last executing test programs:

3.397035502s ago: executing program 2 (id=181):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgid(0x0)

3.289376822s ago: executing program 2 (id=183):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x40)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x002'], 0x14}}, 0x48815)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000340)={{r3, r4+10000000}, {0x0, 0x989680}}, &(0x7f0000000380))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f)
timer_create(0x0, 0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000330000000000000071107b000000ebffffffffffffff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfffffffffffffffb, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x106}}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007100000020000890010"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10)
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90)
timer_getoverrun(r6)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/11)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, 0x0)

2.565025876s ago: executing program 2 (id=187):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
unshare(0x20000400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b00010062726964676500006000028006002700040000000c002e0001000000010000000c001f00030000000000000008001a0001000000080004"], 0x98}}, 0x0)

2.383523597s ago: executing program 2 (id=193):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff19181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000500)={0xa, 0x1000, 0x0, @mcast1, 0x9}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000440), 0x1000a)
sendfile(r2, r3, &(0x7f0000000000), 0x1001)
r4 = gettid()
write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62040200)

1.885404249s ago: executing program 1 (id=203):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)
r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffffffc})
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_usb_disconnect(r3)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000038, r1)

1.549676332s ago: executing program 4 (id=208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020"], 0x1c}}, 0x0)

1.425726403s ago: executing program 4 (id=211):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x5, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x6, 0x100, 0xa, 0xca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x7, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x30)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = syz_open_dev$mouse(0x0, 0x4, 0x680042)
epoll_pwait(r5, &(0x7f0000000180)=[{}], 0x1, 0x8c, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
setuid(0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)

1.418438652s ago: executing program 2 (id=212):
r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_getsetattr(r0, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
mq_timedreceive(r0, &(0x7f0000001740)=""/207, 0xcf, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0)
r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x80, 0xffeffffe, 0x10000000}, &(0x7f00000001c0), &(0x7f00000005c0))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000004c2ea8f9a5a82d94e196c5f56567a6e93b03d241eabbcfd9289f9a4755322b8a3d0514519154b0e4f495976a0045ce4bb99129481f7bf33da6657d0886c578bf752670e0f231a34e51ba2c70459d3cb4543c02958bd96ddadd196668537a641421648d184c02b0e9bcf81a1e2f7903b0abbc113d0ff24e368ae08d1dc5dc2df6630061e8600eacaeae290bd479", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
unshare(0x40000000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="00001a7e4af70d5eb1350000000000000000000085af2ba9aa7f29cdad7cdf9ec8e1ca5935a54f3b2a1c6b361cfc38c551165e696a8f7a17ca566c713ff7175bcbeaa00d0c6aa695e267c9790f1ef4a207cab61b8e3327e18f2e0430aa8d37bc82b09494fed3d3294c2062dbc47db7ea8cb4120fe7854f3775cfd977462b942cd1db4b66371c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r1}, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'})

1.342038903s ago: executing program 0 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)

1.322269753s ago: executing program 0 (id=215):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='tlb_flush\x00'}, 0x18)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000540)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES32=r1, @ANYRESOCT=r4, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}]}, 0x9, 0x5f2, &(0x7f0000002540)="$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")
r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
unshare(0x20000400)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r8}, 0x0, 0x0}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b00010062726964676500006000028006002700040000000c002e0001000000010000000c001f00030000000000000008001a0001000000080004"], 0x98}}, 0x0)

1.120519574s ago: executing program 1 (id=216):
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20, &(0x7f0000000000)=ANY=[], 0xfd, 0x120c, &(0x7f0000000c80)="$eJzs3U+LG2UcB/Bf49bdbt0/aq22B33Qi6ehuwdPgiyyBdmAUrtCKwhTd1ZDxiRkwkJErJ68+jrEozdBfAN78TV424vHHsQRJlvb1FRbtM1SPp/L/MjzfDO/h0DgCTOZoze//ay7X2X7+Shap05FaxCRbqVI0YrbXt6ZHK9d39lqt7evpHR56+rGGyml1Vd++vCL71/9eXT2gx9Wf1yMw/WPjn7b/PXw/OGFoz+uftqpUqdKvf4o5elGvz/Kb5RF2utU3Syl98oir4rU6VXFcGp8v+wPBuOU9/ZWlgfDoqpS3hunbjFOo34aDccp/yTv9FKWZWllObiv0/8+Zfe7W3VdR9T16Xg66rquz8RynI1nYiVW46uIeDaei+fjXLwQ52N9EmoSAAAAAAAAAAAAAAAAAAAAwP/nn+7/X4v1qfv/X4yX4kIza95dAwAAAAAAAAAAAAAAAAAAwJPl/WvXd7ba7e0rKS1FlN8c7B7sTo6T8a396EQZRVyKtfi9efj/sUl9+Z329qXUWI+vy5vH+ZsHu09N5zeavxM4zi80Y7fzG5N8ms4vxvLd+c1Yi3Ozz785M78Ur792Vz6Ltfjl4+hHGXvNue/kv9xI6e132/fkLzbzAAAA4EmQpb/M3L9n2f3GJ/lmf916oN8H7tlfL8TFhfmunYhq/Hk3L8tiOF0s/e0VxYMXrUf0zq04IQt8mGLxZLTxH4szEXEC2niMxby/mXgc7nzo8+4EAAAAAAAAAACAh/GIryJciBlXlr01n6UCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAAA//9vV8mR")
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
ioprio_set$pid(0x1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000002000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000101000000000000000000"], 0x48)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf2507000000005d0354885a6000"], 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x800)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x141500, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

1.120007324s ago: executing program 0 (id=217):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)

910.240925ms ago: executing program 0 (id=218):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000003c0)={0x0, 0x28, 0x400, 0x11, 0x0, 0x3})
sendfile(r1, r1, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0}, {0x0}, {0x0, 0x0, 0x1}, {0x0}, {&(0x7f0000000980)="4a2c4c43a944e0695c088dc39f0c948b5f45b57071114da91da9bf58e50fb9f0abe0a6a7def6163111f70e906d627795896a7d4e21f38318bc71b5244a56798fa0824cecd192b5cb119a5bf6b9a836931b9ea9ed9e203a", 0x57, 0x2}, {&(0x7f0000001040)="1dc4acf991b62c4f78ea3a231f2029e9f7d7865c1b38bbcb49b45bb1a051d32b593668a575123979576a7b3613b0677229157f24a4696a1a2800e7350b68e439a3162e5af8f3c02ad286a90a379ea043096837055d63035b4a1aacffeaec747c85477a19889f36257e729036172e4fae18672f02e4c27111edff95ab26fe785b89b5896fa829f7e35e5eae2adf248ac3fda651c8b7f39f0179fbb49fa5484bf015decd4dacdb8ef6cd0e7d1a97ac9e5dd14ce64d", 0xb4, 0x2}, {&(0x7f0000000380)="c2a96030095533721c625be55a46a36954fa2bb72774acd8811f39a790", 0x1d, 0x1}]}, 0x7}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r4, 0x1005b3f, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200000001000000000000001400000000000000100100000200"/38], 0x30}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x2, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f767469300000000c0000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c200000000000000000059bd1fb40000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab141400000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x250, 0x200, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="02686d9cf200", 0x9, 0x2, [0xf, 0x32, 0x4, 0x2b, 0x13, 0x2, 0x3b, 0xf, 0x5, 0x26, 0x26, 0x7, 0xa, 0xb, 0x2c, 0xb], 0x2, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x4]}}, @common=@addrtype={{0x30}, {0x314, 0x440, 0x0, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9, {0x54}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1ff, 0xfffffffe]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xe, 0x1, 0x6, 0x7], 0x3, 0x4}, {0x1, [0x7, 0x0, 0x2, 0x4, 0x2, 0x1], 0x1, 0xf}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b1600000000000000004a0000000800a800360000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)

877.048225ms ago: executing program 0 (id=219):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
io_getevents(r1, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
io_pgetevents(r1, 0x8, 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8})

728.132416ms ago: executing program 0 (id=220):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000500)={0xa, 0x1000, 0x0, @mcast1, 0x9}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000440), 0x1000a)
sendfile(r2, r3, &(0x7f0000000000), 0x1001)
write$cgroup_pid(r3, &(0x7f0000000000), 0x12)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62040200)

556.753017ms ago: executing program 3 (id=221):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x100000000000}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0xffb3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000104000000000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r4=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x16, '\x00', r4, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, r6)
mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x80, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x8})

501.938038ms ago: executing program 3 (id=222):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fsopen(0x0, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3], 0x6c}, 0x1, 0xba01}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, &(0x7f00000002c0)=""/70, 0x46}, &(0x7f0000000380)=0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)

490.508868ms ago: executing program 4 (id=223):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 1)

454.968868ms ago: executing program 3 (id=224):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0)

391.989018ms ago: executing program 3 (id=225):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8)
sendto(r1, &(0x7f0000000740)="12", 0x1, 0x0, 0x0, 0x0)

391.672758ms ago: executing program 3 (id=226):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$l2tp6(0xa, 0x2, 0x73)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0)

385.760268ms ago: executing program 2 (id=227):
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x124)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

195.569359ms ago: executing program 1 (id=228):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)

144.84867ms ago: executing program 4 (id=229):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000003c0)={0x0, 0x28, 0x400, 0x11, 0x0, 0x3})
sendfile(r1, r1, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0}, {0x0}, {0x0, 0x0, 0x1}, {0x0}, {&(0x7f0000000980)="4a2c4c43a944e0695c088dc39f0c948b5f45b57071114da91da9bf58e50fb9f0abe0a6a7def6163111f70e906d627795896a7d4e21f38318bc71b5244a56798fa0824cecd192b5cb119a5bf6b9a836931b9ea9ed9e203a", 0x57, 0x2}, {&(0x7f0000001040)="1dc4acf991b62c4f78ea3a231f2029e9f7d7865c1b38bbcb49b45bb1a051d32b593668a575123979576a7b3613b0677229157f24a4696a1a2800e7350b68e439a3162e5af8f3c02ad286a90a379ea043096837055d63035b4a1aacffeaec747c85477a19889f36257e729036172e4fae18672f02e4c27111edff95ab26fe785b89b5896fa829f7e35e5eae2adf248ac3fda651c8b7f39f0179fbb49fa5484bf015decd4dacdb8ef6cd0e7d1a97ac9e5dd14ce64d", 0xb4, 0x2}, {&(0x7f0000000380)="c2a96030095533721c625be55a46a36954fa2bb72774acd8811f39a790", 0x1d, 0x1}]}, 0x7}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r4, 0x1005b3f, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200000001000000000000001400000000000000100100000200"/38], 0x30}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x2, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x250, 0x200, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="02686d9cf200", 0x9, 0x2, [0xf, 0x32, 0x4, 0x2b, 0x13, 0x2, 0x3b, 0xf, 0x5, 0x26, 0x26, 0x7, 0xa, 0xb, 0x2c, 0xb], 0x2, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x4]}}, @common=@addrtype={{0x30}, {0x314, 0x440, 0x0, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9, {0x54}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1ff, 0xfffffffe]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xe, 0x1, 0x6, 0x7], 0x3, 0x4}, {0x1, [0x7, 0x0, 0x2, 0x4, 0x2, 0x1], 0x1, 0xf}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b1600000000000000004a0000000800a800360000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)

125.27805ms ago: executing program 1 (id=230):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00')
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$l2tp6(0xa, 0x2, 0x73)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0)

124.88893ms ago: executing program 4 (id=231):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0)

89.07799ms ago: executing program 1 (id=232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f00000003c0)={[], [{@uid_gt}, {@appraise}, {@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x1, 0x787, &(0x7f0000002dc0)="$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")

47.50393ms ago: executing program 3 (id=233):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
timer_delete(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000240))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

45.5939ms ago: executing program 4 (id=234):
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20, &(0x7f0000000000)=ANY=[], 0xfd, 0x120c, &(0x7f0000000c80)="$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")
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
ioprio_set$pid(0x1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000002000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000010100"/28], 0x48)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002abd7000fbdbdf2507000000005d0354885a6000"], 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x800)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x141500, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

0s ago: executing program 1 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x400, 0x701002)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x400, 0x0, 0x0, 0x270c5, r5, 0x7ff, '\x00', r6, r0, 0x2, 0x0, 0x3, 0x4, @void, @value, @void, @value}, 0x50)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000140)={&(0x7f0000002000)={[{&(0x7f0000000040)="f07276fc7c4616350a5ceaa8bf0ee7fd1befdedb4231c2dd640def6b8cee5938fe76c4db65efe3918c27d2d8c4910e398c5154bd29cf46f48cf0833bea305cad7ce159ad4d1075fd91ae295e3b2e651de6766c15b28e2e0e37661f9ef2bf64e3fc059fb9f9661ff67d48fca6bcf4f6d4ee0caf56db699630f0f2f8716d298e", 0x7f}, {&(0x7f0000000300)="08f248e9e3845646065b3cd5dffebf9fd4104e4221e51e65d0ce90baaab25f848ddb3ccc06ffdf92d43c535ff53120d16fab04e9fd33186705e62361d14f788165535079c1415996070b983d73f87343bbe58fc613d5a1daa42fac8f7798829d52753a5c0110892078885237d42d81ecdd906c9c388a6cfb6f0ccbc0c51ca2a30d6634751242ac11cd91f6f0f459bfb728a22c9b34827b2fb255d1f14f852059b21401aa1f6889c249ebb8fc7b9937c3c3484851cadb7815cd96c062141ef6b7b396a9c4c7b7e8e013ee2a7e5f8a395ed8c60cbb3f7927099b2208c813ee5d0741", 0xe1}]}, 0x2, 0x1}, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x35, 0xb, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000000)=""/11, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000012c0)={'tunl0\x00', &(0x7f0000001200)={'tunl0\x00', <r10=>0x0, 0x40, 0x0, 0x100, 0x5, {{0x5, 0x4, 0x3, 0x35, 0x14, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000480)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', r10, 0x80, 0x20, 0x0, 0xffff8000, {{0x19, 0x4, 0x0, 0x36, 0x64, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x4c, 0xae, 0x1, 0xc, [{@local, 0x1}, {@broadcast, 0x79f408a2}, {@private=0xa010101, 0x5}, {@private=0xa010102, 0x7669}, {@multicast1, 0x7fffffff}, {@broadcast, 0x4b14}, {@broadcast, 0xc65}, {@multicast2, 0x7}, {@multicast2, 0xc0}]}, @noop, @noop]}}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts.
[   33.721823][   T29] audit: type=1400 audit(1732047813.184:81): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.723088][ T3305] cgroup: Unknown subsys name 'net'
[   33.744572][   T29] audit: type=1400 audit(1732047813.184:82): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.771954][   T29] audit: type=1400 audit(1732047813.214:83): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.792083][   T29] audit: type=1400 audit(1732047813.214:84): avc:  denied  { read } for  pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   33.910256][ T3305] cgroup: Unknown subsys name 'cpuset'
[   33.916406][ T3305] cgroup: Unknown subsys name 'rlimit'
[   34.024957][   T29] audit: type=1400 audit(1732047813.484:85): avc:  denied  { setattr } for  pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.050593][   T29] audit: type=1400 audit(1732047813.484:86): avc:  denied  { create } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.071222][   T29] audit: type=1400 audit(1732047813.484:87): avc:  denied  { write } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.071558][ T3308] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.092018][   T29] audit: type=1400 audit(1732047813.484:88): avc:  denied  { read } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.121684][   T29] audit: type=1400 audit(1732047813.484:89): avc:  denied  { mounton } for  pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.146505][   T29] audit: type=1400 audit(1732047813.484:90): avc:  denied  { mount } for  pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.181523][ T3305] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.285014][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   35.339755][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   35.400386][ T3326] chnl_net:caif_netlink_parms(): no params data found
[   35.413147][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   35.422227][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.429410][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.436591][ T3317] bridge_slave_0: entered allmulticast mode
[   35.443318][ T3317] bridge_slave_0: entered promiscuous mode
[   35.461695][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.468770][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.476369][ T3317] bridge_slave_1: entered allmulticast mode
[   35.482787][ T3317] bridge_slave_1: entered promiscuous mode
[   35.518217][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.525364][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.532734][ T3316] bridge_slave_0: entered allmulticast mode
[   35.539057][ T3316] bridge_slave_0: entered promiscuous mode
[   35.546830][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.571753][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.578883][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.586059][ T3316] bridge_slave_1: entered allmulticast mode
[   35.592374][ T3316] bridge_slave_1: entered promiscuous mode
[   35.604089][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.628096][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.658903][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.666102][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.673263][ T3315] bridge_slave_0: entered allmulticast mode
[   35.679754][ T3315] bridge_slave_0: entered promiscuous mode
[   35.686913][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.696023][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.703176][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.710321][ T3315] bridge_slave_1: entered allmulticast mode
[   35.716783][ T3315] bridge_slave_1: entered promiscuous mode
[   35.728520][ T3317] team0: Port device team_slave_0 added
[   35.757646][ T3317] team0: Port device team_slave_1 added
[   35.778748][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.785916][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.793269][ T3326] bridge_slave_0: entered allmulticast mode
[   35.799623][ T3326] bridge_slave_0: entered promiscuous mode
[   35.811048][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.818058][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.844006][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.855382][ T3316] team0: Port device team_slave_0 added
[   35.862075][ T3316] team0: Port device team_slave_1 added
[   35.868961][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.887383][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.894507][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.901822][ T3326] bridge_slave_1: entered allmulticast mode
[   35.908374][ T3326] bridge_slave_1: entered promiscuous mode
[   35.917059][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.924663][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.950631][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.962331][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.974038][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.981313][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.007309][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.018069][ T3325] chnl_net:caif_netlink_parms(): no params data found
[   36.038365][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.052905][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.059947][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.086056][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.109075][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.128854][ T3315] team0: Port device team_slave_0 added
[   36.135709][ T3315] team0: Port device team_slave_1 added
[   36.158131][ T3326] team0: Port device team_slave_0 added
[   36.175474][ T3317] hsr_slave_0: entered promiscuous mode
[   36.181670][ T3317] hsr_slave_1: entered promiscuous mode
[   36.188504][ T3326] team0: Port device team_slave_1 added
[   36.206136][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.213120][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.239117][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.250847][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.257802][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.283807][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.300212][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.307260][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.333351][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.352369][ T3316] hsr_slave_0: entered promiscuous mode
[   36.358330][ T3316] hsr_slave_1: entered promiscuous mode
[   36.365070][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.372916][ T3316] Cannot create hsr debugfs directory
[   36.394878][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.401892][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.427953][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.461021][ T3315] hsr_slave_0: entered promiscuous mode
[   36.466971][ T3315] hsr_slave_1: entered promiscuous mode
[   36.472962][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.480561][ T3315] Cannot create hsr debugfs directory
[   36.512233][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.519346][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.526554][ T3325] bridge_slave_0: entered allmulticast mode
[   36.533035][ T3325] bridge_slave_0: entered promiscuous mode
[   36.557633][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.564757][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.572068][ T3325] bridge_slave_1: entered allmulticast mode
[   36.578517][ T3325] bridge_slave_1: entered promiscuous mode
[   36.592014][ T3326] hsr_slave_0: entered promiscuous mode
[   36.598190][ T3326] hsr_slave_1: entered promiscuous mode
[   36.604170][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.611757][ T3326] Cannot create hsr debugfs directory
[   36.645795][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.672511][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.714095][ T3325] team0: Port device team_slave_0 added
[   36.736107][ T3325] team0: Port device team_slave_1 added
[   36.786812][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.794005][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.820150][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.837194][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.844185][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.870178][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.895018][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.909002][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.918053][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.928352][ T3325] hsr_slave_0: entered promiscuous mode
[   36.934541][ T3325] hsr_slave_1: entered promiscuous mode
[   36.940702][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.948266][ T3325] Cannot create hsr debugfs directory
[   36.959810][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.980890][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.004671][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.022443][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.038144][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.055917][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.066795][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.088380][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.111763][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.137787][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.151656][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.160657][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.171615][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.180465][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.215185][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   37.233360][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.240491][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.249187][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.258321][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.267164][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.276664][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.290796][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.297862][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.336986][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.374648][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   37.394027][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.405085][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.412173][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.426556][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.442836][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.449914][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.476468][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.486980][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.500698][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   37.526650][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.541834][ T3326] 8021q: adding VLAN 0 to HW filter on device team0
[   37.552325][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.559488][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.568437][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.575776][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.594279][ T3325] 8021q: adding VLAN 0 to HW filter on device team0
[   37.612944][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.620092][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.629214][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.636370][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.652164][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.659401][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.671753][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.687718][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.694852][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.705142][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.737287][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.750886][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.843455][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.906928][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.933744][ T3316] veth0_vlan: entered promiscuous mode
[   37.943900][ T3317] veth0_vlan: entered promiscuous mode
[   37.951278][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.963382][ T3316] veth1_vlan: entered promiscuous mode
[   37.974814][ T3317] veth1_vlan: entered promiscuous mode
[   37.996972][ T3316] veth0_macvtap: entered promiscuous mode
[   38.009958][ T3317] veth0_macvtap: entered promiscuous mode
[   38.017337][ T3317] veth1_macvtap: entered promiscuous mode
[   38.036795][ T3316] veth1_macvtap: entered promiscuous mode
[   38.043863][ T3315] veth0_vlan: entered promiscuous mode
[   38.057366][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.081702][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.092262][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.104170][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.113455][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.131377][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.141983][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.152994][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.161785][ T3315] veth1_vlan: entered promiscuous mode
[   38.174904][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.183707][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.192487][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.201252][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.215091][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.224435][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.233283][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.242054][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.263439][ T3325] veth0_vlan: entered promiscuous mode
[   38.294306][ T3325] veth1_vlan: entered promiscuous mode
[   38.321332][ T3315] veth0_macvtap: entered promiscuous mode
[   38.333880][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.337971][ T3325] veth0_macvtap: entered promiscuous mode
[   38.359123][ T3325] veth1_macvtap: entered promiscuous mode
[   38.367631][ T3326] veth0_vlan: entered promiscuous mode
[   38.386062][ T3315] veth1_macvtap: entered promiscuous mode
[   38.405525][ T3326] veth1_vlan: entered promiscuous mode
[   38.424226][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.434761][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.444654][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.455124][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.467558][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.475283][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.485875][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.495893][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.506368][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.516329][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.527357][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.538174][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.552984][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.563598][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.573474][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.583940][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.596340][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.607013][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.617590][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.627476][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.637918][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.647775][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.658319][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.669090][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.671827][ T3463] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   38.691092][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.701574][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.711219][ T3467] syz.2.7: attempt to access beyond end of device
[   38.711219][ T3467] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   38.725551][ T3460] bond0 (unregistering): Released all slaves
[   38.739380][   T29] kauditd_printk_skb: 55 callbacks suppressed
[   38.739400][   T29] audit: type=1400 audit(1732047818.194:146): avc:  denied  { relabelfrom } for  pid=3464 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   38.765237][   T29] audit: type=1400 audit(1732047818.194:147): avc:  denied  { relabelto } for  pid=3464 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   38.786600][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.795413][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.804185][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.812959][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.823950][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.832748][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.841492][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.850244][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.879254][ T3326] veth0_macvtap: entered promiscuous mode
[   38.898627][ T3326] veth1_macvtap: entered promiscuous mode
[   38.926937][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.937559][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.947622][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.958239][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.968125][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.978851][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.988847][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.999785][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.004791][ T3472] loop2: detected capacity change from 0 to 8192
[   39.018064][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.027512][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.038115][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.048165][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.054682][ T3472] =======================================================
[   39.054682][ T3472] WARNING: The mand mount option has been deprecated and
[   39.054682][ T3472]          and is ignored by this kernel. Remove the mand
[   39.054682][ T3472]          option from the mount to silence this warning.
[   39.054682][ T3472] =======================================================
[   39.058763][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.103498][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.114246][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.124202][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.134691][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.148209][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.156917][ T3326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.165869][ T3326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.174590][ T3476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   39.174688][ T3326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.181160][ T3476] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   39.181322][ T3476] vhci_hcd vhci_hcd.0: Device attached
[   39.189932][ T3326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.216410][ T3474] loop0: detected capacity change from 0 to 8192
[   39.220686][ T3477] vhci_hcd: connection closed
[   39.224755][ T3472] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.248850][   T29] audit: type=1400 audit(1732047818.684:148): avc:  denied  { remount } for  pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.248922][ T1090] vhci_hcd: stop threads
[   39.268417][   T29] audit: type=1400 audit(1732047818.704:149): avc:  denied  { mount } for  pid=3471 comm="syz.2.8" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   39.272634][ T1090] vhci_hcd: release socket
[   39.272653][ T1090] vhci_hcd: disconnect device
[   39.309915][   T29] audit: type=1400 audit(1732047818.774:150): avc:  denied  { create } for  pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.329657][   T29] audit: type=1400 audit(1732047818.774:151): avc:  denied  { read write } for  pid=3471 comm="syz.2.8" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.352946][   T29] audit: type=1400 audit(1732047818.774:152): avc:  denied  { open } for  pid=3471 comm="syz.2.8" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.376082][   T29] audit: type=1400 audit(1732047818.794:153): avc:  denied  { read } for  pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.384640][ T3472] atomic_op ffff8881153cfd28 conn xmit_atomic 0000000000000000
[   39.395092][   T29] audit: type=1400 audit(1732047818.794:154): avc:  denied  { setopt } for  pid=3471 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.395121][   T29] audit: type=1400 audit(1732047818.794:155): avc:  denied  { ioctl } for  pid=3471 comm="syz.2.8" path="socket:[3673]" dev="sockfs" ino=3673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.400100][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   39.592652][ T3486] loop2: detected capacity change from 0 to 1024
[   39.624906][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.639652][ T3486] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.660021][ T3486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'.
[   39.729852][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.792248][ T3493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.797108][ T3497] SELinux:  Context Ü is not valid (left unmapped).
[   39.814140][ T3493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11'.
[   39.834919][ T3497] team0: Port device team_slave_1 removed
[   39.853871][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   39.974192][ T3512] loop2: detected capacity change from 0 to 128
[   39.976750][ T3513] loop0: detected capacity change from 0 to 1024
[   39.990368][ T3513] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.998694][ T3513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   39.999747][ T3512] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   40.007568][ T3513] System zones: 0-1, 3-36
[   40.023554][ T3513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.068198][ T3509] loop1: detected capacity change from 0 to 8192
[   40.075391][ T3513] Cannot find add_set index 0 as target
[   40.091876][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.128122][ T3509]  loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2
[   40.133656][ T3509] loop1: p1 size 108986237 extends beyond EOD, truncated
[   40.248853][ T3509] loop1: p3 size 50462720 extends beyond EOD, truncated
[   40.270911][ T3509] loop1: p5 size 108986237 extends beyond EOD, truncated
[   40.282394][ T3509] loop1: p6 size 108986237 extends beyond EOD, truncated
[   40.295491][ T3509] loop1: p7 size 108986237 extends beyond EOD, truncated
[   40.298548][ T3530] loop4: detected capacity change from 0 to 128
[   40.309987][ T3509] loop1: p8 size 108986237 extends beyond EOD, truncated
[   40.328578][ T3509] loop1: p9 size 108986237 extends beyond EOD, truncated
[   40.344152][ T3530] EXT4-fs: test_dummy_encryption option not supported
[   40.351479][ T3509] loop1: p10 size 108986237 extends beyond EOD, truncated
[   40.391117][ T3509] loop1: p11 size 108986237 extends beyond EOD, truncated
[   40.409621][ T3509] loop1: p12 size 108986237 extends beyond EOD, truncated
[   40.419972][ T3509] loop1: p13 size 108986237 extends beyond EOD, truncated
[   40.425871][ T3530] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   40.427888][ T3509] loop1: p14 size 108986237 extends beyond EOD, truncated
[   40.442671][ T3509] loop1: p15 size 108986237 extends beyond EOD, truncated
[   40.450544][ T3509] loop1: p16 size 108986237 extends beyond EOD, truncated
[   40.458322][ T3509] loop1: p17 size 108986237 extends beyond EOD, truncated
[   40.466645][ T3509] loop1: p18 size 108986237 extends beyond EOD, truncated
[   40.474529][ T3509] loop1: p19 size 108986237 extends beyond EOD, truncated
[   40.482394][ T3509] loop1: p20 size 108986237 extends beyond EOD, truncated
[   40.493040][ T3509] loop1: p21 size 108986237 extends beyond EOD, truncated
[   40.507712][ T3509] loop1: p22 size 108986237 extends beyond EOD, truncated
[   40.518253][ T3509] loop1: p23 size 108986237 extends beyond EOD, truncated
[   40.526730][ T3509] loop1: p24 size 108986237 extends beyond EOD, truncated
[   40.536457][ T3509] loop1: p25 size 108986237 extends beyond EOD, truncated
[   40.547406][ T3509] loop1: p26 size 108986237 extends beyond EOD, truncated
[   40.572245][ T3545] x_tables: duplicate underflow at hook 2
[   40.577061][ T3509] loop1: p27 size 108986237 extends beyond EOD, truncated
[   40.607337][ T3509] loop1: p28 size 108986237 extends beyond EOD, truncated
[   40.615629][ T3509] loop1: p29 size 108986237 extends beyond EOD, truncated
[   40.624014][ T3509] loop1: p30 size 108986237 extends beyond EOD, truncated
[   40.632322][ T3509] loop1: p31 size 108986237 extends beyond EOD, truncated
[   40.646654][ T3509] loop1: p32 size 108986237 extends beyond EOD, truncated
[   40.656259][ T3509] loop1: p33 size 108986237 extends beyond EOD, truncated
[   40.671697][ T3509] loop1: p34 size 108986237 extends beyond EOD, truncated
[   40.680234][ T3509] loop1: p35 size 108986237 extends beyond EOD, truncated
[   40.705779][ T3509] loop1: p36 size 108986237 extends beyond EOD, truncated
[   40.724990][ T3556] loop0: detected capacity change from 0 to 1024
[   40.732240][ T3509] loop1: p37 size 108986237 extends beyond EOD, truncated
[   40.735193][ T3556] EXT4-fs: Ignoring removed nobh option
[   40.745143][ T3556] EXT4-fs: Ignoring removed orlov option
[   40.761140][ T3509] loop1: p38 size 108986237 extends beyond EOD, truncated
[   40.783410][ T3509] loop1: p39 size 108986237 extends beyond EOD, truncated
[   40.798855][ T3509] loop1: p40 size 108986237 extends beyond EOD, truncated
[   40.807313][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'.
[   40.815901][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.816142][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.835548][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.839626][ T3509] loop1: p41 size 108986237 extends beyond EOD, truncated
[   40.851881][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.852066][ T3509] loop1: p42 size 108986237 extends beyond EOD, truncated
[   40.859517][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.882220][ T3565] bridge0: port 3(vlan2) entered blocking state
[   40.888592][ T3565] bridge0: port 3(vlan2) entered disabled state
[   40.895729][ T3565] vlan2: entered allmulticast mode
[   40.902173][ T3509] loop1: p43 size 108986237 extends beyond EOD, truncated
[   40.908416][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.915260][ T3509] loop1: p44 size 108986237 extends beyond EOD, truncated
[   40.924113][ T3565] vlan2: left allmulticast mode
[   40.926991][ T3509] loop1: p45 size 108986237 extends beyond EOD, truncated
[   40.938411][ T3509] loop1: p46 size 108986237 extends beyond EOD, truncated
[   40.954220][ T3509] loop1: p47 size 108986237 extends beyond EOD, truncated
[   40.962360][ T3509] loop1: p48 size 108986237 extends beyond EOD, truncated
[   40.970615][ T3509] loop1: p49 size 108986237 extends beyond EOD, truncated
[   40.978310][ T3509] loop1: p50 size 108986237 extends beyond EOD, truncated
[   40.987279][ T3509] loop1: p51 size 108986237 extends beyond EOD, truncated
[   40.995615][ T3509] loop1: p52 size 108986237 extends beyond EOD, truncated
[   41.006303][ T3509] loop1: p53 size 108986237 extends beyond EOD, truncated
[   41.014239][ T3509] loop1: p54 size 108986237 extends beyond EOD, truncated
[   41.024109][ T3509] loop1: p55 size 108986237 extends beyond EOD, truncated
[   41.031992][ T3509] loop1: p56 size 108986237 extends beyond EOD, truncated
[   41.040531][ T3509] loop1: p57 size 108986237 extends beyond EOD, truncated
[   41.048425][ T3509] loop1: p58 size 108986237 extends beyond EOD, truncated
[   41.056478][ T3509] loop1: p59 size 108986237 extends beyond EOD, truncated
[   41.075310][ T3509] loop1: p60 size 108986237 extends beyond EOD, truncated
[   41.087779][ T3509] loop1: p61 size 108986237 extends beyond EOD, truncated
[   41.095739][ T3509] loop1: p62 size 108986237 extends beyond EOD, truncated
[   41.103740][ T3509] loop1: p63 size 108986237 extends beyond EOD, truncated
[   41.112075][ T3509] loop1: p64 size 108986237 extends beyond EOD, truncated
[   41.120414][ T3509] loop1: p65 size 108986237 extends beyond EOD, truncated
[   41.128247][ T3509] loop1: p66 size 108986237 extends beyond EOD, truncated
[   41.136220][ T3509] loop1: p67 size 108986237 extends beyond EOD, truncated
[   41.207529][ T3509] loop1: p68 size 108986237 extends beyond EOD, truncated
[   41.217715][ T3580] ucma_write: process 28 (syz.0.36) changed security contexts after opening file descriptor, this is not allowed.
[   41.231022][ T3509] loop1: p69 size 108986237 extends beyond EOD, truncated
[   41.233340][ T3578] FAULT_INJECTION: forcing a failure.
[   41.233340][ T3578] name failslab, interval 1, probability 0, space 0, times 1
[   41.251012][ T3578] CPU: 1 UID: 0 PID: 3578 Comm: syz.4.37 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   41.255287][ T3509] loop1: p70 size 108986237 extends beyond EOD, 
[   41.261267][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   41.261286][ T3578] Call Trace:
[   41.261292][ T3578]  <TASK>
[   41.261315][ T3578]  dump_stack_lvl+0xf2/0x150
[   41.261343][ T3578]  dump_stack+0x15/0x20
[   41.267660][ T3509] truncated
[   41.268685][ T3509] loop1: p71 size 108986237 extends beyond EOD, 
[   41.277710][ T3578]  should_fail_ex+0x223/0x230
[   41.277756][ T3578]  ? __alloc_skb+0x10b/0x310
[   41.281067][ T3509] truncated
[   41.283970][ T3578]  should_failslab+0x8f/0xb0
[   41.290425][ T3509] loop1: p72 size 108986237 extends beyond EOD, 
[   41.292688][ T3578]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   41.295805][ T3509] truncated
[   41.302114][ T3578]  __alloc_skb+0x10b/0x310
[   41.302150][ T3578]  netlink_alloc_large_skb+0xad/0xe0
[   41.308160][ T3509] loop1: p73 size 108986237 extends beyond EOD, 
[   41.311438][ T3578]  netlink_sendmsg+0x3b4/0x6e0
[   41.311485][ T3578]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.311552][ T3578]  __sock_sendmsg+0x140/0x180
[   41.314646][ T3509] truncated
[   41.318388][ T3509] loop1: p74 size 108986237 extends beyond EOD, 
[   41.319348][ T3578]  sock_write_iter+0x15e/0x1a0
[   41.325685][ T3509] truncated
[   41.327040][ T3509] loop1: p75 size 108986237 extends beyond EOD, 
[   41.331484][ T3578]  do_iter_readv_writev+0x394/0x450
[   41.331517][ T3578]  vfs_writev+0x2d4/0x880
[   41.334630][ T3509] truncated
[   41.335423][ T3509] loop1: p76 size 108986237 extends beyond EOD, 
[   41.339110][ T3578]  do_writev+0xf4/0x220
[   41.344497][ T3509] truncated
[   41.350965][ T3578]  __x64_sys_writev+0x45/0x50
[   41.357194][ T3509] loop1: p77 size 108986237 extends beyond EOD, 
[   41.361001][ T3578]  x64_sys_call+0x1fab/0x2dc0
[   41.361040][ T3578]  do_syscall_64+0xc9/0x1c0
[   41.361084][ T3578]  ? clear_bhb_loop+0x55/0xb0
[   41.361160][ T3578]  ? clear_bhb_loop+0x55/0xb0
[   41.361280][ T3578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.366039][ T3509] truncated
[   41.369155][ T3578] RIP: 0033:0x7f0639a9e759
[   41.369178][ T3578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.369198][ T3578] RSP: 002b:00007f0638711038 EFLAGS: 00000246
[   41.377358][ T3509] loop1: p78 size 108986237 extends beyond EOD, 
[   41.380342][ T3578]  ORIG_RAX: 0000000000000014
[   41.380359][ T3578] RAX: ffffffffffffffda RBX: 00007f0639c55f80 RCX: 00007f0639a9e759
[   41.380376][ T3578] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005
[   41.383482][ T3509] truncated
[   41.389986][ T3578] RBP: 00007f0638711090 R08: 0000000000000000 R09: 0000000000000000
[   41.390008][ T3578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.390056][ T3578] R13: 0000000000000000 R14: 00007f0639c55f80 R15: 00007ffe175bd128
[   41.396764][ T3509] loop1: p79 size 108986237 extends beyond EOD, 
[   41.399579][ T3578]  </TASK>
[   41.427630][ T3583] x_tables: duplicate underflow at hook 2
[   41.432282][ T3509] truncated
[   41.440157][ T3509] loop1: p80 size 108986237 extends beyond EOD, 
[   41.507678][ T3587] x_tables: duplicate underflow at hook 2
[   41.512863][ T3509] truncated
[   41.581029][ T3592] FAULT_INJECTION: forcing a failure.
[   41.581029][ T3592] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.594312][ T3592] CPU: 0 UID: 0 PID: 3592 Comm: syz.0.41 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   41.604592][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   41.614820][ T3592] Call Trace:
[   41.618123][ T3592]  <TASK>
[   41.621072][ T3592]  dump_stack_lvl+0xf2/0x150
[   41.625694][ T3592]  dump_stack+0x15/0x20
[   41.629936][ T3592]  should_fail_ex+0x223/0x230
[   41.631984][ T3594] syz.4.42[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.634643][ T3592]  should_fail+0xb/0x10
[   41.634706][ T3594] syz.4.42[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.645880][ T3592]  should_fail_usercopy+0x1a/0x20
[   41.645923][ T3592]  _copy_to_user+0x20/0xa0
[   41.670935][ T3592]  simple_read_from_buffer+0xa0/0x110
[   41.676520][ T3592]  proc_fail_nth_read+0xf9/0x140
[   41.681532][ T3592]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   41.687147][ T3592]  vfs_read+0x1a2/0x700
[   41.691351][ T3592]  ? __rcu_read_unlock+0x4e/0x70
[   41.696456][ T3592]  ? __fget_files+0x17c/0x1c0
[   41.698961][ T3594] syz.4.42[3594] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   41.701158][ T3592]  ksys_read+0xe8/0x1b0
[   41.701204][ T3592]  __x64_sys_read+0x42/0x50
[   41.721151][ T3592]  x64_sys_call+0x2874/0x2dc0
[   41.725919][ T3592]  do_syscall_64+0xc9/0x1c0
[   41.730436][ T3592]  ? clear_bhb_loop+0x55/0xb0
[   41.735141][ T3592]  ? clear_bhb_loop+0x55/0xb0
[   41.739854][ T3592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.745899][ T3592] RIP: 0033:0x7fef0e49d19c
[   41.750419][ T3592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   41.770036][ T3592] RSP: 002b:00007fef0d111030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   41.778535][ T3592] RAX: ffffffffffffffda RBX: 00007fef0e655f80 RCX: 00007fef0e49d19c
[   41.786699][ T3592] RDX: 000000000000000f RSI: 00007fef0d1110a0 RDI: 0000000000000007
[   41.794678][ T3592] RBP: 00007fef0d111090 R08: 0000000000000000 R09: 0000000000000000
[   41.802791][ T3592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.810852][ T3592] R13: 0000000000000000 R14: 00007fef0e655f80 R15: 00007fff8c3e3f88
[   41.818879][ T3592]  </TASK>
[   41.822641][ T3509] loop1: p81 size 108986237 extends beyond EOD, truncated
[   41.835873][ T3509] loop1: p82 size 108986237 extends beyond EOD, truncated
[   41.848383][ T3600] FAULT_INJECTION: forcing a failure.
[   41.848383][ T3600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.861717][ T3600] CPU: 0 UID: 0 PID: 3600 Comm: syz.2.45 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   41.871905][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   41.882064][ T3600] Call Trace:
[   41.885351][ T3600]  <TASK>
[   41.888295][ T3600]  dump_stack_lvl+0xf2/0x150
[   41.892992][ T3600]  dump_stack+0x15/0x20
[   41.897198][ T3600]  should_fail_ex+0x223/0x230
[   41.901894][ T3600]  should_fail+0xb/0x10
[   41.906098][ T3600]  should_fail_usercopy+0x1a/0x20
[   41.911148][ T3600]  _copy_from_user+0x1e/0xb0
[   41.915810][ T3600]  copy_msghdr_from_user+0x54/0x2a0
[   41.921096][ T3600]  ? __fget_files+0x17c/0x1c0
[   41.925790][ T3600]  __sys_sendmsg+0x13e/0x230
[   41.930414][ T3600]  __x64_sys_sendmsg+0x46/0x50
[   41.935252][ T3600]  x64_sys_call+0x2734/0x2dc0
[   41.940205][ T3600]  do_syscall_64+0xc9/0x1c0
[   41.944827][ T3600]  ? clear_bhb_loop+0x55/0xb0
[   41.949614][ T3600]  ? clear_bhb_loop+0x55/0xb0
[   41.954394][ T3600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.960353][ T3600] RIP: 0033:0x7f642bd3e759
[   41.964868][ T3600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.984612][ T3600] RSP: 002b:00007f642a9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.993049][ T3600] RAX: ffffffffffffffda RBX: 00007f642bef5f80 RCX: 00007f642bd3e759
[   42.001050][ T3600] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[   42.009023][ T3600] RBP: 00007f642a9b7090 R08: 0000000000000000 R09: 0000000000000000
[   42.017066][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.025078][ T3600] R13: 0000000000000000 R14: 00007f642bef5f80 R15: 00007ffdada52648
[   42.033090][ T3600]  </TASK>
[   42.040642][ T3509] loop1: p83 size 108986237 extends beyond EOD, truncated
[   42.063711][ T3509] loop1: p84 size 108986237 extends beyond EOD, truncated
[   42.100538][ T3603] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   42.101086][ T3509] loop1: p85 size 108986237 extends beyond EOD, truncated
[   42.113712][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   42.123873][ T3603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   42.132684][ T3603] netlink: 'syz.0.46': attribute type 7 has an invalid length.
[   42.179657][ T3509] loop1: p86 size 108986237 extends beyond EOD, truncated
[   42.188390][ T3606] bond0: entered allmulticast mode
[   42.198891][ T3509] loop1: p87 size 108986237 extends beyond EOD, truncated
[   42.222675][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[   42.231495][ T3613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.50'.
[   42.242706][ T3509] loop1: p88 size 108986237 extends beyond EOD, truncated
[   42.253366][ T3610] x_tables: duplicate underflow at hook 2
[   42.259845][ T3509] loop1: p89 size 108986237 extends beyond EOD, truncated
[   42.286175][ T3509] loop1: p90 size 108986237 extends beyond EOD, truncated
[   42.301779][ T3613] bridge1: the hash_elasticity option has been deprecated and is always 16
[   42.336711][ T3626] netlink: 9 bytes leftover after parsing attributes in process `syz.2.52'.
[   42.356811][ T3509] loop1: p91 size 108986237 extends beyond EOD, truncated
[   42.357525][ T3509] loop1: p92 size 108986237 extends beyond EOD, truncated
[   42.371342][ T3626] gretap0: entered promiscuous mode
[   42.390570][ T3509] loop1: p93 size 108986237 extends beyond EOD, truncated
[   42.413068][ T3509] loop1: p94 size 108986237 extends beyond EOD, truncated
[   42.437859][ T3509] loop1: p95 size 108986237 extends beyond EOD, truncated
[   42.445480][ T3634] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.462695][ T3509] loop1: p96 size 108986237 extends beyond EOD, truncated
[   42.487543][ T3509] loop1: p97 size 108986237 extends beyond EOD, truncated
[   42.498130][ T3634] bond_slave_0: entered promiscuous mode
[   42.503894][ T3634] bond_slave_1: entered promiscuous mode
[   42.511457][ T3509] loop1: p98 size 108986237 extends beyond EOD, truncated
[   42.527621][ T3509] loop1: p99 size 108986237 extends beyond EOD, truncated
[   42.540859][ T3634] vlan2: entered promiscuous mode
[   42.545966][ T3634] bond0: entered promiscuous mode
[   42.547772][ T3509] loop1: p100 size 108986237 extends beyond EOD, truncated
[   42.573660][ T3509] loop1: p101 size 108986237 extends beyond EOD, truncated
[   42.581222][ T3634] bond0: left promiscuous mode
[   42.586571][ T3634] bond_slave_0: left promiscuous mode
[   42.592020][ T3634] bond_slave_1: left promiscuous mode
[   42.592415][ T3509] loop1: p102 size 108986237 extends beyond EOD, truncated
[   42.615897][ T3641] loop3: detected capacity change from 0 to 1024
[   42.643338][ T3641] EXT4-fs: Ignoring removed i_version option
[   42.649441][ T3641] EXT4-fs: inline encryption not supported
[   42.668267][ T3641] ext4: Unknown parameter 'dis'
[   42.669540][ T3509] loop1: p103 size 108986237 extends beyond EOD, truncated
[   42.690908][ T3509] loop1: p104 size 108986237 extends beyond EOD, truncated
[   42.728791][ T3509] loop1: p105 size 108986237 extends beyond EOD, truncated
[   42.773472][ T3509] loop1: p106 size 108986237 extends beyond EOD, truncated
[   42.783402][ T3509] loop1: p107 size 108986237 extends beyond EOD, truncated
[   42.791509][ T3509] loop1: p108 size 108986237 extends beyond EOD, truncated
[   42.802873][ T3509] loop1: p109 size 108986237 extends beyond EOD, truncated
[   42.828651][ T3652] loop4: detected capacity change from 0 to 2048
[   42.836166][ T3509] loop1: p110 size 108986237 extends beyond EOD, truncated
[   42.845420][ T3509] loop1: p111 size 108986237 extends beyond EOD, truncated
[   42.851263][ T3665] syz.2.61[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.852905][ T3665] syz.2.61[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.863752][ T3509] loop1: p112 size 108986237 extends beyond EOD, 
[   42.874708][ T3665] syz.2.61[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.875196][ T3509] truncated
[   42.896359][ T3657] FAULT_INJECTION: forcing a failure.
[   42.896359][ T3657] name failslab, interval 1, probability 0, space 0, times 0
[   42.909095][ T3657] CPU: 0 UID: 0 PID: 3657 Comm: syz.3.62 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   42.919551][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   42.929623][ T3657] Call Trace:
[   42.932981][ T3657]  <TASK>
[   42.936104][ T3657]  dump_stack_lvl+0xf2/0x150
[   42.940711][ T3657]  dump_stack+0x15/0x20
[   42.944894][ T3657]  should_fail_ex+0x223/0x230
[   42.949626][ T3657]  ? __alloc_skb+0x10b/0x310
[   42.954267][ T3657]  should_failslab+0x8f/0xb0
[   42.958876][ T3657]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   42.964707][ T3657]  __alloc_skb+0x10b/0x310
[   42.969218][ T3657]  netlink_alloc_large_skb+0xad/0xe0
[   42.974804][ T3657]  netlink_sendmsg+0x3b4/0x6e0
[   42.979605][ T3657]  ? __pfx_netlink_sendmsg+0x10/0x10
[   42.985070][ T3657]  __sock_sendmsg+0x140/0x180
[   42.989807][ T3657]  ____sys_sendmsg+0x312/0x410
[   42.994629][ T3657]  __sys_sendmsg+0x19d/0x230
[   42.999342][ T3657]  __x64_sys_sendmsg+0x46/0x50
[   43.004265][ T3657]  x64_sys_call+0x2734/0x2dc0
[   43.009037][ T3657]  do_syscall_64+0xc9/0x1c0
[   43.013546][ T3657]  ? clear_bhb_loop+0x55/0xb0
[   43.018299][ T3657]  ? clear_bhb_loop+0x55/0xb0
[   43.023067][ T3657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.029011][ T3657] RIP: 0033:0x7f69d11ae759
[   43.033428][ T3657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.053196][ T3657] RSP: 002b:00007f69cfe21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.061661][ T3657] RAX: ffffffffffffffda RBX: 00007f69d1365f80 RCX: 00007f69d11ae759
[   43.069642][ T3657] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006
[   43.077638][ T3657] RBP: 00007f69cfe21090 R08: 0000000000000000 R09: 0000000000000000
[   43.085613][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.093675][ T3657] R13: 0000000000000000 R14: 00007f69d1365f80 R15: 00007ffefbdea8c8
[   43.101750][ T3657]  </TASK>
[   43.127126][ T3509] loop1: p113 size 108986237 extends beyond EOD, truncated
[   43.143711][ T3509] loop1: p114 size 108986237 extends beyond EOD, truncated
[   43.161314][ T3509] loop1: p115 size 108986237 extends beyond EOD, truncated
[   43.194865][ T3509] loop1: p116 size 108986237 extends beyond EOD, truncated
[   43.218132][ T3652] Alternate GPT is invalid, using primary GPT.
[   43.219541][ T3509] loop1: p117 size 108986237 extends beyond EOD, truncated
[   43.224557][ T3652]  loop4: p2 p3 p7
[   43.251983][ T3509] loop1: p118 size 108986237 extends beyond EOD, truncated
[   43.281569][ T3509] loop1: p119 size 108986237 extends beyond EOD, truncated
[   43.290523][ T3509] loop1: p120 size 108986237 extends beyond EOD, truncated
[   43.309629][ T3509] loop1: p121 size 108986237 extends beyond EOD, truncated
[   43.320453][ T3509] loop1: p122 size 108986237 extends beyond EOD, truncated
[   43.339479][ T3509] loop1: p123 size 108986237 extends beyond EOD, truncated
[   43.349432][ T3509] loop1: p124 size 108986237 extends beyond EOD, truncated
[   43.369671][ T3509] loop1: p125 size 108986237 extends beyond EOD, truncated
[   43.389686][ T3509] loop1: p126 size 108986237 extends beyond EOD, truncated
[   43.399597][ T3509] loop1: p127 size 108986237 extends beyond EOD, truncated
[   43.419760][ T3509] loop1: p128 size 108986237 extends beyond EOD, truncated
[   43.423054][ T3679] vcan0: entered promiscuous mode
[   43.444789][ T3603] syz.0.46 (3603) used greatest stack depth: 6376 bytes left
[   43.453535][ T3509] loop1: p129 size 108986237 extends beyond EOD, truncated
[   43.462011][ T3392] udevd[3392]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   43.465109][ T3679] vlan2: entered promiscuous mode
[   43.477230][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   43.480711][ T3509] loop1: p130 size 108986237 extends beyond EOD, truncated
[   43.496569][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   43.515172][ T3509] loop1: p131 size 108986237 extends beyond EOD, truncated
[   43.523248][ T3679] vcan0: left promiscuous mode
[   43.528767][ T3509] loop1: p132 size 108986237 extends beyond EOD, truncated
[   43.546016][ T3509] loop1: p133 size 108986237 extends beyond EOD, truncated
[   43.553953][ T3509] loop1: p134 size 108986237 extends beyond EOD, truncated
[   43.566468][ T3509] loop1: p135 size 108986237 extends beyond EOD, truncated
[   43.578699][ T3509] loop1: p136 size 108986237 extends beyond EOD, truncated
[   43.587683][ T3509] loop1: p137 size 108986237 extends beyond EOD, truncated
[   43.596000][ T3509] loop1: p138 size 108986237 extends beyond EOD, truncated
[   43.609457][ T3699] loop0: detected capacity change from 0 to 1024
[   43.626542][ T3509] loop1: p139 size 108986237 extends beyond EOD, truncated
[   43.639847][ T3509] loop1: p140 size 108986237 extends beyond EOD, truncated
[   43.641634][ T3701] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   43.653372][ T3509] loop1: p141 size 108986237 extends beyond EOD, truncated
[   43.667664][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.679388][ T3701] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[   43.727244][ T3509] loop1: p142 size 108986237 extends beyond EOD, truncated
[   43.740297][ T3509] loop1: p143 size 108986237 extends beyond EOD, truncated
[   43.742316][ T3707] loop3: detected capacity change from 0 to 1024
[   43.756335][ T3707] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.763191][   T29] kauditd_printk_skb: 535 callbacks suppressed
[   43.763282][   T29] audit: type=1326 audit(1732047823.204:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f69d11ae7e7 code=0x7ffc0000
[   43.763337][ T3509] loop1: p144 size 108986237 extends beyond EOD, 
[   43.769517][   T29] audit: type=1326 audit(1732047823.204:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69d11ad0f0 code=0x7ffc0000
[   43.769561][   T29] audit: type=1326 audit(1732047823.204:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69d11ae35b code=0x7ffc0000
[   43.769588][   T29] audit: type=1326 audit(1732047823.224:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f69d11ad3ea code=0x7ffc0000
[   43.769615][   T29] audit: type=1326 audit(1732047823.224:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f69d11ad3ea code=0x7ffc0000
[   43.792908][ T3509] truncated
[   43.866909][ T3707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   43.869183][   T29] audit: type=1326 audit(1732047823.224:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f69d11acff7 code=0x7ffc0000
[   43.904996][ T3713] loop2: detected capacity change from 0 to 2048
[   43.926440][   T29] audit: type=1326 audit(1732047823.224:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f69d11afefa code=0x7ffc0000
[   43.926485][   T29] audit: type=1400 audit(1732047823.284:698): avc:  denied  { write } for  pid=3698 comm="syz.0.70" path="/15/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.929903][ T3707] System zones: 
[   43.934210][ T3713] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   43.956559][ T3707] 0-1, 3-36
[   43.963530][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.013705][ T3509] loop1: p145 size 108986237 extends beyond EOD, truncated
[   44.022024][ T3509] loop1: p146 size 108986237 extends beyond EOD, truncated
[   44.031537][ T3509] loop1: p147 size 108986237 extends beyond EOD, truncated
[   44.035325][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.045530][ T3509] loop1: p148 size 108986237 extends beyond EOD, truncated
[   44.055879][ T3716] syz.2.76[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.058668][ T3716] syz.2.76[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.077977][   T29] audit: type=1326 audit(1732047823.514:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69d11ad0f0 code=0x7ffc0000
[   44.082149][ T3720] syz.4.77[3720] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.089163][   T29] audit: type=1326 audit(1732047823.514:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3706 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f69d11ad4d7 code=0x7ffc0000
[   44.095744][ T3716] syz.2.76[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.121527][ T3509] loop1: p149 size 108986237 extends beyond EOD, truncated
[   44.170476][ T3707] Cannot find add_set index 0 as target
[   44.174059][ T3509] loop1: p150 size 108986237 extends beyond EOD, truncated
[   44.215213][ T3718] loop0: detected capacity change from 0 to 2048
[   44.224248][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.226458][ T3725] bond_slave_0: entered promiscuous mode
[   44.234150][ T3509] loop1: p151 size 108986237 extends beyond EOD, 
[   44.238940][ T3725] bond_slave_1: entered promiscuous mode
[   44.239736][ T3725] vlan2: entered promiscuous mode
[   44.245500][ T3509] truncated
[   44.251138][ T3725] bond0: entered promiscuous mode
[   44.271413][ T3718] Alternate GPT is invalid, using primary GPT.
[   44.277776][ T3718]  loop0: p2 p3 p7
[   44.284453][ T3725] bond0: left promiscuous mode
[   44.286644][ T3723] infiniband syz1: set active
[   44.289773][ T3725] bond_slave_0: left promiscuous mode
[   44.293960][ T3723] infiniband syz1: added team_slave_0
[   44.299369][ T3725] bond_slave_1: left promiscuous mode
[   44.306285][ T3509] loop1: p152 size 108986237 extends beyond EOD, truncated
[   44.331204][ T3016] Alternate GPT is invalid, using primary GPT.
[   44.337617][ T3016]  loop0: p2 p3 p7
[   44.356580][ T3509] loop1: p153 size 108986237 extends beyond EOD, truncated
[   44.364476][ T3723] RDS/IB: syz1: added
[   44.368966][ T3723] smc: adding ib device syz1 with port count 1
[   44.368990][ T3723] smc:    ib device syz1 port 1 has pnetid 
[   44.375764][ T3509] loop1: p154 size 108986237 extends beyond EOD, truncated
[   44.377828][ T3509] loop1: p155 size 108986237 extends beyond EOD, truncated
[   44.378247][ T3509] loop1: p156 size 108986237 extends beyond EOD, truncated
[   44.393298][ T3509] loop1: p157 size 108986237 extends beyond EOD, truncated
[   44.401641][ T3509] loop1: p158 size 108986237 extends beyond EOD, truncated
[   44.402322][ T3509] loop1: p159 size 108986237 extends beyond EOD, truncated
[   44.402836][ T3509] loop1: p160 size 108986237 extends beyond EOD, truncated
[   44.403308][ T3509] loop1: p161 size 108986237 extends beyond EOD, truncated
[   44.403669][ T3509] loop1: p162 size 108986237 extends beyond EOD, truncated
[   44.404099][ T3509] loop1: p163 size 108986237 extends beyond EOD, truncated
[   44.404527][ T3509] loop1: p164 size 108986237 extends beyond EOD, truncated
[   44.405105][ T3509] loop1: p165 size 108986237 extends beyond EOD, truncated
[   44.405723][ T3509] loop1: p166 size 108986237 extends beyond EOD, truncated
[   44.406372][ T3509] loop1: p167 size 108986237 extends beyond EOD, truncated
[   44.407095][ T3509] loop1: p168 size 108986237 extends beyond EOD, truncated
[   44.407637][ T3509] loop1: p169 size 108986237 extends beyond EOD, truncated
[   44.408114][ T3509] loop1: p170 size 108986237 extends beyond EOD, truncated
[   44.408763][ T3509] loop1: p171 size 108986237 extends beyond EOD, truncated
[   44.409209][ T3509] loop1: p172 size 108986237 extends beyond EOD, truncated
[   44.410950][ T3509] loop1: p173 size 108986237 extends beyond EOD, truncated
[   44.411482][ T3509] loop1: p174 size 108986237 extends beyond EOD, truncated
[   44.411982][ T3509] loop1: p175 size 108986237 extends beyond EOD, truncated
[   44.412553][ T3509] loop1: p176 size 108986237 extends beyond EOD, truncated
[   44.413082][ T3509] loop1: p177 size 108986237 extends beyond EOD, truncated
[   44.413558][ T3509] loop1: p178 size 108986237 extends beyond EOD, truncated
[   44.413996][ T3509] loop1: p179 size 108986237 extends beyond EOD, truncated
[   44.414374][ T3509] loop1: p180 size 108986237 extends beyond EOD, truncated
[   44.414893][ T3509] loop1: p181 size 108986237 extends beyond EOD, truncated
[   44.415415][ T3509] loop1: p182 size 108986237 extends beyond EOD, truncated
[   44.416386][ T3509] loop1: p183 size 108986237 extends beyond EOD, truncated
[   44.422822][ T3509] loop1: p184 size 108986237 extends beyond EOD, truncated
[   44.423387][ T3509] loop1: p185 size 108986237 extends beyond EOD, truncated
[   44.424016][ T3509] loop1: p186 size 108986237 extends beyond EOD, truncated
[   44.434626][ T3509] loop1: p187 size 108986237 extends beyond EOD, truncated
[   44.435597][ T3509] loop1: p188 size 108986237 extends beyond EOD, truncated
[   44.436169][ T3509] loop1: p189 size 108986237 extends beyond EOD, truncated
[   44.436626][ T3509] loop1: p190 size 108986237 extends beyond EOD, truncated
[   44.437032][ T3509] loop1: p191 size 108986237 extends beyond EOD, truncated
[   44.437484][ T3509] loop1: p192 size 108986237 extends beyond EOD, truncated
[   44.438073][ T3509] loop1: p193 size 108986237 extends beyond EOD, truncated
[   44.438530][ T3509] loop1: p194 size 108986237 extends beyond EOD, truncated
[   44.439056][ T3509] loop1: p195 size 108986237 extends beyond EOD, truncated
[   44.440321][ T3509] loop1: p196 size 108986237 extends beyond EOD, truncated
[   44.440785][ T3509] loop1: p197 size 108986237 extends beyond EOD, truncated
[   44.441371][ T3509] loop1: p198 size 108986237 extends beyond EOD, truncated
[   44.442089][ T3509] loop1: p199 size 108986237 extends beyond EOD, truncated
[   44.451574][ T3509] loop1: p200 size 108986237 extends beyond EOD, truncated
[   44.454179][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   44.458722][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   44.462988][ T3509] loop1: p201 size 108986237 extends beyond EOD, truncated
[   44.474622][ T3509] loop1: p202 size 108986237 extends beyond EOD, truncated
[   44.487897][ T3509] loop1: p203 size 108986237 extends beyond EOD, 
[   44.584181][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   44.585997][ T3509] truncated
[   44.597066][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   44.614498][ T3509] loop1: p204 size 108986237 extends beyond EOD, 
[   44.778802][ T3741] loop2: detected capacity change from 0 to 1024
[   44.781551][ T3509] truncated
[   44.782322][ T3509] loop1: p205 size 108986237 extends beyond EOD, 
[   44.819169][ T3741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.823123][ T3509] truncated
[   44.823832][ T3509] loop1: p206 size 108986237 extends beyond EOD, truncated
[   44.906840][ T3509] loop1: p207 size 108986237 extends beyond EOD, truncated
[   44.907998][ T3745] __nla_validate_parse: 1 callbacks suppressed
[   44.908013][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[   44.908043][ T3745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.85'.
[   44.915965][ T3509] loop1: p208 size 108986237 extends beyond EOD, truncated
[   44.923878][ T3509] loop1: p209 size 108986237 extends beyond EOD, truncated
[   44.928386][ T3509] loop1: p210 size 108986237 extends beyond EOD, truncated
[   44.929124][ T3509] loop1: p211 size 108986237 extends beyond EOD, truncated
[   44.941342][ T3509] loop1: p212 size 108986237 extends beyond EOD, 
[   44.957336][ T3745] bridge1: the hash_elasticity option has been deprecated and is always 16
[   44.961794][ T3509] truncated
[   44.967080][ T3747] loop3: detected capacity change from 0 to 2048
[   45.005467][ T3747] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   45.029586][ T3509] loop1: p213 size 108986237 extends beyond EOD, truncated
[   45.071985][ T3509] loop1: p214 size 108986237 extends beyond EOD, truncated
[   45.086134][ T3509] loop1: p215 size 108986237 extends beyond EOD, truncated
[   45.100583][ T3509] loop1: p216 size 108986237 extends beyond EOD, truncated
[   45.116084][ T3509] loop1: p217 size 108986237 extends beyond EOD, truncated
[   45.122316][ T3759] loop0: detected capacity change from 0 to 128
[   45.130138][ T3509] loop1: p218 size 108986237 extends beyond EOD, truncated
[   45.137959][ T3759] EXT4-fs: test_dummy_encryption option not supported
[   45.153117][ T3509] loop1: p219 size 108986237 extends beyond EOD, truncated
[   45.169918][ T3509] loop1: p220 size 108986237 extends beyond EOD, truncated
[   45.187687][ T3761] loop4: detected capacity change from 0 to 512
[   45.221322][ T3761] netlink: 'syz.4.87': attribute type 4 has an invalid length.
[   45.280119][ T3509] loop1: p221 size 108986237 extends beyond EOD, truncated
[   45.303886][ T3509] loop1: p222 size 108986237 extends beyond EOD, truncated
[   45.315010][ T3509] loop1: p223 size 108986237 extends beyond EOD, truncated
[   45.327270][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   45.336093][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.343753][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.351873][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.352366][ T3767] loop4: detected capacity change from 0 to 128
[   45.359629][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.370581][ T3767] EXT4-fs: test_dummy_encryption option not supported
[   45.381130][ T3509] loop1: p224 size 108986237 extends beyond EOD, truncated
[   45.393569][ T3509] loop1: p225 size 108986237 extends beyond EOD, truncated
[   45.402967][ T3509] loop1: p226 size 108986237 extends beyond EOD, truncated
[   45.415596][ T3509] loop1: p227 size 108986237 extends beyond EOD, truncated
[   45.426772][ T3509] loop1: p228 size 108986237 extends beyond EOD, truncated
[   45.443633][ T3509] loop1: p229 size 108986237 extends beyond EOD, truncated
[   45.451925][ T3767] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   45.459487][ T3509] loop1: p230 size 108986237 extends beyond EOD, truncated
[   45.469633][ T3509] loop1: p231 size 108986237 extends beyond EOD, truncated
[   45.477857][ T3509] loop1: p232 size 108986237 extends beyond EOD, truncated
[   45.504491][ T3509] loop1: p233 size 108986237 extends beyond EOD, truncated
[   45.510344][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[   45.520687][ T3771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'.
[   45.530665][ T3509] loop1: p234 size 108986237 extends beyond EOD, truncated
[   45.549067][ T3509] loop1: p235 size 108986237 extends beyond EOD, truncated
[   45.564599][ T3509] loop1: p236 size 108986237 extends beyond EOD, truncated
[   45.566071][ T3771] loop3: detected capacity change from 0 to 512
[   45.587330][ T3771] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.94: corrupted in-inode xattr: invalid ea_ino
[   45.590907][ T3509] loop1: p237 size 108986237 extends beyond EOD, truncated
[   45.603099][ T3771] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.94: couldn't read orphan inode 15 (err -117)
[   45.620336][ T3509] loop1: p238 size 108986237 extends beyond EOD, truncated
[   45.628351][ T3509] loop1: p239 size 108986237 extends beyond EOD, truncated
[   45.636404][ T3509] loop1: p240 size 108986237 extends beyond EOD, truncated
[   45.644491][ T3509] loop1: p241 size 108986237 extends beyond EOD, truncated
[   45.652398][ T3509] loop1: p242 size 108986237 extends beyond EOD, truncated
[   45.660813][ T3509] loop1: p243 size 108986237 extends beyond EOD, truncated
[   45.668856][ T3509] loop1: p244 size 108986237 extends beyond EOD, truncated
[   45.676870][ T3509] loop1: p245 size 108986237 extends beyond EOD, truncated
[   45.684872][ T3509] loop1: p246 size 108986237 extends beyond EOD, truncated
[   45.692938][ T3771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.698034][ T3509] loop1: p247 size 108986237 extends beyond EOD, truncated
[   45.715439][ T3509] loop1: p248 size 108986237 extends beyond EOD, truncated
[   45.724938][ T3509] loop1: p249 size 108986237 extends beyond EOD, truncated
[   45.726385][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.743137][ T3509] loop1: p250 size 108986237 extends beyond EOD, truncated
[   45.752303][ T3509] loop1: p251 size 108986237 extends beyond EOD, truncated
[   45.770604][ T3509] loop1: p252 size 108986237 extends beyond EOD, truncated
[   45.771430][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   45.778551][ T3509] loop1: p253 size 108986237 extends beyond EOD, 
[   45.786645][ T3777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.95'.
[   45.799517][ T3777] bridge1: the hash_elasticity option has been deprecated and is always 16
[   45.802065][ T3509] truncated
[   45.810594][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'.
[   45.815344][ T3509] loop1: p254 size 108986237 extends beyond EOD, truncated
[   45.830970][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.846968][ T3509] loop1: p255 size 108986237 extends beyond EOD, truncated
[   45.850763][ T3780] loop2: detected capacity change from 0 to 1024
[   45.866902][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.971479][ T3789] team0: entered promiscuous mode
[   45.976580][ T3789] team_slave_0: entered promiscuous mode
[   45.982342][ T3789] team_slave_1: entered promiscuous mode
[   46.004295][ T3791] loop3: detected capacity change from 0 to 128
[   46.017553][ T3791] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   46.126178][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[   46.138858][ T3782] udevd[3782]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[   46.142711][ T3799] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   46.163610][ T3799] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[   46.261081][ T3735] udevd[3735]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory
[   46.282284][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   46.303456][ T3805] loop4: detected capacity change from 0 to 8192
[   46.421055][ T3808] netlink: 40 bytes leftover after parsing attributes in process `+}[@'.
[   46.797878][ T3797] team0: left promiscuous mode
[   46.802730][ T3797] team_slave_0: left promiscuous mode
[   46.808230][ T3797] team_slave_1: left promiscuous mode
[   46.962863][    C0] hrtimer: interrupt took 38089 ns
[   47.039796][ T3822] bridge_slave_0: left allmulticast mode
[   47.045491][ T3822] bridge_slave_0: left promiscuous mode
[   47.051228][ T3822] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.149561][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.163053][ T3823] bridge1: the hash_elasticity option has been deprecated and is always 16
[   47.421572][ T3829] vcan0: entered promiscuous mode
[   47.469713][ T3829] vlan2: entered promiscuous mode
[   47.527256][ T3829] vcan0: left promiscuous mode
[   47.618226][ T3828] loop3: detected capacity change from 0 to 8192
[   47.830077][ T3838] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[   47.931933][ T3840] loop4: detected capacity change from 0 to 128
[   48.022255][ T3840] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   48.518418][ T3857] bond_slave_0: entered promiscuous mode
[   48.524171][ T3857] bond_slave_1: entered promiscuous mode
[   48.556692][ T3857] vlan2: entered promiscuous mode
[   48.561911][ T3857] bond0: entered promiscuous mode
[   48.581219][ T3857] bond0: left promiscuous mode
[   48.586337][ T3857] bond_slave_0: left promiscuous mode
[   48.591772][ T3857] bond_slave_1: left promiscuous mode
[   48.615789][ T3863] loop3: detected capacity change from 0 to 128
[   48.630447][ T3863] EXT4-fs: test_dummy_encryption option not supported
[   48.791613][ T3870] bpf_get_probe_write_proto: 5 callbacks suppressed
[   48.791628][ T3870] syz.2.124[3870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.820123][ T3870] syz.2.124[3870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.850468][ T3872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   48.868539][ T3874] capability: warning: `syz.1.126' uses deprecated v2 capabilities in a way that may be insecure
[   48.890820][ T3870] syz.2.124[3870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.904146][ T3874] syz.1.126[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.935704][ T3874] syz.1.126[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.958137][ T3874] syz.1.126[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.986102][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.005084][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.050350][   T29] kauditd_printk_skb: 204 callbacks suppressed
[   49.050364][   T29] audit: type=1326 audit(1732047828.514:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   49.083277][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.090770][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.102098][   T29] audit: type=1326 audit(1732047828.514:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.125386][   T29] audit: type=1326 audit(1732047828.514:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.148840][   T29] audit: type=1326 audit(1732047828.514:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.172167][   T29] audit: type=1326 audit(1732047828.514:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.190358][ T3890] loop1: detected capacity change from 0 to 1024
[   49.195422][   T29] audit: type=1326 audit(1732047828.514:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.203449][ T3890] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.225028][   T29] audit: type=1326 audit(1732047828.544:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.240140][ T3890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   49.254896][   T29] audit: type=1326 audit(1732047828.544:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.263070][ T3890] System zones: 
[   49.288572][   T29] audit: type=1326 audit(1732047828.544:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   49.288652][   T29] audit: type=1326 audit(1732047828.544:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2999c6e759 code=0x7ffc0000
[   49.292516][ T3884] loop4: detected capacity change from 0 to 1024
[   49.315613][ T3890] 0-1, 3-36
[   49.349650][ T3885] loop0: detected capacity change from 0 to 1024
[   49.349767][ T3884] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.363732][ T3890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.381966][ T3885] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.388646][ T3887] Cannot find add_set index 0 as target
[   49.416402][ T3884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   49.424953][ T3885] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   49.434815][ T3885] System zones: 0-1, 3-36
[   49.440251][ T3884] System zones: 0-1, 3-36
[   49.440809][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.453233][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.470210][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.474238][ T3885] Cannot find add_set index 0 as target
[   49.492175][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.492809][ T3884] Cannot find add_set index 0 as target
[   49.518288][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.585722][ T3909] syz.0.138[3909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.585834][ T3909] syz.0.138[3909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.618863][ T3909] syz.0.138[3909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.630437][ T3896] syz.2.132: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   49.632503][ T3907] loop4: detected capacity change from 0 to 128
[   49.641722][ T3896] ,cpuset=/,mems_allowed=0
[   49.641764][ T3896] CPU: 0 UID: 0 PID: 3896 Comm: syz.2.132 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   49.641788][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   49.641799][ T3896] Call Trace:
[   49.641806][ T3896]  <TASK>
[   49.691613][ T3896]  dump_stack_lvl+0xf2/0x150
[   49.696244][ T3896]  dump_stack+0x15/0x20
[   49.700453][ T3896]  warn_alloc+0x145/0x1b0
[   49.704820][ T3896]  ? __vmalloc_node_range_noprof+0x88/0xec0
[   49.710930][ T3896]  ? strncpy_from_kernel_nofault+0xd4/0x140
[   49.716975][ T3896]  __vmalloc_node_range_noprof+0xaa/0xec0
[   49.722812][ T3896]  ? bpf_probe_read_kernel_str+0x6a/0x70
[   49.728614][ T3896]  ? __rcu_read_unlock+0x4e/0x70
[   49.733583][ T3896]  ? bpf_trace_run4+0x133/0x1e0
[   49.738521][ T3896]  ? xskq_create+0x36/0xd0
[   49.743037][ T3896]  vmalloc_user_noprof+0x59/0x70
[   49.748029][ T3896]  ? xskq_create+0x79/0xd0
[   49.752486][ T3896]  xskq_create+0x79/0xd0
[   49.756856][ T3896]  xsk_init_queue+0x82/0xd0
[   49.761425][ T3896]  xsk_setsockopt+0x409/0x520
[   49.766135][ T3896]  ? __pfx_xsk_setsockopt+0x10/0x10
[   49.771351][ T3896]  __sys_setsockopt+0x187/0x200
[   49.776321][ T3896]  __x64_sys_setsockopt+0x66/0x80
[   49.781385][ T3896]  x64_sys_call+0x282e/0x2dc0
[   49.786105][ T3896]  do_syscall_64+0xc9/0x1c0
[   49.790616][ T3896]  ? clear_bhb_loop+0x55/0xb0
[   49.795335][ T3896]  ? clear_bhb_loop+0x55/0xb0
[   49.800107][ T3896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.806128][ T3896] RIP: 0033:0x7f642bd3e759
[   49.810550][ T3896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.830197][ T3896] RSP: 002b:00007f642a9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   49.838736][ T3896] RAX: ffffffffffffffda RBX: 00007f642bef5f80 RCX: 00007f642bd3e759
[   49.846716][ T3896] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f
[   49.854857][ T3896] RBP: 00007f642bdb175e R08: 0000000000000020 R09: 0000000000000000
[   49.862900][ T3896] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[   49.870897][ T3896] R13: 0000000000000000 R14: 00007f642bef5f80 R15: 00007ffdada52648
[   49.878984][ T3896]  </TASK>
[   49.882150][ T3896] Mem-Info:
[   49.885305][ T3896] active_anon:10390 inactive_anon:0 isolated_anon:0
[   49.885305][ T3896]  active_file:4683 inactive_file:1959 isolated_file:0
[   49.885305][ T3896]  unevictable:0 dirty:1433 writeback:0
[   49.885305][ T3896]  slab_reclaimable:2865 slab_unreclaimable:14849
[   49.885305][ T3896]  mapped:21478 shmem:2454 pagetables:834
[   49.885305][ T3896]  sec_pagetables:0 bounce:0
[   49.885305][ T3896]  kernel_misc_reclaimable:0
[   49.885305][ T3896]  free:1907946 free_pcp:6170 free_cma:0
[   49.930326][ T3896] Node 0 active_anon:38080kB inactive_anon:0kB active_file:18732kB inactive_file:7836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88464kB dirty:5732kB writeback:0kB shmem:6452kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3336kB sec_pagetables:0kB all_unreclaimable? no
[   49.958057][ T3896] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   49.985090][ T3896] lowmem_reserve[]: 0 2866 7844 0
[   49.990231][ T3896] Node 0 DMA32 free:2950272kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953904kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[   49.999927][ T3918] __nla_validate_parse: 4 callbacks suppressed
[   49.999947][ T3918] netlink: 140 bytes leftover after parsing attributes in process `syz.2.132'.
[   50.018832][ T3896] lowmem_reserve[]: 0 0 4978 0
[   50.018868][ T3896] Node 0 Normal free:4665920kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:44576kB inactive_anon:0kB active_file:18732kB inactive_file:7836kB unevictable:0kB writepending:5732kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:17984kB local_pcp:5196kB free_cma:0kB
[   50.069103][ T3896] lowmem_reserve[]: 0 0 0 0
[   50.073709][ T3896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   50.086544][ T3896] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950272kB
[   50.102732][ T3896] Node 0 Normal: 356*4kB (ME) 187*8kB (UME) 57*16kB (UME) 23*32kB (UME) 45*64kB (UME) 22*128kB (UM) 34*256kB (UME) 28*512kB (UME) 28*1024kB (UME) 22*2048kB (UME) 1113*4096kB (UM) = 4665880kB
[   50.121825][ T3896] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   50.131169][ T3896] 9096 total pagecache pages
[   50.135857][ T3896] 0 pages in swap cache
[   50.140092][ T3896] Free swap  = 122308kB
[   50.144259][ T3896] Total swap = 124996kB
[   50.148442][ T3896] 2097051 pages RAM
[   50.152287][ T3896] 0 pages HighMem/MovableOnly
[   50.157007][ T3896] 80183 pages reserved
[   50.174828][ T3414] kworker/u8:7: attempt to access beyond end of device
[   50.174828][ T3414] loop4: rw=1, sector=145, nr_sectors = 33 limit=128
[   50.274995][ T3923] x_tables: duplicate underflow at hook 2
[   50.299974][ T3927] syz.1.143[3927] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.323398][ T3929] vcan0: entered promiscuous mode
[   50.347838][ T3929] vlan2: entered promiscuous mode
[   50.357028][ T3929] vcan0: left promiscuous mode
[   50.401625][ T3932] bond_slave_0: entered promiscuous mode
[   50.407380][ T3932] bond_slave_1: entered promiscuous mode
[   50.413673][ T3932] vlan2: entered promiscuous mode
[   50.418772][ T3932] bond0: entered promiscuous mode
[   50.437340][ T3932] bond0: left promiscuous mode
[   50.442513][ T3932] bond_slave_0: left promiscuous mode
[   50.447989][ T3932] bond_slave_1: left promiscuous mode
[   50.458063][ T3937] loop1: detected capacity change from 0 to 256
[   50.485461][ T3938] loop4: detected capacity change from 0 to 1024
[   50.493054][ T3938] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.501945][ T3938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   50.510391][ T3938] System zones: 0-1, 3-36
[   50.516067][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.538567][ T3941] loop1: detected capacity change from 0 to 128
[   50.554415][ T3938] Cannot find add_set index 0 as target
[   50.579423][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.584883][ T3941] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.601391][ T3941] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   50.634472][ T3944] x_tables: duplicate underflow at hook 2
[   50.695383][ T3948] loop4: detected capacity change from 0 to 2048
[   50.752100][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.767479][ T3948] Alternate GPT is invalid, using primary GPT.
[   50.773980][ T3948]  loop4: p2 p3 p7
[   50.835950][ T3961] loop1: detected capacity change from 0 to 2048
[   50.843394][ T3961] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   50.919211][ T3735] udevd[3735]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   50.921464][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   50.939728][ T3963] bridge0: port 3(vlan2) entered blocking state
[   50.946092][ T3963] bridge0: port 3(vlan2) entered disabled state
[   50.989370][ T3963] vlan2: entered allmulticast mode
[   51.024501][ T3963] vlan2: left allmulticast mode
[   51.043564][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'.
[   51.052484][ T3965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.156'.
[   51.069377][ T3965] bridge2: the hash_elasticity option has been deprecated and is always 16
[   51.078944][ T3977] loop2: detected capacity change from 0 to 1024
[   51.106687][ T3977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.130619][ T3981] loop3: detected capacity change from 0 to 1024
[   51.137543][ T3981] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.151545][ T3981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   51.188133][ T3981] System zones: 0-1, 3-36
[   51.198386][ T3988] loop0: detected capacity change from 0 to 128
[   51.202824][ T3983] loop1: detected capacity change from 0 to 8192
[   51.247616][ T3981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.265468][ T3981] Cannot find add_set index 0 as target
[   51.272560][ T3988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.285883][ T3988] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   51.351447][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.357434][ T3992] loop4: detected capacity change from 0 to 2048
[   51.376112][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.423471][ T3992] Alternate GPT is invalid, using primary GPT.
[   51.429897][ T3992]  loop4: p2 p3 p7
[   51.484785][ T4000] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   51.492668][ T4000] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[   51.555780][ T4002] loop4: detected capacity change from 0 to 2048
[   51.576812][ T4002] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   51.698393][ T4008] loop4: detected capacity change from 0 to 512
[   51.748338][ T4008] netlink: 'syz.4.171': attribute type 4 has an invalid length.
[   51.795057][ T4008] loop4: detected capacity change from 0 to 2048
[   51.804378][ T4008] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   51.919323][ T4013] bridge0: port 3(vlan2) entered blocking state
[   51.925807][ T4013] bridge0: port 3(vlan2) entered disabled state
[   51.939602][ T4013] vlan2: entered allmulticast mode
[   51.955147][ T4013] vlan2: left allmulticast mode
[   51.984208][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.037191][ T4016] bridge0: entered promiscuous mode
[   52.046796][ T4019] FAULT_INJECTION: forcing a failure.
[   52.046796][ T4019] name failslab, interval 1, probability 0, space 0, times 0
[   52.059564][ T4019] CPU: 0 UID: 0 PID: 4019 Comm: syz.4.176 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   52.069908][ T4019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   52.080246][ T4019] Call Trace:
[   52.083543][ T4019]  <TASK>
[   52.086486][ T4019]  dump_stack_lvl+0xf2/0x150
[   52.091104][ T4019]  dump_stack+0x15/0x20
[   52.095286][ T4019]  should_fail_ex+0x223/0x230
[   52.096396][ T4020] loop1: detected capacity change from 0 to 8192
[   52.099993][ T4019]  ? sidtab_sid2str_get+0xb8/0x140
[   52.111501][ T4019]  should_failslab+0x8f/0xb0
[   52.116125][ T4019]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[   52.122647][ T4019]  kmemdup_noprof+0x2a/0x60
[   52.127205][ T4019]  sidtab_sid2str_get+0xb8/0x140
[   52.132183][ T4019]  security_sid_to_context_core+0x1eb/0x2f0
[   52.138147][ T4019]  security_sid_to_context+0x27/0x30
[   52.143488][ T4019]  selinux_lsmprop_to_secctx+0x2c/0x40
[   52.146895][ T4016] vlan2: entered promiscuous mode
[   52.149003][ T4019]  security_lsmprop_to_secctx+0x4a/0x90
[   52.156335][ T4016] bridge0: port 3(vlan2) entered blocking state
[   52.159568][ T4019]  audit_log_task_context+0x93/0x1c0
[   52.159607][ T4019]  audit_log_task+0xfb/0x180
[   52.165930][ T4016] bridge0: port 3(vlan2) entered disabled state
[   52.171168][ T4019]  audit_seccomp+0x68/0x130
[   52.171277][ T4019]  __seccomp_filter+0x6fa/0x1180
[   52.176174][ T4016] vlan2: entered allmulticast mode
[   52.182012][ T4019]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   52.182043][ T4019]  ? vfs_write+0x596/0x920
[   52.186567][ T4016] bridge0: entered allmulticast mode
[   52.191471][ T4019]  ? __schedule+0x6fa/0x930
[   52.191506][ T4019]  __secure_computing+0x9f/0x1c0
[   52.191539][ T4019]  syscall_trace_enter+0xd1/0x1f0
[   52.191587][ T4019]  do_syscall_64+0xaa/0x1c0
[   52.202171][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'.
[   52.202328][ T4019]  ? clear_bhb_loop+0x55/0xb0
[   52.244595][ T4019]  ? clear_bhb_loop+0x55/0xb0
[   52.249311][ T4019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.255243][ T4019] RIP: 0033:0x7f0639a9e759
[   52.259668][ T4019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.279368][ T4019] RSP: 002b:00007f0638710e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   52.287802][ T4019] RAX: ffffffffffffffda RBX: 0000000000000252 RCX: 00007f0639a9e759
[   52.295983][ T4019] RDX: 00007f0638710ef0 RSI: 0000000000000000 RDI: 00007f0639b11fca
[   52.304023][ T4019] RBP: 00000000200003c0 R08: 00007f0638710bb7 R09: 00007f0638710e40
[   52.312117][ T4019] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000300
[   52.320219][ T4019] R13: 00007f0638710ef0 R14: 00007f0638710eb0 R15: 0000000020000680
[   52.328355][ T4019]  </TASK>
[   52.335904][ T4016] vlan2: left allmulticast mode
[   52.340913][ T4016] bridge0: left allmulticast mode
[   52.346613][ T4019] loop4: detected capacity change from 0 to 128
[   52.353571][ T4016] bridge0: left promiscuous mode
[   52.494466][ T4030] vlan2: entered promiscuous mode
[   52.499753][ T4030] team0: entered promiscuous mode
[   52.504819][ T4030] team_slave_0: entered promiscuous mode
[   52.510678][ T4030] team_slave_1: entered promiscuous mode
[   52.521352][ T4030] team0: Device vlan2 is already an upper device of the team interface
[   52.572123][ T4030] team0: left promiscuous mode
[   52.577097][ T4030] team_slave_0: left promiscuous mode
[   52.582623][ T4030] team_slave_1: left promiscuous mode
[   52.955195][ T4044] team0: Port device team_slave_1 removed
[   53.489897][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'.
[   53.498796][ T4061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.187'.
[   53.511010][ T4061] bridge2: the hash_elasticity option has been deprecated and is always 16
[   53.571539][ T4067] loop1: detected capacity change from 0 to 128
[   53.597129][ T4067] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   53.681713][ T4069] x_tables: duplicate underflow at hook 2
[   53.803747][ T4076] loop4: detected capacity change from 0 to 512
[   53.862465][ T4076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.885842][ T4076] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.929351][ T4083] loop1: detected capacity change from 0 to 2048
[   53.936199][ T4083] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   53.986982][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.045620][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'.
[   54.054484][ T4095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.204'.
[   54.067192][ T4095] bridge1: the hash_elasticity option has been deprecated and is always 16
[   54.106892][   T29] kauditd_printk_skb: 892 callbacks suppressed
[   54.106907][   T29] audit: type=1326 audit(1732047833.564:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.136859][   T29] audit: type=1326 audit(1732047833.564:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.160361][   T29] audit: type=1326 audit(1732047833.564:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.183696][   T29] audit: type=1326 audit(1732047833.564:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.207120][   T29] audit: type=1326 audit(1732047833.564:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.230728][   T29] audit: type=1326 audit(1732047833.564:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.254204][   T29] audit: type=1326 audit(1732047833.564:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.277829][   T29] audit: type=1326 audit(1732047833.564:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.301290][   T29] audit: type=1326 audit(1732047833.564:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.301565][ T4102] x_tables: duplicate underflow at hook 2
[   54.333776][   T29] audit: type=1326 audit(1732047833.604:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639a9e759 code=0x7ffc0000
[   54.432389][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'.
[   54.442938][ T4109] team_slave_0: entered promiscuous mode
[   54.448618][ T4109] team_slave_1: entered promiscuous mode
[   54.455336][ T4109] vlan2: entered promiscuous mode
[   54.460470][ T4109] team0: entered promiscuous mode
[   54.479722][ T4107] loop3: detected capacity change from 0 to 1024
[   54.499979][ T4112] loop4: detected capacity change from 0 to 128
[   54.506560][ T4112] EXT4-fs: test_dummy_encryption option not supported
[   54.515842][ T4107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.684781][ T4120] loop0: detected capacity change from 0 to 1024
[   54.703154][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.724021][ T4120] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   54.738352][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'.
[   54.751266][ T4120] bridge2: the hash_elasticity option has been deprecated and is always 16
[   54.820684][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.897659][ T4133] bridge0: port 3(vlan3) entered blocking state
[   54.904360][ T4133] bridge0: port 3(vlan3) entered disabled state
[   54.913651][ T4129] loop1: detected capacity change from 0 to 8192
[   54.922604][ T4133] vlan3: entered allmulticast mode
[   54.935443][ T4133] vlan3: left allmulticast mode
[   55.020685][ T4137] x_tables: duplicate underflow at hook 2
[   55.359671][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.426874][ T4151] __nla_validate_parse: 2 callbacks suppressed
[   55.426896][ T4151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.222'.
[   55.463235][ T4153] FAULT_INJECTION: forcing a failure.
[   55.463235][ T4153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.476397][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.4.223 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   55.486671][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   55.496774][ T4153] Call Trace:
[   55.500077][ T4153]  <TASK>
[   55.503070][ T4153]  dump_stack_lvl+0xf2/0x150
[   55.507681][ T4153]  dump_stack+0x15/0x20
[   55.512032][ T4153]  should_fail_ex+0x223/0x230
[   55.516730][ T4153]  should_fail+0xb/0x10
[   55.520917][ T4153]  should_fail_usercopy+0x1a/0x20
[   55.526087][ T4153]  _copy_from_user+0x1e/0xb0
[   55.530837][ T4153]  __sys_bpf+0x14e/0x7a0
[   55.535109][ T4153]  __x64_sys_bpf+0x43/0x50
[   55.539660][ T4153]  x64_sys_call+0x2914/0x2dc0
[   55.544436][ T4153]  do_syscall_64+0xc9/0x1c0
[   55.549082][ T4153]  ? clear_bhb_loop+0x55/0xb0
[   55.553893][ T4153]  ? clear_bhb_loop+0x55/0xb0
[   55.558614][ T4153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.564544][ T4153] RIP: 0033:0x7f0639a9e759
[   55.569042][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.572165][ T4161] loop2: detected capacity change from 0 to 1024
[   55.588848][ T4153] RSP: 002b:00007f0638711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   55.588937][ T4153] RAX: ffffffffffffffda RBX: 00007f0639c55f80 RCX: 00007f0639a9e759
[   55.588953][ T4153] RDX: 0000000000000050 RSI: 0000000020000200 RDI: 000000000000000a
[   55.588969][ T4153] RBP: 00007f0638711090 R08: 0000000000000000 R09: 0000000000000000
[   55.588984][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.623168][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.628095][ T4153] R13: 0000000000000000 R14: 00007f0639c55f80 R15: 00007ffe175bd128
[   55.628124][ T4153]  </TASK>
[   55.662324][ T4159] bridge0: entered promiscuous mode
[   55.667701][ T4159] vlan2: entered promiscuous mode
[   55.679468][ T4159] bridge0: port 1(vlan2) entered blocking state
[   55.685867][ T4159] bridge0: port 1(vlan2) entered disabled state
[   55.692966][ T4159] vlan2: entered allmulticast mode
[   55.698142][ T4159] bridge0: entered allmulticast mode
[   55.705518][ T4159] vlan2: left allmulticast mode
[   55.710461][ T4159] bridge0: left allmulticast mode
[   55.737840][ T4159] bridge0: left promiscuous mode
[   55.748032][ T4167] x_tables: duplicate underflow at hook 2
[   55.860138][ T4174] loop1: detected capacity change from 0 to 2048
[   55.875226][ T4174] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   55.954387][ T4161] ==================================================================
[   55.961165][ T4178] loop4: detected capacity change from 0 to 8192
[   55.962597][ T4161] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[   55.978121][ T4161] 
[   55.980472][ T4161] write to 0xffff888106bac1b8 of 4 bytes by task 4164 on cpu 1:
[   55.988124][ T4161]  writeback_single_inode+0x14f/0x3f0
[   55.993537][ T4161]  sync_inode_metadata+0x5c/0x90
[   55.998509][ T4161]  generic_buffers_fsync_noflush+0xd8/0x120
[   56.004453][ T4161]  ext4_sync_file+0x1ff/0x6c0
[   56.009157][ T4161]  vfs_fsync_range+0x116/0x130
[   56.013958][ T4161]  ext4_buffered_write_iter+0x326/0x370
[   56.019535][ T4161]  ext4_file_write_iter+0x383/0xf20
[   56.024793][ T4161]  iter_file_splice_write+0x5f1/0x980
[   56.030246][ T4161]  direct_splice_actor+0x160/0x2c0
[   56.035401][ T4161]  splice_direct_to_actor+0x302/0x670
[   56.040817][ T4161]  do_splice_direct+0xd7/0x150
[   56.045621][ T4161]  do_sendfile+0x398/0x660
[   56.050098][ T4161]  __x64_sys_sendfile64+0x110/0x150
[   56.055332][ T4161]  x64_sys_call+0xfbd/0x2dc0
[   56.059951][ T4161]  do_syscall_64+0xc9/0x1c0
[   56.064502][ T4161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.070441][ T4161] 
[   56.072792][ T4161] read to 0xffff888106bac1b8 of 4 bytes by task 4161 on cpu 0:
[   56.080355][ T4161]  generic_buffers_fsync_noflush+0x83/0x120
[   56.086287][ T4161]  ext4_sync_file+0x1ff/0x6c0
[   56.090988][ T4161]  vfs_fsync_range+0x116/0x130
[   56.095787][ T4161]  ext4_buffered_write_iter+0x326/0x370
[   56.101373][ T4161]  ext4_file_write_iter+0x383/0xf20
[   56.106603][ T4161]  iter_file_splice_write+0x5f1/0x980
[   56.112021][ T4161]  direct_splice_actor+0x160/0x2c0
[   56.117176][ T4161]  splice_direct_to_actor+0x302/0x670
[   56.122594][ T4161]  do_splice_direct+0xd7/0x150
[   56.127409][ T4161]  do_sendfile+0x398/0x660
[   56.131853][ T4161]  __x64_sys_sendfile64+0x110/0x150
[   56.137079][ T4161]  x64_sys_call+0xfbd/0x2dc0
[   56.141710][ T4161]  do_syscall_64+0xc9/0x1c0
[   56.146239][ T4161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.152171][ T4161] 
[   56.154505][ T4161] value changed: 0x00000038 -> 0x00000002
[   56.160235][ T4161] 
[   56.162574][ T4161] Reported by Kernel Concurrency Sanitizer on:
[   56.168741][ T4161] CPU: 0 UID: 0 PID: 4161 Comm: syz.2.227 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0
[   56.179101][ T4161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   56.189263][ T4161] ==================================================================
[   56.410973][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.