last executing test programs:

1m50.026828792s ago: executing program 2 (id=1134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

1m49.928513329s ago: executing program 2 (id=1137):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0)

1m49.843293806s ago: executing program 2 (id=1138):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0xf4, 0x13, 0x53b, 0x1, 0x0, {}, [{0xe0, 0x1, [@m_mirred={0x50, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3, 0x6, 0x5, 0x2}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x8c, 0x2, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x30}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40810}, 0x4004000)

1m49.825120207s ago: executing program 2 (id=1141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa014101, 0x4e21, 0x3, 'nq\x00', 0x4, 0x3, 0x10075}, {@rand_addr=0x64010102, 0x4e1f, 0x0, 0x4, 0x13d5f, 0x3}}, 0x44)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0)
socketpair$unix(0x1, 0xc, 0x0, &(0x7f00000004c0))
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r5, 0xfffe, 0x20, 0x7, 0x2543}, &(0x7f00000001c0)=0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r8 = getpid()
setreuid(0xee00, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)
syz_clone(0x1000000, &(0x7f0000000240)="e169ed092380dcfe418c826867d67f1bdf33e24cd1dc441f0a644b8663c203fb39a3e0956283ba00709bb58aa599e85337da8aeaccb3c8a5aa0e53dc180d7cf3ed401e6863022c6cb32cbd441fa0af43c26bc5ccc93e04cd9b43e4df54ad3bba7056c0d26703ad1224b1856344fa5f1b7c72ac3076a7657a15f5e513e6b6f183fd868ce658392b74870ba7351a6e8ffce1c0effda53cc86b745fac16261468e3a20d3f64b9029d8cd69406cc876ab31b8675f47a1e2a4c85b12aa137cfb10052f02d4d46540cf73ccef981f84b64feb988847d4fbc", 0xd5, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)="a3ec466e3e6bdde211a9ec5b43a3c45765f52eba081d8f3ed5504da38b6b3c997584242b5cb01f3ee6a0e5b29da258930e6e0fbed4dfd74936089f752003c82fc166b1607566433343116aa430218aed761c1361fdbf37144bc6c2f3ac4b8193981534de2d43d3a95095e6a9df2b91c52cc7d92ad2c797f99cc5706f295030a5c5396bc88f6149117c886d65b39df56759cc9f52fd372a5884276e2e5952994d63e0a18b3161492ffa79f92ee3a3ffb4c205f41ae5a35963b390712cff8701772b74cc750f")

1m49.451630165s ago: executing program 2 (id=1144):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xb}}, {@nodiscard}, {@quota}], [{@obj_user={'obj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}, {@subj_user={'subj_user', 0x3d, 'quota'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x45, 0x65, 0x66, 0x33, 0x39, 0x38, 0x64], 0x2d, [0x61, 0x38, 0x55, 0x63], 0x2d, [0x36, 0x38, 0x61, 0x30], 0x2d, [0x63, 0x32, 0x39, 0x62], 0x2d, [0x30, 0x61, 0x62, 0x62, 0x31, 0x35, 0x30, 0x34]}}}, {@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}]}, 0x1, 0x558, &(0x7f0000001d40)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF")
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3ff}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x13e33e3504516b73, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xea42}}, './bus\x00'})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a000100"], 0x18}}, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))

1m47.987292452s ago: executing program 2 (id=1167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0xf4, 0x13, 0x53b, 0x1, 0x0, {}, [{0xe0, 0x1, [@m_mirred={0x50, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3, 0x6, 0x5, 0x2}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x8c, 0x2, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x30}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40810}, 0x4004000)

1m47.944928486s ago: executing program 32 (id=1167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0xf4, 0x13, 0x53b, 0x1, 0x0, {}, [{0xe0, 0x1, [@m_mirred={0x50, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3, 0x6, 0x5, 0x2}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x8c, 0x2, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x30}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40810}, 0x4004000)

36.33561884s ago: executing program 3 (id=2668):
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x2000003, 0x400ffff, 0x4, 0x0, 0xfffffff8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="18000000000000000000120000000000850000000000b7080000000000017b8af8ff00000000b7080000000000007b8af0ff00000000bf31a1e3b900000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000", @ANYRESOCT], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4})
keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0)
mount$9p_tcp(0x0, 0x0, &(0x7f0000000080), 0x800000, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\xe5\xfa\xad\xd1md\xc8\x85HX\xa9%V\xdd\xf2ZA\x1c)\x16G\x1aZ\x11%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x1af\xdeD\"!=F\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\x80\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\x81\x00r\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00', 0x0)
write$binfmt_script(r6, &(0x7f0000000900)={'#! ', './file0'}, 0xb)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00')
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000c80))

35.79498316s ago: executing program 3 (id=2670):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

35.742197683s ago: executing program 3 (id=2672):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x9, 0x109080)
io_setup(0x8, &(0x7f0000004200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r2, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00')
openat(r5, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000280001800d0001007564703a73797a310000000014000280080001"], 0x3c}}, 0x0)
io_setup(0x19, &(0x7f00000009c0))
io_setup(0x8, &(0x7f0000000240))
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x1b8, r7, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x260}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff0000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1ff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x259}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x340}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x10, 0x1, 0x18, 0x6, 0xd54, 0x9, 0xb17]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xc, 0x28, 0x4, 0x8907]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x18, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf4d6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x575}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x69a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x215}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x158}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0xc010)

35.304901135s ago: executing program 3 (id=2680):
r0 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") (rerun: 32)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r1, 0x0, 0x1, 0x0) (async)
r2 = socket$kcm(0xa, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = msgget$private(0x0, 0x680)
msgctl$IPC_RMID(r5, 0x0) (async)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='kfree\x00', &(0x7f00000003c0)='./file0\x00', r0) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @hci={0x1f, 0x2, 0x3}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, @llc={0x1a, 0x3, 0x0, 0x4, 0xa, 0x32, @remote}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='veth0\x00', 0xb, 0x3, 0x3})

34.994063138s ago: executing program 3 (id=2685):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0xbed}, 0x18)
pread64(r0, 0x0, 0x0, 0x0)

33.971313264s ago: executing program 3 (id=2694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0)
ioctl$TIOCMBIC(r1, 0x5415, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc", 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
time(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050810000000000000040000", 0x58}], 0x1)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')

33.971064514s ago: executing program 33 (id=2694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0)
ioctl$TIOCMBIC(r1, 0x5415, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc", 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
time(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050810000000000000040000", 0x58}], 0x1)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')

22.590859033s ago: executing program 1 (id=2862):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

22.565737145s ago: executing program 1 (id=2863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000400)='\x00', 0x1)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]})
pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x80)
socket$phonet(0x23, 0x2, 0x1)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1)

22.223922541s ago: executing program 1 (id=2867):
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x18)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
pwritev(r2, 0x0, 0x0, 0x1498, 0x81)
r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
eventfd2(0x1, 0x80c00)
ppoll(&(0x7f0000000040)=[{r3, 0x20}, {r3, 0x288}], 0x2, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)={[0x5]}, 0x8)
mq_timedreceive(r3, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

21.255205542s ago: executing program 1 (id=2886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave,mpol=l'])
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000e67f000001"], 0x50)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000340), 0x8)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x1008002, &(0x7f0000000a80)=ANY=[], 0xff, 0x251, &(0x7f0000000280)="$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")
chmod(&(0x7f0000000200)='./file0\x00', 0x144)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
socket$igmp6(0xa, 0x3, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f00000001c0)={[], [{@fsname={'fsname', 0x3d, 'GPL\x00'}}, {@appraise}, {@dont_measure}]}, 0x2, 0x5db, &(0x7f0000001740)="$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")
r7 = syz_clone(0x2028080, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregs(0xc, r7, 0x15, &(0x7f0000000000))
getpriority(0x3, r7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, r0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

21.021160919s ago: executing program 1 (id=2887):
socket$kcm(0x10, 0x2, 0x0)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

20.392136266s ago: executing program 1 (id=2895):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x7c, &(0x7f0000000740)=[@in6={0xa, 0x4e21, 0x0, @local, 0x10001}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x7f, 0x0}}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000400)=0x10)

20.290483963s ago: executing program 34 (id=2895):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x7c, &(0x7f0000000740)=[@in6={0xa, 0x4e21, 0x0, @local, 0x10001}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x7f, 0x0}}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000400)=0x10)

9.113992228s ago: executing program 7 (id=3023):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020000, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1ff}, 0x2, 0xffffffff, 0x6, 0x6, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020000, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1ff}, 0x2, 0xffffffff, 0x6, 0x6, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x11, 0x80a, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}}, 0x0) (async)

8.987367077s ago: executing program 7 (id=3027):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

8.986874957s ago: executing program 7 (id=3028):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = open(0x0, 0x6cc42, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3)

8.789641372s ago: executing program 7 (id=3031):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0)
timer_create(0x7, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
setgroups(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x10001, 0x2, 0xffffff00, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002, 0x2, 0x3}, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

8.695105509s ago: executing program 7 (id=3034):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000d01feff0300000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000184600000700000000000000000000009500002200000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101491, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
renameat2(r2, &(0x7f0000000280)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlinkat(r2, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000)
sendmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="96", 0x1}], 0x1}, 0x24004895)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0xa9273f17fc77608, 0x1}}}, 0x10)
r5 = timerfd_create(0x0, 0x0)
timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x2, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x6, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x7fffffffffffffff, 0x81, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x80, 0x1, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d8d1}, 0x0)
ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0)
timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)

8.282603059s ago: executing program 7 (id=3044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) (async)
ioctl$TCSETS(r2, 0x89f0, &(0x7f0000000100)={0x9, 0x0, 0x6, 0x7, 0xc, "bbc0b4030000e8fffb5df44e83adeb28b60021"}) (async)
io_setup(0x7, &(0x7f0000000140)) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x223f, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000024000000c6ba6ab4753015be632400000002000000000600000000000408000000000000000240000020000000040000000000000d000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}) (async)
pipe(&(0x7f00000008c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x7, 0x9) (async)
write$P9_RWRITE(r8, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x11000) (async)
read(r7, &(0x7f0000032440)=""/102364, 0x18fdc) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]})
r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0x8, 0x2}, 0x10cca8, 0xfff7ffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) (async)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000e09e01001c00128009000100626f6e64000000000ca60002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESOCT], 0x30}}, 0x0)
umount2(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)

6.261174119s ago: executing program 0 (id=3060):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x108)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=r0, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'ip6gretap0\x00', {0x4}, 0x2})
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4)
io_setup(0x7d, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x6cc42, 0x0)
pwritev2(r3, &(0x7f0000000240), 0x0, 0x1200, 0x41001, 0x3)

5.921599544s ago: executing program 0 (id=3066):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4)
pipe(&(0x7f0000000180))
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000b0000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000800003000000009f9dd60000", @ANYRES32=r4], 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x2, 0x2, 0x1, 0x7}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})

5.097018184s ago: executing program 0 (id=3074):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x1}, 0x18)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000889", @ANYRES8=r2, @ANYBLOB="00022cbd7000fcdbdf25310000000500350005000000", @ANYRES16=r2, @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000c1)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0xfeff, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r10, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044805}, 0x0)

2.917972855s ago: executing program 4 (id=3107):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0)
timer_create(0x7, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
setgroups(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x10001, 0x2, 0xffffff00, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.881657588s ago: executing program 4 (id=3108):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x41001, 0x3)

2.724190599s ago: executing program 4 (id=3109):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
io_uring_setup(0x6b66, &(0x7f0000000280)={0x0, 0xffbffffc, 0x10000, 0x1, 0x3bd})
r1 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x9}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000300)=@deltaction={0x4c, 0x31, 0x1, 0x4, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6db}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea0a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r6}, 0x18)
r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat(r1, &(0x7f0000000000)='./file1\x00', 0xb02c3, 0x128)
socket$rxrpc(0x21, 0x2, 0xa)

1.711198664s ago: executing program 5 (id=3113):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x6cc42, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3)

1.649399239s ago: executing program 4 (id=3115):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x6})
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r7 = getpgid(0xffffffffffffffff)
process_vm_readv(r7, &(0x7f00000007c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/236, 0xec}], 0x6, &(0x7f0000000280)=[{&(0x7f0000000840)=""/176, 0xb0}], 0x1, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@empty, 0x0, r9})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3, r0})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='netlink_extack\x00', r10}, 0x10)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x2, 0xff}, 0x10)

1.4873529s ago: executing program 5 (id=3117):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

1.310595864s ago: executing program 5 (id=3121):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r3, 0x1e76, 0x0, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.239155399s ago: executing program 6 (id=3122):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1e00000000000000030000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000002000000e2869e1201c3e2705fc87a53480e926c1624704224e95f50657768a8bef42a07925c64bd885af0caa2c683", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000380), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00', @ANYRESHEX=r2, @ANYBLOB=',posixacl,seclabel,\x00'])
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sync()
sync()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x3, 0xc, &(0x7f0000001540)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fff8ffffffb703000008000000b704000000000000850000005900000095914197aa86a2ce5865a7235588a1ea1c8397c6f5f2baf99543f05912f799f296539a300183a7694c44ca5f2fa311f2aef7538f391564968e775830d7e0dfe5a1d5a5e6afdbecdab4e1d187bdb919ce5e22546d5a6d23c7625ee26df9d16fd4b4f9c637d74ec6817fc988a5a7131998865896942d691178"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000c80)={[{@mpol={'mpol', 0x3d, {'local'}}}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigprocmask(0x3, &(0x7f0000000040)={[0x3ff]}, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18)
r6 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)

1.169870884s ago: executing program 5 (id=3123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000480), &(0x7f00000004c0)=@sha1={0x1, "d301a857439caf08d5b3df1657ba98726cdf2e24"}, 0x15, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x8000000000000000}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002780)=ANY=[@ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4810)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x75, 0x1, 0x8d9c7bb, 0x24, @local, @private2, 0x8000, 0x20, 0x7, 0x5921fb1b}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000002000000002380000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'vlan0\x00', @ifru_mtu=0x8}})
r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0)
r12 = gettid()
mq_notify(r11, &(0x7f0000002740)={0x0, 0x3e, 0x2, @tid=r12})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
kexec_load(0x7fffffff, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000280)="9fbcf02eebd82a45d4e56c4460340498082d1cbe5b7af80fbab18ca40f82c8c845b2e941ceb054c250304632b105788cce695c1c36fd97cccd5f708508ba4c0a2241ec5664061c071242ada7c6def074ff554b69586cabbe30011ef58acd057c0180a1424c5b84810bd049bf9aaf0aeb953f25416878eda69475c9bea49ce769b759ada9d7fe2787becec8f21b69080f3c9fa99aa65ef5d1a73f43c881e6796df4285fadfc8999180bdf9fc3211ee13ed29bfda792601cf521c156b5456a6419eb124ae69bf2e1d88a6e340ac8393da27af868ba079b", 0xd6, 0x2, 0xd}, {&(0x7f0000000180)="e3b7596c011b58864440b81497e0ef16add664674e9c91bde35a68598b52dc1fd2b79df340a840ca0c3efc2b7b5fb3465271e1b71710b6933b62573223f04d6e1a5f2c6e2aa93395250eb79ff57f0414ebf5751a193d18dc294cacb85620d54a6c94c5b4", 0x64, 0x46, 0xf81ec25}, {&(0x7f0000000380)="d5a18a6edc878b7087ee06b0dcdb571324dbc80d237697e74e0eb3d809951ac90c173467d5f4db0b0057009f828663ce7f6140bce1201b9924b425b240bf41a65a58aeb648f0728441b256c987", 0x4d, 0x7ff, 0xfffffffffffeffff}, {&(0x7f0000000680)="e4e707cdc905e6b4f171f09409ea29e6535f6fef67388fc5d3b6a214edd9e1fe3d7353408db7939bac7054600d7c37575284779c5b4b86b9c21fbcb0a0d213b466cf194f7dbc258a1be3438e3753b76dae20b0d6b20cfd9a742ea43c0be02f2e66f78d56e40b773276a64527ab4f4a878644d9673c3745b2f030f3d4f74efc281ab288c7a0c47a21594da65624649d7b8c6b7313fc2fea5b2a8252cedbefb4c71741236b6c0549e9124ac8aa008225a25813d03242e5eba3e020949da4ad622ad4ea11c4b07fd78feb3fdd9a375082885d576afa5349e56d4d80a9745d73379d1953302defe649772e2a3eda100b89b85cc654e807ff7494396472d98d1bae3532913467a9db6b67ef6a51cd7e9de31fa066f2d717889f95bedc062fb94b53a1d3faf3e4b825dd2cac3c6efcc196b0df26c53122097fd2fda3bcacf309a823964c242cb6e024cd6c322f14e5104ece9c4e7fdaf8ef41dd436c5ab6de8cdee51889a441722d675267fe8e1ab786f17c210f3e81fb8befd4b06f18213d8f6656e5d13ecce078168fd0851768c539db0655941bcee04ee5053336f12e956cd23a01e3db0705d0e08953b5b6d52eeeada751ba58ea6435794446148da97bf052f3075a702386c67d4842d50410e10cbe0c8e98ff94455ad58e8f2fe1bee1af2245f8a2779582d77c969226a3a17fbec908fc52e08e38d194e7bc9f1b3a9215db3957b4a99cf57376dbfc20a9ec60e03df88a8d46b50f2fb6fee2ffd7b8608056a679396a730a0c7e5d9470cadc5d3059cdda04a27954247506fd474660232173d76f21cc1f89d1bfc8c26f28fd5f49d32ff699b3af11977a0ebbbd7e0c6e7cd46ab383554da3fdd6f5ceb45ceec0c9b5c53977f893a8abbc2d251ea1a2079068f0ba94637f0eb21f8b8020c3792ebac6bda86948db272cfecf52f042c809974c8f6c24ae6b4b9d736f2116798065e8243fe92294b1ba12cd7afe8259f2e00f1ddc0d4848afcf70acabbaec59b454ca3ada794c33d75fbe0c303872c9d9082f08e7264121c63509d5f6e7ddd537e3454c9ed263168a92b1c2d8c11578727c6e7291203e764bfa3e1b7efa0768c63a143b7e916a84dcdfdb5e19bc1cb447910d4267cc759f0b658e0746ea21dc72efb003df03d0a465c654f2ecab151a3e3ad167f7e72d35d0693a6dec35288521712eab2c333675b4278946540127e2018b7af8086287cd1a58ec02e2fe250e4c8b0c5ff40b1a762d642c9d6cb4abbb8ca80b1c5698336bdd4cce89e8da628d9d649d4047167fc686888e851c2f3dcdb783d6dd5d0acc95febb4cfa6a01810527d95866e8deecfea65a8c7ab7db7bcd580c44ce3cc98d6406df226435798c9c1179d28b3eeb4bca433abe445c1ad20d9744bb201fabb818144f754dddb650db8e12e3365e7c411002151b0f082dd90b6aa4b5804e81ad6b1c5a723b168d77eba7602a15c44b7828db817382619387b0e3b68d0742d8018e0ba35d23a0efc02c9653501ad100cb09e4663a1d9775cbe0bd2112f5fb817a66273c43eb84134fb699fd03da6449c7bc6ea1fe22298c516217374c6703e0ddd36b289d644274ab1342e2c8738296a93ddc4a0feae4e1d5dd6fcde1b2d92e758d8139e28931dd7e8819bc02d9f65b3aacbf01c1d5862f20c3b0bfd774b068e39e50574756478c573b2c015606d3f6bd7ca696365ab527808e74a3adc21a6c3339a2a33182496c386a8d21c20907b4c2210cb19b4f8a541b2fa4a1e1c245d34fcbd9f6594ac57dde4b3c510b78c989f39340414d44a0cdf818e4265e73a2822aad5c9f898a301fa7597053c8f56970155f262e28ed3998e769cbb67d06230d9327f74b2e1f3d4ded3c05aef167818e0bd8eec9af8d5c13b89a35c65c37411321923fee3b3105754a03c3036eb0c85f9804f8d9fe1cac9a8bc132087095faa2c013b6acbc7c1c31f4179d2c72cbf96e64bab24686b7205e29f3a55024303ff735b5a26b5255d506be47cd1fd0c1b6a9d2db54d52bcf3546f7bcc2eb24fac024900b16fa6eae0aaeb44234de6a03a8e6de98c6d99d9c586f6e59c6a7f95f695bc4d8d593991858da36cc198003a2ce34e3609dce419d36f427c412993e19a23a1f9f6ddb3a8329ede1b89341e228d9c499d553677b7679024a95cf132f6883951ef24f8c3bb74621d31ff13c8c47518f81d007e8194066abedff66b42205bff7d51c3e48935e66c635f8e29d41bcf26fd7d762b68f8a39105a8481c0ce111239a71f2763178c43acee47ac18fcbab3822323a85afd445ede80b5a87983bd3276cbb45f6a1415a9238533225d1e34e072ca9b942a2f1d0fa4e1d8cd2b33b5a3fafc6f5d0f6a27a7e18bc047f56af6300b011a1bdd88eacba0e67c69df15cc43300ff91797c0b0e284fc91bac6c5884388e1feac141d983b5b11cc7981466ee486b949c0643edf100382b13b8f1a7cf51298a123e47e7efa2eb8a599fb32dcd144c1649a8058727ab57c408115733474dde7dfa12fb0c1b34ab092776ab69291bc63ea2c9bbdc303d13e76962519025f4112c58885e7f0dfc6b047c39fffa6b484c92374386b62ac9f157b2129be29ba8218e2ceda981db281f5d99ac460868f413ab1cdbc015508175b97d68c39979a06cde86075a8b75a3bc5d36d0a8b9f3ddd2f7fc231e52e630638f109706eed2e48d6f1e388574ead918d50eaa0634141749ac2e6c2496c6bfde1e786bf92b444afd3eb380d9dc73b607bc086a32cab09519e4108560f8e5f15a4aa7fd890dd2bdb3508d216b46d4a6e462f992a5bbf2a039b98ab69913ac92f72aff8ec4d3fdc48406c90471b5f3e3af7270160bf59742bc73b0c753a5384b87585c469bde886a31f1539c6508db871713e2ca60f345904e8fdda10deba70688de571e26e5f79705429c3ca371532712a041e9085835d2419e758219e3fcb1693cac7c642cddb97e567f2b5d5a157d46328145f426064da2286bd085dc20b943a881b7cec3a4b29178e1849327b5852ad2baa05f5bc2db9f81c759c2defd92d5bb610f952dc2fbfad3768dc724bda50059fa62b762ee40364153a76e6be14e38a70ee2b5d56b1184bfc79764d837cc68162a755d1a5eeeccefb4e4f99e07329a728d9835edf2e2c75469c069b6e6ce0cb4c230395c354f7909472e72b5d91d0a1688cb85e3c32f59e30c2da87a0deab0840da2ca2f03ad9b89e7bfb6fc340cafa3e1d6c56ef657645e219955f05f36a34df65d9360019969d36adfa763211b4032c04f12e52bc3a039412f7a9191682340766b75052e533ba158d02a94819b5236693380d7a95f6c53cccd69f986d83bb2cc6f9a313119cfb7fe84a275056d315e53d8793b63d4cbac3b66dca110dbb26b2f3d20f7ef6ae134429d50c354c96c94350c40854fe3f7e81a25c8c0cb689741e560fa00661f8e22270d33f1feaf0cb26c8645531b0fce532efd394993f09bd24344fb2ec98ebc919b87acb559bd85d58eee1ec6bacbbd42f70f707f31c38fc143365229bbd5eac37778134fe74a5d1d4bd92f0c40b2ae8731cc935d9ef1e208b09f0fa9fb0ccb785f30c47f29dc0928e006de1e69f0ec4f1ab19c2aa23bc8b81e249185f4103b74e392824be1b9815b4b7f5b761dc4e9e704d6167c1a157e49d5660b1595658d2aefea331734989312df3b3f72d9b269f4a5ca961e88210dc24c6539281a65d31d2b206292451e308809683e229b731b2354638d7dfc2c812418b4cbcedbb254a94d394283a799aa09894613189ee4bd7d70e61eb3ea7779ae7d4d54765781727d6a2419c572349533be498dd7b9d4660d5d7467596f34e18e0850bc5ba0bd282a23b4d959f2d7992d8a12189fd15af79e262ebf523a84803075de39e1a24a4d84acb9ee7e02077ef0c0e8541525a6b961414e9cd0f4f7a44780034c0d4c7703f23ea03874abc798f0fb76646abb8fcc931fb408fc4b81f233ae4d113cfd26e09134145f935d4cae564044029478cb6495355d496909fe6e439b74db90b586ce3115878bff89143c07055b49ce34ff58995898544101e51c90b5996a4320753c41b45cb6ca2b27d4ffa911c42f8f8ec404a68110c1d8f86c36d5acc83fcc05568602fbc6be994c5f51733ba9f7828bfba5c8c7dad3ebdada1074fe5b416bca96065d9b8a904f3cadd2e20e150dd5b3d54f3ad42da0adbdf761a3587acef1899c6481fff96cc6a0934566819c20206c6953810065ea25a542c85aab19f80ac28f4a3b86f2141b9728c54cc65389c5aa3257ba658ab9d6a9595461cae8ca34a3d8d06e85308b8ff1ba00ddd556571d1ada32ef67e9cc754799ec35e6a53df96821581abc6962b9d1677111bd03dbf8ba79e7a0b4838166ed0df18c927dce6a538eec1d58ad30b3670bba2cba711c43541e000da8d52af17b2ceca6150544caf077a7ca1d077e1d1b1e0ca783a7d4340cb4570340875905f3dfe3143aa7c83fbaf3a7a728cd027b5a43a7a63122e5f4b5ec5b5c1977e0c4178624b77e414f6d1fa6db8ffbef0f7c7eedb95bb4713503c5bf3bc0f3aa02c15d0efa381b362f73a8d1006f9d7662beee35f0d9d18b16320cace0c81f7de58957c4abfa324077d27505a69cd3841d73dfbecc0e7db3a8ecb83ff0204a3adc8b9545a612a13cbb1b3817ac8bc43b0cee7bed07adff92a2ae9ab12644d5eeafc0617fb2618a2107143544fdf7b8b1eca41e65240e4e867688e1064786da0ea3f74a11dd5f5b9eb616464f16919f229598d5edded9e0b7937513c4d02aba29922857be9bcd68c7cd9357564cb0362d80e28a6c18630a8fb0c48783876bd31953001f4ebc59b8b0a4fb249de86b52e3e495a44a202716cf1083a4503904f091c6f0e9addf2c81c1d87cc2f6f1d2e81900f4f02e9b8ff13c763ec5a90f63d43cf0f4991f9342b5f791aa4017739887cdc53a964ca81c0c4ab5be37bd7781805f4f5b2b151bada201471b8882afec9ece1731e8a937e7a439d2f3ce1ace7e67b76fe85de023ca69cf2f6372be9d8bbaea8a19396837a427bf127ee0874270a964e8bad5dd806028be942c3b0f43263e32a54053a6e6340daa41637d98d60e5da2e791f6d6bfdf18468149083b31ce78ee2a4b100f6ea3b2e55460589df98c2c48f93ee23a4fa9c2aaec475de433656b45a983d2688c6123bfd4d86d9a35b4aa02a2c88c76a20f08387928e5efae33d535c324679060796d84b95f750c4eaceee44ac1a3a5c6c294e5397412807d91a221553e0ca3ca99ad9e153c8ad2f4aab8030a7c21ecc4b08545f776b67d632c7b425a0c02a5b726fa8a3b9e5e972ac41fd0c3b91a8960e2b3c48a60a1ef54a04e92daa9aec2bb5cc087f5fd07e3eec9548f922ec80d50a628e3a6e2aaa99aca5d7723eec6074be83baec2e522be8f8135cdabd72833a042da5722bb4ff0f6efe71c23c6f0d6a751eb4ef0a0d92bc752a423cc0d050fa12884758cc6792425a9826b26b750c2e53d82b1333979086b8bf95579bf80c6120fe07df09c77f529cdc72927652bf9e83f4c654986f8843909440b161b0394ca16822ac40a1d6b81fe7686a6b13da074e0958ec16a2f3d768842793d1d3644ffcc1813aaffae9badddcf748d20af827fb78a285a4d38f2bb27bb3459acec986123516b317c82d7833ad848f594e83a5fdf30360a8f0a3dd93635ce42695aceff6fe79f85603c46f27da7f47678033aa087a1c4582ec0eae445421593c4577dff4d2e98f4c8e409c6c6e25574924d638d51d29f226c8baa0d7ef75e6bccfe6959f1efdd49030c9", 0x1000, 0xb, 0x3}, {&(0x7f0000000000), 0x0, 0x200000000000, 0x7fff}, {&(0x7f0000001680)="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", 0x1000, 0x80, 0xef32}], 0x2)

1.104668739s ago: executing program 6 (id=3124):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200), 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x6})
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
process_vm_readv(0x0, &(0x7f00000007c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/236, 0xec}], 0x6, &(0x7f0000000280)=[{&(0x7f0000000840)=""/176, 0xb0}], 0x1, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@empty, 0x0, r7})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}}, 0x28000)

1.031763624s ago: executing program 6 (id=3125):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xb}}, {@nodiscard}, {@quota}], [{@obj_user={'obj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}, {@subj_user={'subj_user', 0x3d, 'quota'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x45, 0x65, 0x66, 0x33, 0x39, 0x38, 0x64], 0x2d, [0x61, 0x38, 0x55, 0x63], 0x2d, [0x36, 0x38, 0x61, 0x30], 0x2d, [0x63, 0x32, 0x39, 0x62], 0x2d, [0x30, 0x61, 0x62, 0x62, 0x31, 0x35, 0x30, 0x34]}}}, {@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}]}, 0x1, 0x558, &(0x7f0000001d40)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF")
r1 = socket(0x21, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3ff}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x13e33e3504516b73, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xea42}}, './bus\x00'})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a0001"], 0x18}}, 0x0)

1.030892264s ago: executing program 0 (id=3126):
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x18)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

931.483052ms ago: executing program 0 (id=3127):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

703.036869ms ago: executing program 5 (id=3128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]})
pidfd_getfd(r7, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x80)
socket$phonet(0x23, 0x2, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1)

702.525509ms ago: executing program 6 (id=3129):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0)
timer_create(0x7, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
setgroups(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x10001, 0x2, 0xffffff00, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002, 0x2, 0x3}, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

647.753353ms ago: executing program 4 (id=3130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x211}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe)

632.580864ms ago: executing program 6 (id=3131):
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x2000003, 0x400ffff, 0x4, 0x0, 0xfffffff8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="18000000000000000000120000000000850000000000b7080000000000017b8af8ff00000000b7080000000000007b8af0ff00000000bf31a1e3b900000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4})
keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0)
mount$9p_tcp(0x0, 0x0, &(0x7f0000000080), 0x800000, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\xe5\xfa\xad\xd1md\xc8\x85HX\xa9%V\xdd\xf2ZA\x1c)\x16G\x1aZ\x11%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x1af\xdeD\"!=F\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\x80\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\x81\x00r\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00', 0x0)
write$binfmt_script(r6, &(0x7f0000000900)={'#! ', './file0'}, 0xb)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00')
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000c80))

575.234578ms ago: executing program 4 (id=3132):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000700)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
io_uring_enter(r2, 0x1, 0x0, 0x1, 0x0, 0x1000000)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = gettid()
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x80000, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSLCKTRMIOS(r6, 0x5435, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r7 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0)
mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x0, 0x0)

481.561185ms ago: executing program 5 (id=3133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x6})
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
getpgid(0xffffffffffffffff)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@empty, 0x0, r8})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}}, 0x28000)

387.130772ms ago: executing program 6 (id=3134):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (fail_nth: 3)

0s ago: executing program 0 (id=3135):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xb}}, {@nodiscard}, {@quota}], [{@obj_user={'obj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}, {@subj_user={'subj_user', 0x3d, 'quota'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x45, 0x65, 0x66, 0x33, 0x39, 0x38, 0x64], 0x2d, [0x61, 0x38, 0x55, 0x63], 0x2d, [0x36, 0x38, 0x61, 0x30], 0x2d, [0x63, 0x32, 0x39, 0x62], 0x2d, [0x30, 0x61, 0x62, 0x62, 0x31, 0x35, 0x30, 0x34]}}}, {@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/vs/drop_packet\x00'}}]}, 0x1, 0x558, &(0x7f0000001d40)="$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")
r1 = socket(0x21, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3ff}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x13e33e3504516b73, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a0001"], 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

ode #3: comm syz.4.2413: corrupted inode contents
[  157.593262][T10231] EXT4-fs (loop4): Remounting filesystem read-only
[  157.593488][T10242] loop5: detected capacity change from 0 to 512
[  157.607458][T10231] EXT4-fs (loop4): 1 truncate cleaned up
[  157.613496][T10231] SELinux: (dev loop4, type ext4) getxattr errno 5
[  157.642054][T10242] EXT4-fs: Ignoring removed orlov option
[  157.656628][T10242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  157.667367][T10242] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  157.676472][T10242] EXT4-fs (loop5): orphan cleanup on readonly fs
[  157.683762][T10242] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2417: bg 0: block 248: padding at end of block bitmap is not set
[  157.699726][T10242] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2417: Failed to acquire dquot type 1
[  157.712147][T10242] EXT4-fs (loop5): 1 truncate cleaned up
[  157.754030][T10258] loop1: detected capacity change from 0 to 512
[  157.761175][T10258] ext4: Unknown parameter 'obj_user'
[  157.766909][T10254] loop3: detected capacity change from 0 to 164
[  157.786149][T10254] syz.3.2420: attempt to access beyond end of device
[  157.786149][T10254] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  157.801495][T10254] syz.3.2420: attempt to access beyond end of device
[  157.801495][T10254] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  157.819488][T10258] loop1: detected capacity change from 0 to 1024
[  157.826531][T10258] EXT4-fs: Ignoring removed orlov option
[  157.834708][T10258] EXT4-fs mount: 74 callbacks suppressed
[  157.834724][T10258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.889818][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2429'.
[  157.949937][T10273] loop4: detected capacity change from 0 to 2048
[  157.985312][T10280] loop3: detected capacity change from 0 to 1024
[  157.992074][T10280] EXT4-fs: Ignoring removed orlov option
[  157.998012][T10280] ext4: Unknown parameter 'fowner>00000000000000000000'
[  158.036559][T10273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.061505][T10290] loop5: detected capacity change from 0 to 512
[  158.092827][T10290] EXT4-fs: Ignoring removed orlov option
[  158.112658][T10290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  158.128092][T10290] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  158.136691][T10290] EXT4-fs (loop5): orphan cleanup on readonly fs
[  158.144266][T10290] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2437: bg 0: block 248: padding at end of block bitmap is not set
[  158.185587][T10290] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2437: Failed to acquire dquot type 1
[  158.207171][T10290] EXT4-fs (loop5): 1 truncate cleaned up
[  158.213294][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.220113][T10301] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2440'.
[  158.223896][T10290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.231409][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2440'.
[  158.288144][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.350696][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2444'.
[  158.578139][T10314] tmpfs: Bad value for 'mpol'
[  158.632684][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  158.632771][   T29] audit: type=1400 audit(1739634979.434:11124): avc:  denied  { shutdown } for  pid=10315 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  158.659905][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.669376][   T29] audit: type=1400 audit(1739634979.474:11125): avc:  denied  { name_connect } for  pid=10315 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  158.767373][   T29] audit: type=1326 audit(1739634979.574:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.800297][   T29] audit: type=1326 audit(1739634979.594:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.823977][   T29] audit: type=1326 audit(1739634979.594:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.847889][   T29] audit: type=1326 audit(1739634979.594:11129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.852297][T10326] loop1: detected capacity change from 0 to 2048
[  158.871553][   T29] audit: type=1326 audit(1739634979.594:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.901691][   T29] audit: type=1326 audit(1739634979.594:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.925346][   T29] audit: type=1326 audit(1739634979.594:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  158.948850][   T29] audit: type=1326 audit(1739634979.594:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc373adcde9 code=0x7ffc0000
[  159.026814][T10326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.080143][T10337] loop4: detected capacity change from 0 to 164
[  159.098365][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.118711][T10337] syz.4.2456: attempt to access beyond end of device
[  159.118711][T10337] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  159.128715][T10341] netlink: 'syz.3.2459': attribute type 1 has an invalid length.
[  159.182205][T10337] syz.4.2456: attempt to access beyond end of device
[  159.182205][T10337] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  159.216381][T10350] hub 1-0:1.0: USB hub found
[  159.227359][T10352] loop1: detected capacity change from 0 to 1024
[  159.233938][T10352] EXT4-fs: Ignoring removed orlov option
[  159.234427][T10350] hub 1-0:1.0: 8 ports detected
[  159.240364][T10352] ext4: Unknown parameter 'fowner>00000000000000000000'
[  159.262180][T10355] 9pnet_fd: Insufficient options for proto=fd
[  159.306097][T10363] loop1: detected capacity change from 0 to 512
[  159.312838][T10363] EXT4-fs: Ignoring removed orlov option
[  159.326886][T10363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.352792][T10363] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  159.361686][T10363] EXT4-fs (loop1): orphan cleanup on readonly fs
[  159.371786][T10363] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2467: bg 0: block 248: padding at end of block bitmap is not set
[  159.389247][T10370] loop3: detected capacity change from 0 to 2048
[  159.396359][T10363] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2467: Failed to acquire dquot type 1
[  159.409156][T10363] EXT4-fs (loop1): 1 truncate cleaned up
[  159.417140][T10363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.430775][T10370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.463933][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.475343][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.499403][T10387] loop1: detected capacity change from 0 to 164
[  159.508500][T10387] syz.1.2476: attempt to access beyond end of device
[  159.508500][T10387] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  159.523571][T10387] syz.1.2476: attempt to access beyond end of device
[  159.523571][T10387] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  159.544636][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'.
[  159.576327][T10395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2480'.
[  159.660398][T10408] loop1: detected capacity change from 0 to 2048
[  159.687855][T10408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.720592][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'.
[  159.741904][T10421] loop5: detected capacity change from 0 to 164
[  159.751173][T10421] syz.5.2492: attempt to access beyond end of device
[  159.751173][T10421] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  159.766624][T10421] syz.5.2492: attempt to access beyond end of device
[  159.766624][T10421] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  159.776804][T10423] loop3: detected capacity change from 0 to 1024
[  159.782681][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.787555][T10423] EXT4-fs: Ignoring removed orlov option
[  159.801415][T10423] ext4: Unknown parameter 'fowner>00000000000000000000'
[  159.974531][T10447] lo speed is unknown, defaulting to 1000
[  160.167588][T10457] vlan2: entered promiscuous mode
[  160.212527][T10460] netlink: 'syz.1.2516': attribute type 1 has an invalid length.
[  160.283476][T10464] loop4: detected capacity change from 0 to 1024
[  160.293986][T10455] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2516' sets config #1
[  160.381533][T10464] EXT4-fs: Ignoring removed orlov option
[  160.388895][T10464] ext4: Unknown parameter 'fowner>00000000000000000000'
[  160.953673][T10483] loop3: detected capacity change from 0 to 2048
[  160.970205][T10485] __nla_validate_parse: 2 callbacks suppressed
[  160.970222][T10485] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2519'.
[  161.062322][T10483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.175370][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.296875][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'.
[  161.362680][T10496] loop3: detected capacity change from 0 to 1024
[  161.369442][T10496] EXT4-fs: Ignoring removed orlov option
[  161.376550][T10496] ext4: Unknown parameter 'fowner>00000000000000000000'
[  161.466827][T10498] netlink: 'syz.0.2524': attribute type 1 has an invalid length.
[  161.505438][T10498] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2524' sets config #1
[  161.545682][T10507] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2526'.
[  161.555123][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2526'.
[  161.659952][T10515] loop1: detected capacity change from 0 to 512
[  161.676560][T10515] EXT4-fs: Ignoring removed bh option
[  161.692680][T10515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  161.735301][T10515] EXT4-fs (loop1): 1 truncate cleaned up
[  161.743816][T10515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.142930][T10524] loop5: detected capacity change from 0 to 512
[  162.168845][T10524] ext4: Unknown parameter 'obj_user'
[  162.182752][T10524] loop5: detected capacity change from 0 to 1024
[  162.192766][T10524] EXT4-fs: Ignoring removed orlov option
[  162.201195][T10524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.370677][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'.
[  162.551761][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.585600][T10533] loop4: detected capacity change from 0 to 1024
[  162.595235][T10533] EXT4-fs: Ignoring removed orlov option
[  162.605276][T10533] ext4: Unknown parameter 'fowner>00000000000000000000'
[  162.634207][T10537] hsr_slave_0: left promiscuous mode
[  162.643405][T10537] hsr_slave_1: left promiscuous mode
[  162.736853][T10542] netlink: 'syz.4.2541': attribute type 1 has an invalid length.
[  162.746445][T10540] lo speed is unknown, defaulting to 1000
[  162.832249][T10547] loop3: detected capacity change from 0 to 512
[  162.844079][T10547] EXT4-fs: Ignoring removed orlov option
[  162.883058][T10547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.894634][T10547] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  162.902818][T10547] EXT4-fs (loop3): orphan cleanup on readonly fs
[  162.910856][T10547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2543: bg 0: block 248: padding at end of block bitmap is not set
[  162.925652][T10547] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2543: Failed to acquire dquot type 1
[  162.974365][T10547] EXT4-fs (loop3): 1 truncate cleaned up
[  162.989864][T10547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.030620][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.064071][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.071625][T10564] loop5: detected capacity change from 0 to 1024
[  163.074519][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'.
[  163.111693][T10564] EXT4-fs: Ignoring removed orlov option
[  163.119785][T10568] 9pnet_fd: Insufficient options for proto=fd
[  163.146325][T10564] ext4: Unknown parameter 'fowner>00000000000000000000'
[  163.197890][T10569] netlink: 'syz.1.2552': attribute type 1 has an invalid length.
[  163.308138][T10583] loop3: detected capacity change from 0 to 512
[  163.330994][T10569] hub 1-0:1.0: USB hub found
[  163.335970][T10569] hub 1-0:1.0: 8 ports detected
[  163.344270][T10583] EXT4-fs: Ignoring removed orlov option
[  163.353479][T10583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.362935][T10583] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  163.372309][T10583] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.382328][T10583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2554: bg 0: block 248: padding at end of block bitmap is not set
[  163.397951][T10583] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2554: Failed to acquire dquot type 1
[  163.399139][T10588] loop5: detected capacity change from 0 to 512
[  163.427569][T10585] loop4: detected capacity change from 0 to 2048
[  163.434785][T10588] EXT4-fs: Ignoring removed orlov option
[  163.434977][T10583] EXT4-fs (loop3): 1 truncate cleaned up
[  163.447576][T10588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.459188][T10583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.477036][T10588] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  163.485127][T10588] EXT4-fs (loop5): orphan cleanup on readonly fs
[  163.492589][T10585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.506311][T10588] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2559: bg 0: block 248: padding at end of block bitmap is not set
[  163.546230][T10588] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2559: Failed to acquire dquot type 1
[  163.558967][T10588] EXT4-fs (loop5): 1 truncate cleaned up
[  163.567326][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.568572][T10588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.606343][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.653582][T10599] loop3: detected capacity change from 0 to 512
[  163.662186][T10601] loop1: detected capacity change from 0 to 512
[  163.686477][T10601] ext4: Unknown parameter 'obj_user'
[  163.696516][T10599] EXT4-fs: Ignoring removed orlov option
[  163.721252][T10601] loop1: detected capacity change from 0 to 1024
[  163.728045][T10601] EXT4-fs: Ignoring removed orlov option
[  163.736517][T10604] 9pnet_fd: Insufficient options for proto=fd
[  163.743103][T10599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.756175][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.765841][T10601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.780472][T10599] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  163.798803][T10599] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.820584][T10599] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2562: bg 0: block 248: padding at end of block bitmap is not set
[  163.855294][T10599] __quota_error: 153 callbacks suppressed
[  163.855315][T10599] Quota error (device loop3): write_blk: dquota write failed
[  163.868573][T10599] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  163.878516][T10599] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2562: Failed to acquire dquot type 1
[  163.905009][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.942594][T10599] EXT4-fs (loop3): 1 truncate cleaned up
[  163.955650][T10599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.981445][T10615] loop5: detected capacity change from 0 to 2048
[  163.993221][T10618] loop1: detected capacity change from 0 to 512
[  164.010535][T10615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.013065][T10618] ext4: Unknown parameter 'obj_user'
[  164.042516][T10618] loop1: detected capacity change from 0 to 1024
[  164.065272][T10618] EXT4-fs: Ignoring removed orlov option
[  164.074832][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.100098][T10618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.145869][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.176434][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.236709][   T29] audit: type=1326 audit(1739634985.044:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  164.260464][   T29] audit: type=1326 audit(1739634985.044:11280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  164.284063][   T29] audit: type=1326 audit(1739634985.044:11281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  164.307686][   T29] audit: type=1326 audit(1739634985.044:11282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  164.364297][T10633] lo speed is unknown, defaulting to 1000
[  164.566809][T10652] loop1: detected capacity change from 0 to 512
[  164.578137][T10652] EXT4-fs: Ignoring removed orlov option
[  164.613147][T10652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.659701][T10652] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  164.752426][T10652] EXT4-fs (loop1): orphan cleanup on readonly fs
[  164.756989][T10655] loop4: detected capacity change from 0 to 2048
[  164.772625][T10652] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2582: bg 0: block 248: padding at end of block bitmap is not set
[  164.795753][T10655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.802282][T10652] Quota error (device loop1): write_blk: dquota write failed
[  164.815291][T10652] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  164.825381][T10652] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2582: Failed to acquire dquot type 1
[  164.840429][T10652] EXT4-fs (loop1): 1 truncate cleaned up
[  164.851362][T10652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.870770][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.881650][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.923628][T10661] loop1: detected capacity change from 0 to 512
[  164.947743][T10659] loop4: detected capacity change from 0 to 2048
[  164.954914][T10661] ext4: Unknown parameter 'obj_user'
[  164.984253][T10661] loop1: detected capacity change from 0 to 1024
[  164.997078][T10659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.010897][T10661] EXT4-fs: Ignoring removed orlov option
[  165.047166][T10661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.061068][   T29] audit: type=1326 audit(1739634985.864:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  165.085002][   T29] audit: type=1326 audit(1739634985.864:11284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  165.164980][T10669] 9pnet_fd: Insufficient options for proto=fd
[  165.202610][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.232924][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'.
[  165.242093][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'.
[  165.277812][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.299019][T10672] tmpfs: Bad value for 'mpol'
[  165.405641][T10673] tmpfs: Bad value for 'mpol'
[  165.428540][T10691] tmpfs: Bad value for 'mpol'
[  165.545611][T10699] loop4: detected capacity change from 0 to 1024
[  165.567765][T10699] EXT4-fs: Ignoring removed orlov option
[  165.573504][T10699] ext4: Unknown parameter 'fowner>00000000000000000000'
[  165.696966][T10707] 9pnet_fd: Insufficient options for proto=fd
[  165.839826][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2607'.
[  165.848931][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'.
[  165.875477][T10719] netlink: 'syz.4.2608': attribute type 1 has an invalid length.
[  166.314779][T10729] loop4: detected capacity change from 0 to 1024
[  166.390813][T10737] loop5: detected capacity change from 0 to 1024
[  166.415282][T10737] EXT4-fs: Ignoring removed orlov option
[  166.428054][T10737] ext4: Unknown parameter 'fowner>00000000000000000000'
[  166.601494][T10749] loop3: detected capacity change from 0 to 164
[  166.614754][T10749] syz.3.2619: attempt to access beyond end of device
[  166.614754][T10749] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  166.633341][T10749] syz.3.2619: attempt to access beyond end of device
[  166.633341][T10749] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  166.722228][T10759] loop4: detected capacity change from 0 to 512
[  166.732323][T10759] EXT4-fs: Ignoring removed bh option
[  166.752940][T10759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  166.770774][T10757] loop5: detected capacity change from 0 to 512
[  166.789312][T10757] EXT4-fs (loop5): orphan cleanup on readonly fs
[  166.798740][T10757] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.2623: iget: bogus i_mode (0)
[  166.814999][T10759] EXT4-fs (loop4): 1 truncate cleaned up
[  166.821229][T10759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.834626][T10757] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2623: couldn't read orphan inode 13 (err -117)
[  166.864582][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2626'.
[  166.905850][T10757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.926921][T10757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.940627][T10771] loop1: detected capacity change from 0 to 512
[  166.954201][T10771] ext4: Unknown parameter 'obj_user'
[  166.961562][T10757] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  166.968293][T10772] lo speed is unknown, defaulting to 1000
[  166.984361][T10771] loop1: detected capacity change from 0 to 1024
[  166.992060][T10757] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  167.008923][T10757] ext4 filesystem being remounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.019898][T10771] EXT4-fs: Ignoring removed orlov option
[  167.030208][T10771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.062962][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.084351][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.118967][T10780] loop1: detected capacity change from 0 to 1024
[  167.125853][T10780] EXT4-fs: Ignoring removed orlov option
[  167.131949][T10780] ext4: Unknown parameter 'fowner>00000000000000000000'
[  167.573599][T10795] netlink: 'syz.0.2637': attribute type 1 has an invalid length.
[  167.599465][T10796] netlink: 'syz.1.2635': attribute type 1 has an invalid length.
[  167.627212][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.660084][T10798] 9pnet_fd: Insufficient options for proto=fd
[  167.960027][T10818] loop1: detected capacity change from 0 to 164
[  167.972204][T10818] iso9660: Corrupted directory entry in block 4 of inode 1792
[  168.003250][T10822] loop1: detected capacity change from 0 to 128
[  168.079672][T10822] vfat: Unknown parameter '0x0000000000000005'
[  168.169479][T10829] loop1: detected capacity change from 0 to 512
[  168.199982][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2650'.
[  168.219568][T10829] EXT4-fs: Ignoring removed bh option
[  168.258310][T10829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  168.285689][T10836] loop5: detected capacity change from 0 to 2048
[  168.292282][T10829] EXT4-fs (loop1): 1 truncate cleaned up
[  168.317273][T10836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.332820][T10829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.336049][T10840] tmpfs: Bad value for 'mpol'
[  168.550431][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.648737][T10854] siw: device registration error -23
[  168.671605][T10854] hsr_slave_0: left promiscuous mode
[  168.678254][T10854] hsr_slave_1: left promiscuous mode
[  168.738664][T10854] lo speed is unknown, defaulting to 1000
[  168.773078][T10868] netlink: 'syz.0.2663': attribute type 1 has an invalid length.
[  169.021706][T10882] loop3: detected capacity change from 0 to 164
[  169.033863][T10882] syz.3.2668: attempt to access beyond end of device
[  169.033863][T10882] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  169.076479][T10882] syz.3.2668: attempt to access beyond end of device
[  169.076479][T10882] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  169.122308][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.552759][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  169.552776][   T29] audit: type=1326 audit(1739634990.254:11454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d446cde9 code=0x7ffc0000
[  169.613349][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'.
[  169.622470][T10893] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  169.657058][   T29] audit: type=1326 audit(1739634990.282:11455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe9d446cde9 code=0x7ffc0000
[  169.680708][   T29] audit: type=1326 audit(1739634990.282:11456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d446cde9 code=0x7ffc0000
[  169.704390][   T29] audit: type=1400 audit(1739634990.310:11457): avc:  denied  { mount } for  pid=10891 comm="syz.3.2672" name="/" dev="ramfs" ino=28276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  169.750241][T10901] rdma_op ffff888118a56180 conn xmit_rdma 0000000000000000
[  169.876216][   T29] audit: type=1400 audit(1739634990.460:11458): avc:  denied  { sys_module } for  pid=10891 comm="syz.3.2672" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  169.897617][   T29] audit: type=1400 audit(1739634990.544:11459): avc:  denied  { read } for  pid=10904 comm="syz.1.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.902370][T10910] loop5: detected capacity change from 0 to 512
[  169.926919][T10910] ext4: Unknown parameter 'obj_user'
[  169.946504][T10911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2675'.
[  169.952105][T10910] loop5: detected capacity change from 0 to 1024
[  169.969392][   T29] audit: type=1400 audit(1739634990.619:11460): avc:  denied  { bind } for  pid=10904 comm="syz.1.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.972763][T10910] EXT4-fs: Ignoring removed orlov option
[  169.988946][   T29] audit: type=1400 audit(1739634990.619:11461): avc:  denied  { setopt } for  pid=10904 comm="syz.1.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  170.044974][T10920] loop3: detected capacity change from 0 to 512
[  170.054570][T10910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.071152][T10920] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2680: bg 0: block 248: padding at end of block bitmap is not set
[  170.086443][T10920] Quota error (device loop3): write_blk: dquota write failed
[  170.093991][T10920] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  170.104842][T10920] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2680: Failed to acquire dquot type 1
[  170.116915][T10920] EXT4-fs (loop3): 1 truncate cleaned up
[  170.123187][T10920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.136164][T10920] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.257425][T10930] vlan2: entered allmulticast mode
[  170.350507][ T3310] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12
[  170.377912][T10937] lo speed is unknown, defaulting to 1000
[  170.392769][ T3310] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12
[  170.518779][T10939] tmpfs: Bad value for 'mpol'
[  170.786056][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.861345][T10955] loop5: detected capacity change from 0 to 2048
[  170.883553][T10955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.934953][ T8659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.106875][ T3922] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 1
[  171.167314][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.282676][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  171.294479][T10958] ipvlan2: entered promiscuous mode
[  171.461135][T10975] loop4: detected capacity change from 0 to 128
[  171.490120][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2698'.
[  171.541923][T10975] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.567292][T10980] vlan3: entered promiscuous mode
[  171.572376][T10980] syz_tun: entered promiscuous mode
[  171.585707][T10975] ext4 filesystem being mounted at /501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.631890][T10980] syz_tun: left promiscuous mode
[  171.659773][T10970] lo speed is unknown, defaulting to 1000
[  171.729634][T10991] netem: incorrect gi model size
[  171.734637][T10991] netem: change failed
[  171.766297][T10991] syzkaller0: entered promiscuous mode
[  171.771880][T10991] syzkaller0: entered allmulticast mode
[  171.790510][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.839960][T10998] FAULT_INJECTION: forcing a failure.
[  171.839960][T10998] name failslab, interval 1, probability 0, space 0, times 0
[  171.852704][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.5.2706 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  171.852797][T10998] Tainted: [W]=WARN
[  171.852805][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  171.852820][T10998] Call Trace:
[  171.852827][T10998]  <TASK>
[  171.852835][T10998]  dump_stack_lvl+0xf2/0x150
[  171.852870][T10998]  dump_stack+0x15/0x1a
[  171.852911][T10998]  should_fail_ex+0x24a/0x260
[  171.852979][T10998]  should_failslab+0x8f/0xb0
[  171.853086][T10998]  kmem_cache_alloc_node_noprof+0x59/0x320
[  171.853111][T10998]  ? __alloc_skb+0x10b/0x310
[  171.853155][T10998]  __alloc_skb+0x10b/0x310
[  171.853223][T10998]  ? audit_log_start+0x34c/0x6b0
[  171.853262][T10998]  audit_log_start+0x368/0x6b0
[  171.853307][T10998]  audit_seccomp+0x4b/0x130
[  171.853337][T10998]  __seccomp_filter+0x6fa/0x1180
[  171.853422][T10998]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  171.853455][T10998]  ? vfs_write+0x644/0x920
[  171.853533][T10998]  __secure_computing+0x9f/0x1c0
[  171.853557][T10998]  syscall_trace_enter+0xd1/0x1f0
[  171.853588][T10998]  ? fpregs_assert_state_consistent+0x83/0xa0
[  171.853634][T10998]  do_syscall_64+0xaa/0x1c0
[  171.853671][T10998]  ? clear_bhb_loop+0x55/0xb0
[  171.853703][T10998]  ? clear_bhb_loop+0x55/0xb0
[  171.853733][T10998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.853760][T10998] RIP: 0033:0x7fa2417ecde9
[  171.853856][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.853879][T10998] RSP: 002b:00007fa23fe51038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[  171.853901][T10998] RAX: ffffffffffffffda RBX: 00007fa241a05fa0 RCX: 00007fa2417ecde9
[  171.853915][T10998] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000005
[  171.853927][T10998] RBP: 00007fa23fe51090 R08: 0000000000000000 R09: 0000000000000000
[  171.853960][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.853973][T10998] R13: 0000000000000000 R14: 00007fa241a05fa0 R15: 00007ffd099ec208
[  171.853994][T10998]  </TASK>
[  172.105452][T10995] netlink: 'syz.0.2703': attribute type 1 has an invalid length.
[  172.215916][T11016] loop1: detected capacity change from 0 to 2048
[  172.232523][T10970] chnl_net:caif_netlink_parms(): no params data found
[  172.305299][T11016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.358140][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.408184][T10970] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.415385][T10970] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.431348][T10970] bridge_slave_0: entered allmulticast mode
[  172.443082][T10970] bridge_slave_0: entered promiscuous mode
[  172.467708][T10970] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.474876][T10970] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.522636][T10970] bridge_slave_1: entered allmulticast mode
[  172.539643][T10970] bridge_slave_1: entered promiscuous mode
[  172.561014][T11035] lo speed is unknown, defaulting to 1000
[  172.585176][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.608931][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.657888][T11049] netlink: 'syz.0.2720': attribute type 1 has an invalid length.
[  172.667401][T10970] team0: Port device team_slave_0 added
[  172.682120][T10970] team0: Port device team_slave_1 added
[  172.723239][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.730403][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.756394][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.878836][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.885925][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.911962][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.955513][T10970] hsr_slave_0: entered promiscuous mode
[  172.961715][T10970] hsr_slave_1: entered promiscuous mode
[  173.042355][T11055] ip_tunnel: non-ECT from 172.30.0.2 with TOS=0x2
[  173.089919][T10970] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.109637][T10970] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.121273][T10970] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.138323][T10970] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.152143][T11063] loop4: detected capacity change from 0 to 512
[  173.161694][T11063] ext4: Unknown parameter 'obj_user'
[  173.193736][T11063] loop4: detected capacity change from 0 to 1024
[  173.198659][T10970] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.209924][T11063] EXT4-fs: Ignoring removed orlov option
[  173.215232][T11069] loop5: detected capacity change from 0 to 1024
[  173.230787][T11069] loop5: detected capacity change from 0 to 512
[  173.244912][T10970] 8021q: adding VLAN 0 to HW filter on device team0
[  173.245897][T11069] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.265260][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.272376][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.287041][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.294237][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.401397][T11085] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  173.423591][T11082] loop1: detected capacity change from 0 to 4096
[  173.465536][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.506363][T11096] FAULT_INJECTION: forcing a failure.
[  173.506363][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.519643][T11096] CPU: 1 UID: 0 PID: 11096 Comm: syz.5.2733 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  173.519682][T11096] Tainted: [W]=WARN
[  173.519691][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  173.519706][T11096] Call Trace:
[  173.519714][T11096]  <TASK>
[  173.519722][T11096]  dump_stack_lvl+0xf2/0x150
[  173.519752][T11096]  dump_stack+0x15/0x1a
[  173.519795][T11096]  should_fail_ex+0x24a/0x260
[  173.519833][T11096]  should_fail+0xb/0x10
[  173.519866][T11096]  should_fail_usercopy+0x1a/0x20
[  173.519937][T11096]  _copy_to_user+0x20/0xa0
[  173.519974][T11096]  simple_read_from_buffer+0xa0/0x110
[  173.520006][T11096]  proc_fail_nth_read+0xf9/0x140
[  173.520097][T11096]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.520129][T11096]  vfs_read+0x19b/0x6f0
[  173.520153][T11096]  ? should_fail_ex+0xd7/0x260
[  173.520276][T11096]  ? __rcu_read_unlock+0x4e/0x70
[  173.520299][T11096]  ? __fget_files+0x17c/0x1c0
[  173.520334][T11096]  ksys_read+0xe8/0x1b0
[  173.520427][T11096]  __x64_sys_read+0x42/0x50
[  173.520470][T11096]  x64_sys_call+0x2874/0x2dc0
[  173.520496][T11096]  do_syscall_64+0xc9/0x1c0
[  173.520531][T11096]  ? clear_bhb_loop+0x55/0xb0
[  173.520631][T11096]  ? clear_bhb_loop+0x55/0xb0
[  173.520688][T11096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.520830][T11096] RIP: 0033:0x7fa2417eb7fc
[  173.520850][T11096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  173.520922][T11096] RSP: 002b:00007fa23fe51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.520940][T11096] RAX: ffffffffffffffda RBX: 00007fa241a05fa0 RCX: 00007fa2417eb7fc
[  173.520969][T11096] RDX: 000000000000000f RSI: 00007fa23fe510a0 RDI: 0000000000000003
[  173.521031][T11096] RBP: 00007fa23fe51090 R08: 0000000000000000 R09: 0000000000000000
[  173.521045][T11096] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001
[  173.521060][T11096] R13: 0000000000000000 R14: 00007fa241a05fa0 R15: 00007ffd099ec208
[  173.521083][T11096]  </TASK>
[  173.782209][T11097] hub 2-0:1.0: USB hub found
[  173.786891][T11097] hub 2-0:1.0: 8 ports detected
[  174.119937][T10970] veth0_vlan: entered promiscuous mode
[  174.140178][T10970] veth1_vlan: entered promiscuous mode
[  174.183980][T10970] veth0_macvtap: entered promiscuous mode
[  174.191432][T10970] veth1_macvtap: entered promiscuous mode
[  174.217538][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.228125][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.238100][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.248648][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.258482][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.268956][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.292070][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.380608][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.391201][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.401089][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.411623][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.421522][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.432032][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.471308][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.480135][T10970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.488952][T10970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.497784][T10970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.506593][T10970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.542871][T11220] loop1: detected capacity change from 0 to 512
[  174.555539][T11220] EXT4-fs: Ignoring removed bh option
[  174.597290][T11220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  174.606381][T11220] EXT4-fs (loop1): 1 truncate cleaned up
[  174.795459][T11247] loop6: detected capacity change from 0 to 2048
[  174.902404][T11253] loop6: detected capacity change from 0 to 2048
[  175.063675][T11259] loop6: detected capacity change from 0 to 512
[  175.070576][T11259] ext4: Unknown parameter 'obj_user'
[  175.084442][T11259] loop6: detected capacity change from 0 to 1024
[  175.091066][T11259] EXT4-fs: Ignoring removed orlov option
[  175.158026][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  175.158041][   T29] audit: type=1326 audit(1739634995.502:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb98d8cde9 code=0x7ffc0000
[  175.220430][   T29] audit: type=1326 audit(1739634995.530:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb98d8cde9 code=0x7ffc0000
[  175.244124][   T29] audit: type=1326 audit(1739634995.530:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb98d8cde9 code=0x7ffc0000
[  175.421225][   T29] audit: type=1400 audit(1739634995.736:11642): avc:  denied  { setopt } for  pid=11269 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  175.589200][T11280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  175.595763][T11280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  175.603455][T11280] vhci_hcd vhci_hcd.0: Device attached
[  175.619663][T11284] loop5: detected capacity change from 0 to 512
[  175.664471][T11279] lo speed is unknown, defaulting to 1000
[  175.674961][T11284] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.693242][   T29] audit: type=1400 audit(1739634995.998:11643): avc:  denied  { bind } for  pid=11283 comm="syz.5.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  175.712907][   T29] audit: type=1400 audit(1739634995.998:11644): avc:  denied  { setopt } for  pid=11283 comm="syz.5.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  175.896430][T11281] vhci_hcd: connection closed
[  175.896903][ T4370] vhci_hcd: stop threads
[  175.906030][ T4370] vhci_hcd: release socket
[  175.910529][ T4370] vhci_hcd: disconnect device
[  175.934687][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2762'.
[  175.948479][    T9] usb 4-1: enqueue for inactive port 0
[  176.026778][   T29] audit: type=1326 audit(1739634996.316:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  176.050519][   T29] audit: type=1326 audit(1739634996.316:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  176.074212][   T29] audit: type=1326 audit(1739634996.316:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  176.158999][T11303] netem: incorrect gi model size
[  176.164127][T11303] netem: change failed
[  176.186968][    T9] usb 4-1: enqueue for inactive port 0
[  176.214439][T11311] loop6: detected capacity change from 0 to 512
[  176.231924][T11311] EXT4-fs: Ignoring removed bh option
[  176.257783][T11311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  176.271056][T11311] EXT4-fs (loop6): 1 truncate cleaned up
[  176.457722][   T29] audit: type=1326 audit(1739634996.709:11648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.5.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2417ecde9 code=0x7ffc0000
[  176.811320][T11328] loop1: detected capacity change from 0 to 512
[  176.880637][T11328] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  176.893115][T11328] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  176.908468][T11328] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2774: attempt to clear invalid blocks 1024 len 1
[  176.924740][T11328] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2774: invalid indirect mapped block 1819239214 (level 0)
[  176.940355][T11328] EXT4-fs (loop1): 1 truncate cleaned up
[  177.257145][T11331] loop6: detected capacity change from 0 to 512
[  177.264883][T11331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.304427][T11331] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.317120][T11331] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2775: Failed to acquire dquot type 1
[  177.363466][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2782'.
[  177.378904][T11354] FAULT_INJECTION: forcing a failure.
[  177.378904][T11354] name failslab, interval 1, probability 0, space 0, times 0
[  177.391789][T11354] CPU: 0 UID: 0 PID: 11354 Comm: +}[@ Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  177.391825][T11354] Tainted: [W]=WARN
[  177.391833][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  177.391845][T11354] Call Trace:
[  177.391852][T11354]  <TASK>
[  177.391937][T11354]  dump_stack_lvl+0xf2/0x150
[  177.391972][T11354]  dump_stack+0x15/0x1a
[  177.392010][T11354]  should_fail_ex+0x24a/0x260
[  177.392043][T11354]  should_failslab+0x8f/0xb0
[  177.392154][T11354]  __kmalloc_node_noprof+0xad/0x410
[  177.392178][T11354]  ? __kvmalloc_node_noprof+0x72/0x170
[  177.392210][T11354]  __kvmalloc_node_noprof+0x72/0x170
[  177.392246][T11354]  alloc_netdev_mqs+0x741/0xab0
[  177.392313][T11354]  tun_set_iff+0x45f/0x8c0
[  177.392337][T11354]  __tun_chr_ioctl+0x66d/0x1800
[  177.392370][T11354]  tun_chr_ioctl+0x27/0x30
[  177.392392][T11354]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  177.392430][T11354]  __se_sys_ioctl+0xc9/0x140
[  177.392480][T11354]  __x64_sys_ioctl+0x43/0x50
[  177.392508][T11354]  x64_sys_call+0x1690/0x2dc0
[  177.392539][T11354]  do_syscall_64+0xc9/0x1c0
[  177.392572][T11354]  ? clear_bhb_loop+0x55/0xb0
[  177.392606][T11354]  ? clear_bhb_loop+0x55/0xb0
[  177.392639][T11354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.392671][T11354] RIP: 0033:0x7ffb98d8cde9
[  177.392689][T11354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.392776][T11354] RSP: 002b:00007ffb973f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.392793][T11354] RAX: ffffffffffffffda RBX: 00007ffb98fa5fa0 RCX: 00007ffb98d8cde9
[  177.392803][T11354] RDX: 0000400000000100 RSI: 00000000400454ca RDI: 0000000000000006
[  177.392892][T11354] RBP: 00007ffb973f7090 R08: 0000000000000000 R09: 0000000000000000
[  177.392903][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.392913][T11354] R13: 0000000000000000 R14: 00007ffb98fa5fa0 R15: 00007fff057a9438
[  177.392941][T11354]  </TASK>
[  177.400666][T11349] lo speed is unknown, defaulting to 1000
[  177.557768][T11361] loop5: detected capacity change from 0 to 512
[  177.608491][    T9] usb usb4-port1: attempt power cycle
[  177.618140][T11361] EXT4-fs: Ignoring removed bh option
[  177.627857][T11361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  177.636360][T11361] EXT4-fs (loop5): 1 truncate cleaned up
[  177.827449][T11370] loop1: detected capacity change from 0 to 512
[  177.827758][T11370] ext4: Unknown parameter 'obj_user'
[  177.846095][T11370] loop1: detected capacity change from 0 to 1024
[  177.846240][T11370] EXT4-fs: Ignoring removed orlov option
[  178.569234][T11390] netlink: 'syz.5.2794': attribute type 10 has an invalid length.
[  178.580235][T11390] team0: Port device hsr_slave_0 added
[  178.604687][T11386] loop4: detected capacity change from 0 to 512
[  178.615830][T11393] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  178.654319][T11386] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  178.662290][T11386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c128, mo2=0002]
[  178.729116][T11401] loop6: detected capacity change from 0 to 2048
[  178.736131][T11386] System zones: 0-1, 15-15, 18-18, 34-34
[  178.742375][T11386] EXT4-fs (loop4): orphan cleanup on readonly fs
[  178.779764][T11386] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.849662][T11386] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  178.853977][T11410] loop6: detected capacity change from 0 to 512
[  178.863151][T11386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2792: bg 0: block 40: padding at end of block bitmap is not set
[  178.882138][T11410] ext4: Unknown parameter 'obj_user'
[  178.896217][T11386] EXT4-fs (loop4): Remounting filesystem read-only
[  178.904575][T11386] EXT4-fs (loop4): 1 truncate cleaned up
[  178.910754][T11386] SELinux: (dev loop4, type ext4) getxattr errno 5
[  178.920838][T11415] batman_adv: batadv0: Adding interface: dummy0
[  178.929920][T11415] batman_adv: batadv0: Interface activated: dummy0
[  178.937753][T11410] loop6: detected capacity change from 0 to 1024
[  178.945859][T11410] EXT4-fs: Ignoring removed orlov option
[  178.965459][T11417] lo speed is unknown, defaulting to 1000
[  178.974547][T11416] FAULT_INJECTION: forcing a failure.
[  178.974547][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.987754][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.0.2804 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  178.987817][T11416] Tainted: [W]=WARN
[  178.987825][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  178.987841][T11416] Call Trace:
[  178.987849][T11416]  <TASK>
[  178.987859][T11416]  dump_stack_lvl+0xf2/0x150
[  178.987888][T11416]  dump_stack+0x15/0x1a
[  178.987962][T11416]  should_fail_ex+0x24a/0x260
[  178.988000][T11416]  should_fail+0xb/0x10
[  178.988059][T11416]  should_fail_usercopy+0x1a/0x20
[  178.988097][T11416]  _copy_to_user+0x20/0xa0
[  178.988138][T11416]  simple_read_from_buffer+0xa0/0x110
[  178.988174][T11416]  proc_fail_nth_read+0xf9/0x140
[  178.988252][T11416]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  178.988359][T11416]  vfs_read+0x19b/0x6f0
[  178.988390][T11416]  ? __rcu_read_unlock+0x4e/0x70
[  178.988419][T11416]  ? __fget_files+0x17c/0x1c0
[  178.988491][T11416]  ksys_read+0xe8/0x1b0
[  178.988520][T11416]  __x64_sys_read+0x42/0x50
[  178.988590][T11416]  x64_sys_call+0x2874/0x2dc0
[  178.988624][T11416]  do_syscall_64+0xc9/0x1c0
[  178.988660][T11416]  ? clear_bhb_loop+0x55/0xb0
[  178.988772][T11416]  ? clear_bhb_loop+0x55/0xb0
[  178.988802][T11416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.988889][T11416] RIP: 0033:0x7ffb98d8b7fc
[  178.988908][T11416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  178.988931][T11416] RSP: 002b:00007ffb973f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.988958][T11416] RAX: ffffffffffffffda RBX: 00007ffb98fa5fa0 RCX: 00007ffb98d8b7fc
[  178.988973][T11416] RDX: 000000000000000f RSI: 00007ffb973f70a0 RDI: 0000000000000007
[  178.988988][T11416] RBP: 00007ffb973f7090 R08: 0000000000000000 R09: 0000000000000000
[  178.989003][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.989016][T11416] R13: 0000000000000000 R14: 00007ffb98fa5fa0 R15: 00007fff057a9438
[  178.989041][T11416]  </TASK>
[  179.383394][T11425] syz_tun: entered allmulticast mode
[  179.391380][T11425] syz_tun: left allmulticast mode
[  179.563028][T11432] netlink: 'syz.4.2809': attribute type 10 has an invalid length.
[  179.669222][    T9] usb usb4-port1: unable to enumerate USB device
[  179.900789][T11447] netem: incorrect gi model size
[  179.905992][T11447] netem: change failed
[  179.988623][T11455] xt_CONNSECMARK: invalid mode: 0
[  180.056386][T11465] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  180.062003][T11464] loop6: detected capacity change from 0 to 2048
[  180.064764][T11465] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  180.367902][T11474] lo speed is unknown, defaulting to 1000
[  180.647669][T11481] FAULT_INJECTION: forcing a failure.
[  180.647669][T11481] name failslab, interval 1, probability 0, space 0, times 0
[  180.660409][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.6.2825 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  180.660517][T11481] Tainted: [W]=WARN
[  180.660526][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  180.660541][T11481] Call Trace:
[  180.660549][T11481]  <TASK>
[  180.660559][T11481]  dump_stack_lvl+0xf2/0x150
[  180.660603][T11481]  dump_stack+0x15/0x1a
[  180.660626][T11481]  should_fail_ex+0x24a/0x260
[  180.660664][T11481]  should_failslab+0x8f/0xb0
[  180.660726][T11481]  kmem_cache_alloc_node_noprof+0x59/0x320
[  180.660756][T11481]  ? __alloc_skb+0x10b/0x310
[  180.660799][T11481]  __alloc_skb+0x10b/0x310
[  180.660881][T11481]  ? audit_log_start+0x34c/0x6b0
[  180.660919][T11481]  audit_log_start+0x368/0x6b0
[  180.660992][T11481]  ? __bpf_get_stack+0x28d/0x5f0
[  180.661058][T11481]  ? __bpf_get_stack+0x5b6/0x5f0
[  180.661130][T11481]  audit_seccomp+0x4b/0x130
[  180.661194][T11481]  __seccomp_filter+0x6fa/0x1180
[  180.661224][T11481]  ? bpf_get_stack_raw_tp+0xfe/0x140
[  180.661254][T11481]  ? __rcu_read_unlock+0x4e/0x70
[  180.661280][T11481]  ? radix_tree_lookup+0x144/0x150
[  180.661400][T11481]  ? idr_find+0x2c/0x40
[  180.661437][T11481]  __secure_computing+0x9f/0x1c0
[  180.661466][T11481]  syscall_trace_enter+0xd1/0x1f0
[  180.661565][T11481]  ? fpregs_assert_state_consistent+0x83/0xa0
[  180.661593][T11481]  do_syscall_64+0xaa/0x1c0
[  180.661622][T11481]  ? clear_bhb_loop+0x55/0xb0
[  180.661689][T11481]  ? clear_bhb_loop+0x55/0xb0
[  180.661718][T11481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.661744][T11481] RIP: 0033:0x7f6f1479b7fc
[  180.661762][T11481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  180.661783][T11481] RSP: 002b:00007f6f12de0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.661817][T11481] RAX: ffffffffffffffda RBX: 00007f6f149b6080 RCX: 00007f6f1479b7fc
[  180.661832][T11481] RDX: 000000000000000f RSI: 00007f6f12de00a0 RDI: 0000000000000005
[  180.661846][T11481] RBP: 00007f6f12de0090 R08: 0000000000000000 R09: 0000000000000000
[  180.661860][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.661877][T11481] R13: 0000000000000000 R14: 00007f6f149b6080 R15: 00007fff4a0b2a58
[  180.661896][T11481]  </TASK>
[  180.661904][T11481] audit_log_lost: 30 callbacks suppressed
[  180.661914][T11481] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64
[  180.710162][   T29] audit: type=1326 audit(1739635000.628:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  180.712653][T11481] audit: out of memory in audit_log_start
[  180.726304][T11482] lo speed is unknown, defaulting to 1000
[  180.727783][   T29] audit: type=1326 audit(1739635000.628:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1479b750 code=0x7ffc0000
[  180.961000][   T29] audit: type=1326 audit(1739635000.628:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f1479b89f code=0x7ffc0000
[  180.984508][   T29] audit: type=1326 audit(1739635000.628:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  181.014070][T11485] loop6: detected capacity change from 0 to 1024
[  181.026623][T11485] EXT4-fs: Ignoring removed orlov option
[  181.032533][T11485] ext4: Unknown parameter 'fowner>00000000000000000000'
[  181.079146][T11488] netem: incorrect gi model size
[  181.084252][T11488] netem: change failed
[  181.102030][   T29] audit: type=1326 audit(1739635000.759:11676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f1479b89f code=0x7ffc0000
[  181.125531][   T29] audit: type=1326 audit(1739635000.759:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f1479ba4a code=0x7ffc0000
[  181.149048][   T29] audit: type=1326 audit(1739635000.759:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  181.172741][   T29] audit: type=1326 audit(1739635000.759:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.6.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  181.313851][T11501] loop6: detected capacity change from 0 to 2048
[  181.359700][T11498] netlink: 'syz.1.2832': attribute type 1 has an invalid length.
[  181.397508][T11507] loop5: detected capacity change from 0 to 164
[  181.420733][T11507] syz.5.2835: attempt to access beyond end of device
[  181.420733][T11507] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  181.435213][T11507] syz.5.2835: attempt to access beyond end of device
[  181.435213][T11507] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  181.474289][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2838'.
[  181.488096][T11514] bridge0: port 3(batadv1) entered blocking state
[  181.494618][T11514] bridge0: port 3(batadv1) entered disabled state
[  181.501811][T11514] batadv1: entered allmulticast mode
[  181.508853][T11514] batadv1: entered promiscuous mode
[  181.547242][T11514] netlink: 'syz.6.2838': attribute type 1 has an invalid length.
[  181.553697][T11518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5890 sclass=netlink_route_socket pid=11518 comm=syz.4.2839
[  181.623216][T11518] loop4: detected capacity change from 0 to 164
[  181.718326][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2843'.
[  181.805247][T11546] tmpfs: Bad value for 'mpol'
[  181.919598][T11550] lo speed is unknown, defaulting to 1000
[  182.021930][ T4370] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  182.031208][ T4370] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  182.082440][T11555] loop6: detected capacity change from 0 to 512
[  182.112851][T11555] ext4: Unknown parameter 'obj_user'
[  182.157757][T11555] loop6: detected capacity change from 0 to 1024
[  182.164521][T11555] EXT4-fs: Ignoring removed orlov option
[  182.189573][T11557] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  182.691838][T11575] netem: incorrect gi model size
[  182.696907][T11575] netem: change failed
[  182.848134][T11581] netlink: 'syz.1.2863': attribute type 1 has an invalid length.
[  183.207904][T11597] netlink: 'syz.6.2866': attribute type 1 has an invalid length.
[  183.717765][T11619] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.2875'.
[  183.727071][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2875'.
[  183.805007][T11621] tmpfs: Bad value for 'mpol'
[  183.827416][T11624] lo speed is unknown, defaulting to 1000
[  183.898719][T11626] netlink: 'syz.6.2880': attribute type 1 has an invalid length.
[  184.016206][T11637] loop6: detected capacity change from 0 to 512
[  184.024119][T11635] lo speed is unknown, defaulting to 1000
[  184.042260][T11637] ext4: Unknown parameter 'obj_user'
[  184.054650][T11640] FAULT_INJECTION: forcing a failure.
[  184.054650][T11640] name failslab, interval 1, probability 0, space 0, times 0
[  184.067374][T11640] CPU: 1 UID: 0 PID: 11640 Comm: syz.5.2884 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  184.067497][T11640] Tainted: [W]=WARN
[  184.067504][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  184.067557][T11640] Call Trace:
[  184.067564][T11640]  <TASK>
[  184.067572][T11640]  dump_stack_lvl+0xf2/0x150
[  184.067605][T11640]  dump_stack+0x15/0x1a
[  184.067631][T11640]  should_fail_ex+0x24a/0x260
[  184.067725][T11640]  should_failslab+0x8f/0xb0
[  184.067764][T11640]  kmem_cache_alloc_noprof+0x52/0x320
[  184.067787][T11640]  ? security_inode_alloc+0x37/0x100
[  184.067835][T11640]  security_inode_alloc+0x37/0x100
[  184.067862][T11640]  inode_init_always_gfp+0x4a2/0x4f0
[  184.067901][T11640]  ? __pfx_sock_alloc_inode+0x10/0x10
[  184.067936][T11640]  alloc_inode+0x82/0x160
[  184.068045][T11640]  new_inode_pseudo+0x15/0x20
[  184.068083][T11640]  __sock_create+0x12b/0x5a0
[  184.068159][T11640]  __sys_socketpair+0x1be/0x430
[  184.068243][T11640]  __x64_sys_socketpair+0x52/0x60
[  184.068276][T11640]  x64_sys_call+0x1cad/0x2dc0
[  184.068306][T11640]  do_syscall_64+0xc9/0x1c0
[  184.068356][T11640]  ? clear_bhb_loop+0x55/0xb0
[  184.068390][T11640]  ? clear_bhb_loop+0x55/0xb0
[  184.068418][T11640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.068487][T11640] RIP: 0033:0x7fa2417eed3a
[  184.068502][T11640] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.068523][T11640] RSP: 002b:00007fa23fe2ff78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  184.068545][T11640] RAX: ffffffffffffffda RBX: 00007fa241a06001 RCX: 00007fa2417eed3a
[  184.068585][T11640] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  184.068599][T11640] RBP: 00007fa23fe30090 R08: 0000000000000000 R09: 0000000000000000
[  184.068613][T11640] R10: 00007fa23fe2ff98 R11: 0000000000000246 R12: 0000000000000005
[  184.068628][T11640] R13: 0000000000000000 R14: 00007fa241a06080 R15: 00007ffd099ec208
[  184.068651][T11640]  </TASK>
[  184.068711][T11640] socket: no more sockets
[  184.109331][T11641] tmpfs: Bad value for 'mpol'
[  184.209062][T11637] loop6: detected capacity change from 0 to 1024
[  184.226961][T11639] loop1: detected capacity change from 0 to 128
[  184.237448][T11637] EXT4-fs: Ignoring removed orlov option
[  184.572823][T11649] loop4: detected capacity change from 0 to 164
[  184.582743][T11649] syz.4.2888: attempt to access beyond end of device
[  184.582743][T11649] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  184.596808][T11649] syz.4.2888: attempt to access beyond end of device
[  184.596808][T11649] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  184.900477][T11661] netlink: 'syz.4.2893': attribute type 10 has an invalid length.
[  184.941776][ T4365] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.969682][T11661] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.978746][T11661] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.987772][T11661] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.996757][T11661] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.006045][T11661] geneve1: entered promiscuous mode
[  185.013759][T11661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.022530][T11661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.031374][T11661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.040412][T11661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.133277][T11661] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  185.169110][ T4365] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.196937][T11664] netlink: 'syz.6.2894': attribute type 1 has an invalid length.
[  185.254650][ T4365] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.306192][ T4365] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.349886][T11668] lo speed is unknown, defaulting to 1000
[  185.358248][T11689] hsr_slave_0: left promiscuous mode
[  185.368594][T11689] hsr_slave_1: left promiscuous mode
[  185.433587][T11690] lo speed is unknown, defaulting to 1000
[  185.536591][ T4365] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  185.550716][ T4365] geneve2 (unregistering): left promiscuous mode
[  185.557171][ T4365] geneve2 (unregistering): left allmulticast mode
[  185.581000][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.596148][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.608676][ T4365] bond0 (unregistering): Released all slaves
[  185.626188][ T4365] bond1 (unregistering): Released all slaves
[  185.666001][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.673492][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.686055][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.693574][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.711699][ T4365] veth1_macvtap: left promiscuous mode
[  185.717294][ T4365] veth0_macvtap: left promiscuous mode
[  185.724557][ T4365] veth1_vlan: left promiscuous mode
[  185.729881][ T4365] veth0_vlan: left promiscuous mode
[  185.830062][ T4365] team0 (unregistering): Port device team_slave_1 removed
[  185.852166][ T4365] team0 (unregistering): Port device team_slave_0 removed
[  185.961987][T11668] chnl_net:caif_netlink_parms(): no params data found
[  186.056474][T11668] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.063695][T11668] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.081854][T11668] bridge_slave_0: entered allmulticast mode
[  186.093043][T11668] bridge_slave_0: entered promiscuous mode
[  186.102261][T11668] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.109478][T11668] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.116769][T11668] bridge_slave_1: entered allmulticast mode
[  186.123219][T11668] bridge_slave_1: entered promiscuous mode
[  186.123638][T11712] loop5: detected capacity change from 0 to 512
[  186.175540][T11712] ext4: Unknown parameter 'obj_user'
[  186.182808][T11668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.202484][T11668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.213209][ T4365] IPVS: stop unused estimator thread 0...
[  186.238436][T11712] loop5: detected capacity change from 0 to 1024
[  186.251887][T11668] team0: Port device team_slave_0 added
[  186.258995][T11668] team0: Port device team_slave_1 added
[  186.264674][T11712] EXT4-fs: Ignoring removed orlov option
[  186.369138][T11668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.376182][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.402180][T11668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.529351][T11668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.536470][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.562493][T11668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.599483][T11668] hsr_slave_0: entered promiscuous mode
[  186.606186][T11668] hsr_slave_1: entered promiscuous mode
[  186.905064][T11668] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  186.921761][T11668] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  186.944073][T11668] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  186.966201][T11668] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  187.048638][T11738] loop6: detected capacity change from 0 to 2048
[  187.067397][T11668] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.085760][T11668] 8021q: adding VLAN 0 to HW filter on device team0
[  187.101215][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.108588][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.137096][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.144246][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.152104][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  187.152132][   T29] audit: type=1326 audit(1739635006.717:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.182006][   T29] audit: type=1326 audit(1739635006.717:11803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.205860][   T29] audit: type=1326 audit(1739635006.717:11804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.229683][   T29] audit: type=1326 audit(1739635006.717:11805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.253287][   T29] audit: type=1326 audit(1739635006.717:11806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.276935][   T29] audit: type=1326 audit(1739635006.717:11807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.300528][   T29] audit: type=1326 audit(1739635006.717:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f1479ce23 code=0x7ffc0000
[  187.324035][   T29] audit: type=1326 audit(1739635006.717:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f1479ce23 code=0x7ffc0000
[  187.347464][   T29] audit: type=1326 audit(1739635006.717:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.374806][T11747] loop6: detected capacity change from 0 to 512
[  187.381479][T11747] EXT4-fs: Ignoring removed bh option
[  187.387623][   T29] audit: type=1326 audit(1739635006.727:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  187.389727][T11668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.422291][T11668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.456279][T11747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[  187.465089][T11747] EXT4-fs (loop6): 1 truncate cleaned up
[  187.487068][T11668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.557580][T11754] lo speed is unknown, defaulting to 1000
[  187.766934][T11668] veth0_vlan: entered promiscuous mode
[  187.779278][T11668] veth1_vlan: entered promiscuous mode
[  187.808623][T11668] veth0_macvtap: entered promiscuous mode
[  187.815293][T11783] 9pnet: Could not find request transport: fd0x0000000000000003
[  187.819055][T11668] veth1_macvtap: entered promiscuous mode
[  187.841223][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.851841][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.861837][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.872458][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.882374][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.892870][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.904862][T11668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.913246][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.923892][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.933750][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.944246][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.954172][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.964621][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.976203][T11668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.991373][T11668] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.000241][T11668] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.009018][T11668] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.017819][T11668] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.217300][T11795] loop7: detected capacity change from 0 to 1024
[  188.264327][T11795] EXT4-fs: Ignoring removed orlov option
[  188.270161][T11795] ext4: Unknown parameter 'fowner>00000000000000000000'
[  188.395069][T11801] loop7: detected capacity change from 0 to 512
[  188.401639][T11801] ext4: Unknown parameter 'obj_user'
[  188.440280][T11801] loop7: detected capacity change from 0 to 1024
[  188.446906][T11801] EXT4-fs: Ignoring removed orlov option
[  188.467847][T11799] tmpfs: Bad value for 'mpol'
[  188.700672][T11813] FAULT_INJECTION: forcing a failure.
[  188.700672][T11813] name failslab, interval 1, probability 0, space 0, times 0
[  188.713421][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.5.2930 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  188.713451][T11813] Tainted: [W]=WARN
[  188.713458][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  188.713521][T11813] Call Trace:
[  188.713528][T11813]  <TASK>
[  188.713536][T11813]  dump_stack_lvl+0xf2/0x150
[  188.713566][T11813]  dump_stack+0x15/0x1a
[  188.713592][T11813]  should_fail_ex+0x24a/0x260
[  188.713678][T11813]  should_failslab+0x8f/0xb0
[  188.713711][T11813]  kmem_cache_alloc_node_noprof+0x59/0x320
[  188.713808][T11813]  ? __alloc_skb+0x10b/0x310
[  188.713848][T11813]  __alloc_skb+0x10b/0x310
[  188.713892][T11813]  alloc_skb_with_frags+0x80/0x450
[  188.713917][T11813]  ? __rcu_read_unlock+0x4e/0x70
[  188.713988][T11813]  ? __fget_files+0x17c/0x1c0
[  188.714024][T11813]  sock_alloc_send_pskb+0x435/0x4f0
[  188.714077][T11813]  unix_dgram_sendmsg+0x39b/0xea0
[  188.714120][T11813]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  188.714231][T11813]  __sock_sendmsg+0x140/0x180
[  188.714269][T11813]  ____sys_sendmsg+0x326/0x4b0
[  188.714315][T11813]  __sys_sendmmsg+0x227/0x4b0
[  188.714432][T11813]  __x64_sys_sendmmsg+0x57/0x70
[  188.714463][T11813]  x64_sys_call+0x29aa/0x2dc0
[  188.714496][T11813]  do_syscall_64+0xc9/0x1c0
[  188.714544][T11813]  ? clear_bhb_loop+0x55/0xb0
[  188.714579][T11813]  ? clear_bhb_loop+0x55/0xb0
[  188.714606][T11813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.714640][T11813] RIP: 0033:0x7fa2417ecde9
[  188.714659][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.714716][T11813] RSP: 002b:00007fa23fe51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  188.714739][T11813] RAX: ffffffffffffffda RBX: 00007fa241a05fa0 RCX: 00007fa2417ecde9
[  188.714753][T11813] RDX: 0000000000000001 RSI: 0000400000005e00 RDI: 0000000000000004
[  188.714809][T11813] RBP: 00007fa23fe51090 R08: 0000000000000000 R09: 0000000000000000
[  188.714823][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.714838][T11813] R13: 0000000000000000 R14: 00007fa241a05fa0 R15: 00007ffd099ec208
[  188.714861][T11813]  </TASK>
[  189.068046][T11818] netlink: 'syz.5.2932': attribute type 1 has an invalid length.
[  189.089178][T11819] tmpfs: Bad value for 'mpol'
[  189.173550][T11825] lo speed is unknown, defaulting to 1000
[  189.271138][T11829] loop5: detected capacity change from 0 to 1024
[  189.308056][T11829] EXT4-fs: Ignoring removed orlov option
[  189.321003][T11829] ext4: Unknown parameter 'fowner>00000000000000000000'
[  189.330532][T11668] EXT4-fs unmount: 45 callbacks suppressed
[  189.330550][T11668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.397369][T11829] loop7: detected capacity change from 1024 to 1023
[  189.453989][T11834] 9pnet_fd: Insufficient options for proto=fd
[  189.664390][T11846] 9pnet_fd: Insufficient options for proto=fd
[  189.672259][T11846] loop6: detected capacity change from 0 to 128
[  189.683781][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2943'.
[  189.758711][T11848] netlink: 'syz.5.2944': attribute type 1 has an invalid length.
[  189.929400][T11858] loop6: detected capacity change from 0 to 2048
[  190.100854][T11858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.140804][T11868] loop4: detected capacity change from 0 to 1024
[  190.160147][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.172542][T11868] EXT4-fs: Ignoring removed orlov option
[  190.187819][T11868] ext4: Unknown parameter 'fowner>00000000000000000000'
[  190.190476][T11870] 9pnet_fd: Insufficient options for proto=fd
[  190.396270][T11879] loop4: detected capacity change from 0 to 164
[  190.417822][T11879] syz.4.2953: attempt to access beyond end of device
[  190.417822][T11879] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  190.450745][T11879] syz.4.2953: attempt to access beyond end of device
[  190.450745][T11879] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  190.509473][T11882] loop6: detected capacity change from 0 to 164
[  190.591316][T11882] syz.6.2956: attempt to access beyond end of device
[  190.591316][T11882] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  190.611587][T11882] syz.6.2956: attempt to access beyond end of device
[  190.611587][T11882] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  190.664715][T11892] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2960'.
[  190.674419][T11884] netlink: 'syz.4.2957': attribute type 1 has an invalid length.
[  190.699136][T11890] loop7: detected capacity change from 0 to 2048
[  190.719419][T11894] 9pnet_fd: Insufficient options for proto=fd
[  190.738084][T11890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.789441][T11668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.800332][T11901] loop6: detected capacity change from 0 to 1024
[  190.815777][T11901] EXT4-fs: Ignoring removed orlov option
[  190.846886][T11901] ext4: Unknown parameter 'fowner>00000000000000000000'
[  190.935448][T11918] netlink: 'syz.6.2969': attribute type 7 has an invalid length.
[  190.943265][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2969'.
[  190.967328][T11920] tmpfs: Bad value for 'mpol'
[  190.972946][T11921] tmpfs: Bad value for 'mpol'
[  191.064271][T11910] lo speed is unknown, defaulting to 1000
[  191.140960][T11910] chnl_net:caif_netlink_parms(): no params data found
[  191.217349][T11936] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2973'.
[  191.239172][T11910] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.246327][T11910] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.268656][T11910] bridge_slave_0: entered allmulticast mode
[  191.285310][T11910] bridge_slave_0: entered promiscuous mode
[  191.294077][T11910] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.301605][T11910] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.311052][T11910] bridge_slave_1: entered allmulticast mode
[  191.318415][T11910] bridge_slave_1: entered promiscuous mode
[  191.342841][T11910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.354031][T11910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.368816][T11946] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.405883][T11910] team0: Port device team_slave_0 added
[  191.415430][T11950] loop6: detected capacity change from 0 to 512
[  191.423242][T11910] team0: Port device team_slave_1 added
[  191.433962][T11950] ext4: Unknown parameter 'obj_user'
[  191.447675][T11910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.448135][T11950] loop6: detected capacity change from 0 to 1024
[  191.454698][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.463829][T11950] EXT4-fs: Ignoring removed orlov option
[  191.487111][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.505838][T11950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.518768][T11953] loop5: detected capacity change from 0 to 164
[  191.527895][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.534952][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.561122][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.572713][T11953] syz.5.2979: attempt to access beyond end of device
[  191.572713][T11953] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  191.586700][T11953] syz.5.2979: attempt to access beyond end of device
[  191.586700][T11953] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  191.617344][T11910] hsr_slave_0: entered promiscuous mode
[  191.623751][T11910] hsr_slave_1: entered promiscuous mode
[  191.629895][T11910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.637568][T11910] Cannot create hsr debugfs directory
[  191.689765][T11959] loop4: detected capacity change from 0 to 1024
[  191.696601][T11959] EXT4-fs: Ignoring removed nobh option
[  191.707270][T11959] EXT4-fs: Invalid want_extra_isize 134217856
[  191.810879][T11963] loop4: detected capacity change from 0 to 1024
[  191.818683][T11963] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  191.977066][T11963] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2980: Invalid block bitmap block 0 in block_group 0
[  191.998635][T11963] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.2980: Failed to acquire dquot type 0
[  192.026351][T11963] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.2980: Freeing blocks not in datazone - block = 0, count = 4096
[  192.049436][T11963] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2980: Invalid inode bitmap blk 0 in block_group 0
[  192.068972][T11946] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.082000][T11963] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  192.090971][T11963] EXT4-fs (loop4): 1 orphan inode deleted
[  192.097228][T11963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.137319][T11946] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.148139][ T4370] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:26: Failed to release dquot type 0
[  192.204969][T11971] lo speed is unknown, defaulting to 1000
[  192.222406][T11946] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.278460][ T4369] bridge_slave_1: left allmulticast mode
[  192.284481][ T4369] bridge_slave_1: left promiscuous mode
[  192.290319][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.308990][ T4369] bridge_slave_0: left allmulticast mode
[  192.314711][ T4369] bridge_slave_0: left promiscuous mode
[  192.320488][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.367327][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.478164][ T4369] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.490713][ T4369] $H� (unregistering): Released all slaves
[  192.499269][ T4369] bond1 (unregistering): Released all slaves
[  192.534316][T11910] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.559961][T11910] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.569443][T11910] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.585320][T11946] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.603648][T11946] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.622771][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.636962][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.702268][ T4369] team0 (unregistering): Port device team_slave_0 removed
[  192.774399][T11910] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.788650][T11946] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.801583][T11946] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.894587][T11910] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.013513][T11910] 8021q: adding VLAN 0 to HW filter on device team0
[  193.028782][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.035923][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.067930][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.075066][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.197764][T12001] tmpfs: Bad value for 'mpol'
[  193.242391][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.268813][T12010] loop6: detected capacity change from 0 to 164
[  193.277998][T12010] syz.6.2996: attempt to access beyond end of device
[  193.277998][T12010] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  193.305292][T12010] syz.6.2996: attempt to access beyond end of device
[  193.305292][T12010] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  193.409448][T11910] veth0_vlan: entered promiscuous mode
[  193.420832][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  193.420850][   T29] audit: type=1326 audit(1739635012.582:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.454899][T12018] FAULT_INJECTION: forcing a failure.
[  193.454899][T12018] name failslab, interval 1, probability 0, space 0, times 0
[  193.467581][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.6.2997 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  193.467610][T12018] Tainted: [W]=WARN
[  193.467617][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  193.467694][T12018] Call Trace:
[  193.467701][T12018]  <TASK>
[  193.467709][T12018]  dump_stack_lvl+0xf2/0x150
[  193.467741][T12018]  dump_stack+0x15/0x1a
[  193.467767][T12018]  should_fail_ex+0x24a/0x260
[  193.467797][T12018]  ? audit_log_d_path+0x8e/0x150
[  193.467853][T12018]  should_failslab+0x8f/0xb0
[  193.467889][T12018]  __kmalloc_cache_noprof+0x4e/0x320
[  193.467914][T12018]  audit_log_d_path+0x8e/0x150
[  193.467955][T12018]  audit_log_d_path_exe+0x42/0x70
[  193.468073][T12018]  audit_log_task+0x1ec/0x250
[  193.468171][T12018]  audit_seccomp+0x68/0x130
[  193.468200][T12018]  __seccomp_filter+0x6fa/0x1180
[  193.468225][T12018]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  193.468295][T12018]  ? vfs_write+0x644/0x920
[  193.468400][T12018]  ? putname+0xcf/0xf0
[  193.468436][T12018]  __secure_computing+0x9f/0x1c0
[  193.468459][T12018]  syscall_trace_enter+0xd1/0x1f0
[  193.468484][T12018]  ? fpregs_assert_state_consistent+0x83/0xa0
[  193.468507][T12018]  do_syscall_64+0xaa/0x1c0
[  193.468592][T12018]  ? clear_bhb_loop+0x55/0xb0
[  193.468651][T12018]  ? clear_bhb_loop+0x55/0xb0
[  193.468678][T12018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.468726][T12018] RIP: 0033:0x7f6f1479cde9
[  193.468742][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.468786][T12018] RSP: 002b:00007f6f12e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  193.468805][T12018] RAX: ffffffffffffffda RBX: 00007f6f149b5fa0 RCX: 00007f6f1479cde9
[  193.468817][T12018] RDX: ffffffffffffff9c RSI: 0000400000000180 RDI: ffffffffffffff9c
[  193.468829][T12018] RBP: 00007f6f12e01090 R08: 0000000000000000 R09: 0000000000000000
[  193.468842][T12018] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.468854][T12018] R13: 0000000000000000 R14: 00007f6f149b5fa0 R15: 00007fff4a0b2a58
[  193.468871][T12018]  </TASK>
[  193.681110][   T29] audit: type=1326 audit(1739635012.610:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.704823][   T29] audit: type=1326 audit(1739635012.610:11890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.728682][   T29] audit: type=1326 audit(1739635012.610:11891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.752301][   T29] audit: type=1326 audit(1739635012.610:11892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.776133][   T29] audit: type=1326 audit(1739635012.610:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1479b750 code=0x7ffc0000
[  193.799946][   T29] audit: type=1326 audit(1739635012.610:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f1479b89f code=0x7ffc0000
[  193.823359][   T29] audit: type=1326 audit(1739635012.610:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="<no_memory>" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f6f1479cde9 code=0x7ffc0000
[  193.846354][   T29] audit: type=1326 audit(1739635012.826:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6f1479b7fc code=0x7ffc0000
[  193.869911][   T29] audit: type=1326 audit(1739635012.826:11897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f1479b89f code=0x7ffc0000
[  193.922230][T11910] veth1_vlan: entered promiscuous mode
[  193.934851][T11910] veth0_macvtap: entered promiscuous mode
[  193.962269][T11910] veth1_macvtap: entered promiscuous mode
[  193.980464][T12022] loop6: detected capacity change from 0 to 512
[  193.999906][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.010497][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.020497][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.024647][T12024] loop7: detected capacity change from 0 to 2048
[  194.031213][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.047398][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.057924][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.067892][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.078906][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.090536][T12022] ext4: Unknown parameter 'obj_user'
[  194.097700][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.108132][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.118704][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.128596][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.139166][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.149076][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.149177][T12022] loop6: detected capacity change from 0 to 1024
[  194.159635][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.159657][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.186498][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.197668][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.206085][T11910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.214878][T11910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.220186][T12024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.223710][T11910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.241536][T12022] EXT4-fs: Ignoring removed orlov option
[  194.244436][T11910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.313362][T12022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.331031][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.366553][T11668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.653971][T12050] tmpfs: Bad value for 'mpol'
[  194.665871][T12048] @: renamed from vlan0 (while UP)
[  194.945963][T12059] hsr_slave_0: left promiscuous mode
[  194.980420][T12059] hsr_slave_1: left promiscuous mode
[  195.018095][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.036842][T12051] netlink: 'syz.5.3007': attribute type 1 has an invalid length.
[  195.101555][T12064] 9pnet_fd: Insufficient options for proto=fd
[  195.658641][T12038] syz.4.3001 (12038) used greatest stack depth: 4800 bytes left
[  195.684091][T12080] loop4: detected capacity change from 0 to 1024
[  195.690988][T12080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.702104][T12080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.742446][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.905579][T12084] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3018'.
[  196.050303][T12092] tmpfs: Bad value for 'mpol'
[  196.088351][T12093] netlink: 'syz.7.3021': attribute type 1 has an invalid length.
[  196.376799][T12115] loop7: detected capacity change from 0 to 2048
[  196.403027][T12115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.556232][T11668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.587729][T12124] loop5: detected capacity change from 0 to 2048
[  196.617841][T12126] loop6: detected capacity change from 0 to 2048
[  196.637998][T12124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.669404][T12135] loop7: detected capacity change from 0 to 512
[  196.688598][T12126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.723900][T12126] @: renamed from vlan0 (while UP)
[  196.730168][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.772306][T12135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.807040][T12135] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.825561][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.846525][T12149] bond0: entered promiscuous mode
[  196.851770][T12149] bond_slave_0: entered promiscuous mode
[  196.857535][T12149] bond_slave_1: entered promiscuous mode
[  196.876061][T12149] bridge_slave_1: entered promiscuous mode
[  196.876591][T12149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.890947][T12149] Cannot create hsr debugfs directory
[  196.896475][T12149] hsr0: entered promiscuous mode
[  196.945619][T12152] tmpfs: Bad value for 'mpol'
[  197.021161][T11668] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  197.117280][T11668] EXT4-fs (loop7): Remounting filesystem read-only
[  197.225089][T12168] loop6: detected capacity change from 0 to 2048
[  197.453468][T12172] FAULT_INJECTION: forcing a failure.
[  197.453468][T12172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.466793][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.0.3048 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  197.466829][T12172] Tainted: [W]=WARN
[  197.466838][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  197.466853][T12172] Call Trace:
[  197.466860][T12172]  <TASK>
[  197.466868][T12172]  dump_stack_lvl+0xf2/0x150
[  197.467018][T12172]  dump_stack+0x15/0x1a
[  197.467042][T12172]  should_fail_ex+0x24a/0x260
[  197.467071][T12172]  should_fail+0xb/0x10
[  197.467101][T12172]  should_fail_usercopy+0x1a/0x20
[  197.467185][T12172]  _copy_from_user+0x1c/0xa0
[  197.467228][T12172]  kstrtouint_from_user+0x76/0xe0
[  197.467262][T12172]  ? 0xffffffff81000000
[  197.467278][T12172]  ? selinux_file_permission+0x22a/0x360
[  197.467358][T12172]  proc_fail_nth_write+0x4f/0x150
[  197.467390][T12172]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  197.467426][T12172]  vfs_write+0x27d/0x920
[  197.467459][T12172]  ? __fget_files+0x17c/0x1c0
[  197.467509][T12172]  ksys_write+0xe8/0x1b0
[  197.467537][T12172]  __x64_sys_write+0x42/0x50
[  197.467569][T12172]  x64_sys_call+0x287e/0x2dc0
[  197.467602][T12172]  do_syscall_64+0xc9/0x1c0
[  197.467632][T12172]  ? clear_bhb_loop+0x55/0xb0
[  197.467688][T12172]  ? clear_bhb_loop+0x55/0xb0
[  197.467721][T12172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.467753][T12172] RIP: 0033:0x7f85534db89f
[  197.467792][T12172] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  197.467814][T12172] RSP: 002b:00007f8551b41030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  197.467854][T12172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85534db89f
[  197.467865][T12172] RDX: 0000000000000001 RSI: 00007f8551b410a0 RDI: 0000000000000007
[  197.467877][T12172] RBP: 00007f8551b41090 R08: 0000000000000000 R09: 0000000000000000
[  197.467888][T12172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  197.467907][T12172] R13: 0000000000000000 R14: 00007f85536f5fa0 R15: 00007ffd6ed49a38
[  197.467925][T12172]  </TASK>
[  197.735352][T12168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.817196][T12183] netlink: 'syz.0.3050': attribute type 8 has an invalid length.
[  197.835165][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.092393][T12190] loop4: detected capacity change from 0 to 512
[  198.103853][T12192] loop5: detected capacity change from 0 to 164
[  198.112644][T12192] syz.5.3054: attempt to access beyond end of device
[  198.112644][T12192] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  198.155672][T12192] syz.5.3054: attempt to access beyond end of device
[  198.155672][T12192] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  198.183521][T12190] ext4: Unknown parameter 'obj_user'
[  198.219649][T12190] loop4: detected capacity change from 0 to 1024
[  198.226503][T12190] EXT4-fs: Ignoring removed orlov option
[  198.318644][T12190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.618913][T12202] tmpfs: Bad value for 'mpol'
[  198.667774][ T2964] kernel write not supported for file /1015/attr/exec (pid: 2964 comm: kworker/0:2)
[  199.023661][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.033609][   T29] kauditd_printk_skb: 297 callbacks suppressed
[  199.033697][   T29] audit: type=1400 audit(1739635017.839:12195): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  199.134285][   T29] audit: type=1400 audit(1739635017.839:12196): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.156257][   T29] audit: type=1400 audit(1739635017.839:12197): avc:  denied  { append } for  pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  199.178860][   T29] audit: type=1400 audit(1739635017.839:12198): avc:  denied  { open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  199.201738][   T29] audit: type=1400 audit(1739635017.839:12199): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  199.224726][   T29] audit: type=1400 audit(1739635017.886:12200): avc:  denied  { read } for  pid=12211 comm="+}[@" name="event2" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  199.247918][   T29] audit: type=1400 audit(1739635017.886:12201): avc:  denied  { open } for  pid=12211 comm="+}[@" path="/dev/input/event2" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  199.271878][   T29] audit: type=1400 audit(1739635017.886:12202): avc:  denied  { ioctl } for  pid=12211 comm="+}[@" path="/dev/input/event2" dev="devtmpfs" ino=246 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  199.318794][   T29] audit: type=1400 audit(1739635018.101:12203): avc:  denied  { nlmsg_read } for  pid=12220 comm="syz.5.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  199.340894][   T29] audit: type=1400 audit(1739635018.101:12204): avc:  denied  { name_connect } for  pid=12220 comm="syz.5.3063" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  199.377754][T12218] loop6: detected capacity change from 0 to 256
[  199.427277][T12227] loop4: detected capacity change from 0 to 164
[  199.444501][T12229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.457954][T12227] syz.4.3065: attempt to access beyond end of device
[  199.457954][T12227] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  199.481690][T12227] syz.4.3065: attempt to access beyond end of device
[  199.481690][T12227] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  199.507827][T12233] ������: renamed from vlan1 (while UP)
[  199.549382][T12229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.623529][T12235] tmpfs: Bad value for 'mpol'
[  199.641164][T12229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.659859][T12240] loop4: detected capacity change from 0 to 512
[  199.688296][T12240] ext4: Unknown parameter 'obj_user'
[  199.706979][T12240] loop4: detected capacity change from 0 to 1024
[  199.715866][T12240] EXT4-fs: Ignoring removed orlov option
[  199.724475][T12229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.750676][T12240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.768985][T12245] loop6: detected capacity change from 0 to 512
[  199.775596][T12245] ext4: Unknown parameter 'obj_user'
[  199.816922][T12229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.860760][T12245] loop6: detected capacity change from 0 to 1024
[  199.941653][T12229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.956068][T12229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.970395][T12250] netlink: 'syz.5.3073': attribute type 1 has an invalid length.
[  199.989957][T12229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.011694][T12245] EXT4-fs: Ignoring removed orlov option
[  200.037043][T12245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.261193][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'.
[  200.540129][T12262] loop5: detected capacity change from 0 to 2048
[  200.572053][T12262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.625794][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.658709][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.673538][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.690903][T12268] loop5: detected capacity change from 0 to 128
[  200.709846][T12269] loop4: detected capacity change from 0 to 2048
[  200.717428][T12268] vfat: Unknown parameter '0xffffffffffffffff'
[  200.718375][ T3435] kernel write not supported for file /267/attr/exec (pid: 3435 comm: kworker/0:6)
[  200.726812][T12269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.790258][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.805751][ T3376] kernel write not supported for file /269/attr/exec (pid: 3376 comm: kworker/1:3)
[  201.062613][T12293] loop5: detected capacity change from 0 to 2048
[  201.077693][T12293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.137307][T12293] FAULT_INJECTION: forcing a failure.
[  201.137307][T12293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.150454][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.5.3086 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  201.150533][T12293] Tainted: [W]=WARN
[  201.150540][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  201.150562][T12293] Call Trace:
[  201.150569][T12293]  <TASK>
[  201.150577][T12293]  dump_stack_lvl+0xf2/0x150
[  201.150610][T12293]  dump_stack+0x15/0x1a
[  201.150634][T12293]  should_fail_ex+0x24a/0x260
[  201.150663][T12293]  should_fail+0xb/0x10
[  201.150773][T12293]  should_fail_usercopy+0x1a/0x20
[  201.150803][T12293]  strncpy_from_user+0x25/0x210
[  201.150880][T12293]  ? kmem_cache_alloc_noprof+0x18e/0x320
[  201.150905][T12293]  ? getname_flags+0x81/0x3b0
[  201.150939][T12293]  getname_flags+0xb0/0x3b0
[  201.150971][T12293]  user_path_at+0x26/0x120
[  201.150997][T12293]  do_fchownat+0x92/0x1a0
[  201.151065][T12293]  __x64_sys_lchown+0x4a/0x60
[  201.151104][T12293]  x64_sys_call+0x1e29/0x2dc0
[  201.151137][T12293]  do_syscall_64+0xc9/0x1c0
[  201.151171][T12293]  ? clear_bhb_loop+0x55/0xb0
[  201.151247][T12293]  ? clear_bhb_loop+0x55/0xb0
[  201.151275][T12293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.151302][T12293] RIP: 0033:0x7fa2417ecde9
[  201.151316][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.151334][T12293] RSP: 002b:00007fa23fe51038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  201.151356][T12293] RAX: ffffffffffffffda RBX: 00007fa241a05fa0 RCX: 00007fa2417ecde9
[  201.151382][T12293] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000400000000080
[  201.151395][T12293] RBP: 00007fa23fe51090 R08: 0000000000000000 R09: 0000000000000000
[  201.151409][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.151422][T12293] R13: 0000000000000000 R14: 00007fa241a05fa0 R15: 00007ffd099ec208
[  201.151444][T12293]  </TASK>
[  201.362628][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.404880][T12300] loop5: detected capacity change from 0 to 164
[  201.415058][T12300] syz.5.3087: attempt to access beyond end of device
[  201.415058][T12300] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  201.431115][T12300] syz.5.3087: attempt to access beyond end of device
[  201.431115][T12300] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  201.860181][ T1039] kernel write not supported for file /278/attr/exec (pid: 1039 comm: kworker/1:2)
[  201.933254][T12324] tmpfs: Bad value for 'mpol'
[  201.994051][T12331] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.025140][T12333] loop5: detected capacity change from 0 to 164
[  202.036417][T12333] syz.5.3100: attempt to access beyond end of device
[  202.036417][T12333] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  202.050637][T12333] syz.5.3100: attempt to access beyond end of device
[  202.050637][T12333] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  202.066987][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3100'.
[  202.116084][ T1039] kernel write not supported for file /1066/attr/exec (pid: 1039 comm: kworker/1:2)
[  202.164144][T12341] loop6: detected capacity change from 0 to 1024
[  202.206501][T12341] loop6: detected capacity change from 0 to 512
[  202.233596][T12341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.263957][T12341] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.345162][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.479184][T12358] loop4: detected capacity change from 0 to 2048
[  202.518101][T12358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.604784][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.628690][T12362] loop6: detected capacity change from 0 to 512
[  202.666681][T12362] ext4: Unknown parameter 'obj_user'
[  202.679625][T12364] loop4: detected capacity change from 0 to 4096
[  202.778318][T12362] loop6: detected capacity change from 0 to 1024
[  202.792748][T12362] EXT4-fs: Ignoring removed orlov option
[  202.842537][T12364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.868758][T12362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.102088][T12382] hub 2-0:1.0: USB hub found
[  203.126604][T12382] hub 2-0:1.0: 8 ports detected
[  203.538247][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.712635][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.723788][T12443] loop5: detected capacity change from 0 to 2048
[  203.757615][T12443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.812984][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.866587][T12459] loop5: detected capacity change from 0 to 512
[  203.890015][T12459] EXT4-fs: Ignoring removed orlov option
[  203.929919][T12459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.953064][T12463] loop6: detected capacity change from 0 to 2048
[  203.962523][T12459] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.994080][T12463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.027649][ T6703] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.066642][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.110585][T12469] loop5: detected capacity change from 0 to 164
[  204.188219][T12472] tmpfs: Bad value for 'mpol'
[  204.335054][T12482] loop6: detected capacity change from 0 to 512
[  204.362727][T12482] ext4: Unknown parameter 'obj_user'
[  204.384876][T12482] loop6: detected capacity change from 0 to 1024
[  204.401521][T12482] EXT4-fs: Ignoring removed orlov option
[  204.430599][T12482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.624895][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.695255][T12492] netlink: 'syz.5.3128': attribute type 1 has an invalid length.
[  204.755471][T12500] loop6: detected capacity change from 0 to 164
[  204.764382][T12500] syz.6.3131: attempt to access beyond end of device
[  204.764382][T12500] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  204.779733][T12500] syz.6.3131: attempt to access beyond end of device
[  204.779733][T12500] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  204.960846][T12505] loop6: detected capacity change from 0 to 512
[  205.027380][T12505] EXT4-fs: Ignoring removed orlov option
[  205.050315][T12505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.069746][T12505] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.096655][T12505] FAULT_INJECTION: forcing a failure.
[  205.096655][T12505] name failslab, interval 1, probability 0, space 0, times 0
[  205.109471][T12505] CPU: 1 UID: 0 PID: 12505 Comm: syz.6.3134 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  205.109507][T12505] Tainted: [W]=WARN
[  205.109514][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  205.109527][T12505] Call Trace:
[  205.109535][T12505]  <TASK>
[  205.109559][T12505]  dump_stack_lvl+0xf2/0x150
[  205.109595][T12505]  dump_stack+0x15/0x1a
[  205.109621][T12505]  should_fail_ex+0x24a/0x260
[  205.109679][T12505]  ? ext4_getfsmap_datadev+0x516/0x1390
[  205.109719][T12505]  should_failslab+0x8f/0xb0
[  205.109783][T12505]  __kmalloc_cache_noprof+0x4e/0x320
[  205.109869][T12505]  ? ext4_bg_num_gdb+0x12f/0x160
[  205.109909][T12505]  ext4_getfsmap_datadev+0x516/0x1390
[  205.109951][T12505]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[  205.110025][T12505]  ext4_getfsmap+0x7eb/0x840
[  205.110064][T12505]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[  205.110107][T12505]  ? __pfx_ext4_getfsmap_format+0x10/0x10
[  205.110152][T12505]  ? __pfx_ext4_getfsmap_datadev+0x10/0x10
[  205.110221][T12505]  ? memchr_inv+0x13a/0x2e0
[  205.110271][T12505]  ext4_ioctl+0x20cd/0x2e50
[  205.110313][T12505]  ? __pfx_ext4_ioctl+0x10/0x10
[  205.110338][T12505]  __se_sys_ioctl+0xc9/0x140
[  205.110364][T12505]  __x64_sys_ioctl+0x43/0x50
[  205.110455][T12505]  x64_sys_call+0x1690/0x2dc0
[  205.110486][T12505]  do_syscall_64+0xc9/0x1c0
[  205.110565][T12505]  ? clear_bhb_loop+0x55/0xb0
[  205.110640][T12505]  ? clear_bhb_loop+0x55/0xb0
[  205.110673][T12505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.110702][T12505] RIP: 0033:0x7f6f1479cde9
[  205.110717][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.110735][T12505] RSP: 002b:00007f6f12e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.110812][T12505] RAX: ffffffffffffffda RBX: 00007f6f149b5fa0 RCX: 00007f6f1479cde9
[  205.110827][T12505] RDX: 00004000000001c0 RSI: 00000000c0c0583b RDI: 0000000000000004
[  205.110842][T12505] RBP: 00007f6f12e01090 R08: 0000000000000000 R09: 0000000000000000
[  205.110856][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.110871][T12505] R13: 0000000000000000 R14: 00007f6f149b5fa0 R15: 00007fff4a0b2a58
[  205.110961][T12505]  </TASK>
[  205.414465][T10970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.529471][T12510] ==================================================================
[  205.537612][T12510] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps
[  205.545975][T12510] 
[  205.548319][T12510] write to 0xffff8881043d154c of 4 bytes by task 12511 on cpu 1:
[  205.556050][T12510]  inode_update_timestamps+0x139/0x250
[  205.561543][T12510]  file_update_time+0x219/0x2b0
[  205.566411][T12510]  shmem_file_write_iter+0x99/0xe0
[  205.571562][T12510]  iter_file_splice_write+0x5f1/0x980
[  205.576958][T12510]  direct_splice_actor+0x160/0x2c0
[  205.582084][T12510]  splice_direct_to_actor+0x302/0x670
[  205.587468][T12510]  do_splice_direct+0xd7/0x150
[  205.592242][T12510]  do_sendfile+0x398/0x660
[  205.596664][T12510]  __x64_sys_sendfile64+0x110/0x150
[  205.601883][T12510]  x64_sys_call+0xfbd/0x2dc0
[  205.606681][T12510]  do_syscall_64+0xc9/0x1c0
[  205.611226][T12510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.617140][T12510] 
[  205.619470][T12510] read to 0xffff8881043d154c of 4 bytes by task 12510 on cpu 0:
[  205.627109][T12510]  atime_needs_update+0x2aa/0x3e0
[  205.632149][T12510]  touch_atime+0x4a/0x350
[  205.636489][T12510]  shmem_file_splice_read+0x579/0x5d0
[  205.641878][T12510]  splice_direct_to_actor+0x269/0x670
[  205.647263][T12510]  do_splice_direct+0xd7/0x150
[  205.652049][T12510]  do_sendfile+0x398/0x660
[  205.656479][T12510]  __x64_sys_sendfile64+0x110/0x150
[  205.661719][T12510]  x64_sys_call+0xfbd/0x2dc0
[  205.666331][T12510]  do_syscall_64+0xc9/0x1c0
[  205.670857][T12510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.676779][T12510] 
[  205.679112][T12510] value changed: 0x35b6efbc -> 0x3645aacd
[  205.684832][T12510] 
[  205.687157][T12510] Reported by Kernel Concurrency Sanitizer on:
[  205.693312][T12510] CPU: 0 UID: 0 PID: 12510 Comm: syz.0.3135 Tainted: G        W          6.14.0-rc2-syzkaller-00253-g78a632a2086c #0
[  205.705562][T12510] Tainted: [W]=WARN
[  205.709363][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  205.719605][T12510] ==================================================================