
[   51.189077][ T4487] siw: device registration error -23
[   51.271028][ T4502] SELinux: syz.3.372 (4502) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.296154][ T4497] IPVS: using max 2304 ests per chain, 115200 per kthread
[   51.324055][ T4506] loop0: detected capacity change from 0 to 1024
[   51.410678][ T4507] lo speed is unknown, defaulting to 1000
[   51.652089][ T4506] =======================================================
[   51.652089][ T4506] WARNING: The mand mount option has been deprecated and
[   51.652089][ T4506]          and is ignored by this kernel. Remove the mand
[   51.652089][ T4506]          option from the mount to silence this warning.
[   51.652089][ T4506] =======================================================
[   51.732673][ T4506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.763017][ T4506] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.374: Allocating blocks 497-513 which overlap fs metadata
[   51.778500][ T4506] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.374: Allocating blocks 497-513 which overlap fs metadata
[   51.782921][ T4516] netlink: 'syz.3.376': attribute type 10 has an invalid length.
[   51.800229][ T4516] netlink: 2 bytes leftover after parsing attributes in process `syz.3.376'.
[   51.806143][ T4517] netlink: 'syz.0.374': attribute type 83 has an invalid length.
[   51.816974][ T4513] lo speed is unknown, defaulting to 1000
[   51.832573][ T4506] netlink: 'syz.0.374': attribute type 5 has an invalid length.
[   51.842178][ T4505] EXT4-fs (loop0): pa ffff8881004b90e0: logic 48, phys. 177, len 21
[   51.850287][ T4505] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   51.885314][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.921178][ T4522] FAULT_INJECTION: forcing a failure.
[   51.921178][ T4522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.934323][ T4522] CPU: 0 UID: 0 PID: 4522 Comm: syz.1.379 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   51.934355][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   51.934370][ T4522] Call Trace:
[   51.934378][ T4522]  <TASK>
[   51.934440][ T4522]  __dump_stack+0x1d/0x30
[   51.934469][ T4522]  dump_stack_lvl+0xe8/0x140
[   51.934488][ T4522]  dump_stack+0x15/0x1b
[   51.934512][ T4522]  should_fail_ex+0x265/0x280
[   51.934536][ T4522]  should_fail+0xb/0x20
[   51.934583][ T4522]  should_fail_usercopy+0x1a/0x20
[   51.934606][ T4522]  _copy_to_iter+0xcf/0xe30
[   51.934634][ T4522]  ? chacha_block_generic+0x218/0x240
[   51.934663][ T4522]  get_random_bytes_user+0x12d/0x290
[   51.934769][ T4522]  ? import_ubuf+0xe8/0x120
[   51.934833][ T4522]  __x64_sys_getrandom+0xcf/0x1a0
[   51.934858][ T4522]  x64_sys_call+0x2bb4/0x2fb0
[   51.934879][ T4522]  do_syscall_64+0xd2/0x200
[   51.934915][ T4522]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.935003][ T4522]  ? clear_bhb_loop+0x40/0x90
[   51.935030][ T4522]  ? clear_bhb_loop+0x40/0x90
[   51.935058][ T4522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.935085][ T4522] RIP: 0033:0x7f7dbab6e929
[   51.935104][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.935155][ T4522] RSP: 002b:00007f7db91d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[   51.935177][ T4522] RAX: ffffffffffffffda RBX: 00007f7dbad95fa0 RCX: 00007f7dbab6e929
[   51.935308][ T4522] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[   51.935324][ T4522] RBP: 00007f7db91d7090 R08: 0000000000000000 R09: 0000000000000000
[   51.935338][ T4522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.935367][ T4522] R13: 0000000000000000 R14: 00007f7dbad95fa0 R15: 00007ffda308c5f8
[   51.935385][ T4522]  </TASK>
[   52.136870][ T4524] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   52.233062][ T4537] siw: device registration error -23
[   52.241005][ T3391] IPVS: starting estimator thread 0...
[   52.290943][ T4539] netlink: 14 bytes leftover after parsing attributes in process `syz.0.385'.
[   52.334649][ T4540] IPVS: using max 2352 ests per chain, 117600 per kthread
[   52.361646][ T4554] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   52.428887][ T4566] SELinux: syz.0.396 (4566) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   52.458112][ T4563] lo: entered promiscuous mode
[   52.467611][ T4568] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   52.483643][ T4571] can0: slcan on ttyS3.
[   52.609526][ T4573] loop1: detected capacity change from 0 to 8192
[   52.638110][ T4573]  loop1: p1 p2 p3
[   52.642138][ T4573] loop1: p1 start 51379968 is beyond EOD, truncated
[   52.650372][ T4573] loop1: p3 size 100663552 extends beyond EOD, truncated
[   52.684925][ T4574] can0 (unregistered): slcan off ttyS3.
[   52.690751][ T4574] Falling back ldisc for ttyS3.
[   52.763468][ T4582] can0: slcan on ttyS3.
[   52.864637][ T4582] can0 (unregistered): slcan off ttyS3.
[   52.870373][ T4582] Falling back ldisc for ttyS3.
[   52.911443][ T4584] syz!: rxe_newlink: already configured on team_slave_0
[   52.919559][ T4584] smc: net device bond0 applied user defined pnetid SYZ2
[   52.927209][ T4584] smc: net device bond0 erased user defined pnetid SYZ2
[   53.094860][ T4598] SELinux: syz.4.408 (4598) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.111618][ T4591] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   53.143401][ T4600] xt_CT: You must specify a L4 protocol and not use inversions on it
[   53.190098][ T4602] lo speed is unknown, defaulting to 1000
[   53.209448][ T4607] netlink: 'syz.2.410': attribute type 10 has an invalid length.
[   53.235273][   T29] kauditd_printk_skb: 524 callbacks suppressed
[   53.235291][   T29] audit: type=1326 audit(1749150510.058:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f97f777d3df code=0x7ffc0000
[   53.244006][ T4562] lo: left promiscuous mode
[   53.269916][ T4610] loop4: detected capacity change from 0 to 128
[   53.274668][   T29] audit: type=1326 audit(1749150510.058:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f97f777e9b7 code=0x7ffc0000
[   53.299467][   T29] audit: type=1326 audit(1749150510.088:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97f777d290 code=0x7ffc0000
[   53.323188][   T29] audit: type=1326 audit(1749150510.088:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f777e52b code=0x7ffc0000
[   53.328441][ T4612] netlink: 'syz.3.414': attribute type 10 has an invalid length.
[   53.359409][ T4612] bridge0: port 3(team0) entered disabled state
[   53.365907][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.373218][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.394326][   T29] audit: type=1326 audit(1749150510.128:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f97f777d58a code=0x7ffc0000
[   53.418090][   T29] audit: type=1326 audit(1749150510.128:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f97f777d58a code=0x7ffc0000
[   53.441543][   T29] audit: type=1326 audit(1749150510.128:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f97f777d197 code=0x7ffc0000
[   53.458661][ T4612] bridge0: port 3(team0) entered blocking state
[   53.465305][   T29] audit: type=1326 audit(1749150510.128:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f97f77800ca code=0x7ffc0000
[   53.465336][   T29] audit: type=1326 audit(1749150510.178:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97f777d290 code=0x7ffc0000
[   53.471656][ T4612] bridge0: port 3(team0) entered forwarding state
[   53.495458][   T29] audit: type=1326 audit(1749150510.178:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f97f777d677 code=0x7ffc0000
[   53.518576][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.555671][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.563011][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.570202][ T4612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.585213][ T4612] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   53.607343][ T4620] can0: slcan on ttyS3.
[   53.671681][ T4626] SELinux: syz.4.420 (4626) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.733956][ T4631] loop2: detected capacity change from 0 to 512
[   53.855885][ T4631] EXT4-fs (loop2): too many log groups per flexible block group
[   53.863679][ T4631] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   53.870644][ T4631] EXT4-fs (loop2): mount failed
[   53.876646][ T4620] can0 (unregistered): slcan off ttyS3.
[   53.882630][ T4620] Falling back ldisc for ttyS3.
[   54.024752][ T4637] lo speed is unknown, defaulting to 1000
[   54.413456][ T4644] netlink: 'syz.0.425': attribute type 10 has an invalid length.
[   54.421324][ T4644] __nla_validate_parse: 3 callbacks suppressed
[   54.421339][ T4644] netlink: 2 bytes leftover after parsing attributes in process `syz.0.425'.
[   54.449627][ T4642] lo speed is unknown, defaulting to 1000
[   54.461140][ T4648] can0: slcan on ttyS3.
[   54.624833][ T4648] can0 (unregistered): slcan off ttyS3.
[   54.684379][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4
[   54.692361][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2
[   54.720126][ T4664] loop4: detected capacity change from 0 to 512
[   54.734650][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.742354][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.750106][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.757884][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.765592][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.773322][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.781076][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.788840][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.796586][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.798082][ T4668] FAULT_INJECTION: forcing a failure.
[   54.798082][ T4668] name failslab, interval 1, probability 0, space 0, times 0
[   54.804232][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.816901][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: syz.1.435 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   54.816940][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   54.816957][ T4668] Call Trace:
[   54.816968][ T4668]  <TASK>
[   54.816979][ T4668]  __dump_stack+0x1d/0x30
[   54.817007][ T4668]  dump_stack_lvl+0xe8/0x140
[   54.817034][ T4668]  dump_stack+0x15/0x1b
[   54.817104][ T4668]  should_fail_ex+0x265/0x280
[   54.817132][ T4668]  should_failslab+0x8c/0xb0
[   54.817164][ T4668]  __kvmalloc_node_noprof+0x123/0x4e0
[   54.817203][ T4668]  ? traverse+0x9d/0x3a0
[   54.817320][ T4668]  traverse+0x9d/0x3a0
[   54.817391][ T4668]  ? path_openat+0x1bf8/0x2170
[   54.817508][ T4668]  seq_read_iter+0x853/0x940
[   54.817631][ T4668]  ? _parse_integer+0x27/0x40
[   54.817676][ T4668]  seq_read+0x1f7/0x240
[   54.817718][ T4668]  ? __pfx_seq_read+0x10/0x10
[   54.817782][ T4668]  vfs_readv+0x3fb/0x690
[   54.817864][ T4668]  __x64_sys_preadv+0xfd/0x1c0
[   54.817896][ T4668]  x64_sys_call+0x1503/0x2fb0
[   54.817925][ T4668]  do_syscall_64+0xd2/0x200
[   54.817963][ T4668]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   54.818099][ T4668]  ? clear_bhb_loop+0x40/0x90
[   54.818127][ T4668]  ? clear_bhb_loop+0x40/0x90
[   54.818156][ T4668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.818219][ T4668] RIP: 0033:0x7f7dbab6e929
[   54.818240][ T4668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.818263][ T4668] RSP: 002b:00007f7db91b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   54.818367][ T4668] RAX: ffffffffffffffda RBX: 00007f7dbad96080 RCX: 00007f7dbab6e929
[   54.818379][ T4668] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007
[   54.818390][ T4668] RBP: 00007f7db91b6090 R08: 0000000000000000 R09: 0000000000000000
[   54.818401][ T4668] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[   54.818412][ T4668] R13: 0000000000000000 R14: 00007f7dbad96080 R15: 00007ffda308c5f8
[   54.818448][ T4668]  </TASK>
[   54.819967][ T4659] loop0: detected capacity change from 0 to 256
[   54.824530][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.824592][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.846384][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'.
[   54.846839][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.850387][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.853124][   T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0
[   54.857534][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.014852][   T10] hid-generic 0000:3000000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   55.104761][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.112225][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.121061][ T4664] EXT4-fs (loop4): too many log groups per flexible block group
[   55.128870][ T4664] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   55.135995][ T4664] EXT4-fs (loop4): mount failed
[   55.471011][ T4699] loop3: detected capacity change from 0 to 512
[   55.485969][ T4699] EXT4-fs (loop3): too many log groups per flexible block group
[   55.493704][ T4699] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   55.500687][ T4699] EXT4-fs (loop3): mount failed
[   55.546228][ T4710] netlink: 14 bytes leftover after parsing attributes in process `syz.4.451'.
[   55.595999][ T4710] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[   55.606948][ T4710] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   55.632093][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'.
[   55.646677][ T4713] loop4: detected capacity change from 0 to 1024
[   55.653626][ T4713] EXT4-fs: Ignoring removed bh option
[   55.659126][ T4713] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.669035][ T4713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.791973][ T4718] netlink: 'syz.4.452': attribute type 4 has an invalid length.
[   55.799878][ T4718] netlink: 'syz.4.452': attribute type 2 has an invalid length.
[   56.300502][ T4723] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   56.397429][ T4725] netlink: 'syz.0.455': attribute type 21 has an invalid length.
[   56.406288][ T4725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.455'.
[   56.446550][ T4717] ==================================================================
[   56.454686][ T4717] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   56.462618][ T4717] 
[   56.464988][ T4717] write to 0xffff888106ec29a4 of 4 bytes by task 4713 on cpu 0:
[   56.472633][ T4717]  xas_set_mark+0x12b/0x140
[   56.477154][ T4717]  __folio_start_writeback+0x1dd/0x440
[   56.482745][ T4717]  ext4_bio_write_folio+0x5ad/0x9f0
[   56.487988][ T4717]  mpage_submit_folio+0xe4/0x170
[   56.492956][ T4717]  mpage_process_page_bufs+0x39b/0x4a0
[   56.498443][ T4717]  mpage_prepare_extent_to_map+0x741/0xaa0
[   56.504369][ T4717]  ext4_do_writepages+0x6ea/0x21c0
[   56.509590][ T4717]  ext4_writepages+0x176/0x300
[   56.514398][ T4717]  do_writepages+0x1c3/0x310
[   56.519175][ T4717]  file_write_and_wait_range+0x156/0x2c0
[   56.524843][ T4717]  generic_buffers_fsync_noflush+0x45/0x120
[   56.530943][ T4717]  ext4_sync_file+0x1ab/0x690
[   56.535644][ T4717]  vfs_fsync_range+0x10d/0x130
[   56.540437][ T4717]  ext4_buffered_write_iter+0x34f/0x3c0
[   56.545995][ T4717]  ext4_file_write_iter+0x383/0xf00
[   56.551220][ T4717]  iter_file_splice_write+0x5f2/0x970
[   56.556620][ T4717]  direct_splice_actor+0x156/0x2a0
[   56.561771][ T4717]  splice_direct_to_actor+0x312/0x680
[   56.567251][ T4717]  do_splice_direct+0xda/0x150
[   56.572036][ T4717]  do_sendfile+0x380/0x650
[   56.576468][ T4717]  __x64_sys_sendfile64+0x105/0x150
[   56.581683][ T4717]  x64_sys_call+0xb39/0x2fb0
[   56.586280][ T4717]  do_syscall_64+0xd2/0x200
[   56.590902][ T4717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.596812][ T4717] 
[   56.599148][ T4717] read to 0xffff888106ec29a4 of 4 bytes by task 4717 on cpu 1:
[   56.606691][ T4717]  __writeback_single_inode+0x1f9/0x7c0
[   56.612258][ T4717]  writeback_single_inode+0x167/0x3e0
[   56.617638][ T4717]  sync_inode_metadata+0x5b/0x90
[   56.622770][ T4717]  generic_buffers_fsync_noflush+0xd9/0x120
[   56.628709][ T4717]  ext4_sync_file+0x1ab/0x690
[   56.633401][ T4717]  vfs_fsync_range+0x10d/0x130
[   56.638176][ T4717]  ext4_buffered_write_iter+0x34f/0x3c0
[   56.643817][ T4717]  ext4_file_write_iter+0x383/0xf00
[   56.649079][ T4717]  iter_file_splice_write+0x5f2/0x970
[   56.654467][ T4717]  direct_splice_actor+0x156/0x2a0
[   56.659603][ T4717]  splice_direct_to_actor+0x312/0x680
[   56.664993][ T4717]  do_splice_direct+0xda/0x150
[   56.669781][ T4717]  do_sendfile+0x380/0x650
[   56.674219][ T4717]  __x64_sys_sendfile64+0x105/0x150
[   56.679515][ T4717]  x64_sys_call+0xb39/0x2fb0
[   56.684110][ T4717]  do_syscall_64+0xd2/0x200
[   56.688830][ T4717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.694763][ T4717] 
[   56.697100][ T4717] value changed: 0x0a000021 -> 0x00000021
[   56.702908][ T4717] 
[   56.705233][ T4717] Reported by Kernel Concurrency Sanitizer on:
[   56.711386][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: syz.4.452 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) 
[   56.723374][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   56.733435][ T4717] ==================================================================
[   56.744246][ T4725] usb usb9: check_ctrlrecip: process 4725 (syz.0.455) requesting ep 01 but needs 81
[   56.747641][ T4729] loop2: detected capacity change from 0 to 128
[   56.753801][ T4725] usb usb9: usbfs: process 4725 (syz.0.455) did not claim interface 0 before use
[   56.768395][ T4728] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   56.771142][ T4725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=4725 comm=syz.0.455
[   56.808921][ T4725] bridge0: port 4(ip6erspan0) entered blocking state
[   56.815880][ T4725] bridge0: port 4(ip6erspan0) entered disabled state
[   56.823818][ T4725] ip6erspan0: entered allmulticast mode
[   56.832480][ T4725] ip6erspan0: entered promiscuous mode
[   56.893788][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.