last executing test programs:

6.008541574s ago: executing program 2 (id=15130):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xaae20, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20)

5.981805256s ago: executing program 2 (id=15131):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60)

5.901515383s ago: executing program 2 (id=15132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x17c7, &(0x7f00000002c0))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

5.779308163s ago: executing program 2 (id=15134):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000080), 0xffffff1c)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
syz_mount_image$ext4(&(0x7f0000001080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000001280)={[], [{@fsmagic={'fsmagic', 0x3d, 0xd}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'cmdline\x00'}}, {@euid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'team0\x00'}}, {@pcr={'pcr', 0x3d, 0x23}}, {@fowner_gt}, {@permit_directio}]}, 0x1, 0x44e, &(0x7f0000001340)="$eJzs3M1vFGUYAPBnph/IhxYVvxB0FYQq2tqiqIkh4eaB6EEPXje0VGIpSmsihBhIPHg1kT9A41X+BKMmflz0ZLiq0YOSEAM9cDCmZnZn2i3stqy0TGF+v2S27zsz2/eZefvM7E7fvAFUVi17SSI2RcTPETHQrC7eodb8MXvp1KFsSWJu7vW/k8Z+ly+dOlTsWrxvY/aSRgymEemHSTzcpt3pEyffrk9Ojh/P68MzR98Znj5x8pkjR+sT4xPjUyN7R/bte+H5F0dHVuxYX/lp9o/Pel+d+vzs5akr+0c3ZPFuyre1HsdKqUVt8blssWulGyvZfS3lpLfEQOhKT0Rk3dXXyP+B6ImFzhuI738tNThgVc1l1nXcfHoOuI0lUXYEQDmKG332/bdYbtZnD8p38UDzC+Dl/NnO7Hz/90baLLy769uvF32/X0m1iHjz4GvbsyVW6TkMAAAAQJV9dSAinm73/C+N+1v2y8oPRMSDEfFQRGyNaIzr2RYR2yPikYh4tBhP1IVF+69v9/wnvfB/j43lXTwQ8XLL2K7Zlv7Pbe7Ja3dmlehLDh+ZHH82Iu6KiMHoW5fVlxqldfSt+o9tVq8vCsXzv2zJ2i+eBeZxXOi96v/TY/WZ+o0cMwsunonY2tuu/5P5kUBJRDwWEY9fzy/8rjGibmLLuX/mV7300b3nO+1eW7b/WU1zn0bsbpv/CyMXk6XHZw43rgfDxVXhWj+c3fdFp/b1f7my/N+wdP9vTlrH605338Y3W377pdO25fu//fW/P3mjEWB/vu79+szM8ZGI/uTgtetHu4/5dlWcj+J8Zf0/uKP9/f+e/D3ZCd0RETsj4ol87PLuxr0/4smIeCoi9izR5umJ3//ttE3+lyvr/7Gu8r/7wl9nPt7Zqf3ry//nGsEM5mt8/lve9XZQ2XECAAAAAAAAsDLSxhx4STo0X07ToaHmHH5bYkM6eWx6Zs/hY+9NjTXnytscfWkx0mugZTzoSKO8UB+9qr43Iu6OiE961jfqQ4eOTY6VffBQcRs75H/mz56yowNWnflaobrkP1SX/Ifqkv9QXfIfqkv+Q3XJf6gu+Q/VdXX+f3D+4P4rX247V1I4wE3k/g+VdCPz+t2Shf5b6pAjn4hxrcTTXaE/unrXHfnf5NoIvuqFcq9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGvFfwEAAP//tFvKQw==")
mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
linkat(r6, &(0x7f0000000180)='./file1\x00', r6, &(0x7f0000000640)='./bus\x00', 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000000000000000000018020000100000800400000005000000a2570000"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES16=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0))
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

5.34008032s ago: executing program 2 (id=15136):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

5.22138388s ago: executing program 2 (id=15137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000000c0), 0x80000075, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
acct(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

1.564149668s ago: executing program 3 (id=15162):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000000300)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getcwd(0x0, 0x0)
r2 = epoll_create(0xf)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x5})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x86, &(0x7f0000000240)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast=0xe0000001}, {0x4e1d, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "5e5d202a8d8ee2bd2b94ba99ae6886f73db77afdab59dfe07dacb7ee7ebc9d2a", "5401fe77661e16748143e73881469d1b", {"b69caf4cb0d1651e673da8e921d4694e", "da6ebb85c524dd19a805dd584e284162"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)

1.519248132s ago: executing program 1 (id=15165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802, 0x0, 0x3b9})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xb7119103a0d71020, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
readv(0xffffffffffffffff, &(0x7f0000000040), 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
sendfile(r3, r4, 0x0, 0x10001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

1.514380332s ago: executing program 3 (id=15166):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
getrusage(0xfffffffffffffffe, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000480))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)

1.30181017s ago: executing program 3 (id=15167):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_secret(0x0)
openat$cgroup_devices(r1, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket(0x3, 0x6, 0x5)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='jbd2_shrink_scan_exit\x00', r1, 0x0, 0x3}, 0x18)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20a80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x20000000008}, 0x0, 0x16, 0x4, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000001440)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd600000a0003c3afffe8000000000000000000000000000aaff02000000000000000062eee3a300032f0100000000000000000000fffffffffffffc02000000000000000000000000000032000400a0003b0e2d7dfdf7"], 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
inotify_init1(0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x4)

1.225686356s ago: executing program 3 (id=15169):
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
io_setup(0x77f, &(0x7f0000002080)=<r5=>0x0)
io_destroy(r5)
setresgid(0xee00, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1.099893977s ago: executing program 4 (id=15172):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
chdir(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000000000008b8180e42b580f25"], 0x10}}, 0x2400c010)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})

1.091266018s ago: executing program 0 (id=15173):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000002c0012800b00010067656e65766500001c000280050009000000000005000a0000000000050004000800000008000a00", @ANYRES32], 0x54}}, 0x0)

936.649061ms ago: executing program 0 (id=15174):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000200)})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0)
listxattr(0x0, 0x0, 0x0)

718.173599ms ago: executing program 0 (id=15175):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r6}, 0x10)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f00000000c0), 0x1}, 0x24008811)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0x52}}, 0x1c}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="2c1a2db09384e03c4f76820c66dba37e68ac7c042b74e77e772af033472ebd63b217aef9f441ea277c887d82ebb8c1481eaa3d51e73accac48225d4186039c77c3b1bcace99454c1caa0f79256bd21d3520113c06492b5da3e10440dc4b2a893a3e60c14129ccd6ff9c1b52234", @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
fsetxattr$trusted_overlay_redirect(r9, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x8, 0x3)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
lchown(&(0x7f0000000240)='./file0\x00', r11, 0x0)
lchown(&(0x7f00000006c0)='./file0\x00', r11, 0xee01)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLblt62IP0DQKhqJP1pafsjBi0YTDpqY6AHjqbYLqSzU0JoIIVo94NGQeDfe/QOMJ70Y9WTiVe+GhBguoKc1szMDS9ktXbplofv5JLP73syD974z83bezNttAH1rNHtJIrZGxJ8RMZxnby4wmr9du3J++t8r56eTqNff+SdplLt65fx0WbT8d1vyTL1e5De0qPfC+xFTtVr1TJEfXzj10fj82XMvzZ6aOlE9UT09eeTIwQN7hg5PHupKnFlcV3d9Ord759H3Lr41feziB79+l7V3a7G9OY5uGc33bkvPdruyHtvWlE4GetgQOlKJiOxwDTb6/3BUYtP1bcPxxhc9bRywpur1er3V9bmwWAfWsSR63QKgN8oLfXb/Wy53aehxT7j8an4DlMV9rVjyLQOR5oknB5fc33bTaEQcW/zvm2yJNXoOAQDQ7Mds/PNiq/FfGo/kiaHs5YFiDmUkIh6MiO0R8VBE7IiIhyMaZR+NiMc6rH/pDMmt45/00h0HtwLZ+O+VYm7r5vFfWhYZqRS5bY34B5Pjs7Xq/mKf7IvBDcdnk+rEMnX89PofX7Xb1jz+y5as/nIsWLTj0sCSB3QzUwtTq4m52eXPI3YNtIo/iXIaJ4mInRGx6w7rmH2+/YTQ7eNfRhfmmerfRjyXH//FWBJ/KWk7Pznx8uHJQ+Mbo1bdP16eFbf67fcLb7erf1Xxd0F2/De3PP+vxz+SbIyYP3vuZGO+dr7zOi789WXbe5oOz/+j24rzfyh5t7FiqNjwydTCwpmJiKHkzVvXT97438p8WT6Lf9/e1v1/e9zYE49HxO6I2BMRT2Q3hUXbn4qIpyNi7zLx//LaMx92Hv8yT+W7KIt/5nbHP5qPf+eJysmff+g8/lJ2/A82UvuKNSv5/FtpA1ez7wAAAOB+kTa+A5+kY9fTaTo2ln+Hf0dsTmtz8wsvHJ/7+PRM/l35kRhMyyddw03PQyeKZ8NlfnJJ/kDx3PjryqZGfmx6rjbT6+Chz21p0/8zf1d63Tpgzfm9FvQv/R/6l/4P/SnR/6Gv6f/Qv1r1/8/alh77fk0bA9xVrv/Qv1bQ/xfzt/ajAuD+5PoP/Uv/h77U9rfx6ap+8i+x7hOR3hPNWP+JgRX/MYsOEvXhvP9naza0LNPrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+D8AAP//Yz/jTQ==")
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r12, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

475.89319ms ago: executing program 1 (id=15176):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000000300)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getcwd(0x0, 0x0)
r2 = epoll_create(0xf)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x5})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x86, &(0x7f0000000240)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast=0xe0000001}, {0x4e1d, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "5e5d202a8d8ee2bd2b94ba99ae6886f73db77afdab59dfe07dacb7ee7ebc9d2a", "5401fe77661e16748143e73881469d1b", {"b69caf4cb0d1651e673da8e921d4694e", "da6ebb85c524dd19a805dd584e284162"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)

456.698291ms ago: executing program 4 (id=15177):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)

418.381965ms ago: executing program 4 (id=15178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x40, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x30282, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x86, 0x42, &(0x7f00000002c0)=""/66, 0x41100, 0x16, '\x00', r3, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x46c6, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r1, r1, r1, r1, r1, r0], &(0x7f0000000540)=[{0x4, 0x3, 0xa}, {0x2, 0x2, 0x8f, 0x5}], 0x10, 0x9, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fcntl$setlease(r7, 0x400, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000188"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES8=r9], 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

415.257645ms ago: executing program 0 (id=15179):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (fail_nth: 10)

366.440989ms ago: executing program 4 (id=15180):
clock_gettime(0x7, &(0x7f0000000000))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x20000000000000f4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0xcb7c, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, 0x0, 0x0, 0x8000c61)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a0000040000000010"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r6, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "c933fddd030588000fde9f323a6db7a1"}, 0x20)

365.780939ms ago: executing program 1 (id=15181):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket$unix(0x1, 0x1, 0x0) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0x386f0baac9aa56a4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6}}]}, 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r12) (async)
tgkill(r12, r12, 0x12)

339.624161ms ago: executing program 3 (id=15182):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x0)
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18)
close_range(r1, 0xffffffffffffffff, 0xff0f0000)

311.777803ms ago: executing program 4 (id=15183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

62.119675ms ago: executing program 1 (id=15184):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
close(r2)

61.811464ms ago: executing program 0 (id=15185):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@dev, <r2=>0x0}, &(0x7f0000000380)=0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000040)=0x10000, 0x4)
r6 = dup3(r5, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="021300000500000000000000000000000300"], 0x28}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c0082cb6000000002000020d3"])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)

61.428505ms ago: executing program 3 (id=15186):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802, 0x0, 0x3b9})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xb7119103a0d71020, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
readv(0xffffffffffffffff, &(0x7f0000000040), 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x7ffff000)

60.932985ms ago: executing program 4 (id=15187):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = syz_io_uring_setup(0x1006905, &(0x7f0000000280)={0x0, 0x1, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000340), &(0x7f00000000c0)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ftruncate(r6, 0x4)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r7, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000180))
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r9, 0x0, 0x0, 0x40010143, 0x0)
close(r9)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0)

38.601106ms ago: executing program 0 (id=15188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802, 0x0, 0x3b9})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xb7119103a0d71020, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
readv(0xffffffffffffffff, &(0x7f0000000040), 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12)
sendfile(r3, r4, 0x0, 0x10001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

26.481257ms ago: executing program 1 (id=15189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)

0s ago: executing program 1 (id=15190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000580)=""/252, 0xfc)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r5, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000600)=0x1, 0x1a)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27)
recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x16fb}], 0x1, 0x0, 0x46, 0x407006}, 0x48)

kernel console output (not intermixed with test programs):

617073][T12574]  __key_create_or_update+0x65b/0x750
[ 1041.622559][T12574]  key_create_or_update+0x42/0x60
[ 1041.627616][T12574]  __se_sys_add_key+0x280/0x320
[ 1041.632467][T12574]  __x64_sys_add_key+0x67/0x80
[ 1041.637301][T12574]  x64_sys_call+0x157d/0x2d60
[ 1041.642097][T12574]  do_syscall_64+0xc9/0x1c0
[ 1041.646684][T12574]  ? clear_bhb_loop+0x55/0xb0
[ 1041.651408][T12574]  ? clear_bhb_loop+0x55/0xb0
[ 1041.656117][T12574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.662100][T12574] RIP: 0033:0x7fb5ce81dff9
[ 1041.666541][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1041.686163][T12574] RSP: 002b:00007fb5cd497038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1041.694674][T12574] RAX: ffffffffffffffda RBX: 00007fb5ce9d5f80 RCX: 00007fb5ce81dff9
[ 1041.702705][T12574] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000020000340
[ 1041.710740][T12574] RBP: 00007fb5cd497090 R08: ffffffffffffffff R09: 0000000000000000
[ 1041.718723][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1041.726692][T12574] R13: 0000000000000000 R14: 00007fb5ce9d5f80 R15: 00007fff854a0b78
[ 1041.734662][T12574]  </TASK>
[ 1041.776944][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.779389][T12587] FAULT_INJECTION: forcing a failure.
[ 1041.779389][T12587] name failslab, interval 1, probability 0, space 0, times 0
[ 1041.797729][T12587] CPU: 0 UID: 0 PID: 12587 Comm: syz.2.14700 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1041.810083][T12587] Tainted: [W]=WARN
[ 1041.813963][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1041.824037][T12587] Call Trace:
[ 1041.827303][T12587]  <TASK>
[ 1041.830228][T12587]  dump_stack_lvl+0xf2/0x150
[ 1041.834860][T12587]  dump_stack+0x15/0x20
[ 1041.839047][T12587]  should_fail_ex+0x223/0x230
[ 1041.843774][T12587]  ? __alloc_skb+0x10b/0x310
[ 1041.848419][T12587]  should_failslab+0x8f/0xb0
[ 1041.853005][T12587]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[ 1041.858892][T12587]  ? _copy_from_iter+0x161/0xd20
[ 1041.863892][T12587]  __alloc_skb+0x10b/0x310
[ 1041.868314][T12587]  ? skb_put+0xba/0x100
[ 1041.872556][T12587]  tipc_buf_acquire+0x2c/0xb0
[ 1041.877245][T12587]  tipc_msg_build+0x557/0x820
[ 1041.881938][T12587]  tipc_send_group_bcast+0x5b9/0x6c0
[ 1041.887290][T12587]  ? __pfx_woken_wake_function+0x10/0x10
[ 1041.892920][T12587]  __tipc_sendmsg+0x1a9/0x1c40
[ 1041.897772][T12587]  ? selinux_socket_sendmsg+0x19c/0x1d0
[ 1041.903329][T12587]  ? _raw_spin_unlock_bh+0x36/0x40
[ 1041.908430][T12587]  ? lock_sock_nested+0x10f/0x140
[ 1041.913484][T12587]  ? __pfx_tipc_sendmsg+0x10/0x10
[ 1041.918557][T12587]  tipc_sendmsg+0x3e/0x60
[ 1041.922895][T12587]  __sock_sendmsg+0x140/0x180
[ 1041.927577][T12587]  ____sys_sendmsg+0x312/0x410
[ 1041.932471][T12587]  __sys_sendmmsg+0x259/0x500
[ 1041.937203][T12587]  __x64_sys_sendmmsg+0x57/0x70
[ 1041.942068][T12587]  x64_sys_call+0xa49/0x2d60
[ 1041.946652][T12587]  do_syscall_64+0xc9/0x1c0
[ 1041.951161][T12587]  ? clear_bhb_loop+0x55/0xb0
[ 1041.955844][T12587]  ? clear_bhb_loop+0x55/0xb0
[ 1041.960523][T12587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.966414][T12587] RIP: 0033:0x7fb5ce81dff9
[ 1041.970838][T12587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1041.990438][T12587] RSP: 002b:00007fb5cd497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1041.998926][T12587] RAX: ffffffffffffffda RBX: 00007fb5ce9d5f80 RCX: 00007fb5ce81dff9
[ 1042.006913][T12587] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003
[ 1042.014898][T12587] RBP: 00007fb5cd497090 R08: 0000000000000000 R09: 0000000000000000
[ 1042.022900][T12587] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1042.030910][T12587] R13: 0000000000000000 R14: 00007fb5ce9d5f80 R15: 00007fff854a0b78
[ 1042.038891][T12587]  </TASK>
[ 1042.043341][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.095377][T12607] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1042.141727][T12608] sd 0:0:1:0: device reset
[ 1042.164761][   T29] kauditd_printk_skb: 460 callbacks suppressed
[ 1042.164777][   T29] audit: type=1326 audit(1042.128:124773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.194381][   T29] audit: type=1326 audit(1042.128:124774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.217645][   T29] audit: type=1326 audit(1042.128:124775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.217692][T12619] Cannot find add_set index 0 as target
[ 1042.217709][   T29] audit: type=1326 audit(1042.128:124776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.270317][   T29] audit: type=1326 audit(1042.128:124777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.293905][   T29] audit: type=1326 audit(1042.128:124778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.317383][   T29] audit: type=1326 audit(1042.128:124779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.340654][   T29] audit: type=1326 audit(1042.128:124780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.363899][   T29] audit: type=1326 audit(1042.128:124781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.387140][   T29] audit: type=1326 audit(1042.128:124782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.0.14709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f87addff9 code=0x7ffc0000
[ 1042.425458][T12622] loop3: detected capacity change from 0 to 2048
[ 1042.450551][T12624] Cannot find add_set index 0 as target
[ 1042.458326][T12629] FAULT_INJECTION: forcing a failure.
[ 1042.458326][T12629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1042.471487][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.4.14713 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1042.483924][T12629] Tainted: [W]=WARN
[ 1042.487717][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1042.497754][T12629] Call Trace:
[ 1042.501037][T12629]  <TASK>
[ 1042.503965][T12629]  dump_stack_lvl+0xf2/0x150
[ 1042.508590][T12629]  dump_stack+0x15/0x20
[ 1042.512751][T12629]  should_fail_ex+0x223/0x230
[ 1042.517444][T12629]  should_fail+0xb/0x10
[ 1042.521708][T12629]  should_fail_usercopy+0x1a/0x20
[ 1042.526746][T12629]  _copy_to_user+0x1e/0xa0
[ 1042.531196][T12629]  map_lookup_and_delete_elem+0x5ce/0x630
[ 1042.536951][T12629]  __sys_bpf+0x53c/0x7a0
[ 1042.541218][T12629]  __x64_sys_bpf+0x43/0x50
[ 1042.545624][T12629]  x64_sys_call+0x2625/0x2d60
[ 1042.550294][T12629]  do_syscall_64+0xc9/0x1c0
[ 1042.554851][T12629]  ? clear_bhb_loop+0x55/0xb0
[ 1042.559552][T12629]  ? clear_bhb_loop+0x55/0xb0
[ 1042.564238][T12629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.570133][T12629] RIP: 0033:0x7fda997fdff9
[ 1042.574545][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1042.594295][T12629] RSP: 002b:00007fda98471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1042.602721][T12629] RAX: ffffffffffffffda RBX: 00007fda999b5f80 RCX: 00007fda997fdff9
[ 1042.610743][T12629] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000015
[ 1042.618773][T12629] RBP: 00007fda98471090 R08: 0000000000000000 R09: 0000000000000000
[ 1042.626780][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1042.634770][T12629] R13: 0000000000000000 R14: 00007fda999b5f80 R15: 00007fff92f66d38
[ 1042.642746][T12629]  </TASK>
[ 1042.698293][T12646] loop0: detected capacity change from 0 to 1024
[ 1042.705668][T12646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1042.714262][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.725813][T12646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1042.737176][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.745085][T12646] System zones: 0-1, 3-36
[ 1042.780817][T12664] +}[@[12664] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1042.780872][T12664] +}[@[12664] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1042.793607][T12664] +}[@[12664] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1042.801103][T12663] sd 0:0:1:0: device reset
[ 1042.820874][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.257497][T15285] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1043.272520][T15285] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28
[ 1043.284811][T15285] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1043.284811][T15285] 
[ 1043.294544][T15285] EXT4-fs (loop3): Total free blocks count 0
[ 1043.300533][T15285] EXT4-fs (loop3): Free/Dirty block details
[ 1043.306495][T15285] EXT4-fs (loop3): free_blocks=2415919104
[ 1043.312266][T15285] EXT4-fs (loop3): dirty_blocks=16
[ 1043.317379][T15285] EXT4-fs (loop3): Block reservation details
[ 1043.323445][T15285] EXT4-fs (loop3): i_reserved_data_blocks=1
[ 1043.366910][T12683] Cannot find add_set index 0 as target
[ 1043.409106][T12685] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12685 comm=syz.3.14728
[ 1043.422598][T12685] __nla_validate_parse: 11 callbacks suppressed
[ 1043.422611][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14728'.
[ 1043.438570][T12685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=12685 comm=syz.3.14728
[ 1043.467412][T12687] tmpfs: Bad value for 'mpol'
[ 1043.520404][T12697] loop3: detected capacity change from 0 to 512
[ 1043.527071][T12697] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 1043.608139][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14736'.
[ 1043.624235][T12711] Cannot find add_set index 0 as target
[ 1043.659157][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14740'.
[ 1043.697040][T12715] Cannot find add_set index 0 as target
[ 1043.717751][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14741'.
[ 1043.831582][T12722] loop1: detected capacity change from 0 to 2048
[ 1043.859168][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.862690][T12734] netlink: 'syz.4.14747': attribute type 10 has an invalid length.
[ 1043.883598][T12731] loop3: detected capacity change from 0 to 1024
[ 1043.885346][T12737] netlink: 'syz.2.14748': attribute type 10 has an invalid length.
[ 1043.890366][T12731] EXT4-fs: Ignoring removed i_version option
[ 1043.905331][T12731] EXT4-fs: quotafile must be on filesystem root
[ 1043.928235][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14750'.
[ 1043.989238][T12751] loop0: detected capacity change from 0 to 512
[ 1043.999848][T12754] PM: Enabling pm_trace changes system date and time during resume.
[ 1043.999848][T12754] PM: Correct system time has to be restored manually after resume.
[ 1044.018539][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14758'.
[ 1044.022594][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1044.036811][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.044643][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.052456][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.060434][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.068218][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.076158][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.083947][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.091844][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.099618][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.107501][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.115325][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.122680][T12773] netlink: 'syz.1.14762': attribute type 10 has an invalid length.
[ 1044.123194][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.138903][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.146683][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.154511][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.162338][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.166489][T12775] netlink: 'syz.1.14763': attribute type 10 has an invalid length.
[ 1044.170057][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.170083][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.194309][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: unknown main item tag 0x0
[ 1044.202496][T11414] hid-generic FFFC:0000:FFFFFFFF.00C1: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz0
[ 1044.212538][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1044.266479][T12790] loop1: detected capacity change from 0 to 512
[ 1044.266743][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14766'.
[ 1044.310803][T12794] loop0: detected capacity change from 0 to 2048
[ 1044.326705][T12794] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1044.340813][T12798] tipc: Started in network mode
[ 1044.345788][T12798] tipc: Node identity 7ff, cluster identity 7
[ 1044.351915][T12798] tipc: Node number set to 2047
[ 1044.363913][T12802] sd 0:0:1:0: device reset
[ 1044.413217][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14772'.
[ 1044.480498][T12812] loop1: detected capacity change from 0 to 8192
[ 1044.566703][T12818] netlink: 'syz.1.14773': attribute type 10 has an invalid length.
[ 1044.813068][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.821955][T15285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.830878][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.839492][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.879699][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14778'.
[ 1044.898302][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.969388][T12842] sd 0:0:1:0: device reset
[ 1045.005234][T12845] Cannot find add_set index 0 as target
[ 1045.051843][T20827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.125076][T12852] loop0: detected capacity change from 0 to 512
[ 1045.129837][T12847] loop3: detected capacity change from 0 to 2048
[ 1045.148565][T12857] FAULT_INJECTION: forcing a failure.
[ 1045.148565][T12857] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.161239][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.4.14786 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1045.173591][T12857] Tainted: [W]=WARN
[ 1045.177380][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1045.187462][T12857] Call Trace:
[ 1045.190730][T12857]  <TASK>
[ 1045.193730][T12857]  dump_stack_lvl+0xf2/0x150
[ 1045.198331][T12857]  dump_stack+0x15/0x20
[ 1045.202528][T12857]  should_fail_ex+0x223/0x230
[ 1045.207213][T12857]  ? __get_vm_area_node+0xf7/0x1b0
[ 1045.212365][T12857]  should_failslab+0x8f/0xb0
[ 1045.217003][T12857]  __kmalloc_cache_node_noprof+0x50/0x2b0
[ 1045.222732][T12857]  __get_vm_area_node+0xf7/0x1b0
[ 1045.227663][T12857]  __vmalloc_node_range_noprof+0x2c3/0xec0
[ 1045.233534][T12857]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.239084][T12857]  ? mntput_no_expire+0x70/0x3c0
[ 1045.244101][T12857]  ? avc_has_perm_noaudit+0x1cc/0x210
[ 1045.249511][T12857]  ? selinux_capable+0x1f2/0x260
[ 1045.254512][T12857]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.260056][T12857]  __vmalloc_noprof+0x5e/0x70
[ 1045.264793][T12857]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.270340][T12857]  bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.275725][T12857]  ? bpf_prog_alloc+0x28/0x150
[ 1045.280571][T12857]  bpf_prog_alloc+0x3a/0x150
[ 1045.285171][T12857]  bpf_prog_load+0x4d1/0x1070
[ 1045.289851][T12857]  ? __rcu_read_unlock+0x4e/0x70
[ 1045.294840][T12857]  __sys_bpf+0x463/0x7a0
[ 1045.299080][T12857]  __x64_sys_bpf+0x43/0x50
[ 1045.303576][T12857]  x64_sys_call+0x2625/0x2d60
[ 1045.308320][T12857]  do_syscall_64+0xc9/0x1c0
[ 1045.312823][T12857]  ? clear_bhb_loop+0x55/0xb0
[ 1045.317549][T12857]  ? clear_bhb_loop+0x55/0xb0
[ 1045.322325][T12857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.328218][T12857] RIP: 0033:0x7fda997fdff9
[ 1045.332686][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1045.352287][T12857] RSP: 002b:00007fda98471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1045.360696][T12857] RAX: ffffffffffffffda RBX: 00007fda999b5f80 RCX: 00007fda997fdff9
[ 1045.368660][T12857] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005
[ 1045.376621][T12857] RBP: 00007fda98471090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.384584][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.392550][T12857] R13: 0000000000000001 R14: 00007fda999b5f80 R15: 00007fff92f66d38
[ 1045.400589][T12857]  </TASK>
[ 1045.403935][T12857] syz.4.14786: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[ 1045.420257][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.4.14786 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1045.432606][T12857] Tainted: [W]=WARN
[ 1045.436398][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1045.446485][T12857] Call Trace:
[ 1045.449831][T12857]  <TASK>
[ 1045.452765][T12857]  dump_stack_lvl+0xf2/0x150
[ 1045.457436][T12857]  dump_stack+0x15/0x20
[ 1045.461588][T12857]  warn_alloc+0x145/0x1b0
[ 1045.465921][T12857]  __vmalloc_node_range_noprof+0x2e8/0xec0
[ 1045.471794][T12857]  ? mntput_no_expire+0x70/0x3c0
[ 1045.476746][T12857]  ? avc_has_perm_noaudit+0x1cc/0x210
[ 1045.482120][T12857]  ? selinux_capable+0x1f2/0x260
[ 1045.487111][T12857]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.492666][T12857]  __vmalloc_noprof+0x5e/0x70
[ 1045.497354][T12857]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.502904][T12857]  bpf_prog_alloc_no_stats+0x49/0x360
[ 1045.508280][T12857]  ? bpf_prog_alloc+0x28/0x150
[ 1045.513043][T12857]  bpf_prog_alloc+0x3a/0x150
[ 1045.517634][T12857]  bpf_prog_load+0x4d1/0x1070
[ 1045.522306][T12857]  ? __rcu_read_unlock+0x4e/0x70
[ 1045.527277][T12857]  __sys_bpf+0x463/0x7a0
[ 1045.531591][T12857]  __x64_sys_bpf+0x43/0x50
[ 1045.536137][T12857]  x64_sys_call+0x2625/0x2d60
[ 1045.540881][T12857]  do_syscall_64+0xc9/0x1c0
[ 1045.545413][T12857]  ? clear_bhb_loop+0x55/0xb0
[ 1045.550090][T12857]  ? clear_bhb_loop+0x55/0xb0
[ 1045.554766][T12857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.560660][T12857] RIP: 0033:0x7fda997fdff9
[ 1045.565066][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1045.584683][T12857] RSP: 002b:00007fda98471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1045.593170][T12857] RAX: ffffffffffffffda RBX: 00007fda999b5f80 RCX: 00007fda997fdff9
[ 1045.601215][T12857] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005
[ 1045.609212][T12857] RBP: 00007fda98471090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.617175][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.625204][T12857] R13: 0000000000000001 R14: 00007fda999b5f80 R15: 00007fff92f66d38
[ 1045.633179][T12857]  </TASK>
[ 1045.636736][T12857] Mem-Info:
[ 1045.640020][T12857] active_anon:24708 inactive_anon:6 isolated_anon:0
[ 1045.640020][T12857]  active_file:9736 inactive_file:15537 isolated_file:0
[ 1045.640020][T12857]  unevictable:1 dirty:183 writeback:0
[ 1045.640020][T12857]  slab_reclaimable:3219 slab_unreclaimable:35118
[ 1045.640020][T12857]  mapped:61428 shmem:15711 pagetables:951
[ 1045.640020][T12857]  sec_pagetables:0 bounce:0
[ 1045.640020][T12857]  kernel_misc_reclaimable:0
[ 1045.640020][T12857]  free:1693062 free_pcp:1697 free_cma:0
[ 1045.684996][T12857] Node 0 active_anon:98832kB inactive_anon:24kB active_file:38944kB inactive_file:62148kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:245712kB dirty:732kB writeback:0kB shmem:62844kB writeback_tmp:0kB kernel_stack:4256kB pagetables:3804kB sec_pagetables:0kB all_unreclaimable? no
[ 1045.685409][T12846] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, 
[ 1045.712966][T12857] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1045.721237][T12846] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1045.747978][T12857] lowmem_reserve[]: 0 2866 7844 0
[ 1045.760162][T12846] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[ 1045.761941][T12857] Node 0 DMA32 free:2950380kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[ 1045.774198][T12846] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1045.774198][T12846] 
[ 1045.802459][T12857] lowmem_reserve[]: 0 0 4978 0
[ 1045.802483][T12857] Node 0 Normal free:3806508kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:98832kB inactive_anon:24kB active_file:38944kB inactive_file:62148kB unevictable:4kB writepending:732kB present:5242880kB managed:5098208kB mlocked:8kB bounce:0kB free_pcp:3248kB local_pcp:2360kB free_cma:0kB
[ 1045.812137][T12846] EXT4-fs (loop3): Total free blocks count 0
[ 1045.816878][T12857] lowmem_reserve[]: 0 0
[ 1045.846911][T12846] EXT4-fs (loop3): Free/Dirty block details
[ 1045.846925][T12846] EXT4-fs (loop3): free_blocks=2415919104
[ 1045.853001][T12857]  0
[ 1045.857080][T12846] EXT4-fs (loop3): dirty_blocks=16
[ 1045.862973][T12857]  0
[ 1045.862984][T12857] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 
[ 1045.868721][T12846] EXT4-fs (loop3): Block reservation details
[ 1045.868737][T12846] EXT4-fs (loop3): i_reserved_data_blocks=1
[ 1045.896491][T12857] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1045.905854][T12857] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950380kB
[ 1045.921887][T12857] Node 0 Normal: 2371*4kB (UME) 2248*8kB (UME) 1418*16kB (UME) 752*32kB (UME) 203*64kB (UME) 341*128kB (UME) 196*256kB (UME) 89*512kB (UME) 40*1024kB (UM) 20*2048kB (UME) 854*4096kB (UM) = 3806508kB
[ 1045.941654][T12857] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1045.950931][T12857] 40968 total pagecache pages
[ 1045.955620][T12857] 16 pages in swap cache
[ 1045.959841][T12857] Free swap  = 124384kB
[ 1045.964014][T12857] Total swap = 124996kB
[ 1045.968141][T12857] 2097051 pages RAM
[ 1045.971953][T12857] 0 pages HighMem/MovableOnly
[ 1045.976608][T12857] 80181 pages reserved
[ 1045.984149][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.022956][T12865] loop7: detected capacity change from 0 to 7
[ 1046.029314][T12865] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1046.040690][T12865] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1046.048584][T12865]  loop7: unable to read partition table
[ 1046.055261][T12865] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[ 1046.055261][T12865] 
) failed (rc=-5)
[ 1046.063516][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14790'.
[ 1046.105313][T12876] loop3: detected capacity change from 0 to 1024
[ 1046.120596][T12876] EXT4-fs: Ignoring removed oldalloc option
[ 1046.137748][T12876] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1046.145105][T12887] FAULT_INJECTION: forcing a failure.
[ 1046.145105][T12887] name failslab, interval 1, probability 0, space 0, times 0
[ 1046.160236][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.0.14796 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1046.172585][T12887] Tainted: [W]=WARN
[ 1046.176409][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1046.186518][T12887] Call Trace:
[ 1046.189784][T12887]  <TASK>
[ 1046.192709][T12887]  dump_stack_lvl+0xf2/0x150
[ 1046.197296][T12887]  dump_stack+0x15/0x20
[ 1046.201440][T12887]  should_fail_ex+0x223/0x230
[ 1046.206137][T12887]  ? __get_vm_area_node+0xf7/0x1b0
[ 1046.211301][T12887]  should_failslab+0x8f/0xb0
[ 1046.215945][T12887]  __kmalloc_cache_node_noprof+0x50/0x2b0
[ 1046.221786][T12887]  __get_vm_area_node+0xf7/0x1b0
[ 1046.226728][T12887]  __vmalloc_node_range_noprof+0x2c3/0xec0
[ 1046.232530][T12887]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1046.238150][T12887]  ? mod_objcg_state+0x3b1/0x4f0
[ 1046.243109][T12887]  ? __rcu_read_unlock+0x4e/0x70
[ 1046.248048][T12887]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1046.253591][T12887]  __vmalloc_noprof+0x5e/0x70
[ 1046.258314][T12887]  ? bpf_prog_alloc_no_stats+0x49/0x360
[ 1046.263887][T12887]  bpf_prog_alloc_no_stats+0x49/0x360
[ 1046.269257][T12887]  ? bpf_prog_alloc+0x28/0x150
[ 1046.274041][T12887]  bpf_prog_alloc+0x3a/0x150
[ 1046.278629][T12887]  bpf_prog_create_from_user+0x73/0x240
[ 1046.284241][T12887]  ? __pfx_seccomp_check_filter+0x10/0x10
[ 1046.289986][T12887]  do_seccomp+0x648/0xa60
[ 1046.294362][T12887]  ? cap_task_prctl+0x234/0x5b0
[ 1046.299223][T12887]  prctl_set_seccomp+0x4d/0x70
[ 1046.304034][T12887]  __se_sys_prctl+0x27a/0x2000
[ 1046.308850][T12887]  ? _parse_integer_limit+0x167/0x180
[ 1046.314298][T12887]  ? kstrtoull+0x110/0x140
[ 1046.318761][T12887]  ? kstrtouint+0x77/0xc0
[ 1046.323132][T12887]  ? kstrtouint_from_user+0xb0/0xe0
[ 1046.328334][T12887]  ? 0xffffffff81000000
[ 1046.332491][T12887]  ? __rcu_read_unlock+0x4e/0x70
[ 1046.337431][T12887]  ? get_pid_task+0x8e/0xc0
[ 1046.341952][T12887]  ? proc_fail_nth_write+0x12a/0x150
[ 1046.347237][T12887]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1046.352904][T12887]  ? vfs_write+0x580/0x910
[ 1046.357318][T12887]  ? __fget_files+0x1d4/0x210
[ 1046.362032][T12887]  ? fput+0x14e/0x190
[ 1046.366009][T12887]  ? ksys_write+0x17a/0x1b0
[ 1046.370507][T12887]  __x64_sys_prctl+0x67/0x80
[ 1046.375096][T12887]  x64_sys_call+0x2ca1/0x2d60
[ 1046.379822][T12887]  do_syscall_64+0xc9/0x1c0
[ 1046.384362][T12887]  ? clear_bhb_loop+0x55/0xb0
[ 1046.389038][T12887]  ? clear_bhb_loop+0x55/0xb0
[ 1046.393717][T12887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.399609][T12887] RIP: 0033:0x7f0f87addff9
[ 1046.404012][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1046.423640][T12887] RSP: 002b:00007f0f86757038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 1046.432165][T12887] RAX: ffffffffffffffda RBX: 00007f0f87c95f80 RCX: 00007f0f87addff9
[ 1046.440196][T12887] RDX: 0000000020000180 RSI: 0000000000000002 RDI: 0000000000000016
[ 1046.448160][T12887] RBP: 00007f0f86757090 R08: 0000000000000000 R09: 0000000000000000
[ 1046.456122][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1046.464152][T12887] R13: 0000000000000001 R14: 00007f0f87c95f80 R15: 00007ffc84881fb8
[ 1046.472190][T12887]  </TASK>
[ 1046.484240][T12888] sd 0:0:1:0: device reset
[ 1046.619675][T12922] Cannot find add_set index 0 as target
[ 1046.694848][T12934] FAULT_INJECTION: forcing a failure.
[ 1046.694848][T12934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1046.708102][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.3.14812 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1046.720525][T12934] Tainted: [W]=WARN
[ 1046.724352][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1046.734414][T12934] Call Trace:
[ 1046.737689][T12934]  <TASK>
[ 1046.740624][T12934]  dump_stack_lvl+0xf2/0x150
[ 1046.745224][T12934]  dump_stack+0x15/0x20
[ 1046.749452][T12934]  should_fail_ex+0x223/0x230
[ 1046.754133][T12934]  should_fail+0xb/0x10
[ 1046.758284][T12934]  should_fail_usercopy+0x1a/0x20
[ 1046.763332][T12934]  _copy_from_user+0x1e/0xd0
[ 1046.767970][T12934]  __se_sys_memfd_create+0x26b/0x5c0
[ 1046.773312][T12934]  __x64_sys_memfd_create+0x31/0x40
[ 1046.778511][T12934]  x64_sys_call+0x2891/0x2d60
[ 1046.783184][T12934]  do_syscall_64+0xc9/0x1c0
[ 1046.787709][T12934]  ? clear_bhb_loop+0x55/0xb0
[ 1046.792464][T12934]  ? clear_bhb_loop+0x55/0xb0
[ 1046.797138][T12934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.803137][T12934] RIP: 0033:0x7fbe343edff9
[ 1046.807545][T12934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1046.827190][T12934] RSP: 002b:00007fbe33060e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1046.835594][T12934] RAX: ffffffffffffffda RBX: 0000000000000537 RCX: 00007fbe343edff9
[ 1046.843561][T12934] RDX: 00007fbe33060ef0 RSI: 0000000000000000 RDI: 00007fbe34460b02
[ 1046.851525][T12934] RBP: 0000000020000f80 R08: 00007fbe33060bb7 R09: 00007fbe33060e40
[ 1046.859488][T12934] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000
[ 1046.867451][T12934] R13: 00007fbe33060ef0 R14: 00007fbe33060eb0 R15: 0000000020000240
[ 1046.875489][T12934]  </TASK>
[ 1046.913007][T12933] sd 0:0:1:0: device reset
[ 1046.953668][T12939] FAULT_INJECTION: forcing a failure.
[ 1046.953668][T12939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1046.953829][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.0.14814 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1046.953870][T12939] Tainted: [W]=WARN
[ 1046.953877][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1046.953889][T12939] Call Trace:
[ 1046.953895][T12939]  <TASK>
[ 1046.953902][T12939]  dump_stack_lvl+0xf2/0x150
[ 1046.953966][T12939]  dump_stack+0x15/0x20
[ 1046.953984][T12939]  should_fail_ex+0x223/0x230
[ 1046.954039][T12939]  should_fail+0xb/0x10
[ 1046.954070][T12939]  should_fail_usercopy+0x1a/0x20
[ 1046.954102][T12939]  _copy_to_user+0x1e/0xa0
[ 1046.954177][T12939]  simple_read_from_buffer+0xa0/0x110
[ 1046.954205][T12939]  proc_fail_nth_read+0xf9/0x140
[ 1046.954298][T12939]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1046.954353][T12939]  vfs_read+0x195/0x720
[ 1046.954513][T12939]  ? __rcu_read_unlock+0x4e/0x70
[ 1046.954544][T12939]  ? __fget_files+0x1d4/0x210
[ 1046.954574][T12939]  ksys_read+0xeb/0x1b0
[ 1046.954599][T12939]  __x64_sys_read+0x42/0x50
[ 1046.954683][T12939]  x64_sys_call+0x27d3/0x2d60
[ 1046.954710][T12939]  do_syscall_64+0xc9/0x1c0
[ 1046.954736][T12939]  ? clear_bhb_loop+0x55/0xb0
[ 1046.954859][T12939]  ? clear_bhb_loop+0x55/0xb0
[ 1046.954885][T12939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.954981][T12939] RIP: 0033:0x7f0f87adca3c
[ 1046.954997][T12939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1046.955017][T12939] RSP: 002b:00007f0f86757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1046.955037][T12939] RAX: ffffffffffffffda RBX: 00007f0f87c95f80 RCX: 00007f0f87adca3c
[ 1046.955049][T12939] RDX: 000000000000000f RSI: 00007f0f867570a0 RDI: 0000000000000007
[ 1046.955061][T12939] RBP: 00007f0f86757090 R08: 0000000000000000 R09: 0000000000000000
[ 1046.955072][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1046.955100][T12939] R13: 0000000000000000 R14: 00007f0f87c95f80 R15: 00007ffc84881fb8
[ 1046.955117][T12939]  </TASK>
[ 1047.060488][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.094080][T12954] netlink: 'syz.0.14820': attribute type 10 has an invalid length.
[ 1047.124644][T12955] loop1: detected capacity change from 0 to 512
[ 1047.129656][T12955] ext3: Unknown parameter 'fsmagic'
[ 1047.154084][T12957] loop3: detected capacity change from 0 to 2048
[ 1047.165479][T12938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12938 comm=syz.1.14805
[ 1047.191335][T12957] EXT4-fs (loop3): failed to initialize system zone (-117)
[ 1047.191371][T12957] EXT4-fs (loop3): mount failed
[ 1047.375532][T12979] loop1: detected capacity change from 0 to 764
[ 1047.446969][T12982] loop0: detected capacity change from 0 to 512
[ 1047.447160][T12982] ext3: Unknown parameter 'fsmagic'
[ 1047.449211][T12982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12982 comm=syz.0.14824
[ 1047.489337][T12985] loop3: detected capacity change from 0 to 2048
[ 1047.528622][T12985] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1047.591797][T12979] random: crng reseeded on system resumption
[ 1047.604347][T12998] netlink: 'syz.4.14834': attribute type 10 has an invalid length.
[ 1047.648680][T12979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.657983][T12979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.778564][   T29] kauditd_printk_skb: 529 callbacks suppressed
[ 1047.778578][   T29] audit: type=1400 audit(1047.738:125312): avc:  denied  { setattr } for  pid=13021 comm="syz.2.14842" name="task" dev="proc" ino=177671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1047.830601][   T29] audit: type=1326 audit(1047.788:125313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.845522][T13023] loop0: detected capacity change from 0 to 512
[ 1047.853967][   T29] audit: type=1326 audit(1047.788:125314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.870958][T13023] ext3: Unknown parameter 'fsmagic'
[ 1047.884563][   T29] audit: type=1326 audit(1047.848:125315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.894813][T13007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13007 comm=syz.0.14837
[ 1047.929976][   T29] audit: type=1326 audit(1047.878:125316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.953431][   T29] audit: type=1326 audit(1047.878:125317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.976676][   T29] audit: type=1326 audit(1047.878:125318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1047.999889][   T29] audit: type=1326 audit(1047.878:125319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1048.024280][   T29] audit: type=1326 audit(1047.878:125320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1048.046610][T13034] netlink: 'syz.4.14846': attribute type 10 has an invalid length.
[ 1048.047900][   T29] audit: type=1326 audit(1047.878:125321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.14843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5ce81dff9 code=0x7ffc0000
[ 1048.083489][T13032] bond_slave_1: mtu greater than device maximum
[ 1048.091855][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.100575][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.110611][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.120361][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.155374][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.179904][T13040] FAULT_INJECTION: forcing a failure.
[ 1048.179904][T13040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1048.193593][T13040] CPU: 1 UID: 0 PID: 13040 Comm: syz.0.14849 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1048.205990][T13040] Tainted: [W]=WARN
[ 1048.209846][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1048.219894][T13040] Call Trace:
[ 1048.223167][T13040]  <TASK>
[ 1048.226096][T13040]  dump_stack_lvl+0xf2/0x150
[ 1048.230679][T13040]  dump_stack+0x15/0x20
[ 1048.234868][T13040]  should_fail_ex+0x223/0x230
[ 1048.239547][T13040]  should_fail+0xb/0x10
[ 1048.243708][T13040]  should_fail_usercopy+0x1a/0x20
[ 1048.248734][T13040]  _copy_from_user+0x1e/0xd0
[ 1048.253377][T13040]  copy_msghdr_from_user+0x54/0x2a0
[ 1048.258606][T13040]  __sys_sendmsg+0x171/0x270
[ 1048.263346][T13040]  __x64_sys_sendmsg+0x46/0x50
[ 1048.268118][T13040]  x64_sys_call+0x2689/0x2d60
[ 1048.272876][T13040]  do_syscall_64+0xc9/0x1c0
[ 1048.277370][T13040]  ? clear_bhb_loop+0x55/0xb0
[ 1048.282065][T13040]  ? clear_bhb_loop+0x55/0xb0
[ 1048.286759][T13040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1048.292652][T13040] RIP: 0033:0x7f0f87addff9
[ 1048.297077][T13040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1048.316733][T13040] RSP: 002b:00007f0f86757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1048.325267][T13040] RAX: ffffffffffffffda RBX: 00007f0f87c95f80 RCX: 00007f0f87addff9
[ 1048.333279][T13040] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005
[ 1048.341358][T13040] RBP: 00007f0f86757090 R08: 0000000000000000 R09: 0000000000000000
[ 1048.349324][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1048.357291][T13040] R13: 0000000000000000 R14: 00007f0f87c95f80 R15: 00007ffc84881fb8
[ 1048.365259][T13040]  </TASK>
[ 1048.432476][ T7873] EXT4-fs unmount: 63 callbacks suppressed
[ 1048.432492][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.512587][T13049] netlink: 'syz.1.14853': attribute type 8 has an invalid length.
[ 1048.520451][T13049] __nla_validate_parse: 4 callbacks suppressed
[ 1048.520490][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14853'.
[ 1048.545666][T13056] loop3: detected capacity change from 0 to 512
[ 1048.574150][T13056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1048.579832][T13065] netlink: 'syz.1.14857': attribute type 10 has an invalid length.
[ 1048.592053][T13067] loop0: detected capacity change from 0 to 512
[ 1048.608090][T13056] Process accounting resumed
[ 1048.617321][T13056] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[ 1048.618283][T13067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1048.640704][T13067] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.682504][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.756716][T13088] loop0: detected capacity change from 0 to 2048
[ 1048.766558][T13088] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1048.793454][T13088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1048.841472][T13090] loop1: detected capacity change from 0 to 512
[ 1048.860688][T13090] ext3: Unknown parameter 'fsmagic'
[ 1048.880528][T13070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13070 comm=syz.1.14859
[ 1048.933249][T13095] random: crng reseeded on system resumption
[ 1048.969669][T13101] Cannot find add_set index 0 as target
[ 1049.002099][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.013114][T13103] netlink: 'syz.3.14866': attribute type 29 has an invalid length.
[ 1049.029222][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1049.041147][T13103] netlink: 'syz.3.14866': attribute type 29 has an invalid length.
[ 1049.052678][T13103] syz.3.14866[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1049.052753][T13103] syz.3.14866[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1049.067192][T13103] IPv4: Oversized IP packet from 172.20.20.24
[ 1049.084948][    C1] IPv4: Oversized IP packet from 172.20.20.24
[ 1049.091080][    C1] IPv4: Oversized IP packet from 172.20.20.24
[ 1049.099173][T13111] netlink: 'syz.4.14869': attribute type 10 has an invalid length.
[ 1049.132373][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1049.319206][T13138] loop1: detected capacity change from 0 to 512
[ 1049.348110][T13144] netlink: 'syz.3.14882': attribute type 10 has an invalid length.
[ 1049.360709][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14883'.
[ 1049.373873][T13148] Cannot find add_set index 0 as target
[ 1049.377386][T13146] vlan2: entered allmulticast mode
[ 1049.413781][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14885'.
[ 1049.459815][T13152] geneve2: entered promiscuous mode
[ 1049.465104][T13152] geneve2: entered allmulticast mode
[ 1049.516483][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.517534][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.524416][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.540517][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.548297][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.556089][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.563968][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.571776][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.579595][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.587540][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.595345][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.603163][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.610913][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.618681][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.626505][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.634351][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.635717][T13168] FAULT_INJECTION: forcing a failure.
[ 1049.635717][T13168] name failslab, interval 1, probability 0, space 0, times 0
[ 1049.642234][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.654738][T13168] CPU: 0 UID: 0 PID: 13168 Comm: syz.2.14889 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1049.662647][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.674725][T13168] Tainted: [W]=WARN
[ 1049.674733][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1049.674745][T13168] Call Trace:
[ 1049.682494][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.686220][T13168]  <TASK>
[ 1049.696363][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: unknown main item tag 0x0
[ 1049.699576][T13168]  dump_stack_lvl+0xf2/0x150
[ 1049.710262][T11414] hid-generic FFFC:0000:FFFFFFFF.00C2: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz0
[ 1049.717863][T13168]  dump_stack+0x15/0x20
[ 1049.717885][T13168]  should_fail_ex+0x223/0x230
[ 1049.741249][T13168]  ? getname_flags+0x81/0x3b0
[ 1049.745931][T13168]  should_failslab+0x8f/0xb0
[ 1049.750548][T13168]  kmem_cache_alloc_noprof+0x4c/0x290
[ 1049.755953][T13168]  getname_flags+0x81/0x3b0
[ 1049.760438][T13168]  getname+0x17/0x20
[ 1049.764314][T13168]  do_sys_openat2+0x67/0x120
[ 1049.768887][T13168]  __x64_sys_open+0xe6/0x110
[ 1049.773527][T13168]  x64_sys_call+0x1321/0x2d60
[ 1049.778219][T13168]  do_syscall_64+0xc9/0x1c0
[ 1049.782706][T13168]  ? clear_bhb_loop+0x55/0xb0
[ 1049.787520][T13168]  ? clear_bhb_loop+0x55/0xb0
[ 1049.792185][T13168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1049.798196][T13168] RIP: 0033:0x7fb5ce81dff9
[ 1049.802593][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1049.822278][T13168] RSP: 002b:00007fb5cd497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1049.830829][T13168] RAX: ffffffffffffffda RBX: 00007fb5ce9d5f80 RCX: 00007fb5ce81dff9
[ 1049.838786][T13168] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000020000600
[ 1049.846740][T13168] RBP: 00007fb5cd497090 R08: 0000000000000000 R09: 0000000000000000
[ 1049.854693][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1049.862658][T13168] R13: 0000000000000000 R14: 00007fb5ce9d5f80 R15: 00007fff854a0b78
[ 1049.870631][T13168]  </TASK>
[ 1049.876929][T13164] pim6reg1: entered promiscuous mode
[ 1049.880603][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1049.882261][T13164] pim6reg1: entered allmulticast mode
[ 1049.901318][ T7871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1049.961945][T13185] netlink: 'syz.1.14894': attribute type 10 has an invalid length.
[ 1050.117492][T13206] Cannot find add_set index 0 as target
[ 1050.224688][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14899'.
[ 1050.248256][T13210] loop0: detected capacity change from 0 to 2048
[ 1050.262586][T13210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1050.284290][ T7871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1050.359058][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14904'.
[ 1050.366122][T13224] loop0: detected capacity change from 0 to 2048
[ 1050.375227][T13224] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1050.388908][T13228] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[ 1050.397458][T13228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1050.404928][T13228] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1050.406299][T13224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1050.425256][T13228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1050.432790][T13228] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1050.671831][T13250] Cannot find add_set index 0 as target
[ 1050.900220][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14915'.
[ 1050.970952][T13265] loop1: detected capacity change from 0 to 1024
[ 1050.981678][T13265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1050.995258][T13265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1051.004266][T13265] System zones: 0-1, 3-36
[ 1051.009528][T13265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1051.153282][ T7871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1051.827369][ T7878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1051.860507][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14926'.
[ 1051.867874][T13292] loop1: detected capacity change from 0 to 512
[ 1051.911439][T13292] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.14924: casefold flag without casefold feature
[ 1051.941618][T13292] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.14924: couldn't read orphan inode 15 (err -117)
[ 1051.975542][T13292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1052.082395][T13298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13298 comm=syz.2.14927
[ 1052.155038][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14928'.
[ 1052.698095][ T7878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1052.718682][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14933'.
[ 1052.748239][T13314] loop1: detected capacity change from 0 to 2048
[ 1052.776009][T13314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1052.804118][ T7878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1052.834149][T13320] loop1: detected capacity change from 0 to 1024
[ 1052.841225][T13320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1052.854707][T13320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1052.863014][T13320] System zones: 0-1, 3-36
[ 1052.868279][T13320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1053.262364][T13334] netlink: 'syz.2.14939': attribute type 10 has an invalid length.
[ 1053.293645][   T24] net_ratelimit: 4 callbacks suppressed
[ 1053.293659][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.341715][T13336] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1053.673509][ T7878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.722512][T13340] Cannot find add_set index 0 as target
[ 1053.946842][   T29] kauditd_printk_skb: 488 callbacks suppressed
[ 1053.946856][   T29] audit: type=1400 audit(1053.908:125810): avc:  denied  { read } for  pid=13343 comm="syz.1.14943" dev="nsfs" ino=4026536037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1054.021569][   T29] audit: type=1400 audit(1053.908:125811): avc:  denied  { open } for  pid=13343 comm="syz.1.14943" path="net:[4026536037]" dev="nsfs" ino=4026536037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1054.044722][   T29] audit: type=1400 audit(1053.908:125812): avc:  denied  { create } for  pid=13343 comm="syz.1.14943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1054.064513][   T29] audit: type=1400 audit(1053.958:125813): avc:  denied  { write } for  pid=13343 comm="syz.1.14943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1054.141448][   T29] audit: type=1400 audit(1054.088:125814): avc:  denied  { cpu } for  pid=13343 comm="syz.1.14943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1054.180696][   T29] audit: type=1400 audit(1054.128:125815): avc:  denied  { bind } for  pid=13348 comm="syz.2.14944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1054.252144][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.309282][   T29] audit: type=1400 audit(1054.268:125816): avc:  denied  { read write } for  pid=13348 comm="syz.2.14944" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1054.332536][   T29] audit: type=1400 audit(1054.268:125817): avc:  denied  { open } for  pid=13348 comm="syz.2.14944" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1054.334389][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.355646][   T29] audit: type=1400 audit(1054.268:125818): avc:  denied  { ioctl } for  pid=13348 comm="syz.2.14944" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1054.421223][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.641567][   T29] audit: type=1400 audit(1054.328:125819): avc:  denied  { execute } for  pid=13348 comm="syz.2.14944" path="/260/bus" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1054.773238][T13364] __nla_validate_parse: 1 callbacks suppressed
[ 1054.773252][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14949'.
[ 1054.923371][T13376] sd 0:0:1:0: device reset
[ 1054.964118][T13383] Cannot find add_set index 0 as target
[ 1054.989940][T13386] netlink: 'syz.2.14957': attribute type 10 has an invalid length.
[ 1055.079310][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14959'.
[ 1055.121290][T13390] loop1: detected capacity change from 0 to 2048
[ 1055.159324][T13390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1055.186521][ T7878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1055.210900][T13401] loop3: detected capacity change from 0 to 764
[ 1055.361312][T13401] random: crng reseeded on system resumption
[ 1055.411578][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.421758][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.430149][T13401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.438995][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.447841][T13401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.463486][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.472172][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.997960][T13431] FAULT_INJECTION: forcing a failure.
[ 1055.997960][T13431] name failslab, interval 1, probability 0, space 0, times 0
[ 1056.010655][T13431] CPU: 1 UID: 0 PID: 13431 Comm: syz.1.14967 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1056.022994][T13431] Tainted: [W]=WARN
[ 1056.026936][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1056.036971][T13431] Call Trace:
[ 1056.040305][T13431]  <TASK>
[ 1056.043218][T13431]  dump_stack_lvl+0xf2/0x150
[ 1056.047837][T13431]  dump_stack+0x15/0x20
[ 1056.051978][T13431]  should_fail_ex+0x223/0x230
[ 1056.056663][T13431]  ? getname_flags+0x1f4/0x3b0
[ 1056.061505][T13431]  should_failslab+0x8f/0xb0
[ 1056.066120][T13431]  __kmalloc_cache_noprof+0x4b/0x2a0
[ 1056.071446][T13431]  getname_flags+0x1f4/0x3b0
[ 1056.076033][T13431]  user_path_at+0x26/0x110
[ 1056.080482][T13431]  user_statfs+0x7a/0x2a0
[ 1056.084828][T13431]  __x64_sys_statfs+0x64/0xf0
[ 1056.089579][T13431]  ? fput+0x14e/0x190
[ 1056.093568][T13431]  ? ksys_write+0x17a/0x1b0
[ 1056.098076][T13431]  ? fpregs_assert_state_consistent+0x83/0xa0
[ 1056.104154][T13431]  x64_sys_call+0x2553/0x2d60
[ 1056.108823][T13431]  do_syscall_64+0xc9/0x1c0
[ 1056.113318][T13431]  ? clear_bhb_loop+0x55/0xb0
[ 1056.118058][T13431]  ? clear_bhb_loop+0x55/0xb0
[ 1056.122761][T13431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.128674][T13431] RIP: 0033:0x7f559e47dff9
[ 1056.133109][T13431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.152711][T13431] RSP: 002b:00007f559d0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[ 1056.161114][T13431] RAX: ffffffffffffffda RBX: 00007f559e635f80 RCX: 00007f559e47dff9
[ 1056.169073][T13431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002040
[ 1056.177039][T13431] RBP: 00007f559d0f7090 R08: 0000000000000000 R09: 0000000000000000
[ 1056.184999][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1056.192959][T13431] R13: 0000000000000000 R14: 00007f559e635f80 R15: 00007ffe744b0468
[ 1056.200925][T13431]  </TASK>
[ 1056.222253][T13437] netlink: 'syz.1.14969': attribute type 10 has an invalid length.
[ 1056.280488][T13438] sd 0:0:1:0: device reset
[ 1056.313431][T13448] loop3: detected capacity change from 0 to 1024
[ 1056.320335][T13448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1056.328035][T13442] sd 0:0:1:0: device reset
[ 1056.330517][T13448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1056.341839][T13448] System zones: 0-1, 3-36
[ 1056.347198][T13448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1056.492102][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.600471][T13471] SELinux:  policydb version 1664755333 does not match my version range 15-33
[ 1056.609575][T13471] SELinux: failed to load policy
[ 1057.165059][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.232209][T13487] loop3: detected capacity change from 0 to 8192
[ 1057.245893][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14985'.
[ 1057.256584][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14985'.
[ 1057.265987][T13487] SELinux:  policydb string SE ÓE;Ÿh does not match my string SE Linux
[ 1057.274361][T13487] SELinux: failed to load policy
[ 1057.296125][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.340147][T13491] sd 0:0:1:0: device reset
[ 1057.374929][T13493] loop3: detected capacity change from 0 to 512
[ 1057.393114][T13493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1057.415904][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.495347][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14990'.
[ 1057.508320][T13507] geneve2: entered promiscuous mode
[ 1057.513711][T13507] geneve2: entered allmulticast mode
[ 1057.532362][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.550677][T13501] syz.3.14989[13501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1057.550729][T13501] syz.3.14989[13501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1057.562348][T13501] syz.3.14989[13501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1057.630058][T13514] loop3: detected capacity change from 0 to 512
[ 1057.648344][T13514] EXT4-fs: Ignoring removed orlov option
[ 1057.654945][T13514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1057.666523][T13514] EXT4-fs (loop3): 1 orphan inode deleted
[ 1057.672343][T13514] EXT4-fs (loop3): 1 truncate cleaned up
[ 1057.678364][T13514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1057.693775][T13514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1057.705720][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.709545][T13514] SELinux:  policydb version 1664755333 does not match my version range 15-33
[ 1057.715781][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.728110][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1057.732351][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.741236][T13514] SELinux: failed to load policy
[ 1057.748387][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.748413][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.768900][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.776688][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.784433][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.792218][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.799983][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.807782][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.815526][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.823311][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.831134][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.838868][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.846665][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.854414][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.862152][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.869981][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: unknown main item tag 0x0
[ 1057.877902][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.879231][    T9] hid-generic FFFC:0000:FFFFFFFF.00C3: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz0
[ 1057.903813][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.920166][T13532] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1057.934245][T13532] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1057.943423][T13532] SELinux: failed to load policy
[ 1057.984402][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14997'.
[ 1057.992066][T13541] loop1: detected capacity change from 0 to 1024
[ 1058.000428][T13541] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 1058.079856][T13560] loop1: detected capacity change from 0 to 4096
[ 1058.099362][T13560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1058.576899][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.627092][T13566] syz.2.15002[13566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1058.627172][T13566] syz.2.15002[13566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1058.640006][T13566] syz.2.15002[13566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1058.733874][T13586] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1058.759342][T13586] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1058.768471][T13586] SELinux: failed to load policy
[ 1058.814654][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15012'.
[ 1058.827512][T13595] geneve2: entered promiscuous mode
[ 1058.832750][T13595] geneve2: entered allmulticast mode
[ 1058.958743][T13614] netlink: 'syz.2.15018': attribute type 10 has an invalid length.
[ 1058.958886][T13612] loop3: detected capacity change from 0 to 256
[ 1058.978823][T13612] FAT-fs (loop3): Directory bread(block 64) failed
[ 1058.985486][T13612] FAT-fs (loop3): Directory bread(block 65) failed
[ 1058.992337][T13612] FAT-fs (loop3): Directory bread(block 66) failed
[ 1058.998918][T13612] FAT-fs (loop3): Directory bread(block 67) failed
[ 1059.005469][T13612] FAT-fs (loop3): Directory bread(block 68) failed
[ 1059.012769][T13612] FAT-fs (loop3): Directory bread(block 69) failed
[ 1059.019386][T13612] FAT-fs (loop3): Directory bread(block 70) failed
[ 1059.025964][T13612] FAT-fs (loop3): Directory bread(block 71) failed
[ 1059.032550][T13612] FAT-fs (loop3): Directory bread(block 72) failed
[ 1059.039169][T13612] FAT-fs (loop3): Directory bread(block 73) failed
[ 1059.042919][   T29] kauditd_printk_skb: 135 callbacks suppressed
[ 1059.042931][   T29] audit: type=1400 audit(1059.008:125955): avc:  denied  { getopt } for  pid=13617 comm="syz.2.15020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1059.062153][T13612] syz.3.15017: attempt to access beyond end of device
[ 1059.062153][T13612] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256
[ 1059.099154][T13622] loop3: detected capacity change from 0 to 512
[ 1059.107418][T13623] can0: slcan on ttyS3.
[ 1059.123640][T13622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1059.144568][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1059.153605][T13623] can0 (unregistered): slcan off ttyS3.
[ 1059.159241][T13623] Falling back ldisc for ttyS3.
[ 1059.221883][   T29] audit: type=1400 audit(1059.188:125956): avc:  denied  { mounton } for  pid=13643 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1059.353159][T13643] chnl_net:caif_netlink_parms(): no params data found
[ 1059.406871][T13643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.414034][T13643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.421291][T13643] bridge_slave_0: entered allmulticast mode
[ 1059.428287][T13643] bridge_slave_0: entered promiscuous mode
[ 1059.435868][T13643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.443012][T13643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.445082][T13814] serio: Serial port pts0
[ 1059.450227][T13643] bridge_slave_1: entered allmulticast mode
[ 1059.460900][T13643] bridge_slave_1: entered promiscuous mode
[ 1059.480862][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1059.493321][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1059.519477][T13863] netlink: 'syz.3.15030': attribute type 10 has an invalid length.
[ 1059.529542][T13643] team0: Port device team_slave_0 added
[ 1059.538323][T13643] team0: Port device team_slave_1 added
[ 1059.556872][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1059.563916][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1059.589947][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1059.604083][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1059.611044][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1059.614372][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.637059][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.678016][T13643] hsr_slave_0: entered promiscuous mode
[ 1059.684435][T13643] hsr_slave_1: entered promiscuous mode
[ 1059.690519][T13643] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1059.698685][T13643] Cannot create hsr debugfs directory
[ 1059.773589][T13935] loop3: detected capacity change from 0 to 512
[ 1059.780276][T13935] ext3: Unknown parameter 'fsmagic'
[ 1059.787828][   T29] audit: type=1400 audit(1059.748:125957): avc:  denied  { mount } for  pid=13868 comm="syz.3.15031" name="/" dev="ramfs" ino=179136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1059.791732][T13643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.813671][T13935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13935 comm=syz.3.15031
[ 1059.858706][   T29] audit: type=1400 audit(1059.818:125958): avc:  denied  { unmount } for  pid=7873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1059.885646][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15032'.
[ 1059.895132][T13987] netlink: 'syz.2.15033': attribute type 10 has an invalid length.
[ 1059.918332][T13643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.931000][T13985] loop3: detected capacity change from 0 to 2048
[ 1059.963626][T13985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1059.987273][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1060.020731][T13643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.072785][T13643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.105038][T14002] loop3: detected capacity change from 0 to 2048
[ 1060.111820][T14002] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1060.128705][T14002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1060.140227][T13643] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1060.157234][T13643] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1060.171459][T13643] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1060.181778][T13643] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1060.198198][T13643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.205412][T13643] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.212816][T13643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.219854][T13643] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.256057][T13643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.269233][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.279448][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1060.297050][T13643] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.307863][T15282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.314966][T15282] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.330789][T15282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.337941][T15282] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.341619][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.360810][T13643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1060.371346][T13643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1060.438759][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1060.575594][T13643] veth0_vlan: entered promiscuous mode
[ 1060.587702][T13643] veth1_vlan: entered promiscuous mode
[ 1060.611068][T13643] veth0_macvtap: entered promiscuous mode
[ 1060.619403][T13643] veth1_macvtap: entered promiscuous mode
[ 1060.635775][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.646261][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.651700][T29430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.656194][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.674689][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.684585][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.695141][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.705124][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.715579][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.725448][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.735989][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.745820][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.756253][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.766082][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.776537][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.786375][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.796944][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.806875][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.817334][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.827182][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.837689][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.847548][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.857974][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.867813][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.878288][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.888113][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.898538][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.908444][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.918994][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.928881][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1060.939293][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.951079][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1060.959220][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1060.961073][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1060.978775][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.988712][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1060.999207][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.009114][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.019531][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.029451][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.039928][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.049733][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.060272][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.070162][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.080572][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.090426][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.100969][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.110795][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.121219][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.131025][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.141458][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.151278][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.161709][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.171555][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.181974][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.191788][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.202274][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.212127][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.222575][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.232452][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.242872][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.252723][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.263281][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.276026][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1061.288747][T13643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.297580][T13643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.306350][T13643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.315127][T13643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.354468][   T29] audit: type=1400 audit(1061.308:125959): avc:  denied  { mounton } for  pid=13643 comm="syz-executor" path="/root/syzkaller.xmai5m/syz-tmp" dev="sda1" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1061.378802][   T29] audit: type=1400 audit(1061.308:125960): avc:  denied  { mount } for  pid=13643 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1061.400925][   T29] audit: type=1400 audit(1061.308:125961): avc:  denied  { mount } for  pid=13643 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1061.422764][   T29] audit: type=1400 audit(1061.308:125962): avc:  denied  { mounton } for  pid=13643 comm="syz-executor" path="/root/syzkaller.xmai5m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1061.449357][   T29] audit: type=1400 audit(1061.308:125963): avc:  denied  { mounton } for  pid=13643 comm="syz-executor" path="/root/syzkaller.xmai5m/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=179653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1061.517739][T14057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15025'.
[ 1061.530516][   T29] audit: type=1400 audit(1061.318:125964): avc:  denied  { mounton } for  pid=13643 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1061.570619][T14057] geneve2: entered promiscuous mode
[ 1061.575909][T14057] geneve2: entered allmulticast mode
[ 1061.693641][T29430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.715088][T14145] netlink: 'syz.3.15044': attribute type 10 has an invalid length.
[ 1061.759277][T14183] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1061.764326][T14053] chnl_net:caif_netlink_parms(): no params data found
[ 1061.767028][T14183] vhci_hcd: invalid port number 130
[ 1061.778794][T14183] vhci_hcd: invalid port number 130
[ 1061.885603][T14053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.892878][T14053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.900930][T14053] bridge_slave_0: entered allmulticast mode
[ 1061.907758][T14053] bridge_slave_0: entered promiscuous mode
[ 1061.912703][T14248] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1061.921685][T14053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.929512][T14053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1061.931523][T14248] SELinux: failed to load policy
[ 1061.944408][T14053] bridge_slave_1: entered allmulticast mode
[ 1061.951109][T14053] bridge_slave_1: entered promiscuous mode
[ 1061.975207][T14053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1061.986626][T14053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1062.010898][T14053] team0: Port device team_slave_0 added
[ 1062.020106][T14053] team0: Port device team_slave_1 added
[ 1062.044697][T14053] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1062.051824][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1062.077903][T14053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1062.090330][T14053] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1062.097326][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1062.123373][T14053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1062.163700][T14053] hsr_slave_0: entered promiscuous mode
[ 1062.182374][T14053] hsr_slave_1: entered promiscuous mode
[ 1062.191500][T14053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1062.198023][T14355] loop3: detected capacity change from 0 to 764
[ 1062.199045][T14053] Cannot create hsr debugfs directory
[ 1062.219980][T14300] random: crng reseeded on system resumption
[ 1062.299244][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.312173][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.370886][T14410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15057'.
[ 1062.396016][T14053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.406424][T14413] Cannot find add_set index 0 as target
[ 1062.497770][T14355] random: crng reseeded on system resumption
[ 1062.511236][T14053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.524207][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15061'.
[ 1062.554524][T14431] geneve2: entered promiscuous mode
[ 1062.559762][T14431] geneve2: entered allmulticast mode
[ 1062.584594][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.593198][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.594510][T14053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.660828][T14053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.721107][T14053] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1062.730994][T14053] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1062.738375][T29430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.753698][T14053] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1062.765791][T14053] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1062.820258][T14053] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1062.849252][T14053] 8021q: adding VLAN 0 to HW filter on device team0
[ 1062.871074][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.878177][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1062.917817][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1062.924936][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1062.962394][T14053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1062.972846][T14053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1062.993118][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15068'.
[ 1063.078612][T14053] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1063.178303][T14503] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1063.203772][T14503] SELinux: failed to load policy
[ 1063.227901][T14053] veth0_vlan: entered promiscuous mode
[ 1063.239608][T14053] veth1_vlan: entered promiscuous mode
[ 1063.276999][T14053] veth0_macvtap: entered promiscuous mode
[ 1063.288382][T14053] veth1_macvtap: entered promiscuous mode
[ 1063.312779][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.323420][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.333271][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.343808][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.353695][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.364176][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.374368][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.384973][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.394799][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.405240][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.415102][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.425613][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.435457][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.445888][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.455856][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.466318][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.476158][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.486678][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.496510][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.506943][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.514174][T14517] random: crng reseeded on system resumption
[ 1063.516810][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.533191][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.543015][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.553452][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.563348][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.573761][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.583115][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.583617][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.602356][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.612264][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.622703][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.632532][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.642960][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.653126][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.654074][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.678929][T14053] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1063.698177][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15076'.
[ 1063.709966][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.720529][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.730455][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.741119][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.750985][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.761547][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.771372][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.781865][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.791740][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.802265][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.812110][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.822587][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.832423][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.842856][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.852904][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.863812][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.873657][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.884117][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.893951][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.904497][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.914391][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.924909][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.930118][T14527] loop3: detected capacity change from 0 to 512
[ 1063.934849][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.951469][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.961384][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.963709][T14527] ext3: Unknown parameter 'fsmagic'
[ 1063.971875][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.971889][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.971904][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.971915][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.996861][T14527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14527 comm=syz.3.15078
[ 1063.997320][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.030292][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.039936][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1064.058573][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.070534][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.079955][T14053] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1064.090955][T14053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.099871][T14053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.108697][T14053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.117412][T14053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.134568][   T29] kauditd_printk_skb: 167 callbacks suppressed
[ 1064.134582][   T29] audit: type=1326 audit(1064.098:126132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.164265][   T29] audit: type=1326 audit(1064.098:126133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.187568][   T29] audit: type=1326 audit(1064.098:126134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.211098][   T29] audit: type=1326 audit(1064.098:126135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.234373][   T29] audit: type=1326 audit(1064.098:126136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.257785][   T29] audit: type=1326 audit(1064.098:126137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.281218][   T29] audit: type=1326 audit(1064.098:126138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.304671][   T29] audit: type=1326 audit(1064.098:126139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.327943][   T29] audit: type=1326 audit(1064.098:126140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.351524][   T29] audit: type=1326 audit(1064.098:126141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.3.15079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe343edff9 code=0x7ffc0000
[ 1064.430509][T14551] loop0: detected capacity change from 0 to 1024
[ 1064.438397][T14551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1064.461655][T14551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1064.469831][T14551] System zones: 0-1, 3-36
[ 1064.477728][T14551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1065.132372][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.321052][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.508189][T14573] loop0: detected capacity change from 0 to 512
[ 1065.532691][T14573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1065.572400][T14573] EXT4-fs (loop0): 1 orphan inode deleted
[ 1065.578220][T14573] EXT4-fs (loop0): 1 truncate cleaned up
[ 1065.593069][T14573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1065.653302][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.937353][T14579] block device autoloading is deprecated and will be removed.
[ 1065.967188][T14579] syz.0.15092: attempt to access beyond end of device
[ 1065.967188][T14579] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1066.249674][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.629136][T14595] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15097'.
[ 1066.731647][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.292073][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.453044][T14598] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1067.486033][T14598] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1067.503482][T14598] SELinux: failed to load policy
[ 1067.925571][T14631] loop0: detected capacity change from 0 to 512
[ 1067.965680][T14631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1068.025470][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1068.286983][T14649] syz.0.15113[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1068.287067][T14649] syz.0.15113[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1068.312065][T14649] syz.0.15113[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1068.337897][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.381595][T14641] chnl_net:caif_netlink_parms(): no params data found
[ 1068.429655][T14767] netlink: 'syz.0.15114': attribute type 10 has an invalid length.
[ 1068.464022][T14767] veth0_macvtap: left promiscuous mode
[ 1068.473383][T14767] veth0_macvtap: entered promiscuous mode
[ 1068.480253][T14767] team0: Device macvtap0 failed to register rx_handler
[ 1068.489929][T14767] veth0_macvtap: left promiscuous mode
[ 1068.888984][T14641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.896349][T14641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.052080][T14641] bridge_slave_0: entered allmulticast mode
[ 1069.058649][T14641] bridge_slave_0: entered promiscuous mode
[ 1069.071833][T14641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1069.078913][T14641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.142081][T14641] bridge_slave_1: entered allmulticast mode
[ 1069.163857][T14641] bridge_slave_1: entered promiscuous mode
[ 1069.265475][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1069.292693][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15121'.
[ 1069.373615][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.439393][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1069.533541][T14641] team0: Port device team_slave_0 added
[ 1069.554967][T14896] loop0: detected capacity change from 0 to 512
[ 1069.572977][T14641] team0: Port device team_slave_1 added
[ 1069.632388][T14902] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1069.650278][T14896] ext3: Unknown parameter 'fsmagic'
[ 1069.656436][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1069.663477][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.689391][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1069.725761][T14902] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1069.761520][T14902] SELinux: failed to load policy
[ 1069.830786][T14829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14829 comm=syz.0.15119
[ 1069.865841][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.872847][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.898790][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1070.163292][T14641] hsr_slave_0: entered promiscuous mode
[ 1070.201904][T14641] hsr_slave_1: entered promiscuous mode
[ 1070.220753][T14641] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1070.263302][T14641] Cannot create hsr debugfs directory
[ 1070.412177][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.473770][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.512710][T15014] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1070.537843][T15016] loop0: detected capacity change from 0 to 764
[ 1070.560751][T14641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.581285][T15014] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1070.636582][T15014] SELinux: failed to load policy
[ 1070.691204][T14641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.782590][T14641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.825818][T15044] random: crng reseeded on system resumption
[ 1070.896663][T14641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.935118][T15016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1070.948544][T15016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.985615][T14641] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1070.994822][T14641] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1071.024356][T14641] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1071.043305][T14641] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1071.118702][T14641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1071.137719][T14641] 8021q: adding VLAN 0 to HW filter on device team0
[ 1071.151856][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.158969][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1071.186873][T14641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1071.197335][T14641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1071.217622][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.224769][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1071.309713][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1071.317455][T15073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15073 comm=syz.2.15134
[ 1071.448278][T14641] veth0_vlan: entered promiscuous mode
[ 1071.457148][T14641] veth1_vlan: entered promiscuous mode
[ 1071.472130][T14641] veth0_macvtap: entered promiscuous mode
[ 1071.479500][T14641] veth1_macvtap: entered promiscuous mode
[ 1071.489176][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.499677][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.509561][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.519991][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.529840][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.540314][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.550212][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.560773][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.570604][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.581072][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.590980][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.601454][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.611284][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.621929][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.631771][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.642287][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.652127][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.662556][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.672387][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.682814][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.693886][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.704526][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.714516][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.724947][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.734755][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.745179][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.754996][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.765456][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.775385][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.785894][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.795792][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.806257][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.816076][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1071.826671][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.837555][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1071.845942][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.856460][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.866282][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.876697][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.886582][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.897033][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.906918][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.917475][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.927297][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.937795][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.947619][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.958064][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.967875][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.978330][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1071.988178][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1071.998603][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.008422][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.018916][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.028764][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.039214][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.049099][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.059591][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.069447][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.079935][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.089813][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.100321][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.110161][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.120613][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.130422][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.140863][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.150683][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.161102][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.170989][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1072.181474][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1072.192577][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1072.201255][T14641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.209985][T14641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.218775][T14641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.227609][T14641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.315467][T15097] sd 0:0:1:0: device reset
[ 1072.401816][T15105] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1072.487205][T15105] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1072.551498][T15105] SELinux: failed to load policy
[ 1072.713514][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.994368][T15122] loop0: detected capacity change from 0 to 1024
[ 1073.015350][T15122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1073.038690][T15122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1073.066903][T15122] System zones: 0-1, 3-36
[ 1073.085289][T15122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1073.375304][T15126] loop3: detected capacity change from 0 to 512
[ 1073.381903][T15126] ext3: Unknown parameter 'fsmagic'
[ 1073.451522][T15126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15126 comm=syz.3.15146
[ 1073.492171][T15119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15119 comm=syz.1.15144
[ 1073.542488][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.622251][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.782095][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.828972][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15148'.
[ 1073.895163][T15138] loop3: detected capacity change from 0 to 2048
[ 1073.932552][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1073.946487][T15138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1073.966643][   T29] kauditd_printk_skb: 103 callbacks suppressed
[ 1073.966656][   T29] audit: type=1326 audit(1073.928:126245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.045209][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1074.076494][   T29] audit: type=1326 audit(1073.958:126246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.099817][   T29] audit: type=1326 audit(1073.958:126247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.123088][   T29] audit: type=1326 audit(1073.958:126248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.146287][   T29] audit: type=1326 audit(1073.958:126249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.169506][   T29] audit: type=1326 audit(1073.958:126250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15134 comm="syz.4.15147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c9dcdff9 code=0x7ffc0000
[ 1074.239782][   T29] audit: type=1326 audit(1074.198:126251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.1.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f97bddff9 code=0x7ffc0000
[ 1074.289463][   T29] audit: type=1326 audit(1074.198:126252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.1.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f97bddff9 code=0x7ffc0000
[ 1074.312866][   T29] audit: type=1326 audit(1074.228:126253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.1.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f97bddff9 code=0x7ffc0000
[ 1074.336228][   T29] audit: type=1326 audit(1074.228:126254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.1.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f97bddff9 code=0x7ffc0000
[ 1074.551298][T15154] random: crng reseeded on system resumption
[ 1074.636793][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.645381][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.855098][T15163] random: crng reseeded on system resumption
[ 1074.913266][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.924847][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.987146][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.114278][T15183] geneve2: entered promiscuous mode
[ 1075.119558][T15183] geneve2: entered allmulticast mode
[ 1075.298086][T15200] ALSA: seq fatal error: cannot create timer (-22)
[ 1075.327824][T15200] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1075.720924][T15226] geneve2: entered promiscuous mode
[ 1075.726250][T15226] geneve2: entered allmulticast mode
[ 1075.742056][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1075.870550][T15234] loop0: detected capacity change from 0 to 512
[ 1075.939644][T15234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1076.012320][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1076.031933][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.092942][T15241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15175'.
[ 1076.102306][T15241] netlink: 'syz.0.15175': attribute type 7 has an invalid length.
[ 1076.110147][T15241] netlink: 'syz.0.15175': attribute type 8 has an invalid length.
[ 1076.118139][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15175'.
[ 1076.212125][T15246] loop0: detected capacity change from 0 to 512
[ 1076.251082][T15246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1076.366262][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.403842][T15260] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1076.432350][T15260] SELinux:  policydb version -570608695 does not match my version range 15-33
[ 1076.456949][T15260] SELinux: failed to load policy
[ 1076.474276][T15263] FAULT_INJECTION: forcing a failure.
[ 1076.474276][T15263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1076.487375][T15263] CPU: 1 UID: 0 PID: 15263 Comm: syz.0.15179 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1076.499755][T15263] Tainted: [W]=WARN
[ 1076.503550][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1076.513614][T15263] Call Trace:
[ 1076.516886][T15263]  <TASK>
[ 1076.519816][T15263]  dump_stack_lvl+0xf2/0x150
[ 1076.524425][T15263]  dump_stack+0x15/0x20
[ 1076.528586][T15263]  should_fail_ex+0x223/0x230
[ 1076.533291][T15263]  should_fail+0xb/0x10
[ 1076.537530][T15263]  should_fail_usercopy+0x1a/0x20
[ 1076.542569][T15263]  _copy_to_user+0x1e/0xa0
[ 1076.547032][T15263]  simple_read_from_buffer+0xa0/0x110
[ 1076.552470][T15263]  proc_fail_nth_read+0xf9/0x140
[ 1076.557448][T15263]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1076.563089][T15263]  vfs_read+0x195/0x720
[ 1076.567307][T15263]  ? __rcu_read_unlock+0x4e/0x70
[ 1076.572263][T15263]  ? __fget_files+0x1d4/0x210
[ 1076.576960][T15263]  ksys_read+0xeb/0x1b0
[ 1076.581257][T15263]  __x64_sys_read+0x42/0x50
[ 1076.585860][T15263]  x64_sys_call+0x27d3/0x2d60
[ 1076.590613][T15263]  do_syscall_64+0xc9/0x1c0
[ 1076.595118][T15263]  ? clear_bhb_loop+0x55/0xb0
[ 1076.599810][T15263]  ? clear_bhb_loop+0x55/0xb0
[ 1076.604508][T15263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.610491][T15263] RIP: 0033:0x7fd6db6bca3c
[ 1076.614949][T15263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1076.634571][T15263] RSP: 002b:00007fd6da337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1076.643008][T15263] RAX: ffffffffffffffda RBX: 00007fd6db875f80 RCX: 00007fd6db6bca3c
[ 1076.651076][T15263] RDX: 000000000000000f RSI: 00007fd6da3370a0 RDI: 0000000000000005
[ 1076.659160][T15263] RBP: 00007fd6da337090 R08: 0000000000000000 R09: 0000000000000000
[ 1076.667145][T15263] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000002
[ 1076.675176][T15263] R13: 0000000000000000 R14: 00007fd6db875f80 R15: 00007fffd67a4a78
[ 1076.683173][T15263]  </TASK>
[ 1076.686880][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1076.724229][T15280] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1076.724253][T15280] vhci_hcd: invalid port number 130
[ 1076.724343][T15280] vhci_hcd: invalid port number 130
[ 1076.764502][T15286] loop3: detected capacity change from 0 to 1024
[ 1076.771026][T15293] loop0: detected capacity change from 0 to 1024
[ 1076.771572][T15286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1076.779847][T15293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1076.782365][T15286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1076.782397][T15286] System zones: 0-1, 3-36
[ 1076.783348][T15293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002]
[ 1076.783386][T15293] System zones: 0-1, 3-36
[ 1076.783838][T15286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1076.785197][T15293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1077.052390][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1077.079012][T15303] ==================================================================
[ 1077.087157][T15303] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[ 1077.096377][T15303] 
[ 1077.098705][T15303] write to 0xffff888123c8c1b8 of 4 bytes by task 15293 on cpu 1:
[ 1077.106438][T15303]  writeback_single_inode+0x14f/0x3f0
[ 1077.111828][T15303]  sync_inode_metadata+0x5c/0x90
[ 1077.116795][T15303]  generic_buffers_fsync_noflush+0xd8/0x120
[ 1077.122718][T15303]  ext4_sync_file+0x1ff/0x6c0
[ 1077.127411][T15303]  vfs_fsync_range+0x116/0x130
[ 1077.132183][T15303]  ext4_buffered_write_iter+0x326/0x370
[ 1077.137747][T15303]  ext4_file_write_iter+0x293/0xe10
[ 1077.143081][T15303]  iter_file_splice_write+0x5f1/0x980
[ 1077.148482][T15303]  direct_splice_actor+0x160/0x2c0
[ 1077.153617][T15303]  splice_direct_to_actor+0x302/0x670
[ 1077.159015][T15303]  do_splice_direct+0xd7/0x150
[ 1077.163801][T15303]  do_sendfile+0x39b/0x970
[ 1077.168234][T15303]  __x64_sys_sendfile64+0x110/0x150
[ 1077.173484][T15303]  x64_sys_call+0xed5/0x2d60
[ 1077.178090][T15303]  do_syscall_64+0xc9/0x1c0
[ 1077.182598][T15303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.188511][T15303] 
[ 1077.190835][T15303] read to 0xffff888123c8c1b8 of 4 bytes by task 15303 on cpu 0:
[ 1077.198465][T15303]  generic_buffers_fsync_noflush+0x83/0x120
[ 1077.204366][T15303]  ext4_sync_file+0x1ff/0x6c0
[ 1077.209085][T15303]  vfs_fsync_range+0x116/0x130
[ 1077.213902][T15303]  ext4_buffered_write_iter+0x326/0x370
[ 1077.219478][T15303]  ext4_file_write_iter+0x293/0xe10
[ 1077.224693][T15303]  iter_file_splice_write+0x5f1/0x980
[ 1077.230085][T15303]  direct_splice_actor+0x160/0x2c0
[ 1077.235265][T15303]  splice_direct_to_actor+0x302/0x670
[ 1077.240697][T15303]  do_splice_direct+0xd7/0x150
[ 1077.245478][T15303]  do_sendfile+0x39b/0x970
[ 1077.249908][T15303]  __x64_sys_sendfile64+0x110/0x150
[ 1077.255121][T15303]  x64_sys_call+0xed5/0x2d60
[ 1077.259732][T15303]  do_syscall_64+0xc9/0x1c0
[ 1077.264259][T15303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1077.270186][T15303] 
[ 1077.272514][T15303] value changed: 0x00000038 -> 0x00000002
[ 1077.278232][T15303] 
[ 1077.280561][T15303] Reported by Kernel Concurrency Sanitizer on:
[ 1077.286801][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.0.15188 Tainted: G        W          6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[ 1077.299146][T15303] Tainted: [W]=WARN
[ 1077.302972][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1077.313043][T15303] ==================================================================
[ 1077.598423][ T7873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.665344][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1078.094249][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.132081][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.701653][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.172092][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.212240][T29430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.252200][T29430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.734132][ T3864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1083.212357][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1083.292728][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.332241][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.372125][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.772661][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.412284][ T3345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog