last executing test programs:

1.605787003s ago: executing program 0 (id=321):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74", 0x62}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340ebc4abe90885da6b", 0xab}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1.515385222s ago: executing program 0 (id=324):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6})
dup3(0xffffffffffffffff, r3, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
close_range(r2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r5, &(0x7f0000000040), 0x0)

1.514501412s ago: executing program 3 (id=325):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x1, 0x2, 0x2, 0x69, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x74}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, r4, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB])
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2bf7a8b15261e9e88f1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xefc73288ad63463a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r8}, 0xa2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r12, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r13}, 0x10)
syz_emit_ethernet(0x107e, &(0x7f0000000a40)={@remote, @local, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "3bb420", 0x1048, 0x11, 0x0, @loopback, @mcast2, {[@dstopts={0x3a, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x8}, @ra, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @empty}]}, @fragment={0x3c, 0x0, 0xb4, 0x0, 0x0, 0xa, 0x67}], {0x4e23, 0x4e22, 0x1008, 0x0, @opaque="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"}}}}}}, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xff)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_flash={0x33, 0x0, '.\x00'}})

1.441806808s ago: executing program 4 (id=328):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write(r3, 0x0, 0x0)

1.420616911s ago: executing program 1 (id=329):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.397709832s ago: executing program 1 (id=330):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x48)

1.380861504s ago: executing program 1 (id=331):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90)
socket(0x11, 0x3, 0x0) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) (async, rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000005e80)='./file1\x00', 0x103042, 0x0) (rerun: 32)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280700000000069078ac1414bbac1414aa00004e22173b1ddb45a23e4b395b31c1289129d987a9755edd7b18aed285933b3f5cddf1e4bf54fc3fc208c0e448fde96b84dc40d3069bc6e58f6b11abd05f7dd8f16c2230cab30d5908e503e5483245407edf6bc1234a936502d5d877ecc9234ad1a13750f01c3c0000e625b3f38e428c85bda30b464013bdbb92b35d2b1d88f3c2ba34660b6a91a35e3e9234b25a6c84514aa9397b51503ecea41adecd0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r8 = epoll_create1(0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
r11 = fcntl$getown(r10, 0x9) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=<r12=>0x0)
kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r2, &(0x7f0000000340)={r8, r3, 0xffffff2f}) (async, rerun: 32)
r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) (rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r13, 0xc0f85403, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) (async)
bind$rds(0xffffffffffffffff, 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)

1.368213905s ago: executing program 4 (id=332):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/partitions\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001200)=[{&(0x7f0000001380)=""/250, 0xfa}], 0x1, 0x7, 0x0)

1.340824888s ago: executing program 0 (id=333):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc044)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x5b0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000040))
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080))
syz_emit_ethernet(0x8a, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

1.340352628s ago: executing program 4 (id=334):
unshare(0x28000600)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)

1.326634869s ago: executing program 0 (id=335):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74", 0x62}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340ebc4abe90885da6b", 0xab}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1.182238742s ago: executing program 1 (id=336):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
close(r3)
close(r2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="898ec188ffffffffffffff7f0000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff05, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000b0b83420b14fa0ac38b67ad500080000005e00ffa0588f218763560652ff04ca3b05bc03592ffb489116f59f1b8041fefafff06be0", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r8}, 0x38)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x30}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)

639.045182ms ago: executing program 3 (id=339):
socket(0x10, 0x3, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t0&&\t')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x9b, 0x64, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x25440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300e000000208000a00", @ANYRES32, @ANYBLOB="03b05329300508a98693480df1fe080881d5d087438af7c1101d971b5407"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

545.31544ms ago: executing program 2 (id=342):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x8000400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write(r3, 0x0, 0x0)

517.036123ms ago: executing program 3 (id=343):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = inotify_init1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x0, 0x6})
dup3(0xffffffffffffffff, r3, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
close_range(r2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400)
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r5, &(0x7f0000000040), 0x0)

489.080966ms ago: executing program 4 (id=344):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r0], 0x50}}, 0x0)

466.913077ms ago: executing program 4 (id=345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/partitions\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001200)=[{&(0x7f0000001380)=""/250, 0xfa}], 0x1, 0x7, 0x0)

466.515158ms ago: executing program 0 (id=346):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file1\x00', 0x0, 0x10, r0}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="a34a6496beaa75d7b2aec62f69fbdcbd59d01f7c34b0688799a9c058b3db78160332911295cdf215", &(0x7f0000000140)=""/73}, 0x20)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x48)

452.135329ms ago: executing program 2 (id=347):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = dup(r0)
ftruncate(r1, 0x400f80)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = open_tree(r2, &(0x7f0000000640)='\x00', 0x81000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

422.317911ms ago: executing program 3 (id=348):
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000200)='./file0\x00')
open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)

421.855191ms ago: executing program 0 (id=349):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x1, 0x2, 0x2, 0x69, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x74}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, r4, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB])
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2bf7a8b15261e9e88f1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xefc73288ad63463a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r8}, 0xa2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r12, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r13}, 0x10)
syz_emit_ethernet(0x107e, &(0x7f0000000a40)={@remote, @local, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "3bb420", 0x1048, 0x11, 0x0, @loopback, @mcast2, {[@dstopts={0x3a, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x8}, @ra, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @empty}]}, @fragment={0x3c, 0x0, 0xb4, 0x0, 0x0, 0xa, 0x67}], {0x4e23, 0x4e22, 0x1008, 0x0, @opaque="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"}}}}}}, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xff)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_flash={0x33, 0x0, '.\x00'}})

421.516592ms ago: executing program 4 (id=350):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x1, 0x2, 0x2, 0x69, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x74}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r3, r4, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="cb66"])
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xefc73288ad63463a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r8}, 0xa2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_flash={0x33, 0x0, '.\x00'}})

421.298662ms ago: executing program 3 (id=351):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e934"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

370.848827ms ago: executing program 3 (id=352):
r0 = socket$inet(0x2, 0x802, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @broadcast, <r1=>0x0}, &(0x7f0000000040)=0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}}, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x1, r1}, 0xc)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000585f938aca663ef63ca1b8e15574af4a629b2b0b715dcde10b70", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
dup3(r6, r5, 0x0)
recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1}, 0x0)
r8 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003a40)=@newtaction={0xf28, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xf14, 0x1, [@m_pedit={0xf10, 0x1, 0x0, 0x0, {{0xa}, {0xee4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{}, 0x9, 0x0, [{0x2, 0x6a18, 0x0, 0x6, 0x3, 0x101}, {0x7, 0xffff, 0x8000, 0x4, 0x5, 0x9}, {0xffffffff, 0x5, 0x5, 0x8, 0x7ff}, {0xffffffff, 0x76f4, 0x316, 0x7ff, 0x6, 0x401}, {0x3ff, 0x1ff, 0xf, 0x0, 0x3, 0x400}, {0x80, 0x197438d3, 0x6, 0x2, 0x0, 0x2}, {0x8, 0x3, 0x1, 0x56a5, 0xb, 0x1}, {0x1, 0x6, 0x4, 0x1ff, 0x2, 0x7fffffff}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x2000000}, {0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffa}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x0, 0x800}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf28}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

370.316277ms ago: executing program 1 (id=353):
socket(0x10, 0x3, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t0&&\t')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x9b, 0x64, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x25440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300e000000208000a00", @ANYRES32, @ANYBLOB="03b05329300508a98693480df1fe080881d5d087438af7c1101d971b5407"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

258.839907ms ago: executing program 2 (id=354):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x48)

237.442999ms ago: executing program 1 (id=355):
unshare(0x28000600)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)

228.654749ms ago: executing program 2 (id=356):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000280)={[{@sb={'sb', 0x3d, 0xb}}, {@user_xattr}, {@nodiscard}, {@block_validity}, {@norecovery}, {@prjquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5509, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open(0x0, 0x14927e, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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")
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf)
sendfile(r0, r0, &(0x7f0000000240), 0x7f06)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)

78.448643ms ago: executing program 2 (id=357):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x8000400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write(r2, 0x0, 0x0)

0s ago: executing program 2 (id=358):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r1}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
sendfile(r4, r5, 0x0, 0x4)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

[   21.352167][   T29] audit: type=1400 audit(1728006547.785:81): avc:  denied  { read } for  pid=2952 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
[   25.032727][   T29] audit: type=1400 audit(1728006551.455:82): avc:  denied  { mounton } for  pid=3255 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.033968][ T3255] cgroup: Unknown subsys name 'net'
[   25.055531][   T29] audit: type=1400 audit(1728006551.455:83): avc:  denied  { mount } for  pid=3255 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.082886][   T29] audit: type=1400 audit(1728006551.485:84): avc:  denied  { unmount } for  pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.199328][ T3255] cgroup: Unknown subsys name 'cpuset'
[   25.205386][ T3255] cgroup: Unknown subsys name 'rlimit'
[   25.354041][   T29] audit: type=1400 audit(1728006551.775:85): avc:  denied  { setattr } for  pid=3255 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.378469][   T29] audit: type=1400 audit(1728006551.775:86): avc:  denied  { create } for  pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   25.389479][ T3258] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.398945][   T29] audit: type=1400 audit(1728006551.775:87): avc:  denied  { write } for  pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.427822][   T29] audit: type=1400 audit(1728006551.775:88): avc:  denied  { read } for  pid=3255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.440861][ T3255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.448215][   T29] audit: type=1400 audit(1728006551.785:89): avc:  denied  { mounton } for  pid=3255 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.481625][   T29] audit: type=1400 audit(1728006551.785:90): avc:  denied  { mount } for  pid=3255 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.504994][   T29] audit: type=1400 audit(1728006551.825:91): avc:  denied  { relabelto } for  pid=3258 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.347107][ T3266] chnl_net:caif_netlink_parms(): no params data found
[   27.381605][ T3267] chnl_net:caif_netlink_parms(): no params data found
[   27.481553][ T3280] chnl_net:caif_netlink_parms(): no params data found
[   27.498859][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.506005][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.513370][ T3266] bridge_slave_0: entered allmulticast mode
[   27.519794][ T3266] bridge_slave_0: entered promiscuous mode
[   27.526173][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.533234][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.540350][ T3267] bridge_slave_0: entered allmulticast mode
[   27.546998][ T3267] bridge_slave_0: entered promiscuous mode
[   27.555638][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.562827][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.569948][ T3267] bridge_slave_1: entered allmulticast mode
[   27.576358][ T3267] bridge_slave_1: entered promiscuous mode
[   27.586830][ T3270] chnl_net:caif_netlink_parms(): no params data found
[   27.597460][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.604543][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.611722][ T3266] bridge_slave_1: entered allmulticast mode
[   27.618043][ T3266] bridge_slave_1: entered promiscuous mode
[   27.665330][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.675669][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.696183][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.706135][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.741713][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.748790][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.755990][ T3280] bridge_slave_0: entered allmulticast mode
[   27.762430][ T3280] bridge_slave_0: entered promiscuous mode
[   27.770630][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.777666][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.785046][ T3280] bridge_slave_1: entered allmulticast mode
[   27.791345][ T3280] bridge_slave_1: entered promiscuous mode
[   27.803191][ T3266] team0: Port device team_slave_0 added
[   27.830115][ T3267] team0: Port device team_slave_0 added
[   27.836217][ T3266] team0: Port device team_slave_1 added
[   27.857759][ T3280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.867398][ T3267] team0: Port device team_slave_1 added
[   27.877000][ T3274] chnl_net:caif_netlink_parms(): no params data found
[   27.885820][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.892812][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.918764][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.929766][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.936708][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.962635][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.977913][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.985005][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.992159][ T3270] bridge_slave_0: entered allmulticast mode
[   27.998722][ T3270] bridge_slave_0: entered promiscuous mode
[   28.006138][ T3280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.022183][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.029168][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.055046][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.068966][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.076044][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.102010][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.112708][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.119846][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.126954][ T3270] bridge_slave_1: entered allmulticast mode
[   28.133311][ T3270] bridge_slave_1: entered promiscuous mode
[   28.174411][ T3266] hsr_slave_0: entered promiscuous mode
[   28.180515][ T3266] hsr_slave_1: entered promiscuous mode
[   28.191491][ T3280] team0: Port device team_slave_0 added
[   28.202493][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.212129][ T3280] team0: Port device team_slave_1 added
[   28.218867][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.259666][ T3267] hsr_slave_0: entered promiscuous mode
[   28.265872][ T3267] hsr_slave_1: entered promiscuous mode
[   28.271769][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.279344][ T3267] Cannot create hsr debugfs directory
[   28.289745][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.296901][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.304053][ T3274] bridge_slave_0: entered allmulticast mode
[   28.311610][ T3274] bridge_slave_0: entered promiscuous mode
[   28.318642][ T3270] team0: Port device team_slave_0 added
[   28.329986][ T3280] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.336924][ T3280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.362877][ T3280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.380399][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.387441][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.394744][ T3274] bridge_slave_1: entered allmulticast mode
[   28.401155][ T3274] bridge_slave_1: entered promiscuous mode
[   28.407789][ T3270] team0: Port device team_slave_1 added
[   28.418249][ T3280] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.425329][ T3280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.451391][ T3280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.503540][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.512803][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.519801][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.545787][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.567055][ T3280] hsr_slave_0: entered promiscuous mode
[   28.573107][ T3280] hsr_slave_1: entered promiscuous mode
[   28.579090][ T3280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.586635][ T3280] Cannot create hsr debugfs directory
[   28.593180][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.602749][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.609754][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.635716][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.690483][ T3274] team0: Port device team_slave_0 added
[   28.716336][ T3274] team0: Port device team_slave_1 added
[   28.734499][ T3270] hsr_slave_0: entered promiscuous mode
[   28.740492][ T3270] hsr_slave_1: entered promiscuous mode
[   28.746215][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.754011][ T3270] Cannot create hsr debugfs directory
[   28.764039][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.771012][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.796897][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.829984][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.836938][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.862851][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.888070][ T3266] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.914549][ T3266] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.927309][ T3274] hsr_slave_0: entered promiscuous mode
[   28.933437][ T3274] hsr_slave_1: entered promiscuous mode
[   28.939305][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.946837][ T3274] Cannot create hsr debugfs directory
[   28.954886][ T3266] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.965528][ T3266] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.036617][ T3267] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.045299][ T3267] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.059568][ T3267] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.078421][ T3267] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.106656][ T3280] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.117516][ T3280] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.136571][ T3280] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.145448][ T3280] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.175096][ T3270] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.183612][ T3270] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.192866][ T3270] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.201489][ T3270] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.224273][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.236293][ T3274] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.245030][ T3274] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.253632][ T3274] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.269682][ T3274] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.296095][ T3266] 8021q: adding VLAN 0 to HW filter on device team0
[   29.315823][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.322911][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.331570][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.338710][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.348854][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.364775][ T3267] 8021q: adding VLAN 0 to HW filter on device team0
[   29.405591][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.412691][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.433636][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.440723][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.453688][ T3280] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.489609][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.503660][ T3280] 8021q: adding VLAN 0 to HW filter on device team0
[   29.514093][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.523242][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.537108][ T1774] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.544173][ T1774] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.558833][ T1774] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.565985][ T1774] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.577621][ T3270] 8021q: adding VLAN 0 to HW filter on device team0
[   29.591509][ T3274] 8021q: adding VLAN 0 to HW filter on device team0
[   29.605526][ T3280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.615984][ T3280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.636762][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.643920][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.660171][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.667251][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.690954][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.700163][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.707242][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.727321][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.734413][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.756826][ T3266] veth0_vlan: entered promiscuous mode
[   29.770271][ T3270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.798916][ T3266] veth1_vlan: entered promiscuous mode
[   29.822772][ T3280] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.839340][ T3266] veth0_macvtap: entered promiscuous mode
[   29.847268][ T3266] veth1_macvtap: entered promiscuous mode
[   29.885740][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.899954][ T3267] veth0_vlan: entered promiscuous mode
[   29.921291][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.933021][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.950968][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.960509][ T3267] veth1_vlan: entered promiscuous mode
[   29.967375][ T3266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.976142][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.984970][ T3266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.993787][ T3266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.042255][   T29] kauditd_printk_skb: 20 callbacks suppressed
[   30.042271][   T29] audit: type=1400 audit(1728006556.465:112): avc:  denied  { mount } for  pid=3266 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.070553][   T29] audit: type=1400 audit(1728006556.465:113): avc:  denied  { mounton } for  pid=3266 comm="syz-executor" path="/root/syzkaller.XbpnLK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   30.080918][ T3280] veth0_vlan: entered promiscuous mode
[   30.095940][   T29] audit: type=1400 audit(1728006556.465:114): avc:  denied  { mount } for  pid=3266 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   30.122481][ T3267] veth0_macvtap: entered promiscuous mode
[   30.123370][   T29] audit: type=1400 audit(1728006556.465:115): avc:  denied  { mounton } for  pid=3266 comm="syz-executor" path="/root/syzkaller.XbpnLK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   30.142014][ T3267] veth1_macvtap: entered promiscuous mode
[   30.155852][   T29] audit: type=1400 audit(1728006556.465:116): avc:  denied  { mounton } for  pid=3266 comm="syz-executor" path="/root/syzkaller.XbpnLK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   30.176124][ T3280] veth1_vlan: entered promiscuous mode
[   30.188947][   T29] audit: type=1400 audit(1728006556.465:117): avc:  denied  { unmount } for  pid=3266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.230880][   T29] audit: type=1400 audit(1728006556.645:118): avc:  denied  { mounton } for  pid=3266 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   30.250631][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.264118][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.274731][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.282555][ T3270] veth0_vlan: entered promiscuous mode
[   30.291273][ T3270] veth1_vlan: entered promiscuous mode
[   30.303523][ T3280] veth0_macvtap: entered promiscuous mode
[   30.310265][ T3266] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.310809][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.335262][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.346728][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.365939][   T29] audit: type=1400 audit(1728006556.785:119): avc:  denied  { read write } for  pid=3266 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.390264][   T29] audit: type=1400 audit(1728006556.785:120): avc:  denied  { open } for  pid=3266 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.414353][   T29] audit: type=1400 audit(1728006556.785:121): avc:  denied  { ioctl } for  pid=3266 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.420607][ T3274] veth0_vlan: entered promiscuous mode
[   30.450081][ T3404] loop0: detected capacity change from 0 to 8192
[   30.451132][ T3280] veth1_macvtap: entered promiscuous mode
[   30.456641][ T3404] =======================================================
[   30.456641][ T3404] WARNING: The mand mount option has been deprecated and
[   30.456641][ T3404]          and is ignored by this kernel. Remove the mand
[   30.456641][ T3404]          option from the mount to silence this warning.
[   30.456641][ T3404] =======================================================
[   30.497614][ T3267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.506402][ T3267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.515136][ T3267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.517252][ T3404] syz.0.1: attempt to access beyond end of device
[   30.517252][ T3404] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.523868][ T3267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.537031][ T3404] Buffer I/O error on dev loop0, logical block 57847, async page read
[   30.538457][ T3404] syz.0.1: attempt to access beyond end of device
[   30.538457][ T3404] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.567417][ T3404] Buffer I/O error on dev loop0, logical block 57847, async page read
[   30.576056][ T3404] syz.0.1: attempt to access beyond end of device
[   30.576056][ T3404] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.579545][ T3270] veth0_macvtap: entered promiscuous mode
[   30.589194][ T3404] Buffer I/O error on dev loop0, logical block 57847, async page read
[   30.598748][ T3270] veth1_macvtap: entered promiscuous mode
[   30.610693][ T3404] syz.0.1: attempt to access beyond end of device
[   30.610693][ T3404] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.622432][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.624001][ T3404] Buffer I/O error on dev loop0, logical block 57847, async page read
[   30.634297][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.634310][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.634352][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.635625][ T3280] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.685044][ T3274] veth1_vlan: entered promiscuous mode
[   30.699061][ T3274] veth0_macvtap: entered promiscuous mode
[   30.714715][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.725255][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.735157][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.745687][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.755626][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.766139][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.777199][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.787314][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.797827][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.807725][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.818190][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.829193][ T3280] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.830688][ T3406] loop0: detected capacity change from 0 to 8192
[   30.837317][ T3274] veth1_macvtap: entered promiscuous mode
[   30.854353][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.865065][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.874994][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.885479][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.895295][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.901434][ T3406] syz.0.6: attempt to access beyond end of device
[   30.901434][ T3406] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.905715][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.918816][ T3406] Buffer I/O error on dev loop0, logical block 57847, async page read
[   30.931685][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.946208][ T3270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.955006][ T3270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.963735][ T3270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.972518][ T3270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.983032][ T3406] syz.0.6: attempt to access beyond end of device
[   30.983032][ T3406] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   30.989280][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.996224][ T3406] Buffer I/O error on dev loop0, logical block 57847, async page read
[   31.006608][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.006617][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.006630][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.035298][ T3406] syz.0.6: attempt to access beyond end of device
[   31.035298][ T3406] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   31.044954][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.044971][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.058072][ T3406] Buffer I/O error on dev loop0, logical block 57847, async page read
[   31.086685][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.089025][ T3406] syz.0.6: attempt to access beyond end of device
[   31.089025][ T3406] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   31.097184][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.110221][ T3406] Buffer I/O error on dev loop0, logical block 57847, async page read
[   31.130033][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.152188][ T3280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.160949][ T3280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.170051][ T3280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.179011][ T3280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.207570][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.214461][ T3409] loop1: detected capacity change from 0 to 8192
[   31.218133][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.234314][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.244789][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.254636][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.265069][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.274892][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.285378][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.300657][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.306814][ T3409] syz.1.2: attempt to access beyond end of device
[   31.306814][ T3409] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   31.321079][ T3409] Buffer I/O error on dev loop1, logical block 57847, async page read
[   31.331744][ T3409] syz.1.2: attempt to access beyond end of device
[   31.331744][ T3409] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   31.344919][ T3409] Buffer I/O error on dev loop1, logical block 57847, async page read
[   31.356995][ T3274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.365817][ T3274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.374649][ T3274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.383520][ T3274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.549557][ T3419] loop1: detected capacity change from 0 to 8192
[   31.591624][ T3419] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.8'.
[   31.712993][ T3434] loop4: detected capacity change from 0 to 8192
[   31.825574][ T3436] loop1: detected capacity change from 0 to 8192
[   31.835383][ T3429] loop2: detected capacity change from 0 to 512
[   31.843191][ T3429] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.856330][ T3429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   31.885644][ T3429] EXT4-fs (loop2): 1 orphan inode deleted
[   31.891464][ T3429] EXT4-fs (loop2): 1 truncate cleaned up
[   31.902634][ T3429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.027027][ T3429] syz.2.9: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   32.041421][ T3429] CPU: 0 UID: 0 PID: 3429 Comm: syz.2.9 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   32.051854][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   32.061942][ T3429] Call Trace:
[   32.062455][ T3441] loop4: detected capacity change from 0 to 512
[   32.065214][ T3429]  <TASK>
[   32.065224][ T3429]  dump_stack_lvl+0xf2/0x150
[   32.078988][ T3429]  dump_stack+0x15/0x20
[   32.083176][ T3429]  warn_alloc+0x145/0x1b0
[   32.087524][ T3429]  ? __vmalloc_node_range_noprof+0x88/0xec0
[   32.093446][ T3429]  ? audit_log_end+0x1d0/0x1e0
[   32.098222][ T3429]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   32.104227][ T3429]  __vmalloc_node_range_noprof+0xaa/0xec0
[   32.109999][ T3429]  ? avc_denied+0xf1/0x110
[   32.110337][ T3441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   32.114436][ T3429]  ? slow_avc_audit+0xf9/0x140
[   32.129106][ T3429]  ? xskq_create+0x36/0xd0
[   32.133676][ T3429]  vmalloc_user_noprof+0x59/0x70
[   32.138695][ T3429]  ? xskq_create+0x79/0xd0
[   32.143152][ T3429]  xskq_create+0x79/0xd0
[   32.147419][ T3429]  xsk_init_queue+0x82/0xd0
[   32.151966][ T3429]  xsk_setsockopt+0x409/0x520
[   32.156738][ T3429]  ? __pfx_xsk_setsockopt+0x10/0x10
[   32.161966][ T3429]  __sys_setsockopt+0x1cc/0x240
[   32.164821][ T3441] EXT4-fs (loop4): 1 orphan inode deleted
[   32.166944][ T3429]  __x64_sys_setsockopt+0x66/0x80
[   32.172693][ T3441] EXT4-fs (loop4): 1 truncate cleaned up
[   32.177657][ T3429]  x64_sys_call+0x278d/0x2d60
[   32.187986][ T3429]  do_syscall_64+0xc9/0x1c0
[   32.190382][ T3441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.192499][ T3429]  ? clear_bhb_loop+0x55/0xb0
[   32.209232][ T3429]  ? clear_bhb_loop+0x55/0xb0
[   32.213933][ T3429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.219875][ T3429] RIP: 0033:0x7f9846f5dff9
[   32.224359][ T3429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.244112][ T3429] RSP: 002b:00007f9845bd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   32.252529][ T3429] RAX: ffffffffffffffda RBX: 00007f9847115f80 RCX: 00007f9846f5dff9
[   32.260497][ T3429] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f
[   32.268464][ T3429] RBP: 00007f9846fd0296 R08: 0000000000000020 R09: 0000000000000000
[   32.276516][ T3429] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[   32.284530][ T3429] R13: 0000000000000000 R14: 00007f9847115f80 R15: 00007ffd144f23f8
[   32.292575][ T3429]  </TASK>
[   32.295838][ T3429] Mem-Info:
[   32.299104][ T3429] active_anon:15273 inactive_anon:0 isolated_anon:0
[   32.299104][ T3429]  active_file:4338 inactive_file:1936 isolated_file:0
[   32.299104][ T3429]  unevictable:0 dirty:309 writeback:0
[   32.299104][ T3429]  slab_reclaimable:2426 slab_unreclaimable:13111
[   32.299104][ T3429]  mapped:32109 shmem:11807 pagetables:704
[   32.299104][ T3429]  sec_pagetables:0 bounce:0
[   32.299104][ T3429]  kernel_misc_reclaimable:0
[   32.299104][ T3429]  free:1915254 free_pcp:3122 free_cma:0
[   32.344165][ T3443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, 
[   32.344207][ T3429] Node 0 active_anon:61092kB inactive_anon:0kB active_file:17352kB inactive_file:7744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128436kB dirty:1236kB writeback:0kB shmem:47228kB writeback_tmp:0kB kernel_stack:2832kB pagetables:2816kB sec_pagetables:0kB all_unreclaimable? no
[   32.352499][ T3443] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   32.353878][ T3443] EXT4-fs (loop2): Remounting filesystem read-only
[   32.380403][ T3429] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   32.380473][ T3429] lowmem_reserve[]: 0 2866 7844 0
[   32.427239][ T3429] Node 0 DMA32 free:2950276kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[   32.455840][ T3429] lowmem_reserve[]: 0 0 4978 0
[   32.460735][ T3429] Node 0 Normal free:4695380kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:49608kB inactive_anon:0kB active_file:17352kB inactive_file:7744kB unevictable:0kB writepending:1236kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:20364kB local_pcp:6396kB free_cma:0kB
[   32.469751][ T3441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, 
[   32.490947][ T3429] lowmem_reserve[]: 0 0 0 0
[   32.490988][ T3429] Node 0 
[   32.499224][ T3441] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   32.503724][ T3429] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   32.527186][ T3429] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950276kB
[   32.543514][ T3429] Node 0 Normal: 3*4kB (UME) 2*8kB (UM) 2*16kB (UE) 1*32kB (U) 2*64kB (ME) 2*128kB (UE) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1145*4096kB (M) = 4695260kB
[   32.560496][ T3429] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   32.565901][ T3441] EXT4-fs (loop4): Remounting filesystem read-only
[   32.569783][ T3429] 15581 total pagecache pages
[   32.569800][ T3429] 0 pages in swap cache
[   32.569809][ T3429] Free swap  = 124996kB
[   32.589430][ T3429] Total swap = 124996kB
[   32.593595][ T3429] 2097051 pages RAM
[   32.597402][ T3429] 0 pages HighMem/MovableOnly
[   32.602110][ T3429] 80182 pages reserved
[   32.746820][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.749132][ T3458] loop3: detected capacity change from 0 to 8192
[   32.797630][ T3441] syz.4.14 (3441) used greatest stack depth: 10544 bytes left
[   32.813559][ T3458] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.20'.
[   32.817476][ T3274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.849708][ T3464] loop2: detected capacity change from 0 to 2048
[   32.987051][ T3471] loop0: detected capacity change from 0 to 8192
[   32.997669][ T3471] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.25'.
[   33.024356][ T3464] loop2: detected capacity change from 0 to 8192
[   33.057899][ T3477] loop3: detected capacity change from 0 to 2048
[   33.136624][ T3477] loop3: detected capacity change from 0 to 8192
[   33.242124][ T3484] loop1: detected capacity change from 0 to 8192
[   33.282492][ T3484] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.30'.
[   33.345243][ T3488] loop2: detected capacity change from 0 to 8192
[   33.355646][ T3488] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.31'.
[   33.409311][ T3494] loop2: detected capacity change from 0 to 2048
[   33.469008][ T3494] loop2: detected capacity change from 0 to 8192
[   33.698003][ T3504] loop2: detected capacity change from 0 to 2048
[   33.766996][ T3506] program syz.4.39 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   33.814321][ T3508] program syz.1.41 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   33.867799][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'.
[   33.872176][ T3504] loop2: detected capacity change from 0 to 8192
[   33.951359][ T3516] loop0: detected capacity change from 0 to 8192
[   34.055110][ T3525] loop2: detected capacity change from 0 to 128
[   34.064242][ T3525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.076725][ T3525] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.126998][ T3528] loop0: detected capacity change from 0 to 128
[   34.140710][ T3270] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.140747][ T3528] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.162276][ T3528] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.215177][ T3266] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.241810][ T3533] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.316698][ T3535] loop0: detected capacity change from 0 to 8192
[   34.544493][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[   34.554586][ T3546] program syz.2.55 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   34.579182][ T3548] loop2: detected capacity change from 0 to 128
[   34.596887][ T3548] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.610597][ T3548] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.661986][ T3270] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.720046][ T3552] loop2: detected capacity change from 0 to 128
[   34.746318][ T3552] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.764435][ T3552] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.814625][ T3270] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.834691][ T3561] loop1: detected capacity change from 0 to 8192
[   34.969734][ T3576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   34.980182][ T3577] 9pnet_fd: Insufficient options for proto=fd
[   35.004219][ T3577] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   35.012588][ T3577] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   35.388733][   T29] kauditd_printk_skb: 981 callbacks suppressed
[   35.388748][   T29] audit: type=1400 audit(1728006561.815:1103): avc:  denied  { read write } for  pid=3280 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.421258][   T29] audit: type=1400 audit(1728006561.815:1104): avc:  denied  { open } for  pid=3280 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.445475][   T29] audit: type=1400 audit(1728006561.815:1105): avc:  denied  { ioctl } for  pid=3280 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.454167][ T3582] loop3: detected capacity change from 0 to 8192
[   35.471184][   T29] audit: type=1400 audit(1728006561.845:1106): avc:  denied  { append } for  pid=2952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.484663][ T3582] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.67'.
[   35.509162][   T29] audit: type=1400 audit(1728006561.905:1107): avc:  denied  { mounton } for  pid=3581 comm="syz.3.67" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.531773][   T29] audit: type=1400 audit(1728006561.905:1108): avc:  denied  { mount } for  pid=3581 comm="syz.3.67" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   35.553711][   T29] audit: type=1400 audit(1728006561.905:1109): avc:  denied  { name_bind } for  pid=3581 comm="syz.3.67" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   35.575348][   T29] audit: type=1400 audit(1728006561.905:1110): avc:  denied  { node_bind } for  pid=3581 comm="syz.3.67" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   35.606434][   T29] audit: type=1400 audit(1728006561.945:1111): avc:  denied  { perfmon } for  pid=3581 comm="syz.3.67" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   35.627305][   T29] audit: type=1400 audit(1728006561.945:1112): avc:  denied  { prog_run } for  pid=3581 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   35.657179][ T3584] loop4: detected capacity change from 0 to 128
[   35.678895][ T3584] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.691564][ T3584] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   35.726152][ T3588] loop3: detected capacity change from 0 to 8192
[   35.744169][ T3588] bio_check_eod: 22 callbacks suppressed
[   35.744186][ T3588] syz.3.68: attempt to access beyond end of device
[   35.744186][ T3588] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   35.763431][ T3588] buffer_io_error: 22 callbacks suppressed
[   35.763444][ T3588] Buffer I/O error on dev loop3, logical block 57847, async page read
[   35.784568][ T3588] syz.3.68: attempt to access beyond end of device
[   35.784568][ T3588] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   35.797869][ T3588] Buffer I/O error on dev loop3, logical block 57847, async page read
[   35.815849][ T3274] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.822196][ T3588] syz.3.68: attempt to access beyond end of device
[   35.822196][ T3588] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   35.838109][ T3588] Buffer I/O error on dev loop3, logical block 57847, async page read
[   35.864218][ T3588] syz.3.68: attempt to access beyond end of device
[   35.864218][ T3588] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   35.877539][ T3588] Buffer I/O error on dev loop3, logical block 57847, async page read
[   35.893127][ T3598] program syz.4.70 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.909183][ T3599] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   35.917439][ T3599] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   35.995342][ T3605] loop4: detected capacity change from 0 to 8192
[   36.015813][ T3605] syz.4.76: attempt to access beyond end of device
[   36.015813][ T3605] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   36.029115][ T3605] Buffer I/O error on dev loop4, logical block 57847, async page read
[   36.037808][ T3605] syz.4.76: attempt to access beyond end of device
[   36.037808][ T3605] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   36.051217][ T3605] Buffer I/O error on dev loop4, logical block 57847, async page read
[   36.063279][ T3605] syz.4.76: attempt to access beyond end of device
[   36.063279][ T3605] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   36.076548][ T3605] Buffer I/O error on dev loop4, logical block 57847, async page read
[   36.081577][ T3610] loop0: detected capacity change from 0 to 8192
[   36.087059][ T3605] syz.4.76: attempt to access beyond end of device
[   36.087059][ T3605] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   36.104383][ T3605] Buffer I/O error on dev loop4, logical block 57847, async page read
[   36.116952][ T3612] loop3: detected capacity change from 0 to 128
[   36.124342][ T3610] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.78'.
[   36.146508][ T3612] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.158826][ T3612] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   36.174378][ T3615] loop4: detected capacity change from 0 to 512
[   36.205406][ T3615] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.222259][ T3280] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.245690][ T3618] program syz.0.80 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.255052][ T3615] EXT4-fs error (device loop4): ext4_quota_enable:7053: inode #3: comm syz.4.81: iget: bogus i_mode (3200)
[   36.272160][ T3615] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.81: Bad quota inode: 3, type: 0
[   36.284544][ T3615] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   36.315269][ T3274] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   36.684261][ T3650] loop1: detected capacity change from 0 to 128
[   36.707832][ T3650] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.720183][ T3650] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   36.752721][ T3653] 9pnet_fd: Insufficient options for proto=fd
[   36.764609][ T3653] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   36.772921][ T3653] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   36.803280][ T3267] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.893917][ T3661] loop0: detected capacity change from 0 to 8192
[   36.903974][ T3661] __nla_validate_parse: 1 callbacks suppressed
[   36.903986][ T3661] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.98'.
[   37.284998][ T3680] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   37.293297][ T3680] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   37.422003][ T3685] loop4: detected capacity change from 0 to 2048
[   37.471055][ T3685] loop4: detected capacity change from 0 to 8192
[   38.203297][ T3714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[   38.246074][ T3716] loop3: detected capacity change from 0 to 8192
[   38.360145][ T3719] loop3: detected capacity change from 0 to 2048
[   38.421186][ T3719] loop3: detected capacity change from 0 to 8192
[   38.446312][ T3721] loop2: detected capacity change from 0 to 8192
[   38.521721][ T3726] loop4: detected capacity change from 0 to 2048
[   38.780829][ T3753] loop4: detected capacity change from 0 to 2048
[   38.802123][ T3755] program syz.0.130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.848916][ T3753] loop4: detected capacity change from 0 to 8192
[   39.166593][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.174112][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.182480][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.190155][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.303891][ T3784] loop3: detected capacity change from 0 to 2048
[   39.352856][ T3784] loop3: detected capacity change from 0 to 8192
[   39.617304][ T3807] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   39.625537][ T3807] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   39.670041][ T3806] loop3: detected capacity change from 0 to 8192
[   39.831008][ T3819] 9pnet_fd: Insufficient options for proto=fd
[   39.849979][ T3819] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   39.858175][ T3819] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   40.026012][ T3842] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.027452][ T3840] loop0: detected capacity change from 0 to 2048
[   40.085467][ T3844] Zero length message leads to an empty skb
[   40.117440][ T3840] loop0: detected capacity change from 0 to 8192
[   40.401348][   T29] kauditd_printk_skb: 2366 callbacks suppressed
[   40.401362][   T29] audit: type=1326 audit(1728006566.825:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87fcae4fa7 code=0x7ffc0000
[   40.431114][   T29] audit: type=1326 audit(1728006566.825:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87fca89959 code=0x7ffc0000
[   40.454499][   T29] audit: type=1326 audit(1728006566.825:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f87fcaedff9 code=0x7ffc0000
[   40.477813][   T29] audit: type=1326 audit(1728006566.825:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69e01b4fa7 code=0x7ffc0000
[   40.501186][   T29] audit: type=1326 audit(1728006566.825:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69e0159959 code=0x7ffc0000
[   40.524412][   T29] audit: type=1326 audit(1728006566.825:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f69e01bdff9 code=0x7ffc0000
[   40.547654][   T29] audit: type=1326 audit(1728006566.825:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69e01b4fa7 code=0x7ffc0000
[   40.571033][   T29] audit: type=1326 audit(1728006566.825:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69e0159959 code=0x7ffc0000
[   40.594347][   T29] audit: type=1326 audit(1728006566.825:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f69e01bdff9 code=0x7ffc0000
[   40.617967][   T29] audit: type=1326 audit(1728006566.825:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846f5dff9 code=0x7ffc0000
[   40.631241][ T3870] loop3: detected capacity change from 0 to 2048
[   40.674065][ T3872] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 63 (only 8 groups)
[   40.705689][ T3870] loop3: detected capacity change from 0 to 8192
[   40.728762][ T3873] loop4: detected capacity change from 0 to 512
[   41.061461][ T3885] loop1: detected capacity change from 0 to 1024
[   41.069596][ T3885] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   41.079436][ T3885] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   41.093828][ T3885] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.116819][ T3885] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.181: unexpected bad inode w/o EXT4_IGET_BAD
[   41.130369][ T3885] EXT4-fs (loop1): no journal found
[   41.135621][ T3885] EXT4-fs (loop1): can't get journal size
[   41.142258][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.157464][ T3885] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.181: Abort forced by user
[   41.168358][ T3885] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (42152!=20869)
[   41.187975][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.354307][ T3911] loop2: detected capacity change from 0 to 2048
[   41.406824][ T3911] loop2: detected capacity change from 0 to 8192
[   41.479968][ T3922] loop4: detected capacity change from 0 to 2048
[   41.570089][ T3922] loop4: detected capacity change from 0 to 8192
[   41.691984][ T3936] netem: change failed
[   41.710897][ T3938] loop4: detected capacity change from 0 to 1024
[   41.730698][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.754425][ T3938] syzkaller0: entered promiscuous mode
[   41.759998][ T3938] syzkaller0: entered allmulticast mode
[   41.827861][ T3274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.882028][ T3943] loop4: detected capacity change from 0 to 8192
[   42.098589][ T3955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'.
[   42.136444][ T3958] warn_alloc: 9 callbacks suppressed
[   42.136454][ T3958] syz.4.207: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   42.156169][ T3958] CPU: 0 UID: 0 PID: 3958 Comm: syz.4.207 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   42.166773][ T3958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.176840][ T3958] Call Trace:
[   42.180115][ T3958]  <TASK>
[   42.183093][ T3958]  dump_stack_lvl+0xf2/0x150
[   42.187676][ T3958]  dump_stack+0x15/0x20
[   42.191899][ T3958]  warn_alloc+0x145/0x1b0
[   42.196229][ T3958]  ? __vmalloc_node_range_noprof+0x88/0xec0
[   42.202192][ T3958]  ? audit_log_end+0x1d0/0x1e0
[   42.207049][ T3958]  __vmalloc_node_range_noprof+0xaa/0xec0
[   42.212805][ T3958]  ? __rcu_read_unlock+0x4e/0x70
[   42.217835][ T3958]  ? bpf_trace_run4+0x133/0x1e0
[   42.222807][ T3958]  ? xskq_create+0x36/0xd0
[   42.227327][ T3958]  vmalloc_user_noprof+0x59/0x70
[   42.232309][ T3958]  ? xskq_create+0x79/0xd0
[   42.236774][ T3958]  xskq_create+0x79/0xd0
[   42.241059][ T3958]  xsk_init_queue+0x82/0xd0
[   42.245595][ T3958]  xsk_setsockopt+0x409/0x520
[   42.250274][ T3958]  ? __pfx_xsk_setsockopt+0x10/0x10
[   42.255511][ T3958]  __sys_setsockopt+0x1cc/0x240
[   42.260392][ T3958]  __x64_sys_setsockopt+0x66/0x80
[   42.265423][ T3958]  x64_sys_call+0x278d/0x2d60
[   42.270208][ T3958]  do_syscall_64+0xc9/0x1c0
[   42.274714][ T3958]  ? clear_bhb_loop+0x55/0xb0
[   42.279403][ T3958]  ? clear_bhb_loop+0x55/0xb0
[   42.284123][ T3958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.290070][ T3958] RIP: 0033:0x7ff63b8fdff9
[   42.294477][ T3958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.314134][ T3958] RSP: 002b:00007ff63a571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   42.322578][ T3958] RAX: ffffffffffffffda RBX: 00007ff63bab5f80 RCX: 00007ff63b8fdff9
[   42.330553][ T3958] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[   42.338586][ T3958] RBP: 00007ff63b970296 R08: 0000000000000020 R09: 0000000000000000
[   42.346596][ T3958] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[   42.354562][ T3958] R13: 0000000000000000 R14: 00007ff63bab5f80 R15: 00007fffb0ce9e38
[   42.362540][ T3958]  </TASK>
[   42.365700][ T3958] Mem-Info:
[   42.368967][ T3958] active_anon:3891 inactive_anon:0 isolated_anon:0
[   42.368967][ T3958]  active_file:4506 inactive_file:1913 isolated_file:0
[   42.368967][ T3958]  unevictable:0 dirty:390 writeback:0
[   42.368967][ T3958]  slab_reclaimable:2491 slab_unreclaimable:13127
[   42.368967][ T3958]  mapped:20781 shmem:231 pagetables:729
[   42.368967][ T3958]  sec_pagetables:0 bounce:0
[   42.368967][ T3958]  kernel_misc_reclaimable:0
[   42.368967][ T3958]  free:1924399 free_pcp:1580 free_cma:0
[   42.413686][ T3958] Node 0 active_anon:15680kB inactive_anon:0kB active_file:18024kB inactive_file:7652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83124kB dirty:1560kB writeback:0kB shmem:924kB writeback_tmp:0kB kernel_stack:2864kB pagetables:2916kB sec_pagetables:0kB all_unreclaimable? no
[   42.441372][ T3958] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   42.468369][ T3958] lowmem_reserve[]: 0 2866 7844 0
[   42.473438][ T3958] Node 0 DMA32 free:2950276kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[   42.502217][ T3958] lowmem_reserve[]: 0 0 4978 0
[   42.507045][ T3958] Node 0 Normal free:4729912kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:15564kB inactive_anon:0kB active_file:18024kB inactive_file:7652kB unevictable:0kB writepending:1556kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:2540kB local_pcp:520kB free_cma:0kB
[   42.537629][ T3958] lowmem_reserve[]: 0 0 0 0
[   42.542555][ T3958] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   42.555247][ T3958] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950276kB
[   42.571377][ T3958] Node 0 Normal: 374*4kB (UM) 298*8kB (UME) 140*16kB (UME) 174*32kB (UME) 106*64kB (UME) 68*128kB (UME) 47*256kB (UME) 29*512kB (UME) 10*1024kB (UM) 4*2048kB (M) 1137*4096kB (UM) = 4729640kB
[   42.590478][ T3958] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[   42.599811][ T3958] 6677 total pagecache pages
[   42.604414][ T3958] 0 pages in swap cache
[   42.608659][ T3958] Free swap  = 124996kB
[   42.612957][ T3958] Total swap = 124996kB
[   42.617148][ T3958] 2097051 pages RAM
[   42.620966][ T3958] 0 pages HighMem/MovableOnly
[   42.625688][ T3958] 80182 pages reserved
[   42.669104][ T3965] syzkaller0: entered promiscuous mode
[   42.674604][ T3965] syzkaller0: entered allmulticast mode
[   42.687564][ T3964] FAULT_INJECTION: forcing a failure.
[   42.687564][ T3964] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   42.700841][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: syz.1.209 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   42.711642][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.721697][ T3964] Call Trace:
[   42.724984][ T3964]  <TASK>
[   42.727936][ T3964]  dump_stack_lvl+0xf2/0x150
[   42.732568][ T3964]  dump_stack+0x15/0x20
[   42.736716][ T3964]  should_fail_ex+0x223/0x230
[   42.741525][ T3964]  should_fail+0xb/0x10
[   42.745758][ T3964]  should_fail_usercopy+0x1a/0x20
[   42.750811][ T3964]  _copy_from_user+0x1e/0xd0
[   42.755517][ T3964]  copy_msghdr_from_user+0x54/0x2a0
[   42.760727][ T3964]  __sys_sendmsg+0x171/0x270
[   42.765343][ T3964]  __x64_sys_sendmsg+0x46/0x50
[   42.770117][ T3964]  x64_sys_call+0x2689/0x2d60
[   42.774798][ T3964]  do_syscall_64+0xc9/0x1c0
[   42.779362][ T3964]  ? clear_bhb_loop+0x55/0xb0
[   42.784198][ T3964]  ? clear_bhb_loop+0x55/0xb0
[   42.789001][ T3964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.794922][ T3964] RIP: 0033:0x7f87fcaedff9
[   42.799371][ T3964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.819253][ T3964] RSP: 002b:00007f87fb761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   42.827664][ T3964] RAX: ffffffffffffffda RBX: 00007f87fcca5f80 RCX: 00007f87fcaedff9
[   42.835655][ T3964] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000c
[   42.843664][ T3964] RBP: 00007f87fb761090 R08: 0000000000000000 R09: 0000000000000000
[   42.851659][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.859632][ T3964] R13: 0000000000000000 R14: 00007f87fcca5f80 R15: 00007ffd281f2238
[   42.867605][ T3964]  </TASK>
[   42.986185][ T3974] loop3: detected capacity change from 0 to 8192
[   43.107336][ T3997] netlink: 'syz.1.221': attribute type 6 has an invalid length.
[   43.117839][ T3997] xt_hashlimit: size too large, truncated to 1048576
[   43.253470][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[   43.437772][ T4010] netlink: 'syz.1.225': attribute type 6 has an invalid length.
[   43.457237][ T4010] xt_hashlimit: size too large, truncated to 1048576
[   43.457742][ T4012] FAULT_INJECTION: forcing a failure.
[   43.457742][ T4012] name failslab, interval 1, probability 0, space 0, times 0
[   43.476545][ T4012] CPU: 1 UID: 0 PID: 4012 Comm: syz.2.226 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   43.487209][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   43.497271][ T4012] Call Trace:
[   43.500561][ T4012]  <TASK>
[   43.503504][ T4012]  dump_stack_lvl+0xf2/0x150
[   43.508134][ T4012]  dump_stack+0x15/0x20
[   43.512427][ T4012]  should_fail_ex+0x223/0x230
[   43.517204][ T4012]  ? __sigqueue_alloc+0xf6/0x180
[   43.522202][ T4012]  should_failslab+0x8f/0xb0
[   43.526822][ T4012]  kmem_cache_alloc_noprof+0x4c/0x290
[   43.532328][ T4012]  __sigqueue_alloc+0xf6/0x180
[   43.537159][ T4012]  __send_signal_locked+0x139/0x700
[   43.542441][ T4012]  send_signal_locked+0x28f/0x3a0
[   43.547484][ T4012]  do_send_sig_info+0x9f/0xf0
[   43.552186][ T4012]  group_send_sig_info+0x6d/0x90
[   43.557151][ T4012]  bpf_send_signal_common+0x1a5/0x230
[   43.562676][ T4012]  bpf_send_signal_thread+0x16/0x20
[   43.568047][ T4012]  bpf_prog_4c85cdd3a16dba6d+0x23/0x29
[   43.573538][ T4012]  bpf_trace_run2+0x104/0x1d0
[   43.578275][ T4012]  ? kvfree+0x39/0x40
[   43.582285][ T4012]  ? __kmalloc_node_track_caller_noprof+0x21c/0x380
[   43.588976][ T4012]  ? kvfree+0x39/0x40
[   43.593108][ T4012]  kfree+0x247/0x2f0
[   43.597107][ T4012]  kvfree+0x39/0x40
[   43.600942][ T4012]  simple_xattr_free+0x38/0x40
[   43.605750][ T4012]  shmem_xattr_handler_set+0x1a1/0x220
[   43.611218][ T4012]  ? __pfx_shmem_xattr_handler_set+0x10/0x10
[   43.617236][ T4012]  __vfs_setxattr+0x2e5/0x310
[   43.621963][ T4012]  __vfs_setxattr_noperm+0xed/0x420
[   43.627220][ T4012]  __vfs_setxattr_locked+0x1af/0x1d0
[   43.632524][ T4012]  vfs_setxattr+0x140/0x290
[   43.637052][ T4012]  __se_sys_fsetxattr+0x2aa/0x360
[   43.642257][ T4012]  __x64_sys_fsetxattr+0x67/0x80
[   43.647236][ T4012]  x64_sys_call+0x16a5/0x2d60
[   43.651930][ T4012]  do_syscall_64+0xc9/0x1c0
[   43.656448][ T4012]  ? clear_bhb_loop+0x55/0xb0
[   43.661175][ T4012]  ? clear_bhb_loop+0x55/0xb0
[   43.665867][ T4012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.671842][ T4012] RIP: 0033:0x7f9846f5dff9
[   43.676259][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.695871][ T4012] RSP: 002b:00007f9845bd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[   43.704356][ T4012] RAX: ffffffffffffffda RBX: 00007f9847115f80 RCX: 00007f9846f5dff9
[   43.712354][ T4012] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[   43.720338][ T4012] RBP: 00007f9845bd1090 R08: 0000000000000000 R09: 0000000000000000
[   43.728467][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.736450][ T4012] R13: 0000000000000000 R14: 00007f9847115f80 R15: 00007ffd144f23f8
[   43.744440][ T4012]  </TASK>
[   43.886276][ T4016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'.
[   44.017806][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'.
[   44.028615][ T4028] netlink: 124 bytes leftover after parsing attributes in process `syz.3.228'.
[   44.097718][ T4038] program syz.3.234 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   44.140948][ T4046] netlink: 'syz.0.236': attribute type 6 has an invalid length.
[   44.157891][ T4042] loop3: detected capacity change from 0 to 2048
[   44.165532][ T4046] xt_hashlimit: size too large, truncated to 1048576
[   44.217411][ T4047] FAULT_INJECTION: forcing a failure.
[   44.217411][ T4047] name failslab, interval 1, probability 0, space 0, times 0
[   44.230102][ T4047] CPU: 1 UID: 0 PID: 4047 Comm: syz.0.236 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   44.240694][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   44.250847][ T4047] Call Trace:
[   44.254135][ T4047]  <TASK>
[   44.257073][ T4047]  dump_stack_lvl+0xf2/0x150
[   44.261684][ T4047]  dump_stack+0x15/0x20
[   44.265862][ T4047]  should_fail_ex+0x223/0x230
[   44.270576][ T4047]  ? __alloc_skb+0x10b/0x310
[   44.275248][ T4047]  should_failslab+0x8f/0xb0
[   44.279856][ T4047]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   44.285694][ T4047]  __alloc_skb+0x10b/0x310
[   44.290140][ T4047]  __ip6_append_data+0x1814/0x2170
[   44.295289][ T4047]  ? __pfx_raw6_getfrag+0x10/0x10
[   44.300374][ T4047]  ? __rcu_read_unlock+0x4e/0x70
[   44.305354][ T4047]  ? __rcu_read_unlock+0x4e/0x70
[   44.310316][ T4047]  ? ip6_mtu+0xfb/0x120
[   44.314558][ T4047]  ? __pfx_ip6_mtu+0x10/0x10
[   44.319157][ T4047]  ip6_append_data+0x1bc/0x260
[   44.323982][ T4047]  ? __pfx_raw6_getfrag+0x10/0x10
[   44.329026][ T4047]  rawv6_sendmsg+0xd87/0xf50
[   44.333704][ T4047]  ? __pfx_rawv6_sendmsg+0x10/0x10
[   44.338845][ T4047]  inet_sendmsg+0xc5/0xd0
[   44.343315][ T4047]  __sock_sendmsg+0x102/0x180
[   44.348015][ T4047]  ____sys_sendmsg+0x312/0x410
[   44.352977][ T4047]  __sys_sendmsg+0x1d9/0x270
[   44.357659][ T4047]  __x64_sys_sendmsg+0x46/0x50
[   44.362511][ T4047]  x64_sys_call+0x2689/0x2d60
[   44.367212][ T4047]  do_syscall_64+0xc9/0x1c0
[   44.371734][ T4047]  ? clear_bhb_loop+0x55/0xb0
[   44.376448][ T4047]  ? clear_bhb_loop+0x55/0xb0
[   44.381190][ T4047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.387120][ T4047] RIP: 0033:0x7f69e01bdff9
[   44.391551][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.411199][ T4047] RSP: 002b:00007f69dee10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.419689][ T4047] RAX: ffffffffffffffda RBX: 00007f69e0376058 RCX: 00007f69e01bdff9
[   44.427734][ T4047] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000005
[   44.435727][ T4047] RBP: 00007f69dee10090 R08: 0000000000000000 R09: 0000000000000000
[   44.443705][ T4047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.451717][ T4047] R13: 0000000000000000 R14: 00007f69e0376058 R15: 00007ffecf3924f8
[   44.459713][ T4047]  </TASK>
[   44.515526][ T4042] loop3: detected capacity change from 0 to 8192
[   44.528721][ T4056] FAULT_INJECTION: forcing a failure.
[   44.528721][ T4056] name failslab, interval 1, probability 0, space 0, times 0
[   44.541519][ T4056] CPU: 1 UID: 0 PID: 4056 Comm: syz.0.242 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   44.552130][ T4056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   44.562291][ T4056] Call Trace:
[   44.565572][ T4056]  <TASK>
[   44.568507][ T4056]  dump_stack_lvl+0xf2/0x150
[   44.573126][ T4056]  dump_stack+0x15/0x20
[   44.577294][ T4056]  should_fail_ex+0x223/0x230
[   44.582048][ T4056]  ? audit_log_d_path+0x96/0x250
[   44.586992][ T4056]  should_failslab+0x8f/0xb0
[   44.591642][ T4056]  __kmalloc_cache_noprof+0x4b/0x2a0
[   44.597008][ T4056]  audit_log_d_path+0x96/0x250
[   44.601795][ T4056]  ? get_file_rcu+0xeb/0x100
[   44.606462][ T4056]  ? __rcu_read_unlock+0x4e/0x70
[   44.611468][ T4056]  audit_log_d_path_exe+0x42/0x70
[   44.616515][ T4056]  audit_log_task+0x155/0x180
[   44.621192][ T4056]  audit_seccomp+0x68/0x130
[   44.625711][ T4056]  __seccomp_filter+0x6fa/0x1180
[   44.630690][ T4056]  ? proc_fail_nth_write+0x12a/0x150
[   44.636063][ T4056]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   44.641748][ T4056]  ? __rcu_read_unlock+0x4e/0x70
[   44.646717][ T4056]  ? __fget_files+0x1d4/0x210
[   44.651461][ T4056]  __secure_computing+0x9f/0x1c0
[   44.656461][ T4056]  syscall_trace_enter+0xd1/0x1f0
[   44.661509][ T4056]  do_syscall_64+0xaa/0x1c0
[   44.666043][ T4056]  ? clear_bhb_loop+0x55/0xb0
[   44.670734][ T4056]  ? clear_bhb_loop+0x55/0xb0
[   44.675592][ T4056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.681498][ T4056] RIP: 0033:0x7f69e01bca3c
[   44.685913][ T4056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   44.705532][ T4056] RSP: 002b:00007f69dee31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.713965][ T4056] RAX: ffffffffffffffda RBX: 00007f69e0375f80 RCX: 00007f69e01bca3c
[   44.722003][ T4056] RDX: 000000000000000f RSI: 00007f69dee310a0 RDI: 0000000000000003
[   44.729972][ T4056] RBP: 00007f69dee31090 R08: 0000000000000000 R09: 0000000000000000
[   44.738007][ T4056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.745973][ T4056] R13: 0000000000000000 R14: 00007f69e0375f80 R15: 00007ffecf3924f8
[   44.753966][ T4056]  </TASK>
[   44.825546][ T4069] program syz.3.247 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   44.863985][ T4076] rtc_cmos 00:00: Alarms can be up to one day in the future
[   44.895105][ T4080] syz.0.252[4080] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.895220][ T4080] syz.0.252[4080] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.908276][ T4080] syz.0.252[4080] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.937672][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[   44.949083][ T4087] loop3: detected capacity change from 0 to 2048
[   45.018037][ T4087] loop3: detected capacity change from 0 to 8192
[   45.123803][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.131060][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.144745][ T4100] bridge_slave_1: left allmulticast mode
[   45.150656][ T4100] bridge_slave_1: left promiscuous mode
[   45.156325][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.164903][ T4100] bridge_slave_0: left allmulticast mode
[   45.170657][ T4100] bridge_slave_0: left promiscuous mode
[   45.176276][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.220192][ T4106] netlink: 140 bytes leftover after parsing attributes in process `syz.0.259'.
[   45.248998][ T4109] FAULT_INJECTION: forcing a failure.
[   45.248998][ T4109] name failslab, interval 1, probability 0, space 0, times 0
[   45.261776][ T4109] CPU: 1 UID: 0 PID: 4109 Comm: syz.4.261 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   45.272379][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   45.282434][ T4109] Call Trace:
[   45.285712][ T4109]  <TASK>
[   45.288637][ T4109]  dump_stack_lvl+0xf2/0x150
[   45.293345][ T4109]  dump_stack+0x15/0x20
[   45.297505][ T4109]  should_fail_ex+0x223/0x230
[   45.302193][ T4109]  ? dst_alloc+0xc0/0x100
[   45.306553][ T4109]  should_failslab+0x8f/0xb0
[   45.311235][ T4109]  kmem_cache_alloc_noprof+0x4c/0x290
[   45.316714][ T4109]  ? xa_load+0xb9/0xe0
[   45.320837][ T4109]  dst_alloc+0xc0/0x100
[   45.325038][ T4109]  ip_route_input_rcu+0xbb5/0x1c10
[   45.330162][ T4109]  ? __list_del_entry_valid_or_report+0x5f/0xf0
[   45.336460][ T4109]  ? __rmqueue_pcplist+0xe8a/0x1030
[   45.341696][ T4109]  ? ipt_do_table+0x9f7/0xab0
[   45.346501][ T4109]  ? ipt_do_table+0x16f/0xab0
[   45.351190][ T4109]  ip_route_input_noref+0x63/0xa0
[   45.356229][ T4109]  ip_rcv_finish_core+0x304/0xb20
[   45.361352][ T4109]  ? __pfx_ip_rcv+0x10/0x10
[   45.365889][ T4109]  ip_rcv_finish+0xfe/0x1b0
[   45.370455][ T4109]  ? __pfx_ip_rcv+0x10/0x10
[   45.375021][ T4109]  ip_rcv+0x64/0x140
[   45.378920][ T4109]  ? __pfx_ip_rcv_finish+0x10/0x10
[   45.384036][ T4109]  ? __pfx_ip_rcv+0x10/0x10
[   45.388543][ T4109]  __netif_receive_skb+0x10a/0x280
[   45.393680][ T4109]  netif_receive_skb+0x4a/0x320
[   45.398543][ T4109]  ? virtio_net_hdr_to_skb+0x6d4/0xb90
[   45.404036][ T4109]  ? tun_rx_batched+0xba/0x410
[   45.408806][ T4109]  tun_rx_batched+0xf0/0x410
[   45.413448][ T4109]  tun_get_user+0x1eaf/0x24e0
[   45.418134][ T4109]  ? ref_tracker_alloc+0x1f5/0x2f0
[   45.423338][ T4109]  tun_chr_write_iter+0x188/0x240
[   45.428368][ T4109]  vfs_write+0x76a/0x910
[   45.432635][ T4109]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   45.438239][ T4109]  ksys_write+0xeb/0x1b0
[   45.442612][ T4109]  __x64_sys_write+0x42/0x50
[   45.447210][ T4109]  x64_sys_call+0x27dd/0x2d60
[   45.451895][ T4109]  do_syscall_64+0xc9/0x1c0
[   45.456410][ T4109]  ? clear_bhb_loop+0x55/0xb0
[   45.461567][ T4109]  ? clear_bhb_loop+0x55/0xb0
[   45.466357][ T4109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.472305][ T4109] RIP: 0033:0x7ff63b8fcadf
[   45.476718][ T4109] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[   45.496439][ T4109] RSP: 002b:00007ff63a571000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   45.504992][ T4109] RAX: ffffffffffffffda RBX: 00007ff63bab5f80 RCX: 00007ff63b8fcadf
[   45.512965][ T4109] RDX: 000000000000003e RSI: 0000000020000500 RDI: 00000000000000c8
[   45.520940][ T4109] RBP: 00007ff63a571090 R08: 0000000000000000 R09: 0000000000000000
[   45.528914][ T4109] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[   45.536933][ T4109] R13: 0000000000000000 R14: 00007ff63bab5f80 R15: 00007fffb0ce9e38
[   45.544981][ T4109]  </TASK>
[   45.557881][   T29] kauditd_printk_skb: 9417 callbacks suppressed
[   45.557899][   T29] audit: type=1326 audit(1728006571.975:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87fcae4fa7 code=0x7ffc0000
[   45.587914][   T29] audit: type=1326 audit(1728006571.975:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87fca89959 code=0x7ffc0000
[   45.588023][   T29] audit: type=1326 audit(1728006571.975:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f87fcaedff9 code=0x7ffc0000
[   45.590540][ T4115] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   45.612759][   T29] audit: type=1326 audit(1728006572.015:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a41ffdff9 code=0x7ffc0000
[   45.612792][   T29] audit: type=1326 audit(1728006572.015:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a41ffdff9 code=0x7ffc0000
[   45.636122][ T4115] audit: out of memory in audit_log_start
[   45.643718][   T29] audit: type=1326 audit(1728006572.015:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8a41ffdff9 code=0x7ffc0000
[   45.719711][   T29] audit: type=1326 audit(1728006572.015:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a41ffdff9 code=0x7ffc0000
[   45.743434][   T29] audit: type=1326 audit(1728006572.015:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8a41ffdff9 code=0x7ffc0000
[   45.806904][ T4118] loop3: detected capacity change from 0 to 2048
[   45.807682][ T4126] loop2: detected capacity change from 0 to 2048
[   45.840222][ T4118] Alternate GPT is invalid, using primary GPT.
[   45.846479][ T4118]  loop3: p1 p2 p3
[   45.865674][ T4126] loop2: detected capacity change from 0 to 8192
[   46.157962][ T4149] syz.3.277(4149): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   46.250990][ T4153] program syz.3.279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   46.278794][ T4155] loop3: detected capacity change from 0 to 512
[   46.285584][ T4155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   46.297746][ T4155] EXT4-fs (loop3): 1 truncate cleaned up
[   46.304009][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.326951][ T3280] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.592928][ T4177] FAULT_INJECTION: forcing a failure.
[   46.592928][ T4177] name failslab, interval 1, probability 0, space 0, times 0
[   46.605629][ T4177] CPU: 0 UID: 0 PID: 4177 Comm: syz.1.289 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   46.616287][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   46.626406][ T4177] Call Trace:
[   46.629603][ T4175] loop3: detected capacity change from 0 to 8192
[   46.629682][ T4177]  <TASK>
[   46.629693][ T4177]  dump_stack_lvl+0xf2/0x150
[   46.643544][ T4177]  dump_stack+0x15/0x20
[   46.647717][ T4177]  should_fail_ex+0x223/0x230
[   46.652420][ T4177]  ? __alloc_skb+0x10b/0x310
[   46.657105][ T4177]  should_failslab+0x8f/0xb0
[   46.661752][ T4177]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   46.667664][ T4177]  __alloc_skb+0x10b/0x310
[   46.672165][ T4177]  audit_log_start+0x368/0x6b0
[   46.676976][ T4177]  ? kmem_cache_free+0xdc/0x2d0
[   46.681857][ T4177]  audit_seccomp+0x4b/0x130
[   46.686395][ T4177]  __seccomp_filter+0x6fa/0x1180
[   46.691371][ T4177]  ? __perf_event_task_sched_out+0x111/0xfe0
[   46.697450][ T4177]  ? __dequeue_entity+0x22/0x310
[   46.702451][ T4177]  __secure_computing+0x9f/0x1c0
[   46.707415][ T4177]  syscall_trace_enter+0xd1/0x1f0
[   46.712528][ T4177]  do_syscall_64+0xaa/0x1c0
[   46.717044][ T4177]  ? clear_bhb_loop+0x55/0xb0
[   46.721777][ T4177]  ? clear_bhb_loop+0x55/0xb0
[   46.726519][ T4177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.732437][ T4177] RIP: 0033:0x7f87fcaeca3c
[   46.736883][ T4177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   46.756544][ T4177] RSP: 002b:00007f87fb761030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   46.764986][ T4177] RAX: ffffffffffffffda RBX: 00007f87fcca5f80 RCX: 00007f87fcaeca3c
[   46.772961][ T4177] RDX: 000000000000000f RSI: 00007f87fb7610a0 RDI: 0000000000000005
[   46.781039][ T4177] RBP: 00007f87fb761090 R08: 0000000000000000 R09: 0000000000000000
[   46.789030][ T4177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.797053][ T4177] R13: 0000000000000000 R14: 00007f87fcca5f80 R15: 00007ffd281f2238
[   46.805192][ T4177]  </TASK>
[   46.814975][ T4179] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   46.821518][ T4179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   46.829268][ T4179] vhci_hcd vhci_hcd.0: Device attached
[   46.836499][ T4180] vhci_hcd: unknown pdu 2
[   46.843835][   T37] vhci_hcd: stop threads
[   46.848134][   T37] vhci_hcd: release socket
[   46.852768][   T37] vhci_hcd: disconnect device
[   46.868785][ T4183] program syz.3.290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   46.893681][ T4185] loop1: detected capacity change from 0 to 128
[   46.930175][ T4185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.943601][ T4185] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   47.056006][ T3267] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.458507][ T4225] loop0: detected capacity change from 0 to 8192
[   47.516594][ T4229] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   47.880329][ T4253] loop0: detected capacity change from 0 to 8192
[   47.912265][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.919810][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.934481][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.942020][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.003981][ T4269] program syz.1.327 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.036392][ T4274] 9pnet_fd: Insufficient options for proto=fd
[   48.049017][ T4274] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   48.057255][ T4274] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   48.080436][ T4280] loop1: detected capacity change from 0 to 512
[   48.087266][ T4280] ext4: Unknown parameter 'resui'
[   48.121937][ T4279] lo speed is unknown, defaulting to 1000
[   48.128249][ T4279] lo speed is unknown, defaulting to 1000
[   48.135793][ T4279] lo speed is unknown, defaulting to 1000
[   48.143337][ T4279] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   48.153349][ T4279] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   48.165253][ T4290] loop0: detected capacity change from 0 to 8192
[   48.171054][ T4279] lo speed is unknown, defaulting to 1000
[   48.179118][ T4279] lo speed is unknown, defaulting to 1000
[   48.185525][ T4279] lo speed is unknown, defaulting to 1000
[   48.191857][ T4279] lo speed is unknown, defaulting to 1000
[   48.198065][ T4279] lo speed is unknown, defaulting to 1000
[   48.712600][ T4298] loop2: detected capacity change from 0 to 1024
[   48.719638][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   48.729513][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   48.739179][ T4298] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   48.749863][ T4298] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.338: unexpected bad inode w/o EXT4_IGET_BAD
[   48.763095][ T4298] EXT4-fs (loop2): no journal found
[   48.768407][ T4298] EXT4-fs (loop2): can't get journal size
[   48.775200][ T4298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.794291][ T4298] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.338: Abort forced by user
[   48.804610][ T4298] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (42152!=20869)
[   48.824193][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.072924][ T4335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'.
[   49.092096][ T4322] loop2: detected capacity change from 0 to 8192
[   49.134733][ T4341] 9pnet_fd: Insufficient options for proto=fd
[   49.134766][ T4340] 9pnet_fd: Insufficient options for proto=fd
[   49.148497][ T4341] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   49.156697][ T4341] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   49.229209][ T4349] loop2: detected capacity change from 0 to 2048
[   49.273283][ T4349] loop2: detected capacity change from 0 to 8192
[   49.795620][ T4355] ==================================================================
[   49.803708][ T4355] BUG: KCSAN: data-race in hrtimer_interrupt / print_tickdevice
[   49.811372][ T4355] 
[   49.813687][ T4355] write to 0xffff888237c1c218 of 8 bytes by interrupt on cpu 0:
[   49.821324][ T4355]  hrtimer_interrupt+0x80/0x7b0
[   49.826184][ T4355]  __sysvec_apic_timer_interrupt+0x5c/0x1a0
[   49.832092][ T4355]  sysvec_apic_timer_interrupt+0x6e/0x80
[   49.837726][ T4355]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   49.843724][ T4355]  acpi_safe_halt+0x21/0x30
[   49.848238][ T4355]  acpi_idle_do_entry+0x1d/0x30
[   49.853084][ T4355]  acpi_idle_enter+0x96/0xb0
[   49.857689][ T4355]  cpuidle_enter_state+0xc5/0x260
[   49.862794][ T4355]  cpuidle_enter+0x40/0x70
[   49.867222][ T4355]  do_idle+0x195/0x230
[   49.871316][ T4355]  cpu_startup_entry+0x25/0x30
[   49.876098][ T4355]  rest_init+0xef/0xf0
[   49.880187][ T4355]  start_kernel+0x586/0x5e0
[   49.884707][ T4355]  x86_64_start_reservations+0x2a/0x30
[   49.890196][ T4355]  x86_64_start_kernel+0x9a/0xa0
[   49.895152][ T4355]  common_startup_64+0x12c/0x137
[   49.900123][ T4355] 
[   49.902457][ T4355] read to 0xffff888237c1c218 of 8 bytes by task 4355 on cpu 1:
[   49.910008][ T4355]  print_tickdevice+0x144/0x340
[   49.914885][ T4355]  timer_list_show+0x79/0x180
[   49.919613][ T4355]  seq_read_iter+0x2d1/0x930
[   49.924237][ T4355]  proc_reg_read_iter+0x118/0x190
[   49.929297][ T4355]  copy_splice_read+0x3a0/0x5d0
[   49.934160][ T4355]  splice_direct_to_actor+0x269/0x670
[   49.939552][ T4355]  do_splice_direct+0xd7/0x150
[   49.944330][ T4355]  do_sendfile+0x39b/0x970
[   49.948765][ T4355]  __x64_sys_sendfile64+0x110/0x150
[   49.953980][ T4355]  x64_sys_call+0xed5/0x2d60
[   49.958600][ T4355]  do_syscall_64+0xc9/0x1c0
[   49.963110][ T4355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.969038][ T4355] 
[   49.969042][ T4355] value changed: 0x0000000b978d2d98 -> 0x7fffffffffffffff
[   49.969053][ T4355] 
[   49.969057][ T4355] Reported by Kernel Concurrency Sanitizer on:
[   49.969064][ T4355] CPU: 1 UID: 0 PID: 4355 Comm: syz.2.358 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[   49.969088][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   49.969099][ T4355] ==================================================================
[   50.034123][ T4365] loop4: detected capacity change from 0 to 8192