last executing test programs:

21.750586414s ago: executing program 2 (id=3):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = epoll_create1(0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioperm(0x8, 0x401, 0x1000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$sg(0x0, 0x0, 0x20c02)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r7, 0x0)
read(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000080), &(0x7f0000000340)='%pS    \x00'}, 0x20)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32)
writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0})
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000000)={0xe000202b})

20.222273699s ago: executing program 2 (id=17):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x88}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c84}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000500)=""/17, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x1], &(0x7f0000000680)=[{0x3, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r5}, 0x10)
pivot_root(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r6)

19.913334038s ago: executing program 2 (id=25):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10)
move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440", 0x21)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x98)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000009c0)={0x53, 0xfffffffffffffffb, 0xb1, 0x5, @scatter={0xa, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/134, 0x86}]}, &(0x7f00000008c0)="a1e562b4163a3cf338520ff2573618f224249f939d5c2adb3c98596220946ea654ee216605ec63b90d6c536fca29117916ba1807366525728f68ca55177f1163bfca3f79fbb0dc4c7c73f88cc5b0558dd5aa4d87975a3785701f73b4412c3b0a29e376cfa4fa2b394619a674c3b52f5e0fe22c8516315a4d3798c5cc0e6aa31c7724e54f8f8cca39fa47aa6e140f3f845c26fb147d8b2d8ff4e31cf30b768d4aada090f18bd012318e311e2d2376342fa6", &(0x7f0000002000)=""/4096, 0x5, 0x10005, 0x1, &(0x7f0000000980)})
pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x8000c61)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

19.570001097s ago: executing program 2 (id=30):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
statx(0xffffffffffffffff, 0x0, 0x800, 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000b000000000000006cf021a1713f1dae437d0b48e27b1ea19075f7bd02f743a89750669a264c5fa92f0ce34b214629295224d2e870", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="a382666f6c4e35205e7aa3b1c4ce4fc2d3328fb71b0b60b00e5dc2442c86cd7a22caccce89c5b94308b254d39efa732c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c010)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

8.420972949s ago: executing program 2 (id=160):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2210808, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x5, 0x329, &(0x7f00000000c0)="$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")
r1 = socket(0x8, 0x2, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2b}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf539}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r5=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={<r6=>0x0, @private, @private}, &(0x7f0000000600)=0xc)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0x1, 0x200007, 0x4, 0x6, 0x4, "ea082b0100000063f700ecffff0500"})
r8 = dup(r7)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x11, &(0x7f0000000680)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0x5, 0x6, 0x3, 0x1c, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @ldst={0x3, 0x1, 0x2, 0x9, 0x8, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x4, 0x7, 0x6, 0x9, 0xfffff5a9}], &(0x7f0000000540)='syzkaller\x00', 0xf639, 0xf2, &(0x7f0000000740)=""/242, 0x41000, 0x2a, '\x00', r6, @fallback=0x1, r8, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xc, 0xd4, 0x7}, 0x10, 0x0, r4, 0x2, &(0x7f00000008c0)=[r5, r5, r2, 0x1, r5], &(0x7f0000000900)=[{0x1, 0x3, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x1}], 0x10, 0x90000, @void, @value}, 0x94)

8.420373269s ago: executing program 32 (id=160):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2210808, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x5, 0x329, &(0x7f00000000c0)="$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")
r1 = socket(0x8, 0x2, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2b}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf539}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r5=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={<r6=>0x0, @private, @private}, &(0x7f0000000600)=0xc)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0x1, 0x200007, 0x4, 0x6, 0x4, "ea082b0100000063f700ecffff0500"})
r8 = dup(r7)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x11, &(0x7f0000000680)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0x5, 0x6, 0x3, 0x1c, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @ldst={0x3, 0x1, 0x2, 0x9, 0x8, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x4, 0x7, 0x6, 0x9, 0xfffff5a9}], &(0x7f0000000540)='syzkaller\x00', 0xf639, 0xf2, &(0x7f0000000740)=""/242, 0x41000, 0x2a, '\x00', r6, @fallback=0x1, r8, 0x8, &(0x7f0000000840)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xc, 0xd4, 0x7}, 0x10, 0x0, r4, 0x2, &(0x7f00000008c0)=[r5, r5, r2, 0x1, r5], &(0x7f0000000900)=[{0x1, 0x3, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x1}], 0x10, 0x90000, @void, @value}, 0x94)

3.880045054s ago: executing program 4 (id=220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x9}, 0x18)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000000)='./file1\x00', 0x1c927e, 0xb4)
fallocate(r2, 0x1, 0x0, 0x1001f0)

3.687135993s ago: executing program 4 (id=226):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000007})
close_range(r0, 0xffffffffffffffff, 0x0)

3.555413813s ago: executing program 4 (id=232):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x88}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c84}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000500)=""/17, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x1], &(0x7f0000000680)=[{0x3, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10)
pivot_root(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)

3.304394342s ago: executing program 4 (id=236):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0)

3.298034041s ago: executing program 3 (id=237):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
statx(0xffffffffffffffff, 0x0, 0x800, 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000b000000000000006cf021a1713f1dae437d0b48e27b1ea19075f7bd02f743a89750669a264c5fa92f0ce34b214629295224d2e870", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="a382666f6c4e35205e7aa3b1c4ce4fc2d3328fb71b0b60b00e5dc2442c86cd7a22caccce89c5b94308b254d39efa732c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

3.260206751s ago: executing program 4 (id=238):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044045}, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"])
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000994000000b"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = socket(0x10, 0x80003, 0x0)
write(r10, &(0x7f0000000000)="850000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
dup2(r7, r10)
lseek(r6, 0x2, 0x0)
ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r4, 0x2000)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.218603651s ago: executing program 4 (id=240):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f252", 0x74, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="fe1121", 0x3}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0), 0xfe, 0x483, &(0x7f0000000d40)="$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")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000000000000040000000100006e29f60000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x922, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001f110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe02313615b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7b09413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ecbe5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd20abc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e00"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xec4, 0x30, 0x1, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x0)
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
syz_io_uring_setup(0x39, &(0x7f00000007c0)={0x0, 0xe7b7, 0x13500, 0xfffffffe, 0x2cc}, &(0x7f0000000240), &(0x7f0000001880))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9)

3.142109621s ago: executing program 3 (id=242):
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
personality(0x400000d)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/375], 0x12, 0x9ef, &(0x7f0000000e40)="$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")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000004000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)
fstatfs(r1, &(0x7f00000030c0)=""/4094)

3.049542031s ago: executing program 3 (id=244):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x2000, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

2.85125244s ago: executing program 3 (id=247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0)

2.746529949s ago: executing program 0 (id=248):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x88}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c84}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000500)=""/17, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x1], &(0x7f0000000680)=[{0x3, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10)
pivot_root(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)

2.606557149s ago: executing program 3 (id=250):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x32b302, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$unix(0x1, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.376387138s ago: executing program 0 (id=254):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfd4b)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = timerfd_create(0x0, 0x0)
timerfd_gettime(r2, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000004c0))
setregid(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x200)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000001200)=<r7=>0x0, &(0x7f0000001040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1})
io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e01, @local}, 0x10)
sendmsg$rds(r9, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r10)

2.245439248s ago: executing program 5 (id=257):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
unshare(0x62040200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/260, 0x104}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './bus', [{0x20, 'workdir-\xf4\x9a\xcd2\x89\xb7\xb7\x85\xd6\xe4\xb1\x00\x0fh\x888\x9fI\xcf\x82\xddJZ\x80y\xf4K\a=\x8d\xfd\x84w\x19v2A\xca@\xed\x92\xb6\xe1\xda\x91\x95\x94\xf8@\x9d\x80\xbf)B\xb8\x85\x84T\x9aN\xc7X\xee\x80q\x1a8\x980\x1f!n\xd5\xee\xea!\xef\x1b\xe9\xfa9h>r\xbc\xfa\vA\xc8\xfc\xb7\x00*\xd4\x80d;y\xb6\b\xdf\xe2\xae\x1a\x96\n \xb0\xb3*\x03`\x11\xc0\xc1\xc3*\xb1\x90\xd2dR\x9d\x92`\xd1\xe9\xf4\xef\xc1\xf2\xf1v\x1e\xc2\x05\xdb\xfd\xfe#(\xb6Z\x9c\xc8\x0e\xb4\xc1p\x11\xd7\xe7:0\xa7\xa0\xbd\xf2\x11\xa3s\xa8N 5\x05\x067\x90\x05\xb5\x0e\x1e\xb7\xdc\xfb\x1b\xb7\x8d\x9frNd\x1c\xa5a\x1a9\x8e\xa1\xf3}A\x19\xe9\a\x14\xdf_\xe72\x12#pj\xac/m\f\xfe\x9c_M\x1b\x85<\xe2\xfd9\xc9\xb0\xad\xe4Re\xfb+\x94\x9eT\x0eo\xf9Yc\x05\xa1b2\x94?\xbdnt\xd2'}]}, 0x107)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="082b4a2fe3a502163d91bfda79320100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000020000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x2000, 0x0)
unshare(0x8000000)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

2.188341128s ago: executing program 1 (id=258):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)

2.117193788s ago: executing program 1 (id=259):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x7800, 0x5, 0x7, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x68, 0x0, 0x80, 0x4, 0x0, @loopback, @broadcast, {[@rr={0x7, 0xb, 0x35, [@local, @local]}, @timestamp={0x44, 0x2c, 0x6a, 0x0, 0xf, [0x1, 0x1ff, 0x3, 0x8, 0x0, 0xd, 0x8, 0x1, 0x2, 0x1]}, @rr={0x7, 0xf, 0x1e, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x6, "6121b069"}, {0x2, 0x10, "cf507ed8f99f0d41d411d4f486a4"}]}, @end, @end]}}}}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', <r4=>0x0, 0x0, 0x700, 0x7fffffff, 0x5, {{0x16, 0x4, 0x2, 0x1e, 0x58, 0x65, 0x0, 0xc, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x86, 0x2}, @noop, @cipso={0x86, 0x40, 0x3, [{0x1, 0x4, "12e4"}, {0x2, 0x11, "64b39993ca1c3aede57f0e554c3f60"}, {0x2, 0x7, "1966621c52"}, {0x6, 0x7, "0f14c3ca95"}, {0x5, 0x9, "f22c361b5486dd"}, {0x3, 0xe, "aed5f9147afa1d44f4be8c96"}]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7fffffff, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff9f488ca64cfb13cbc1146594feffffb7020000080000001823000091d2541b3f75cf80403851b0575fb5bfbe853e7264a830f32f6e66b1566dc46e6d588281b0e40c485c52102bfba4a2", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x34, '\x00', r4, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x40, 0x0, 0x5, 0x1, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @generic={0x2, 0x7, 0x5, 0xfe27, 0x5dad}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @generic={0x4, 0x2, 0x4, 0x3, 0x7}], &(0x7f0000000000)='GPL\x00', 0x7, 0x34, &(0x7f0000000040)=""/52, 0x40f00, 0x40, '\x00', r2, @cgroup_sysctl=0x12, r3, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xd, 0x8, 0x1}, 0x10, r5, r1, 0x0, &(0x7f0000000300)=[r0, r0], 0x0, 0x10, 0x5, @void, @value}, 0x94)

2.116883038s ago: executing program 1 (id=260):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0)

2.098343627s ago: executing program 1 (id=261):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0)

2.066736738s ago: executing program 1 (id=262):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044045}, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"])
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000994000000b"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = socket(0x10, 0x80003, 0x0)
write(r10, &(0x7f0000000000)="850000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
dup2(r7, r10)
lseek(r6, 0x2, 0x0)
ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x5)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r4, 0x2000)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.991857167s ago: executing program 1 (id=263):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000840), 0x2, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000002b00), 0x2, 0x0)
close(r3)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffffff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.900164177s ago: executing program 5 (id=264):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x88}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c84}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000500)=""/17, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x1], &(0x7f0000000680)=[{0x3, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10)
pivot_root(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)

1.745235906s ago: executing program 3 (id=265):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xff2e)
write$binfmt_script(r1, 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x2, @thr={&(0x7f0000000340)="97113ed2c481f744ad0123f7e051cc7d98bc325d9e72b1345a27f3ac2be7337dc1854f2a17fbc724e782abe7144df8b315b2846f4fe0fd3fc97b6a1eceae054b80762c6451135a7fa66fdbb9ef6363c8f7b8fdf2254eeb2e08d56027cf4793dcdc535ac1efc97366d82e6eb0f0a590db1a3325d9b6887afde701c6c2f5bed1b3", &(0x7f00000003c0)="571da429262b1efce23f160ee78694b313555540f9d3719a0d8defc94ac3b8ab82d9f7ee2a5e17d250cc2a7a32df744aa3532e7a3911739366ee24afad3b43a2858af84d67aeace3479e2d1ea098781c51e38cf276923b3c10eaa4405e69b74374cc27909cc9c74dc195093a387dd841a32f6bee2b986ad6e5b9ca6644bcfb9cc86e5426ea30b97f3beef1a99b3d02b6d2de036deb85fe0714003cd55fdac4680634de490007cd6ac7dcc2d4f410957c37059eab39bd8b2cd015b921a29fcacc8e6fc4390994e8d871de01bcde8e389e8f759eea403f8d9206211ab043b03e7a686051784290c8b1daa1d89da0"}}, &(0x7f00000001c0)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000580))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000080)={[{@nobarrier}, {@block_validity}, {@debug}, {@jqfmt_vfsv1}]}, 0x8, 0x51d, &(0x7f0000000a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.574567036s ago: executing program 5 (id=266):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0xb94d, 0x4)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18)

1.530817575s ago: executing program 5 (id=267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x1, 0x1}, {0x4}}, {{0x3, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, 0x0, 0x10)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f0, 0x10, 0x3, 0x2eb}, &(0x7f00000003c0), &(0x7f0000000280)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, 0x0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x200400c5)
fchdir(0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000013000100000040030000000007000000", @ANYRES32=r6, @ANYBLOB="000000000098280024001a80200005801c00018008000200000000000800010000000000080003"], 0x44}}, 0x0)

1.496139586s ago: executing program 0 (id=268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14"], 0x28}}, 0x0) (fail_nth: 6)

1.313233175s ago: executing program 5 (id=269):
unlink(&(0x7f0000000000)='.\x00')
r0 = inotify_init1(0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x12000021)

1.071523854s ago: executing program 0 (id=270):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) (fail_nth: 4)

682.280912ms ago: executing program 5 (id=271):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000280)={<r9=>0xffffffffffffffff})
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000002c0)=@req={0x2, 0x0, 0x1, 0x9}, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r10, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)

457.181862ms ago: executing program 0 (id=272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x801, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000280)=""/127, &(0x7f0000000080)=0x7f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2000000000000376, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0)
close(r5)
listen(r5, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x4000081}, 0x0)
close(r5)

0s ago: executing program 0 (id=273):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
statx(0xffffffffffffffff, 0x0, 0x800, 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000b000000000000006cf021a1713f1dae437d0b48e27b1ea19075f7bd02f743a89750669a264c5fa92f0ce34b214629295224d2e870", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="a382666f6c4e35205e7aa3b1c4ce4fc2d3328fb71b0b60b00e5dc2442c86cd7a22caccce89c5b94308b254d39efa732c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

kernel console output (not intermixed with test programs):

400 audit(1737268296.429:88): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.954182][   T29] audit: type=1400 audit(1737268296.429:89): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.962337][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.979083][   T29] audit: type=1400 audit(1737268296.429:90): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   35.890781][ T3297] chnl_net:caif_netlink_parms(): no params data found
[   35.924721][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   35.987797][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.994952][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.002331][ T3297] bridge_slave_0: entered allmulticast mode
[   36.008793][ T3297] bridge_slave_0: entered promiscuous mode
[   36.021352][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   36.035373][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.042516][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.049809][ T3297] bridge_slave_1: entered allmulticast mode
[   36.056104][ T3297] bridge_slave_1: entered promiscuous mode
[   36.073216][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   36.111224][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.120387][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.127414][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.134561][ T3298] bridge_slave_0: entered allmulticast mode
[   36.140960][ T3298] bridge_slave_0: entered promiscuous mode
[   36.170011][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.184033][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.191143][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.198245][ T3298] bridge_slave_1: entered allmulticast mode
[   36.204508][ T3298] bridge_slave_1: entered promiscuous mode
[   36.252847][ T3297] team0: Port device team_slave_0 added
[   36.275147][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.282274][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.289542][ T3303] bridge_slave_0: entered allmulticast mode
[   36.296052][ T3303] bridge_slave_0: entered promiscuous mode
[   36.304871][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.311998][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.319381][ T3303] bridge_slave_1: entered allmulticast mode
[   36.325640][ T3303] bridge_slave_1: entered promiscuous mode
[   36.332480][ T3297] team0: Port device team_slave_1 added
[   36.347808][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.357021][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   36.380623][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.389757][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.396875][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.404156][ T3299] bridge_slave_0: entered allmulticast mode
[   36.410609][ T3299] bridge_slave_0: entered promiscuous mode
[   36.426635][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.445357][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.452497][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.459885][ T3299] bridge_slave_1: entered allmulticast mode
[   36.466269][ T3299] bridge_slave_1: entered promiscuous mode
[   36.480170][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.487196][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.513295][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.524823][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.534243][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.541253][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.567360][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.578992][ T3298] team0: Port device team_slave_0 added
[   36.608182][ T3298] team0: Port device team_slave_1 added
[   36.632712][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.643098][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.658031][ T3303] team0: Port device team_slave_0 added
[   36.693750][ T3303] team0: Port device team_slave_1 added
[   36.704538][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.711534][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.737614][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.762433][ T3297] hsr_slave_0: entered promiscuous mode
[   36.768574][ T3297] hsr_slave_1: entered promiscuous mode
[   36.775295][ T3299] team0: Port device team_slave_0 added
[   36.785479][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.792514][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.818546][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.841940][ T3299] team0: Port device team_slave_1 added
[   36.847645][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.854942][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.862154][ T3306] bridge_slave_0: entered allmulticast mode
[   36.868601][ T3306] bridge_slave_0: entered promiscuous mode
[   36.875507][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.882489][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.908419][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.920433][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.927393][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.953490][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.976548][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.983723][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.990942][ T3306] bridge_slave_1: entered allmulticast mode
[   36.997334][ T3306] bridge_slave_1: entered promiscuous mode
[   37.040860][ T3298] hsr_slave_0: entered promiscuous mode
[   37.046832][ T3298] hsr_slave_1: entered promiscuous mode
[   37.052943][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.060550][ T3298] Cannot create hsr debugfs directory
[   37.066340][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.073307][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.099390][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.110801][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.117806][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.143835][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.167855][ T3303] hsr_slave_0: entered promiscuous mode
[   37.173979][ T3303] hsr_slave_1: entered promiscuous mode
[   37.179996][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.187565][ T3303] Cannot create hsr debugfs directory
[   37.199154][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.236892][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.256697][ T3299] hsr_slave_0: entered promiscuous mode
[   37.262924][ T3299] hsr_slave_1: entered promiscuous mode
[   37.268692][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.276340][ T3299] Cannot create hsr debugfs directory
[   37.311343][ T3306] team0: Port device team_slave_0 added
[   37.339747][ T3306] team0: Port device team_slave_1 added
[   37.370653][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.377630][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.403732][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.428534][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.435591][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.461546][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.520824][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.543828][ T3306] hsr_slave_0: entered promiscuous mode
[   37.550052][ T3306] hsr_slave_1: entered promiscuous mode
[   37.556027][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.563975][ T3306] Cannot create hsr debugfs directory
[   37.571642][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.580305][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.599062][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.626116][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.641266][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.652054][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.672284][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.700993][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.712862][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.722112][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.740441][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.751232][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.760514][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.770651][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.779594][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.839627][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.851335][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.860884][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.872006][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.882666][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.910826][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   37.931309][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.938401][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.959647][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.966719][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.976880][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.995944][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.031072][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.039583][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   38.051140][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   38.065154][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.072267][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.086700][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.093873][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.102987][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.110152][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.125288][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.135245][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   38.151439][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.158503][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.174333][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.181459][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.206098][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.213238][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.243010][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.255255][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   38.267604][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.274831][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.290952][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.298151][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.321779][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.346286][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.356949][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.371823][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.382361][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.413786][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.470453][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.511484][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.530974][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.559188][ T3297] veth0_vlan: entered promiscuous mode
[   38.581231][ T3297] veth1_vlan: entered promiscuous mode
[   38.627942][ T3299] veth0_vlan: entered promiscuous mode
[   38.659618][ T3299] veth1_vlan: entered promiscuous mode
[   38.672160][ T3297] veth0_macvtap: entered promiscuous mode
[   38.689477][ T3297] veth1_macvtap: entered promiscuous mode
[   38.704665][ T3299] veth0_macvtap: entered promiscuous mode
[   38.713423][ T3306] veth0_vlan: entered promiscuous mode
[   38.728442][ T3299] veth1_macvtap: entered promiscuous mode
[   38.737105][ T3306] veth1_vlan: entered promiscuous mode
[   38.751444][ T3303] veth0_vlan: entered promiscuous mode
[   38.767345][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.780312][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.789705][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.798473][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.807324][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.816090][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.826793][ T3298] veth0_vlan: entered promiscuous mode
[   38.838874][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.849471][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.860222][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.867876][ T3303] veth1_vlan: entered promiscuous mode
[   38.883195][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.893750][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.904858][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.914795][ T3306] veth0_macvtap: entered promiscuous mode
[   38.924955][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.933794][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.942600][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.951399][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.961840][ T3298] veth1_vlan: entered promiscuous mode
[   38.970935][ T3306] veth1_macvtap: entered promiscuous mode
[   38.984203][   T29] kauditd_printk_skb: 16 callbacks suppressed
[   38.984219][   T29] audit: type=1400 audit(1737268301.559:107): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.ncPMvI/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   38.990665][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.025217][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.035183][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.045716][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.057621][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.065286][   T29] audit: type=1400 audit(1737268301.559:108): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.079636][ T3303] veth0_macvtap: entered promiscuous mode
[   39.087620][   T29] audit: type=1400 audit(1737268301.559:109): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.ncPMvI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.118674][   T29] audit: type=1400 audit(1737268301.559:110): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.140735][   T29] audit: type=1400 audit(1737268301.559:111): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.ncPMvI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.167393][   T29] audit: type=1400 audit(1737268301.559:112): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.ncPMvI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.194851][   T29] audit: type=1400 audit(1737268301.559:113): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.215649][   T29] audit: type=1400 audit(1737268301.639:114): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.226465][ T3298] veth0_macvtap: entered promiscuous mode
[   39.238696][   T29] audit: type=1400 audit(1737268301.639:115): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=3797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.261288][ T3303] veth1_macvtap: entered promiscuous mode
[   39.275944][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.277807][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.301180][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.311094][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.321623][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.331522][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.341988][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.352452][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.364209][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.374717][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.384627][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.395198][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.405753][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.413834][ T3298] veth1_macvtap: entered promiscuous mode
[   39.425370][   T29] audit: type=1400 audit(1737268301.999:116): avc:  denied  { read write } for  pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.425983][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.460037][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.470028][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.480503][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.490344][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.500877][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.511422][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.526344][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.535182][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.544015][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.552906][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.568321][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.577109][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.585989][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.594747][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.605290][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.615834][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.626157][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.636713][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.646603][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.657124][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.666996][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.677490][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.688046][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.696770][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.707281][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.717194][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.727650][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.737611][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.748111][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.757936][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.768416][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.778839][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.806616][ T3298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.811593][ T3455] xt_l2tp: unknown flags: 17
[   39.815428][ T3298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.828693][ T3298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.837544][ T3298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.849377][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.905852][ T3455] loop0: detected capacity change from 0 to 2048
[   39.940374][ T3460] loop4: detected capacity change from 0 to 8192
[   39.960606][ T3460]  loop4: p1 p2 p4
[   39.964633][ T3460] loop4: p1 size 1465778176 extends beyond EOD, truncated
[   39.972516][ T3460] loop4: p2 size 1140850688 extends beyond EOD, truncated
[   39.982781][ T3460] loop4: p4 start 16646144 is beyond EOD, truncated
[   40.004842][ T3455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.017594][ T2998]  loop4: p1 p2 p4
[   40.022655][ T2998] loop4: p1 size 1465778176 extends beyond EOD, truncated
[   40.034004][ T2998] loop4: p2 size 1140850688 extends beyond EOD, truncated
[   40.044878][ T2998] loop4: p4 start 16646144 is beyond EOD, truncated
[   40.046308][ T3460] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   40.063318][ T3455] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.063373][ T3463] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   40.063373][ T3463]    program syz.3.4 not setting count and/or reply_len properly
[   40.075384][ T3460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   40.582533][ T3477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.620310][ T3477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.666868][ T3299] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[   40.702087][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.781198][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'.
[   40.918248][ T3491] loop0: detected capacity change from 0 to 2048
[   40.953333][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.996036][ T3491] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   41.008858][ T3491] EXT4-fs (loop0): This should not happen!! Data will be lost
[   41.008858][ T3491] 
[   41.018564][ T3491] EXT4-fs (loop0): Total free blocks count 0
[   41.024609][ T3491] EXT4-fs (loop0): Free/Dirty block details
[   41.030605][ T3491] EXT4-fs (loop0): free_blocks=0
[   41.035569][ T3491] EXT4-fs (loop0): dirty_blocks=0
[   41.040658][ T3491] EXT4-fs (loop0): Block reservation details
[   41.046668][ T3491] EXT4-fs (loop0): i_reserved_data_blocks=0
[   41.173738][ T3496] loop3: detected capacity change from 0 to 128
[   41.227610][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.352267][ T3509] lo speed is unknown, defaulting to 1000
[   41.358049][ T3509] lo speed is unknown, defaulting to 1000
[   41.379170][ T3509] lo speed is unknown, defaulting to 1000
[   41.412437][ T3509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   41.433658][ T3514] x_tables: duplicate underflow at hook 2
[   41.449883][ T3509] lo speed is unknown, defaulting to 1000
[   41.476027][ T3509] lo speed is unknown, defaulting to 1000
[   41.486402][ T3509] lo speed is unknown, defaulting to 1000
[   41.493747][ T3509] lo speed is unknown, defaulting to 1000
[   41.519391][ T3509] lo speed is unknown, defaulting to 1000
[   41.544437][ T3509] lo speed is unknown, defaulting to 1000
[   41.561907][ T3524] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   41.561907][ T3524]    program syz.2.17 not setting count and/or reply_len properly
[   41.847027][ T3542] loop2: detected capacity change from 0 to 512
[   41.858559][ T3540] loop0: detected capacity change from 0 to 2048
[   41.875179][ T3536] process 'syz.4.22' launched './file0' with NULL argv: empty string added
[   41.896359][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.921643][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.945287][ T3542] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.976829][ T3536] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.006888][ T3540] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   42.019538][ T3540] EXT4-fs (loop0): This should not happen!! Data will be lost
[   42.019538][ T3540] 
[   42.029251][ T3540] EXT4-fs (loop0): Total free blocks count 0
[   42.035280][ T3540] EXT4-fs (loop0): Free/Dirty block details
[   42.041264][ T3540] EXT4-fs (loop0): free_blocks=0
[   42.046225][ T3540] EXT4-fs (loop0): dirty_blocks=0
[   42.051337][ T3540] EXT4-fs (loop0): Block reservation details
[   42.057388][ T3540] EXT4-fs (loop0): i_reserved_data_blocks=0
[   42.078426][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'.
[   42.116826][ T3542] syz.2.25 (3542) used greatest stack depth: 10504 bytes left
[   42.117536][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.139458][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.272059][ T3561] capability: warning: `syz.1.32' uses 32-bit capabilities (legacy support in use)
[   42.350662][ T3561] SELinux: syz.1.32 (3561) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   42.377541][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.432790][ T3569] loop4: detected capacity change from 0 to 1024
[   42.441455][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   42.477163][ T3564] netlink: 'syz.0.29': attribute type 66 has an invalid length.
[   42.485074][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.520302][ T3569] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   42.606783][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.647577][ T3581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.669906][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   42.687266][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   42.696399][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.788724][ T3579] syzkaller0: entered promiscuous mode
[   42.794486][ T3579] syzkaller0: entered allmulticast mode
[   42.805517][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.869480][ T3591] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   42.902888][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   42.917711][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   42.954214][ T3595] loop3: detected capacity change from 0 to 1024
[   42.963498][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[   42.985874][ T3595] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   43.042526][ T3595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.095223][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   43.156995][ T3600] tmpfs: Bad value for 'mpol'
[   43.164740][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.186442][ T3605] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   43.210292][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   43.222541][ T3603] loop1: detected capacity change from 0 to 2048
[   43.246618][ T3605] Zero length message leads to an empty skb
[   43.299795][ T3613] IPv6: NLM_F_CREATE should be specified when creating new route
[   43.315179][ T3603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.340327][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'.
[   43.362615][ T3603] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   43.370514][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   43.375070][ T3603] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.375070][ T3603] 
[   43.404124][ T3603] EXT4-fs (loop1): Total free blocks count 0
[   43.410137][ T3603] EXT4-fs (loop1): Free/Dirty block details
[   43.416089][ T3603] EXT4-fs (loop1): free_blocks=0
[   43.421140][ T3603] EXT4-fs (loop1): dirty_blocks=0
[   43.426180][ T3603] EXT4-fs (loop1): Block reservation details
[   43.432197][ T3603] EXT4-fs (loop1): i_reserved_data_blocks=0
[   43.449461][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.463632][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.525637][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.609779][ T3627] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   43.609779][ T3627]    program syz.1.52 not setting count and/or reply_len properly
[   43.675150][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.817784][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.877836][ T3636] loop4: detected capacity change from 0 to 512
[   43.879276][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.990129][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   43.993503][ T3636] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   44.010045][ T3636] EXT4-fs (loop4): orphan cleanup on readonly fs
[   44.020830][ T3636] __quota_error: 509 callbacks suppressed
[   44.020914][ T3636] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   44.039688][ T3636] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   44.046664][   T29] audit: type=1400 audit(1737268306.619:626): avc:  denied  { execute } for  pid=3644 comm="syz.1.58" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   44.067289][ T3636] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   44.110280][ T3647] loop1: detected capacity change from 0 to 2048
[   44.117601][ T3636] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.54: bg 0: block 40: padding at end of block bitmap is not set
[   44.132943][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   44.136946][ T3636] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   44.153456][ T3636] EXT4-fs (loop4): 1 truncate cleaned up
[   44.159846][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.186090][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.221629][   T29] audit: type=1400 audit(1737268306.799:627): avc:  denied  { write } for  pid=3631 comm="syz.4.54" name="if_inet6" dev="proc" ino=4026532947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   44.246444][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.260397][ T3632] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.54: corrupted xattr block 31: invalid header
[   44.276629][ T3632] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=16
[   44.284636][    T8] IPVS: starting estimator thread 0...
[   44.310345][ T3652] lo: entered promiscuous mode
[   44.315209][ T3652] lo: entered allmulticast mode
[   44.322236][ T3652] tunl0: entered promiscuous mode
[   44.327298][ T3652] tunl0: entered allmulticast mode
[   44.334171][ T3652] gre0: entered promiscuous mode
[   44.339167][ T3652] gre0: entered allmulticast mode
[   44.348620][ T3652] gretap0: entered promiscuous mode
[   44.354230][ T3652] gretap0: entered allmulticast mode
[   44.373535][ T3652] erspan0: entered promiscuous mode
[   44.378949][ T3652] erspan0: entered allmulticast mode
[   44.386551][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.396305][ T3652] ip_vti0: entered promiscuous mode
[   44.398991][ T3650] IPVS: using max 1968 ests per chain, 98400 per kthread
[   44.401627][ T3652] ip_vti0: entered allmulticast mode
[   44.415710][ T3652] ip6_vti0: entered promiscuous mode
[   44.421234][ T3652] ip6_vti0: entered allmulticast mode
[   44.437932][   T29] audit: type=1400 audit(1737268307.009:628): avc:  denied  { bind } for  pid=3651 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.464149][ T3652] sit0: entered promiscuous mode
[   44.469237][ T3652] sit0: entered allmulticast mode
[   44.477039][ T3652] ip6tnl0: entered promiscuous mode
[   44.482800][ T3652] ip6tnl0: entered allmulticast mode
[   44.494874][   T29] audit: type=1400 audit(1737268307.069:629): avc:  denied  { setopt } for  pid=3651 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.517703][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.529081][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.536986][ T3652] ip6gre0: entered promiscuous mode
[   44.542341][ T3652] ip6gre0: entered allmulticast mode
[   44.557325][ T3658] loop4: detected capacity change from 0 to 2048
[   44.576749][ T3652] syz_tun: entered promiscuous mode
[   44.582119][ T3652] syz_tun: entered allmulticast mode
[   44.591815][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.608749][ T3658] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   44.621258][ T3658] EXT4-fs (loop4): This should not happen!! Data will be lost
[   44.621258][ T3658] 
[   44.630922][ T3658] EXT4-fs (loop4): Total free blocks count 0
[   44.636926][ T3658] EXT4-fs (loop4): Free/Dirty block details
[   44.642859][ T3658] EXT4-fs (loop4): free_blocks=0
[   44.647823][ T3658] EXT4-fs (loop4): dirty_blocks=0
[   44.652917][ T3658] EXT4-fs (loop4): Block reservation details
[   44.659004][ T3658] EXT4-fs (loop4): i_reserved_data_blocks=0
[   44.665175][ T3652] ip6gretap0: entered promiscuous mode
[   44.670812][ T3652] ip6gretap0: entered allmulticast mode
[   44.678307][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.685584][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.692891][ T3652] bridge0: entered promiscuous mode
[   44.694545][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.698154][ T3652] bridge0: entered allmulticast mode
[   44.714480][ T3652] vcan0: entered promiscuous mode
[   44.719563][ T3652] vcan0: entered allmulticast mode
[   44.725685][ T3652] bond0: entered promiscuous mode
[   44.730910][ T3652] bond_slave_0: entered promiscuous mode
[   44.736710][ T3652] bond_slave_1: entered promiscuous mode
[   44.742551][ T3652] bond0: entered allmulticast mode
[   44.747691][ T3652] bond_slave_0: entered allmulticast mode
[   44.753642][ T3652] bond_slave_1: entered allmulticast mode
[   44.782329][ T3652] team0: entered promiscuous mode
[   44.787407][ T3652] team_slave_0: entered promiscuous mode
[   44.793274][ T3652] team_slave_1: entered promiscuous mode
[   44.799166][ T3652] team0: entered allmulticast mode
[   44.804371][ T3652] team_slave_0: entered allmulticast mode
[   44.810146][ T3652] team_slave_1: entered allmulticast mode
[   44.823159][ T3652] dummy0: entered promiscuous mode
[   44.828432][ T3652] dummy0: entered allmulticast mode
[   44.831541][ T3662] loop4: detected capacity change from 0 to 512
[   44.842973][ T3652] nlmon0: entered promiscuous mode
[   44.848156][ T3652] nlmon0: entered allmulticast mode
[   44.848600][ T3662] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   44.864380][ T3652] caif0: entered promiscuous mode
[   44.869529][ T3652] caif0: entered allmulticast mode
[   44.875321][ T3652] batadv0: entered promiscuous mode
[   44.880590][ T3652] batadv0: entered allmulticast mode
[   44.888460][ T3662] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.63: iget: bad extended attribute block 19
[   44.901913][ T3667] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   44.909812][ T3667] audit: out of memory in audit_log_start
[   44.917237][ T3652] vxcan0: entered promiscuous mode
[   44.922664][ T3652] vxcan0: entered allmulticast mode
[   44.930316][ T3662] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.63: couldn't read orphan inode 15 (err -117)
[   44.942505][ T3652] vxcan1: entered promiscuous mode
[   44.947305][ T3670] loop3: detected capacity change from 0 to 512
[   44.947663][ T3652] vxcan1: entered allmulticast mode
[   44.956321][ T3662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.976803][ T3670] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.993576][ T3670] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   45.009513][ T3670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[   45.017599][ T3670] System zones: 1-12
[   45.023116][ T3670] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.66: corrupted in-inode xattr: e_value size too large
[   45.037348][ T3652] veth0: entered promiscuous mode
[   45.042503][ T3652] veth0: entered allmulticast mode
[   45.051682][ T3670] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.66: couldn't read orphan inode 15 (err -117)
[   45.063643][ T3652] veth1: entered promiscuous mode
[   45.068781][ T3652] veth1: entered allmulticast mode
[   45.076870][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.078181][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.101936][ T3670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'.
[   45.102554][   T29] audit: type=1400 audit(1737268307.679:630): avc:  denied  { append } for  pid=3669 comm="syz.3.66" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.110970][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'.
[   45.156264][   T29] audit: type=1400 audit(1737268307.679:631): avc:  denied  { setattr } for  pid=3669 comm="syz.3.66" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.212356][ T3652] wg0: entered promiscuous mode
[   45.217243][ T3652] wg0: entered allmulticast mode
[   45.223743][ T3652] wg1: entered promiscuous mode
[   45.228769][ T3652] wg1: entered allmulticast mode
[   45.237327][ T3652] wg2: entered promiscuous mode
[   45.242523][ T3652] wg2: entered allmulticast mode
[   45.249533][ T3652] veth0_to_bridge: entered promiscuous mode
[   45.255565][ T3652] veth0_to_bridge: entered allmulticast mode
[   45.293154][ T3652] veth1_to_bridge: entered promiscuous mode
[   45.299215][ T3652] veth1_to_bridge: entered allmulticast mode
[   45.308219][ T3652] veth0_to_bond: entered promiscuous mode
[   45.314402][ T3652] veth0_to_bond: entered allmulticast mode
[   45.323392][ T3652] veth1_to_bond: entered promiscuous mode
[   45.329329][ T3652] veth1_to_bond: entered allmulticast mode
[   45.340228][ T3652] veth0_to_team: entered promiscuous mode
[   45.346028][ T3652] veth0_to_team: entered allmulticast mode
[   45.346056][   T29] audit: type=1326 audit(1737268307.909:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3672 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50915d29 code=0x7ffc0000
[   45.376394][ T3652] veth1_to_team: entered promiscuous mode
[   45.382209][ T3652] veth1_to_team: entered allmulticast mode
[   45.400940][ T3652] veth0_to_batadv: entered promiscuous mode
[   45.406955][ T3652] veth0_to_batadv: entered allmulticast mode
[   45.414613][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.425032][ T3652] batadv_slave_0: entered promiscuous mode
[   45.431061][ T3652] batadv_slave_0: entered allmulticast mode
[   45.439640][ T3652] veth1_to_batadv: entered promiscuous mode
[   45.445676][ T3652] veth1_to_batadv: entered allmulticast mode
[   45.453253][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.461006][ T3652] batadv_slave_1: entered promiscuous mode
[   45.466855][ T3652] batadv_slave_1: entered allmulticast mode
[   45.475188][ T3652] xfrm0: entered promiscuous mode
[   45.480341][ T3652] xfrm0: entered allmulticast mode
[   45.487303][ T3652] veth0_to_hsr: entered promiscuous mode
[   45.492988][ T3652] veth0_to_hsr: entered allmulticast mode
[   45.500682][ T3652] hsr_slave_0: entered allmulticast mode
[   45.507626][ T3652] veth1_to_hsr: entered promiscuous mode
[   45.513369][ T3652] veth1_to_hsr: entered allmulticast mode
[   45.520843][ T3652] hsr_slave_1: entered allmulticast mode
[   45.527799][ T3652] hsr0: entered promiscuous mode
[   45.533012][ T3652] hsr0: entered allmulticast mode
[   45.539576][ T3652] veth1_virt_wifi: entered promiscuous mode
[   45.545552][ T3652] veth1_virt_wifi: entered allmulticast mode
[   45.552923][ T3652] veth0_virt_wifi: entered promiscuous mode
[   45.558845][ T3652] veth0_virt_wifi: entered allmulticast mode
[   45.566414][ T3652] veth1_vlan: entered allmulticast mode
[   45.573362][ T3652] veth0_vlan: entered allmulticast mode
[   45.586516][ T3652] vlan0: entered promiscuous mode
[   45.591741][ T3652] vlan0: entered allmulticast mode
[   45.596996][ T3652] vlan1: entered promiscuous mode
[   45.602083][ T3652] vlan1: entered allmulticast mode
[   45.607898][ T3652] macvlan0: entered promiscuous mode
[   45.613247][ T3652] macvlan0: entered allmulticast mode
[   45.620800][ T3652] macvlan1: entered promiscuous mode
[   45.626286][ T3652] macvlan1: entered allmulticast mode
[   45.632931][ T3652] ipvlan0: entered promiscuous mode
[   45.638246][ T3652] ipvlan0: entered allmulticast mode
[   45.643961][ T3652] ipvlan1: entered promiscuous mode
[   45.649417][ T3652] ipvlan1: entered allmulticast mode
[   45.655673][ T3652] veth1_macvtap: entered allmulticast mode
[   45.664197][ T3652] veth0_macvtap: entered allmulticast mode
[   45.671393][ T3652] macvtap0: entered promiscuous mode
[   45.676726][ T3652] macvtap0: entered allmulticast mode
[   45.684533][ T3652] macsec0: entered promiscuous mode
[   45.689798][ T3652] macsec0: entered allmulticast mode
[   45.696595][ T3652] geneve0: entered promiscuous mode
[   45.703473][ T3652] geneve0: entered allmulticast mode
[   45.711180][ T3652] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.720229][ T3652] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.729267][ T3652] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.738151][ T3652] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.747540][ T3652] geneve1: entered promiscuous mode
[   45.752877][ T3652] geneve1: entered allmulticast mode
[   45.760744][ T3652] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   45.768122][ T3652] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   45.777800][ T3652] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[   45.785509][ T3652] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   45.794007][ T3652] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   45.801470][ T3652] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   45.811130][ T3652] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[   45.818579][ T3652] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[   45.865954][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.895499][ T3686] serio: Serial port ptm0
[   45.912693][ T3688] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   45.912693][ T3688]    program syz.4.72 not setting count and/or reply_len properly
[   45.994192][ T3691] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   45.994192][ T3691]    program syz.3.73 not setting count and/or reply_len properly
[   46.342196][ T3704] FAULT_INJECTION: forcing a failure.
[   46.342196][ T3704] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   46.355410][ T3704] CPU: 1 UID: 0 PID: 3704 Comm: syz.3.77 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   46.366131][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   46.376200][ T3704] Call Trace:
[   46.379505][ T3704]  <TASK>
[   46.382447][ T3704]  dump_stack_lvl+0xf2/0x150
[   46.387239][ T3704]  dump_stack+0x15/0x1a
[   46.391422][ T3704]  should_fail_ex+0x223/0x230
[   46.396177][ T3704]  should_fail+0xb/0x10
[   46.400372][ T3704]  should_fail_usercopy+0x1a/0x20
[   46.405449][ T3704]  _copy_from_user+0x1e/0xb0
[   46.410168][ T3704]  kvmemdup_bpfptr_noprof+0x7d/0xf0
[   46.415443][ T3704]  map_update_elem+0x37e/0x470
[   46.420278][ T3704]  __sys_bpf+0x713/0x7a0
[   46.424555][ T3704]  __x64_sys_bpf+0x43/0x50
[   46.429011][ T3704]  x64_sys_call+0x2914/0x2dc0
[   46.433709][ T3704]  do_syscall_64+0xc9/0x1c0
[   46.438288][ T3704]  ? clear_bhb_loop+0x55/0xb0
[   46.442979][ T3704]  ? clear_bhb_loop+0x55/0xb0
[   46.447682][ T3704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.453610][ T3704] RIP: 0033:0x7f415ea55d29
[   46.458081][ T3704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.477714][ T3704] RSP: 002b:00007f415d0c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   46.486332][ T3704] RAX: ffffffffffffffda RBX: 00007f415ec45fa0 RCX: 00007f415ea55d29
[   46.494318][ T3704] RDX: 0000000000000020 RSI: 0000000020000840 RDI: 0000000000000002
[   46.502360][ T3704] RBP: 00007f415d0c1090 R08: 0000000000000000 R09: 0000000000000000
[   46.510352][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.518370][ T3704] R13: 0000000000000000 R14: 00007f415ec45fa0 R15: 00007ffc7a630428
[   46.526376][ T3704]  </TASK>
[   46.548778][ T3707] loop4: detected capacity change from 0 to 512
[   46.593499][ T3707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.600457][ T3709] loop1: detected capacity change from 0 to 2048
[   46.625267][ T3707] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.634040][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.713154][ T3709] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   46.725659][ T3709] EXT4-fs (loop1): This should not happen!! Data will be lost
[   46.725659][ T3709] 
[   46.735370][ T3709] EXT4-fs (loop1): Total free blocks count 0
[   46.741396][ T3709] EXT4-fs (loop1): Free/Dirty block details
[   46.747300][ T3709] EXT4-fs (loop1): free_blocks=0
[   46.752281][ T3709] EXT4-fs (loop1): dirty_blocks=0
[   46.757323][ T3709] EXT4-fs (loop1): Block reservation details
[   46.763411][ T3709] EXT4-fs (loop1): i_reserved_data_blocks=0
[   46.794220][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.821438][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.844543][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'.
[   46.882058][ T3723] loop3: detected capacity change from 0 to 8192
[   46.928311][ T3729] loop0: detected capacity change from 0 to 2048
[   46.952861][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   47.014211][ T3740] loop1: detected capacity change from 0 to 512
[   47.021391][ T3740] EXT4-fs: Ignoring removed i_version option
[   47.022845][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.027453][ T3740] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.048616][ T3740] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   47.087029][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.162853][ T3306] EXT4-fs error: 87 callbacks suppressed
[   47.162874][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.177979][ T3744] loop3: detected capacity change from 0 to 512
[   47.196744][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.208878][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'.
[   47.226311][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'.
[   47.242651][ T3744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.92'.
[   47.354176][ T3757] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   47.354176][ T3757]    program syz.1.97 not setting count and/or reply_len properly
[   47.361964][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.393162][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.415976][ T3761] FAULT_INJECTION: forcing a failure.
[   47.415976][ T3761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.429181][ T3761] CPU: 1 UID: 0 PID: 3761 Comm: syz.3.99 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   47.439789][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   47.449953][ T3761] Call Trace:
[   47.453242][ T3761]  <TASK>
[   47.456184][ T3761]  dump_stack_lvl+0xf2/0x150
[   47.460836][ T3761]  dump_stack+0x15/0x1a
[   47.465038][ T3761]  should_fail_ex+0x223/0x230
[   47.469754][ T3761]  should_fail+0xb/0x10
[   47.474024][ T3761]  should_fail_usercopy+0x1a/0x20
[   47.479145][ T3761]  _copy_to_user+0x20/0xa0
[   47.483770][ T3761]  simple_read_from_buffer+0xa0/0x110
[   47.489274][ T3761]  proc_fail_nth_read+0xf9/0x140
[   47.494349][ T3761]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.499985][ T3761]  vfs_read+0x1a2/0x700
[   47.504171][ T3761]  ? __rcu_read_unlock+0x4e/0x70
[   47.509136][ T3761]  ? __fget_files+0x17c/0x1c0
[   47.513848][ T3761]  ksys_read+0xe8/0x1b0
[   47.518095][ T3761]  __x64_sys_read+0x42/0x50
[   47.522617][ T3761]  x64_sys_call+0x2874/0x2dc0
[   47.527336][ T3761]  do_syscall_64+0xc9/0x1c0
[   47.531851][ T3761]  ? clear_bhb_loop+0x55/0xb0
[   47.536666][ T3761]  ? clear_bhb_loop+0x55/0xb0
[   47.541439][ T3761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.547341][ T3761] RIP: 0033:0x7f415ea5473c
[   47.551758][ T3761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   47.571462][ T3761] RSP: 002b:00007f415d0c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.579963][ T3761] RAX: ffffffffffffffda RBX: 00007f415ec45fa0 RCX: 00007f415ea5473c
[   47.587942][ T3761] RDX: 000000000000000f RSI: 00007f415d0c10a0 RDI: 0000000000000006
[   47.595918][ T3761] RBP: 00007f415d0c1090 R08: 0000000000000000 R09: 0000000000000000
[   47.604069][ T3761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.612044][ T3761] R13: 0000000000000000 R14: 00007f415ec45fa0 R15: 00007ffc7a630428
[   47.620104][ T3761]  </TASK>
[   47.693348][ T3764] loop3: detected capacity change from 0 to 2048
[   47.727358][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.750996][ T3769] loop0: detected capacity change from 0 to 1024
[   47.752325][ T3306] EXT4-fs warning: 40 callbacks suppressed
[   47.752341][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   47.763526][ T3769] =======================================================
[   47.763526][ T3769] WARNING: The mand mount option has been deprecated and
[   47.763526][ T3769]          and is ignored by this kernel. Remove the mand
[   47.763526][ T3769]          option from the mount to silence this warning.
[   47.763526][ T3769] =======================================================
[   47.812530][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.819069][ T3769] EXT4-fs: Ignoring removed nobh option
[   47.839944][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.840464][ T3769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   47.862574][ T3769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   47.903794][ T3769] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.102: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   47.920221][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.942165][ T3769] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.102: couldn't read orphan inode 11 (err -117)
[   47.944034][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   47.954574][ T3769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.965456][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.988282][ T3769] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.102: Invalid block bitmap block 0 in block_group 0
[   47.999061][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.014226][ T3769] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.102: Failed to acquire dquot type 0
[   48.061607][ T3769] syz.0.102 (3769) used greatest stack depth: 10224 bytes left
[   48.070684][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   48.090496][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.090681][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   48.090775][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.156097][ T3783] loop3: detected capacity change from 0 to 1024
[   48.165249][ T3783] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.211061][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.283273][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.294429][ T3790] loop0: detected capacity change from 0 to 256
[   48.372365][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.382516][ T3793] loop1: detected capacity change from 0 to 2048
[   48.392684][ T3783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   48.439686][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.451268][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.459678][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.515099][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.526927][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.603980][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.632424][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.641114][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.692809][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   48.756384][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #12: comm syz-executor: directory missing '.'
[   49.149609][ T3812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'.
[   49.201220][   T29] kauditd_printk_skb: 93 callbacks suppressed
[   49.201257][   T29] audit: type=1326 audit(1737268311.779:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.246798][ T3816] loop3: detected capacity change from 0 to 1764
[   49.247739][   T29] audit: type=1326 audit(1737268311.809:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.276631][   T29] audit: type=1326 audit(1737268311.809:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.300114][   T29] audit: type=1326 audit(1737268311.809:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.323473][   T29] audit: type=1326 audit(1737268311.809:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.346925][   T29] audit: type=1326 audit(1737268311.809:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.370179][   T29] audit: type=1326 audit(1737268311.809:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.393506][   T29] audit: type=1326 audit(1737268311.809:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.416745][   T29] audit: type=1326 audit(1737268311.809:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.440091][   T29] audit: type=1326 audit(1737268311.809:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   49.520126][ T3820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   49.610940][ T3824] loop3: detected capacity change from 0 to 512
[   49.621155][ T3824] EXT4-fs (loop3): #blocks per group too big: 65280
[   49.631763][ T3824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.122'.
[   49.664716][ T3828] syz.3.123[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.664841][ T3828] syz.3.123[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.676800][ T3828] syz.3.123[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.747969][ T3841] loop0: detected capacity change from 0 to 512
[   49.766535][ T3841] EXT4-fs: Ignoring removed i_version option
[   49.776771][ T3826] loop1: detected capacity change from 0 to 512
[   49.785356][ T3826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.798554][ T3826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.820467][ T3826] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   49.844458][ T3841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   49.857861][ T3826] EXT4-fs (loop1): 1 truncate cleaned up
[   49.860126][ T3841] ext4 filesystem being mounted at /25/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.865645][ T3826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.893582][ T3850] lo: entered promiscuous mode
[   49.898432][ T3850] lo: entered allmulticast mode
[   49.908724][ T3850] tunl0: entered promiscuous mode
[   49.913822][ T3850] tunl0: entered allmulticast mode
[   49.922531][ T3826] netlink: '+}[@': attribute type 153 has an invalid length.
[   49.933219][ T3850] gre0: entered promiscuous mode
[   49.938231][ T3850] gre0: entered allmulticast mode
[   49.961486][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.975739][ T3850] gretap0: entered promiscuous mode
[   49.981035][ T3850] gretap0: entered allmulticast mode
[   49.997831][ T3856] x_tables: duplicate underflow at hook 2
[   50.007811][ T3850] erspan0: entered promiscuous mode
[   50.012054][ T3852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.013213][ T3850] erspan0: entered allmulticast mode
[   50.031589][ T3850] ip_vti0: entered promiscuous mode
[   50.036880][ T3850] ip_vti0: entered allmulticast mode
[   50.039538][ T3852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.050751][ T3850] ip6_vti0: entered promiscuous mode
[   50.056216][ T3850] ip6_vti0: entered allmulticast mode
[   50.066350][ T3850] sit0: entered promiscuous mode
[   50.071431][ T3850] sit0: entered allmulticast mode
[   50.079876][ T3850] ip6tnl0: entered promiscuous mode
[   50.085128][ T3850] ip6tnl0: entered allmulticast mode
[   50.092731][ T3850] ip6gre0: entered promiscuous mode
[   50.097971][ T3850] ip6gre0: entered allmulticast mode
[   50.111619][ T3850] syz_tun: entered promiscuous mode
[   50.116866][ T3850] syz_tun: entered allmulticast mode
[   50.126065][ T3850] ip6gretap0: entered promiscuous mode
[   50.131609][ T3850] ip6gretap0: entered allmulticast mode
[   50.139867][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.147154][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.154468][ T3850] bridge0: entered promiscuous mode
[   50.159990][ T3850] bridge0: entered allmulticast mode
[   50.168175][ T3850] vcan0: entered promiscuous mode
[   50.173271][ T3850] vcan0: entered allmulticast mode
[   50.179394][ T3850] bond0: entered promiscuous mode
[   50.184508][ T3850] bond_slave_0: entered promiscuous mode
[   50.190309][ T3850] bond_slave_1: entered promiscuous mode
[   50.196025][ T3850] bond0: entered allmulticast mode
[   50.201468][ T3850] bond_slave_0: entered allmulticast mode
[   50.207424][ T3850] bond_slave_1: entered allmulticast mode
[   50.215472][ T3850] team0: entered promiscuous mode
[   50.220555][ T3850] team_slave_0: entered promiscuous mode
[   50.226331][ T3850] team_slave_1: entered promiscuous mode
[   50.232134][ T3850] team0: entered allmulticast mode
[   50.237260][ T3850] team_slave_0: entered allmulticast mode
[   50.243112][ T3850] team_slave_1: entered allmulticast mode
[   50.251006][ T3850] dummy0: entered promiscuous mode
[   50.256150][ T3850] dummy0: entered allmulticast mode
[   50.263424][ T3850] nlmon0: entered promiscuous mode
[   50.268565][ T3850] nlmon0: entered allmulticast mode
[   50.275562][ T3850] caif0: entered promiscuous mode
[   50.280983][ T3850] caif0: entered allmulticast mode
[   50.288242][ T3850] batadv0: entered promiscuous mode
[   50.293533][ T3850] batadv0: entered allmulticast mode
[   50.302421][ T3850] vxcan0: entered promiscuous mode
[   50.307587][ T3850] vxcan0: entered allmulticast mode
[   50.314072][ T3850] vxcan1: entered promiscuous mode
[   50.319411][ T3850] vxcan1: entered allmulticast mode
[   50.326496][ T3850] veth0: entered promiscuous mode
[   50.331603][ T3850] veth0: entered allmulticast mode
[   50.341224][ T3850] veth1: entered promiscuous mode
[   50.346338][ T3850] veth1: entered allmulticast mode
[   50.362771][ T3850] wg0: entered promiscuous mode
[   50.367691][ T3850] wg0: entered allmulticast mode
[   50.375244][ T3850] wg1: entered promiscuous mode
[   50.380259][ T3850] wg1: entered allmulticast mode
[   50.386641][ T3850] wg2: entered promiscuous mode
[   50.391758][ T3850] wg2: entered allmulticast mode
[   50.399628][ T3850] veth0_to_bridge: entered promiscuous mode
[   50.405553][ T3850] veth0_to_bridge: entered allmulticast mode
[   50.415928][ T3850] veth1_to_bridge: entered promiscuous mode
[   50.422170][ T3850] veth1_to_bridge: entered allmulticast mode
[   50.432029][ T3850] veth0_to_bond: entered promiscuous mode
[   50.437886][ T3850] veth0_to_bond: entered allmulticast mode
[   50.447457][ T3850] veth1_to_bond: entered promiscuous mode
[   50.453284][ T3850] veth1_to_bond: entered allmulticast mode
[   50.462151][ T3850] veth0_to_team: entered promiscuous mode
[   50.467958][ T3850] veth0_to_team: entered allmulticast mode
[   50.476823][ T3850] veth1_to_team: entered promiscuous mode
[   50.482732][ T3850] veth1_to_team: entered allmulticast mode
[   50.492341][ T3850] veth0_to_batadv: entered promiscuous mode
[   50.498270][ T3850] veth0_to_batadv: entered allmulticast mode
[   50.505942][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.515756][ T3850] batadv_slave_0: entered promiscuous mode
[   50.521668][ T3850] batadv_slave_0: entered allmulticast mode
[   50.530376][ T3850] veth1_to_batadv: entered promiscuous mode
[   50.536293][ T3850] veth1_to_batadv: entered allmulticast mode
[   50.543740][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.553118][ T3850] batadv_slave_1: entered promiscuous mode
[   50.558982][ T3850] batadv_slave_1: entered allmulticast mode
[   50.566478][ T3850] xfrm0: entered promiscuous mode
[   50.571822][ T3850] xfrm0: entered allmulticast mode
[   50.580146][ T3850] veth0_to_hsr: entered promiscuous mode
[   50.585871][ T3850] veth0_to_hsr: entered allmulticast mode
[   50.594677][ T3850] hsr_slave_0: entered allmulticast mode
[   50.601264][ T3850] veth1_to_hsr: entered promiscuous mode
[   50.606964][ T3850] veth1_to_hsr: entered allmulticast mode
[   50.614255][ T3850] hsr_slave_1: entered allmulticast mode
[   50.621217][ T3850] hsr0: entered promiscuous mode
[   50.626275][ T3850] hsr0: entered allmulticast mode
[   50.632763][ T3850] veth1_virt_wifi: entered promiscuous mode
[   50.638780][ T3850] veth1_virt_wifi: entered allmulticast mode
[   50.646394][ T3850] veth0_virt_wifi: entered promiscuous mode
[   50.652408][ T3850] veth0_virt_wifi: entered allmulticast mode
[   50.660760][ T3850] veth1_vlan: entered allmulticast mode
[   50.667713][ T3850] veth0_vlan: entered allmulticast mode
[   50.678023][ T3850] vlan0: entered promiscuous mode
[   50.683489][ T3850] vlan0: entered allmulticast mode
[   50.688794][ T3850] vlan1: entered promiscuous mode
[   50.693865][ T3850] vlan1: entered allmulticast mode
[   50.699366][ T3850] macvlan0: entered promiscuous mode
[   50.704685][ T3850] macvlan0: entered allmulticast mode
[   50.711493][ T3850] macvlan1: entered promiscuous mode
[   50.716810][ T3850] macvlan1: entered allmulticast mode
[   50.723877][ T3850] ipvlan0: entered promiscuous mode
[   50.729125][ T3850] ipvlan0: entered allmulticast mode
[   50.734486][ T3850] ipvlan1: entered promiscuous mode
[   50.740153][ T3850] ipvlan1: entered allmulticast mode
[   50.745817][ T3850] veth1_macvtap: entered allmulticast mode
[   50.752779][ T3850] veth0_macvtap: entered allmulticast mode
[   50.760488][ T3850] macvtap0: entered promiscuous mode
[   50.765808][ T3850] macvtap0: entered allmulticast mode
[   50.772233][ T3850] macsec0: entered promiscuous mode
[   50.777475][ T3850] macsec0: entered allmulticast mode
[   50.784218][ T3850] geneve0: entered promiscuous mode
[   50.789475][ T3850] geneve0: entered allmulticast mode
[   50.797121][ T3850] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.806255][ T3850] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.815340][ T3850] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.824233][ T3850] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.834469][ T3850] geneve1: entered promiscuous mode
[   50.839770][ T3850] geneve1: entered allmulticast mode
[   50.846399][ T3850] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   50.853774][ T3850] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   50.862401][ T3850] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[   50.869915][ T3850] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[   50.878434][ T3850] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[   50.885829][ T3850] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[   50.894491][ T3850] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[   50.901858][ T3850] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[   50.911738][ T3850] bridge1: entered promiscuous mode
[   50.917029][ T3850] bridge1: entered allmulticast mode
[   50.927864][ T3854] netlink: 'syz.4.128': attribute type 15 has an invalid length.
[   50.980498][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   50.995228][ T3870] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   50.995228][ T3870]    program syz.1.133 not setting count and/or reply_len properly
[   51.161081][ T3875] loop4: detected capacity change from 0 to 256
[   51.177639][ T3878] netlink: 'syz.0.136': attribute type 10 has an invalid length.
[   51.221426][ T3878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.584829][ T3897] loop3: detected capacity change from 0 to 1024
[   51.608875][ T3897] EXT4-fs: Ignoring removed i_version option
[   51.615054][ T3897] EXT4-fs: Ignoring removed bh option
[   51.650127][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.769675][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.810777][ T3910] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.820506][ T3908] loop4: detected capacity change from 0 to 2048
[   51.861986][ T3908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.898038][ T3908] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   51.910521][ T3908] EXT4-fs (loop4): This should not happen!! Data will be lost
[   51.910521][ T3908] 
[   51.910543][ T3908] EXT4-fs (loop4): Total free blocks count 0
[   51.910589][ T3908] EXT4-fs (loop4): Free/Dirty block details
[   51.910600][ T3908] EXT4-fs (loop4): free_blocks=0
[   51.910665][ T3908] EXT4-fs (loop4): dirty_blocks=0
[   51.910676][ T3908] EXT4-fs (loop4): Block reservation details
[   51.910686][ T3908] EXT4-fs (loop4): i_reserved_data_blocks=0
[   51.948306][ T3920] lo: entered promiscuous mode
[   51.948327][ T3920] lo: entered allmulticast mode
[   51.954490][ T3920] tunl0: entered promiscuous mode
[   51.954530][ T3920] tunl0: entered allmulticast mode
[   51.956673][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.956786][ T3920] gre0: entered promiscuous mode
[   51.956802][ T3920] gre0: entered allmulticast mode
[   51.962684][ T3920] gretap0: entered promiscuous mode
[   51.962703][ T3920] gretap0: entered allmulticast mode
[   51.976501][ T3920] erspan0: entered promiscuous mode
[   51.976522][ T3920] erspan0: entered allmulticast mode
[   51.978396][ T3920] ip_vti0: entered promiscuous mode
[   51.978415][ T3920] ip_vti0: entered allmulticast mode
[   51.985539][ T3920] ip6_vti0: entered promiscuous mode
[   51.985556][ T3920] ip6_vti0: entered allmulticast mode
[   51.993147][ T3920] sit0: entered promiscuous mode
[   51.993190][ T3920] sit0: entered allmulticast mode
[   51.996348][ T3920] ip6tnl0: entered promiscuous mode
[   51.996364][ T3920] ip6tnl0: entered allmulticast mode
[   52.004451][ T3920] ip6gre0: entered promiscuous mode
[   52.004480][ T3920] ip6gre0: entered allmulticast mode
[   52.026689][ T3921] ebtables: ebtables: counters copy to user failed while replacing table
[   52.033206][ T3920] syz_tun: entered promiscuous mode
[   52.033284][ T3920] syz_tun: entered allmulticast mode
[   52.034965][ T3920] ip6gretap0: entered promiscuous mode
[   52.034981][ T3920] ip6gretap0: entered allmulticast mode
[   52.040215][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.040319][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.040508][ T3920] bridge0: entered promiscuous mode
[   52.040526][ T3920] bridge0: entered allmulticast mode
[   52.043796][ T3920] vcan0: entered promiscuous mode
[   52.043814][ T3920] vcan0: entered allmulticast mode
[   52.044585][ T3920] bond0: entered promiscuous mode
[   52.044603][ T3920] bond_slave_0: entered promiscuous mode
[   52.044806][ T3920] bond_slave_1: entered promiscuous mode
[   52.044937][ T3920] bond0: entered allmulticast mode
[   52.044951][ T3920] bond_slave_0: entered allmulticast mode
[   52.044967][ T3920] bond_slave_1: entered allmulticast mode
[   52.052999][ T3920] team0: entered promiscuous mode
[   52.053073][ T3920] team_slave_0: entered promiscuous mode
[   52.053144][ T3920] team_slave_1: entered promiscuous mode
[   52.053247][ T3920] team0: entered allmulticast mode
[   52.053260][ T3920] team_slave_0: entered allmulticast mode
[   52.053272][ T3920] team_slave_1: entered allmulticast mode
[   52.061258][ T3920] dummy0: entered promiscuous mode
[   52.061278][ T3920] dummy0: entered allmulticast mode
[   52.062185][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.062285][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.067226][ T3920] nlmon0: entered promiscuous mode
[   52.067242][ T3920] nlmon0: entered allmulticast mode
[   52.068306][ T3920] caif0: entered promiscuous mode
[   52.068323][ T3920] caif0: entered allmulticast mode
[   52.068434][ T3920] batadv0: entered promiscuous mode
[   52.068451][ T3920] batadv0: entered allmulticast mode
[   52.069545][ T3920] vxcan0: entered promiscuous mode
[   52.069559][ T3920] vxcan0: entered allmulticast mode
[   52.070351][ T3920] vxcan1: entered promiscuous mode
[   52.070371][ T3920] vxcan1: entered allmulticast mode
[   52.072368][ T3920] veth0: entered promiscuous mode
[   52.072385][ T3920] veth0: entered allmulticast mode
[   52.077706][ T3920] veth1: entered promiscuous mode
[   52.077803][ T3920] veth1: entered allmulticast mode
[   52.091191][ T3920] wg0: entered promiscuous mode
[   52.091208][ T3920] wg0: entered allmulticast mode
[   52.092993][ T3920] wg1: entered promiscuous mode
[   52.093010][ T3920] wg1: entered allmulticast mode
[   52.096524][ T3920] wg2: entered promiscuous mode
[   52.096538][ T3920] wg2: entered allmulticast mode
[   52.119012][ T3920] veth0_to_bridge: entered promiscuous mode
[   52.119034][ T3920] veth0_to_bridge: entered allmulticast mode
[   52.129019][ T3920] veth1_to_bridge: entered promiscuous mode
[   52.129042][ T3920] veth1_to_bridge: entered allmulticast mode
[   52.131553][ T3920] veth0_to_bond: entered promiscuous mode
[   52.131627][ T3920] veth0_to_bond: entered allmulticast mode
[   52.144603][ T3920] veth1_to_bond: entered promiscuous mode
[   52.144620][ T3920] veth1_to_bond: entered allmulticast mode
[   52.147054][ T3920] veth0_to_team: entered promiscuous mode
[   52.147074][ T3920] veth0_to_team: entered allmulticast mode
[   52.151782][ T3920] veth1_to_team: entered promiscuous mode
[   52.151801][ T3920] veth1_to_team: entered allmulticast mode
[   52.156488][ T3920] veth0_to_batadv: entered promiscuous mode
[   52.156510][ T3920] veth0_to_batadv: entered allmulticast mode
[   52.159896][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.159981][ T3920] batadv_slave_0: entered promiscuous mode
[   52.159999][ T3920] batadv_slave_0: entered allmulticast mode
[   52.168028][ T3920] veth1_to_batadv: entered promiscuous mode
[   52.168049][ T3920] veth1_to_batadv: entered allmulticast mode
[   52.172827][ T3920] batadv_slave_1: entered promiscuous mode
[   52.190848][ T3933] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   52.190848][ T3933]    program syz.4.156 not setting count and/or reply_len properly
[   52.196152][ T3920] batadv_slave_1: entered allmulticast mode
[   52.276812][ T3937] loop4: detected capacity change from 0 to 512
[   52.293262][ T3306] EXT4-fs error: 92 callbacks suppressed
[   52.293280][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   52.333572][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   52.336950][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   52.341211][ T3937] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.399818][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   52.421950][ T3920] xfrm0: entered promiscuous mode
[   52.739037][ T3920] xfrm0: entered allmulticast mode
[   52.745842][ T3920] veth0_to_hsr: entered promiscuous mode
[   52.751543][ T3920] veth0_to_hsr: entered allmulticast mode
[   52.758620][ T3920] hsr_slave_0: entered allmulticast mode
[   52.765251][ T3920] veth1_to_hsr: entered promiscuous mode
[   52.770930][ T3920] veth1_to_hsr: entered allmulticast mode
[   52.777718][ T3920] hsr_slave_1: entered allmulticast mode
[   52.784519][ T3920] hsr0: entered promiscuous mode
[   52.789541][ T3920] hsr0: entered allmulticast mode
[   52.795492][ T3920] veth1_virt_wifi: entered promiscuous mode
[   52.801592][ T3920] veth1_virt_wifi: entered allmulticast mode
[   52.808775][ T3920] veth0_virt_wifi: entered promiscuous mode
[   52.814917][ T3920] veth0_virt_wifi: entered allmulticast mode
[   52.822108][ T3920] veth1_vlan: entered allmulticast mode
[   52.828731][ T3920] veth0_vlan: entered allmulticast mode
[   52.837065][ T3920] vlan1: entered promiscuous mode
[   52.842286][ T3920] vlan1: entered allmulticast mode
[   52.847707][ T3920] macvlan0: entered promiscuous mode
[   52.853098][ T3920] macvlan0: entered allmulticast mode
[   52.859510][ T3920] macvlan1: entered promiscuous mode
[   52.864843][ T3920] macvlan1: entered allmulticast mode
[   52.871623][ T3920] ipvlan0: entered promiscuous mode
[   52.878861][ T3920] ipvlan0: entered allmulticast mode
[   52.884388][ T3920] ipvlan1: entered promiscuous mode
[   52.889652][ T3920] ipvlan1: entered allmulticast mode
[   52.895239][ T3920] veth1_macvtap: entered allmulticast mode
[   52.902188][ T3920] veth0_macvtap: entered allmulticast mode
[   52.908842][ T3920] macvtap0: entered promiscuous mode
[   52.914290][ T3920] macvtap0: entered allmulticast mode
[   52.920752][ T3920] macsec0: entered promiscuous mode
[   52.925995][ T3920] macsec0: entered allmulticast mode
[   52.932866][ T3920] geneve0: entered promiscuous mode
[   52.938120][ T3920] geneve0: entered allmulticast mode
[   52.944611][ T3920] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.953601][ T3920] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.962717][ T3920] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.971756][ T3920] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.981206][ T3920] geneve1: entered promiscuous mode
[   52.986417][ T3920] geneve1: entered allmulticast mode
[   52.992687][ T3920] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   53.000083][ T3920] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   53.008371][ T3920] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[   53.015751][ T3920] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   53.023987][ T3920] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   53.031337][ T3920] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   53.039683][ T3920] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[   53.047050][ T3920] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   53.054896][ T3920] veth0_vlan.2: entered promiscuous mode
[   53.060565][ T3920] veth0_vlan.2: entered allmulticast mode
[   53.118043][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   53.162517][ T3943] loop3: detected capacity change from 0 to 512
[   53.174704][ T3943] EXT4-fs (loop3): orphan cleanup on readonly fs
[   53.186548][ T3943] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   53.203098][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.212714][ T3948] loop4: detected capacity change from 0 to 1024
[   53.230736][ T3943] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   53.237861][ T3948] EXT4-fs: Ignoring removed i_version option
[   53.244121][ T3948] EXT4-fs: Ignoring removed bh option
[   53.247756][ T3943] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   53.268244][ T3943] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.169: couldn't read orphan inode 13 (err -117)
[   53.284226][ T3837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.295398][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.310155][ T3948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.322563][ T3943] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   53.333874][ T3943] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[   53.362844][ T3837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.418886][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.432130][ T3837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.443843][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.474594][ T3837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.540352][ T3971] FAULT_INJECTION: forcing a failure.
[   53.540352][ T3971] name failslab, interval 1, probability 0, space 0, times 0
[   53.553097][ T3971] CPU: 0 UID: 0 PID: 3971 Comm: syz.4.166 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   53.563719][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   53.573796][ T3971] Call Trace:
[   53.577100][ T3971]  <TASK>
[   53.580040][ T3971]  dump_stack_lvl+0xf2/0x150
[   53.584732][ T3971]  dump_stack+0x15/0x1a
[   53.588943][ T3971]  should_fail_ex+0x223/0x230
[   53.593686][ T3971]  should_failslab+0x8f/0xb0
[   53.598299][ T3971]  kmem_cache_alloc_noprof+0x52/0x320
[   53.603682][ T3971]  ? audit_log_start+0x34c/0x6b0
[   53.608634][ T3971]  audit_log_start+0x34c/0x6b0
[   53.613474][ T3971]  audit_seccomp+0x4b/0x130
[   53.618024][ T3971]  __seccomp_filter+0x6fa/0x1180
[   53.622983][ T3971]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.628644][ T3971]  ? vfs_write+0x596/0x920
[   53.633216][ T3971]  __secure_computing+0x9f/0x1c0
[   53.638247][ T3971]  syscall_trace_enter+0xd1/0x1f0
[   53.643379][ T3971]  ? fpregs_assert_state_consistent+0x83/0xa0
[   53.649568][ T3971]  do_syscall_64+0xaa/0x1c0
[   53.654122][ T3971]  ? clear_bhb_loop+0x55/0xb0
[   53.658855][ T3971]  ? clear_bhb_loop+0x55/0xb0
[   53.663571][ T3971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.669475][ T3971] RIP: 0033:0x7efd50915d29
[   53.673949][ T3971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.693589][ T3971] RSP: 002b:00007efd4ef81038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8
[   53.702014][ T3971] RAX: ffffffffffffffda RBX: 00007efd50b05fa0 RCX: 00007efd50915d29
[   53.710041][ T3971] RDX: 0000000000000022 RSI: 00000000200003c0 RDI: ffffffffffffffff
[   53.718017][ T3971] RBP: 00007efd4ef81090 R08: 0000000000000000 R09: 0000000000000000
[   53.726037][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.734091][ T3971] R13: 0000000000000000 R14: 00007efd50b05fa0 R15: 00007ffe8d7b6058
[   53.742114][ T3971]  </TASK>
[   53.762314][ T3952] chnl_net:caif_netlink_parms(): no params data found
[   53.805634][ T3974] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   53.805634][ T3974]    program syz.0.167 not setting count and/or reply_len properly
[   53.857854][ T3978] loop4: detected capacity change from 0 to 1764
[   53.875069][ T3837] bridge_slave_1: left allmulticast mode
[   53.880820][ T3837] bridge_slave_1: left promiscuous mode
[   53.886581][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.896704][ T3837] bridge_slave_0: left allmulticast mode
[   53.902444][ T3837] bridge_slave_0: left promiscuous mode
[   53.908234][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.002326][ T3837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.012367][ T3837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.022161][ T3837] bond0 (unregistering): Released all slaves
[   54.074973][ T3837] hsr_slave_0: left promiscuous mode
[   54.088060][ T3837] hsr_slave_1: left promiscuous mode
[   54.094548][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.102096][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.111865][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.119361][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.130297][ T3837] veth1_macvtap: left promiscuous mode
[   54.135823][ T3837] veth0_macvtap: left promiscuous mode
[   54.141429][ T3837] veth1_vlan: left promiscuous mode
[   54.146883][ T3837] veth0_vlan: left promiscuous mode
[   54.252055][ T3837] team0 (unregistering): Port device team_slave_1 removed
[   54.261375][ T4011] netlink: 'syz.4.174': attribute type 10 has an invalid length.
[   54.274762][ T3837] team0 (unregistering): Port device team_slave_0 removed
[   54.311130][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.318320][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.323786][ T4010] loop0: detected capacity change from 0 to 1024
[   54.332102][ T3952] bridge_slave_0: entered allmulticast mode
[   54.338742][ T3952] bridge_slave_0: entered promiscuous mode
[   54.341905][ T4010] EXT4-fs: Ignoring removed i_version option
[   54.350741][ T4010] EXT4-fs: Ignoring removed bh option
[   54.354289][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.363266][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.376780][ T3952] bridge_slave_1: entered allmulticast mode
[   54.383840][ T3952] bridge_slave_1: entered promiscuous mode
[   54.396217][ T4011] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.401284][ T4016] loop1: detected capacity change from 0 to 512
[   54.410756][ T4016] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   54.419525][ T4010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.438871][   T29] kauditd_printk_skb: 465 callbacks suppressed
[   54.438884][   T29] audit: type=1400 audit(1737268317.019:1197): avc:  denied  { create } for  pid=3992 comm="syz.0.173" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.467352][   T29] audit: type=1400 audit(1737268317.029:1198): avc:  denied  { write open } for  pid=3992 comm="syz.0.173" path="/41/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.490409][   T29] audit: type=1400 audit(1737268317.029:1199): avc:  denied  { read } for  pid=3992 comm="syz.0.173" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.512170][   T29] audit: type=1400 audit(1737268317.029:1200): avc:  denied  { map } for  pid=3992 comm="syz.0.173" path="/41/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.534647][   T29] audit: type=1400 audit(1737268317.029:1201): avc:  denied  { execute } for  pid=3992 comm="syz.0.173" path="/41/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.566836][ T3952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.576831][   T29] audit: type=1400 audit(1737268317.149:1202): avc:  denied  { bind } for  pid=4013 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   54.578063][ T4016] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32)
[   54.596128][   T29] audit: type=1400 audit(1737268317.149:1203): avc:  denied  { connect } for  pid=4013 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   54.618617][ T3952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.707082][ T4028] loop3: detected capacity change from 0 to 2048
[   54.714973][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.718104][ T3952] team0: Port device team_slave_0 added
[   54.751585][ T3952] team0: Port device team_slave_1 added
[   54.770985][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.817992][ T3952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.825310][ T3952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.832029][ T4028] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   54.851674][ T3952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.852489][ T3952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.864030][ T4028] EXT4-fs (loop3): This should not happen!! Data will be lost
[   54.864030][ T4028] 
[   54.874543][ T3952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.881509][ T4028] EXT4-fs (loop3): Total free blocks count 0
[   54.881526][ T4028] EXT4-fs (loop3): Free/Dirty block details
[   54.881541][ T4028] EXT4-fs (loop3): free_blocks=0
[   54.891167][ T3952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.944977][ T4028] EXT4-fs (loop3): dirty_blocks=0
[   54.950074][ T4028] EXT4-fs (loop3): Block reservation details
[   54.956109][ T4028] EXT4-fs (loop3): i_reserved_data_blocks=0
[   54.988894][ T4046] bond1: entered promiscuous mode
[   54.994141][ T4046] bond1: entered allmulticast mode
[   55.002297][ T4046] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.033556][ T4046] bond1 (unregistering): Released all slaves
[   55.049125][ T3952] hsr_slave_0: entered promiscuous mode
[   55.056082][ T3952] hsr_slave_1: entered promiscuous mode
[   55.056255][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.072002][ T3952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.076461][ T4054] loop4: detected capacity change from 0 to 2048
[   55.079828][ T3952] Cannot create hsr debugfs directory
[   55.113775][ T4056] loop3: detected capacity change from 0 to 512
[   55.185055][ T4056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   55.198126][ T4056] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.216807][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.263864][   T29] audit: type=1326 audit(1737268317.829:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   55.287537][   T29] audit: type=1326 audit(1737268317.839:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   55.310979][   T29] audit: type=1326 audit(1737268317.839:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b33f5d29 code=0x7ffc0000
[   55.343209][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.373633][ T3952] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   55.391268][ T3952] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   55.407813][ T3952] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   55.421210][ T3952] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   55.520463][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   55.529414][ T4085] syz.0.187 uses obsolete (PF_INET,SOCK_PACKET)
[   55.549698][ T3952] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.564654][ T4091] loop4: detected capacity change from 0 to 1764
[   55.573575][ T4090] loop1: detected capacity change from 0 to 1764
[   55.585960][ T4093] loop3: detected capacity change from 0 to 2048
[   55.587200][ T3952] 8021q: adding VLAN 0 to HW filter on device team0
[   55.643362][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.658291][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.665398][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.676205][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.683325][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.705160][ T4093] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   55.717653][ T4093] EXT4-fs (loop3): This should not happen!! Data will be lost
[   55.717653][ T4093] 
[   55.727373][ T4093] EXT4-fs (loop3): Total free blocks count 0
[   55.733413][ T4093] EXT4-fs (loop3): Free/Dirty block details
[   55.739451][ T4093] EXT4-fs (loop3): free_blocks=0
[   55.744498][ T4093] EXT4-fs (loop3): dirty_blocks=0
[   55.749584][ T4093] EXT4-fs (loop3): Block reservation details
[   55.755611][ T4093] EXT4-fs (loop3): i_reserved_data_blocks=0
[   55.799512][ T4110] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   55.799512][ T4110]    program syz.1.193 not setting count and/or reply_len properly
[   55.833174][ T4108] loop0: detected capacity change from 0 to 2048
[   55.864493][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.864921][ T4108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.906986][ T3952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.061297][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.080766][ T4133] capability: warning: `syz.4.197' uses deprecated v2 capabilities in a way that may be insecure
[   56.162171][ T4144] mmap: syz.4.201 (4144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.357156][ T3952] veth0_vlan: entered promiscuous mode
[   56.366675][ T3952] veth1_vlan: entered promiscuous mode
[   56.401113][ T3952] veth0_macvtap: entered promiscuous mode
[   56.416223][ T3952] veth1_macvtap: entered promiscuous mode
[   56.469307][ T3952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.479859][ T3952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.521178][ T3952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.532217][ T3952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.542716][ T3952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.558448][ T3952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.568859][ T3952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.577664][ T3952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.586400][ T3952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.595243][ T3952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.690842][ T4186] loop1: detected capacity change from 0 to 512
[   56.704924][ T4190] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   56.721753][ T4186] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   56.741533][ T4190] loop5: detected capacity change from 0 to 256
[   56.799576][ T4186] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[   56.851442][ T4186] block device autoloading is deprecated and will be removed.
[   56.873322][ T4186] syz.1.213: attempt to access beyond end of device
[   56.873322][ T4186] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[   56.944669][ T4201] bond1: entered promiscuous mode
[   56.950519][ T4201] bond1: entered allmulticast mode
[   56.964794][ T4212] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   56.964794][ T4212]    program syz.3.205 not setting count and/or reply_len properly
[   56.970964][ T4201] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.991513][ T4201] bond1 (unregistering): Released all slaves
[   57.059215][ T4220] FAULT_INJECTION: forcing a failure.
[   57.059215][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.072463][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.4.208 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   57.081763][ T4216] loop1: detected capacity change from 0 to 2048
[   57.083118][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   57.096810][ T4218] loop3: detected capacity change from 0 to 1764
[   57.099491][ T4220] Call Trace:
[   57.099501][ T4220]  <TASK>
[   57.099510][ T4220]  dump_stack_lvl+0xf2/0x150
[   57.116888][ T4220]  dump_stack+0x15/0x1a
[   57.121125][ T4220]  should_fail_ex+0x223/0x230
[   57.125892][ T4220]  should_fail+0xb/0x10
[   57.130194][ T4220]  should_fail_usercopy+0x1a/0x20
[   57.135370][ T4220]  _copy_to_user+0x20/0xa0
[   57.139884][ T4220]  simple_read_from_buffer+0xa0/0x110
[   57.145517][ T4220]  proc_fail_nth_read+0xf9/0x140
[   57.150490][ T4220]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.156056][ T4220]  vfs_read+0x1a2/0x700
[   57.160234][ T4220]  ? __rcu_read_unlock+0x4e/0x70
[   57.165193][ T4220]  ? __fget_files+0x17c/0x1c0
[   57.169959][ T4220]  ksys_read+0xe8/0x1b0
[   57.174158][ T4220]  __x64_sys_read+0x42/0x50
[   57.178679][ T4220]  x64_sys_call+0x2874/0x2dc0
[   57.183374][ T4220]  do_syscall_64+0xc9/0x1c0
[   57.187922][ T4220]  ? clear_bhb_loop+0x55/0xb0
[   57.192614][ T4220]  ? clear_bhb_loop+0x55/0xb0
[   57.197304][ T4220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.203262][ T4220] RIP: 0033:0x7efd5091473c
[   57.207730][ T4220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   57.227358][ T4220] RSP: 002b:00007efd4ef81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   57.235843][ T4220] RAX: ffffffffffffffda RBX: 00007efd50b05fa0 RCX: 00007efd5091473c
[   57.243827][ T4220] RDX: 000000000000000f RSI: 00007efd4ef810a0 RDI: 0000000000000007
[   57.251809][ T4220] RBP: 00007efd4ef81090 R08: 0000000000000000 R09: 0000000000000000
[   57.259815][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.267790][ T4220] R13: 0000000000000000 R14: 00007efd50b05fa0 R15: 00007ffe8d7b6058
[   57.275777][ T4220]  </TASK>
[   57.383618][ T4233] 9pnet_fd: Insufficient options for proto=fd
[   57.435961][ T4238] loop5: detected capacity change from 0 to 512
[   57.471780][ T4216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.521433][ T4243] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   57.521433][ T4243]    program syz.3.214 not setting count and/or reply_len properly
[   57.585985][ T4248] loop4: detected capacity change from 0 to 2048
[   57.612343][ T4216] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   57.624870][ T4216] EXT4-fs (loop1): This should not happen!! Data will be lost
[   57.624870][ T4216] 
[   57.634584][ T4216] EXT4-fs (loop1): Total free blocks count 0
[   57.640604][ T4216] EXT4-fs (loop1): Free/Dirty block details
[   57.646533][ T4216] EXT4-fs (loop1): free_blocks=0
[   57.651565][ T4216] EXT4-fs (loop1): dirty_blocks=0
[   57.656662][ T4216] EXT4-fs (loop1): Block reservation details
[   57.662757][ T4216] EXT4-fs (loop1): i_reserved_data_blocks=0
[   57.681025][ T4238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   57.712631][ T4238] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.758353][ T4248] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   57.770837][ T4248] EXT4-fs (loop4): This should not happen!! Data will be lost
[   57.770837][ T4248] 
[   57.780543][ T4248] EXT4-fs (loop4): Total free blocks count 0
[   57.786660][ T4248] EXT4-fs (loop4): Free/Dirty block details
[   57.792692][ T4248] EXT4-fs (loop4): free_blocks=0
[   57.797650][ T4248] EXT4-fs (loop4): dirty_blocks=0
[   57.802964][ T4248] EXT4-fs (loop4): Block reservation details
[   57.809082][ T4248] EXT4-fs (loop4): i_reserved_data_blocks=0
[   57.890316][ T4268] netlink: 'syz.1.218': attribute type 10 has an invalid length.
[   57.899872][ T4268] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   57.950398][ T4272] loop4: detected capacity change from 0 to 2048
[   58.001328][ T4282] loop5: detected capacity change from 0 to 1764
[   58.121645][ T4304] loop3: detected capacity change from 0 to 512
[   58.165398][ T4309] netlink: 'syz.0.230': attribute type 15 has an invalid length.
[   58.171191][ T4312] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   58.171191][ T4312]    program syz.4.232 not setting count and/or reply_len properly
[   58.212178][ T4304] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.277117][ T4321] random: crng reseeded on system resumption
[   58.322337][ T4324] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   58.418841][ T4321] pim6reg: entered allmulticast mode
[   58.431806][ T4321] pim6reg: left allmulticast mode
[   58.527217][ T4342] loop0: detected capacity change from 0 to 128
[   58.543028][ T4342] EXT4-fs: Ignoring removed nobh option
[   58.554957][ T4342] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.563271][ T4344] loop3: detected capacity change from 0 to 1764
[   58.588151][ T4342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'.
[   58.649927][ T4347] netlink: 'syz.0.243': attribute type 15 has an invalid length.
[   58.694762][ T4349] loop3: detected capacity change from 0 to 512
[   58.742212][ T4353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4353 comm=syz.0.245
[   58.818804][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[   58.831493][ T4349] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.978078][ T4362] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   58.978078][ T4362]    program syz.0.248 not setting count and/or reply_len properly
[   59.028854][ T4364] team_slave_0: entered promiscuous mode
[   59.034631][ T4364] team_slave_0: entered allmulticast mode
[   59.240302][ T4375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4375 comm=syz.5.252
[   59.394532][ T4382] netlink: 'syz.5.255': attribute type 15 has an invalid length.
[   59.433794][ T4386] 9pnet_fd: Insufficient options for proto=fd
[   59.481354][ T4389] loop5: detected capacity change from 0 to 512
[   59.680230][ T4389] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.859784][ T4406] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   59.859784][ T4406]    program syz.5.264 not setting count and/or reply_len properly
[   60.102610][ T4412] loop3: detected capacity change from 0 to 512
[   60.139893][ T4412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.153931][ T4414] netlink: 'syz.5.266': attribute type 15 has an invalid length.
[   60.188048][ T4412] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002]
[   60.198199][ T4412] System zones: 0-2, 18-18, 34-35
[   60.219640][ T4412] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.240831][ T4408] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.265: corrupted xattr block 33: invalid ea_ino
[   60.256165][ T4408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   60.269003][ T4408] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.265: corrupted xattr block 33: invalid ea_ino
[   60.285600][ T4408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   60.294766][ T4408] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.265: corrupted xattr block 33: invalid ea_ino
[   60.295336][   T29] kauditd_printk_skb: 367 callbacks suppressed
[   60.295352][   T29] audit: type=1400 audit(1737268322.869:1574): avc:  denied  { read } for  pid=4407 comm="syz.3.265" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.336711][ T4408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   60.352785][ T4420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4420 comm=syz.0.268
[   60.365286][ T4420] FAULT_INJECTION: forcing a failure.
[   60.365286][ T4420] name failslab, interval 1, probability 0, space 0, times 0
[   60.377951][ T4420] CPU: 1 UID: 0 PID: 4420 Comm: syz.0.268 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   60.388589][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   60.398904][ T4420] Call Trace:
[   60.402193][ T4420]  <TASK>
[   60.405189][ T4420]  dump_stack_lvl+0xf2/0x150
[   60.409813][ T4420]  dump_stack+0x15/0x1a
[   60.414027][ T4420]  should_fail_ex+0x223/0x230
[   60.418884][ T4420]  should_failslab+0x8f/0xb0
[   60.423588][ T4420]  kmem_cache_alloc_node_noprof+0x59/0x320
[   60.429492][ T4420]  ? __alloc_skb+0x10b/0x310
[   60.434176][ T4420]  __alloc_skb+0x10b/0x310
[   60.438614][ T4420]  netlink_ack+0xef/0x4f0
[   60.443049][ T4420]  audit_receive+0x1b2/0x2a20
[   60.447761][ T4420]  ? __netlink_lookup+0x253/0x290
[   60.452900][ T4420]  netlink_unicast+0x599/0x670
[   60.457693][ T4420]  netlink_sendmsg+0x5cc/0x6e0
[   60.462580][ T4420]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.467994][ T4420]  __sock_sendmsg+0x140/0x180
[   60.472788][ T4420]  ____sys_sendmsg+0x312/0x410
[   60.477668][ T4420]  __sys_sendmsg+0x19d/0x230
[   60.482318][ T4420]  __x64_sys_sendmsg+0x46/0x50
[   60.487162][ T4420]  x64_sys_call+0x2734/0x2dc0
[   60.491876][ T4420]  do_syscall_64+0xc9/0x1c0
[   60.496476][ T4420]  ? clear_bhb_loop+0x55/0xb0
[   60.501201][ T4420]  ? clear_bhb_loop+0x55/0xb0
[   60.505908][ T4420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.511826][ T4420] RIP: 0033:0x7faccfd95d29
[   60.516260][ T4420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.535889][ T4420] RSP: 002b:00007facce401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.544315][ T4420] RAX: ffffffffffffffda RBX: 00007faccff85fa0 RCX: 00007faccfd95d29
[   60.552322][ T4420] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006
[   60.560319][ T4420] RBP: 00007facce401090 R08: 0000000000000000 R09: 0000000000000000
[   60.568365][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.576359][ T4420] R13: 0000000000000000 R14: 00007faccff85fa0 R15: 00007ffc33e6db88
[   60.584408][ T4420]  </TASK>
[   60.597505][   T29] audit: type=1400 audit(1737268322.929:1575): avc:  denied  { open } for  pid=4407 comm="syz.3.265" path="/61/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.650257][   T29] audit: type=1326 audit(1737268323.219:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.673674][   T29] audit: type=1326 audit(1737268323.229:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.705126][   T29] audit: type=1326 audit(1737268323.279:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.728942][   T29] audit: type=1326 audit(1737268323.279:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.752458][   T29] audit: type=1326 audit(1737268323.279:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.755545][ T4423] FAULT_INJECTION: forcing a failure.
[   60.755545][ T4423] name failslab, interval 1, probability 0, space 0, times 0
[   60.790604][ T4423] CPU: 0 UID: 0 PID: 4423 Comm: syz.0.270 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   60.801359][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   60.811438][ T4423] Call Trace:
[   60.814750][ T4423]  <TASK>
[   60.817718][ T4423]  dump_stack_lvl+0xf2/0x150
[   60.822362][ T4423]  dump_stack+0x15/0x1a
[   60.826563][ T4423]  should_fail_ex+0x223/0x230
[   60.831285][ T4423]  should_failslab+0x8f/0xb0
[   60.835988][ T4423]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   60.842414][ T4423]  ? sidtab_sid2str_get+0xb8/0x140
[   60.847801][ T4423]  kmemdup_noprof+0x2a/0x60
[   60.852362][ T4423]  sidtab_sid2str_get+0xb8/0x140
[   60.857366][ T4423]  security_sid_to_context_core+0x1eb/0x2f0
[   60.863342][ T4423]  security_sid_to_context+0x27/0x30
[   60.868744][ T4423]  selinux_lsmprop_to_secctx+0x2c/0x40
[   60.874267][ T4423]  security_lsmprop_to_secctx+0x4a/0x90
[   60.879858][ T4423]  audit_log_task_context+0x93/0x1c0
[   60.885298][ T4423]  audit_log_task+0xf9/0x1c0
[   60.890049][ T4423]  audit_seccomp+0x68/0x130
[   60.894598][ T4423]  __seccomp_filter+0x6fa/0x1180
[   60.899658][ T4423]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   60.905350][ T4423]  ? vfs_write+0x596/0x920
[   60.909797][ T4423]  __secure_computing+0x9f/0x1c0
[   60.914791][ T4423]  syscall_trace_enter+0xd1/0x1f0
[   60.919930][ T4423]  ? fpregs_assert_state_consistent+0x83/0xa0
[   60.926082][ T4423]  do_syscall_64+0xaa/0x1c0
[   60.930607][ T4423]  ? clear_bhb_loop+0x55/0xb0
[   60.935316][ T4423]  ? clear_bhb_loop+0x55/0xb0
[   60.940047][ T4423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.946097][ T4423] RIP: 0033:0x7faccfd95d29
[   60.948949][   T29] audit: type=1326 audit(1737268323.329:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.950540][ T4423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.973839][   T29] audit: type=1326 audit(1737268323.329:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccfd95d29 code=0x7ffc0000
[   60.993390][ T4423] RSP: 002b:00007facce401038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a
[   60.993417][ T4423] RAX: ffffffffffffffda RBX: 00007faccff85fa0 RCX: 00007faccfd95d29
[   61.016677][   T29] audit: type=1326 audit(1737268323.329:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faccfd94690 code=0x7ffc0000
[   61.025086][ T4423] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000
[   61.025105][ T4423] RBP: 00007facce401090 R08: 0000000000000000 R09: 0000000000000000
[   61.025120][ T4423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.025135][ T4423] R13: 0000000000000000 R14: 00007faccff85fa0 R15: 00007ffc33e6db88
[   61.025158][ T4423]  </TASK>
[   61.735305][ T4434] pim6reg1: entered promiscuous mode
[   61.740793][ T4434] pim6reg1: entered allmulticast mode
[   61.818436][ T3303] ==================================================================
[   61.826567][ T3303] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[   61.833272][ T3303] 
[   61.835607][ T3303] write to 0xffff88811aab9b50 of 8 bytes by task 3297 on cpu 1:
[   61.843247][ T3303]  __dentry_kill+0x13e/0x4c0
[   61.847867][ T3303]  dput+0x5c/0xd0
[   61.851559][ T3303]  do_unlinkat+0x258/0x4d0
[   61.856008][ T3303]  __x64_sys_unlink+0x2e/0x40
[   61.860711][ T3303]  x64_sys_call+0x2329/0x2dc0
[   61.865409][ T3303]  do_syscall_64+0xc9/0x1c0
[   61.869951][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.875866][ T3303] 
[   61.878193][ T3303] read to 0xffff88811aab9b50 of 8 bytes by task 3303 on cpu 0:
[   61.885754][ T3303]  fast_dput+0x65/0x2c0
[   61.889943][ T3303]  dput+0x24/0xd0
[   61.893593][ T3303]  __fput+0x3fb/0x6d0
[   61.897588][ T3303]  __fput_sync+0x96/0xc0
[   61.901856][ T3303]  __se_sys_close+0x109/0x1b0
[   61.906562][ T3303]  __x64_sys_close+0x1f/0x30
[   61.911194][ T3303]  x64_sys_call+0x266c/0x2dc0
[   61.915925][ T3303]  do_syscall_64+0xc9/0x1c0
[   61.920490][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.926503][ T3303] 
[   61.928837][ T3303] value changed: 0xffff8882374d6488 -> 0x0000000000000000
[   61.935962][ T3303] 
[   61.938298][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   61.944459][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   61.955337][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   61.965418][ T3303] ==================================================================
[   62.202984][ T3297] ==================================================================
[   62.211106][ T3297] BUG: KCSAN: data-race in __dentry_kill / step_into
[   62.217818][ T3297] 
[   62.220157][ T3297] read-write to 0xffff88811a820f00 of 4 bytes by task 3303 on cpu 1:
[   62.228239][ T3297]  __dentry_kill+0x22e/0x4c0
[   62.232849][ T3297]  dput+0x5c/0xd0
[   62.236525][ T3297]  __fput+0x3fb/0x6d0
[   62.240527][ T3297]  __fput_sync+0x96/0xc0
[   62.244795][ T3297]  __se_sys_close+0x109/0x1b0
[   62.249502][ T3297]  __x64_sys_close+0x1f/0x30
[   62.254119][ T3297]  x64_sys_call+0x266c/0x2dc0
[   62.258814][ T3297]  do_syscall_64+0xc9/0x1c0
[   62.263334][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.269258][ T3297] 
[   62.271594][ T3297] read to 0xffff88811a820f00 of 4 bytes by task 3297 on cpu 0:
[   62.279149][ T3297]  step_into+0x12f/0x840
[   62.283416][ T3297]  path_openat+0x1234/0x1fa0
[   62.288037][ T3297]  do_filp_open+0x107/0x230
[   62.292561][ T3297]  do_sys_openat2+0xab/0x120
[   62.297179][ T3297]  __x64_sys_openat+0xf3/0x120
[   62.301973][ T3297]  x64_sys_call+0x2b30/0x2dc0
[   62.306682][ T3297]  do_syscall_64+0xc9/0x1c0
[   62.311210][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.317219][ T3297] 
[   62.319552][ T3297] value changed: 0x00400008 -> 0x00008008
[   62.325284][ T3297] 
[   62.327611][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   62.333776][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   62.344649][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   62.354721][ T3297] ==================================================================
[   62.533407][ T3297] ==================================================================
[   62.541533][ T3297] BUG: KCSAN: data-race in __dentry_kill / step_into
[   62.548242][ T3297] 
[   62.550574][ T3297] read-write to 0xffff888106a93e40 of 4 bytes by task 3303 on cpu 0:
[   62.558646][ T3297]  __dentry_kill+0x22e/0x4c0
[   62.563262][ T3297]  dput+0x5c/0xd0
[   62.566920][ T3297]  __fput+0x3fb/0x6d0
[   62.570931][ T3297]  __fput_sync+0x96/0xc0
[   62.575191][ T3297]  __se_sys_close+0x109/0x1b0
[   62.579889][ T3297]  __x64_sys_close+0x1f/0x30
[   62.584510][ T3297]  x64_sys_call+0x266c/0x2dc0
[   62.589213][ T3297]  do_syscall_64+0xc9/0x1c0
[   62.593745][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.599662][ T3297] 
[   62.602003][ T3297] read to 0xffff888106a93e40 of 4 bytes by task 3297 on cpu 1:
[   62.609565][ T3297]  step_into+0xe7/0x840
[   62.613760][ T3297]  path_openat+0x1234/0x1fa0
[   62.618380][ T3297]  do_filp_open+0x107/0x230
[   62.622913][ T3297]  do_sys_openat2+0xab/0x120
[   62.627614][ T3297]  __x64_sys_openat+0xf3/0x120
[   62.632403][ T3297]  x64_sys_call+0x2b30/0x2dc0
[   62.637179][ T3297]  do_syscall_64+0xc9/0x1c0
[   62.641701][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.647618][ T3297] 
[   62.649955][ T3297] value changed: 0x00400008 -> 0x00008008
[   62.655699][ T3297] 
[   62.658037][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   62.664202][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   62.675166][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   62.685326][ T3297] ==================================================================
[   62.906025][ T3297] ==================================================================
[   62.914152][ T3297] BUG: KCSAN: data-race in __dentry_kill / lookup_fast
[   62.921036][ T3297] 
[   62.923379][ T3297] read-write to 0xffff888106acf3c0 of 4 bytes by task 3303 on cpu 0:
[   62.931456][ T3297]  __dentry_kill+0x22e/0x4c0
[   62.936074][ T3297]  dput+0x5c/0xd0
[   62.939810][ T3297]  __fput+0x3fb/0x6d0
[   62.943811][ T3297]  __fput_sync+0x96/0xc0
[   62.948082][ T3297]  __se_sys_close+0x109/0x1b0
[   62.952791][ T3297]  __x64_sys_close+0x1f/0x30
[   62.957405][ T3297]  x64_sys_call+0x266c/0x2dc0
[   62.962109][ T3297]  do_syscall_64+0xc9/0x1c0
[   62.966652][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.972578][ T3297] 
[   62.974915][ T3297] read to 0xffff888106acf3c0 of 4 bytes by task 3297 on cpu 1:
[   62.982468][ T3297]  lookup_fast+0xd9/0x2a0
[   62.986825][ T3297]  path_openat+0x41e/0x1fa0
[   62.991351][ T3297]  do_filp_open+0x107/0x230
[   62.995873][ T3297]  do_sys_openat2+0xab/0x120
[   63.000486][ T3297]  __x64_sys_openat+0xf3/0x120
[   63.005275][ T3297]  x64_sys_call+0x2b30/0x2dc0
[   63.009977][ T3297]  do_syscall_64+0xc9/0x1c0
[   63.014508][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.020507][ T3297] 
[   63.022836][ T3297] value changed: 0x00400008 -> 0x00008008
[   63.028559][ T3297] 
[   63.030887][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   63.037043][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   63.047900][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   63.057974][ T3297] ==================================================================
[   65.836682][ T3303] ==================================================================
[   65.844806][ T3303] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[   65.851504][ T3303] 
[   65.853842][ T3303] write to 0xffff8881069da910 of 8 bytes by task 3297 on cpu 1:
[   65.861490][ T3303]  __dentry_kill+0x13e/0x4c0
[   65.866102][ T3303]  dput+0x5c/0xd0
[   65.869786][ T3303]  do_unlinkat+0x258/0x4d0
[   65.874237][ T3303]  __x64_sys_unlink+0x2e/0x40
[   65.878943][ T3303]  x64_sys_call+0x2329/0x2dc0
[   65.883644][ T3303]  do_syscall_64+0xc9/0x1c0
[   65.888180][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.894131][ T3303] 
[   65.896466][ T3303] read to 0xffff8881069da910 of 8 bytes by task 3303 on cpu 0:
[   65.904026][ T3303]  fast_dput+0x65/0x2c0
[   65.908284][ T3303]  dput+0x24/0xd0
[   65.911928][ T3303]  __fput+0x3fb/0x6d0
[   65.915937][ T3303]  __fput_sync+0x96/0xc0
[   65.920200][ T3303]  __se_sys_close+0x109/0x1b0
[   65.924893][ T3303]  __x64_sys_close+0x1f/0x30
[   65.929618][ T3303]  x64_sys_call+0x266c/0x2dc0
[   65.934318][ T3303]  do_syscall_64+0xc9/0x1c0
[   65.938855][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.944776][ T3303] 
[   65.947135][ T3303] value changed: 0xffff8882374d6488 -> 0x0000000000000000
[   65.954250][ T3303] 
[   65.956586][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   65.962750][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   65.973617][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   65.983695][ T3303] ==================================================================
[   66.505989][ T3303] ==================================================================
[   66.514119][ T3303] BUG: KCSAN: data-race in __dentry_kill / step_into
[   66.520813][ T3303] 
[   66.523151][ T3303] read-write to 0xffff888106946480 of 4 bytes by task 3297 on cpu 0:
[   66.531230][ T3303]  __dentry_kill+0x22e/0x4c0
[   66.535842][ T3303]  dput+0x5c/0xd0
[   66.539499][ T3303]  __fput+0x3fb/0x6d0
[   66.543505][ T3303]  __fput_sync+0x96/0xc0
[   66.547768][ T3303]  __se_sys_close+0x109/0x1b0
[   66.552470][ T3303]  __x64_sys_close+0x1f/0x30
[   66.557073][ T3303]  x64_sys_call+0x266c/0x2dc0
[   66.561779][ T3303]  do_syscall_64+0xc9/0x1c0
[   66.566316][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.572234][ T3303] 
[   66.574568][ T3303] read to 0xffff888106946480 of 4 bytes by task 3303 on cpu 1:
[   66.582129][ T3303]  step_into+0x12f/0x840
[   66.586382][ T3303]  path_openat+0x1234/0x1fa0
[   66.590995][ T3303]  do_filp_open+0x107/0x230
[   66.595519][ T3303]  do_sys_openat2+0xab/0x120
[   66.600125][ T3303]  __x64_sys_openat+0xf3/0x120
[   66.604907][ T3303]  x64_sys_call+0x2b30/0x2dc0
[   66.609639][ T3303]  do_syscall_64+0xc9/0x1c0
[   66.614168][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.620080][ T3303] 
[   66.622419][ T3303] value changed: 0x00400008 -> 0x00008008
[   66.628148][ T3303] 
[   66.630479][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   66.636640][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   66.647535][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   66.657620][ T3303] ==================================================================
[   66.670301][   T29] kauditd_printk_skb: 61 callbacks suppressed
[   66.670317][   T29] audit: type=1400 audit(1737268329.239:1644): avc:  denied  { unlink } for  pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   66.743369][ T3303] ==================================================================
[   66.751635][ T3303] BUG: KCSAN: data-race in __dentry_kill / lookup_fast
[   66.758515][ T3303] 
[   66.760851][ T3303] read-write to 0xffff888106a42cc0 of 4 bytes by task 3297 on cpu 0:
[   66.768931][ T3303]  __dentry_kill+0x22e/0x4c0
[   66.773567][ T3303]  dput+0x5c/0xd0
[   66.777219][ T3303]  __fput+0x3fb/0x6d0
[   66.781213][ T3303]  __fput_sync+0x96/0xc0
[   66.785487][ T3303]  __se_sys_close+0x109/0x1b0
[   66.790190][ T3303]  __x64_sys_close+0x1f/0x30
[   66.794809][ T3303]  x64_sys_call+0x266c/0x2dc0
[   66.799515][ T3303]  do_syscall_64+0xc9/0x1c0
[   66.804046][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.809968][ T3303] 
[   66.812305][ T3303] read to 0xffff888106a42cc0 of 4 bytes by task 3303 on cpu 1:
[   66.819860][ T3303]  lookup_fast+0xd9/0x2a0
[   66.824217][ T3303]  path_openat+0x41e/0x1fa0
[   66.828752][ T3303]  do_filp_open+0x107/0x230
[   66.833285][ T3303]  do_sys_openat2+0xab/0x120
[   66.837906][ T3303]  __x64_sys_openat+0xf3/0x120
[   66.842690][ T3303]  x64_sys_call+0x2b30/0x2dc0
[   66.847404][ T3303]  do_syscall_64+0xc9/0x1c0
[   66.851931][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.857856][ T3303] 
[   66.860193][ T3303] value changed: 0x00400008 -> 0x00008008
[   66.865929][ T3303] 
[   66.868269][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   66.874433][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   66.885308][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   66.895394][ T3303] ==================================================================
[   68.590159][ T3297] ==================================================================
[   68.598298][ T3297] BUG: KCSAN: data-race in __dentry_kill / step_into
[   68.605004][ T3297] 
[   68.607341][ T3297] read-write to 0xffff888106a26cc0 of 4 bytes by task 3303 on cpu 0:
[   68.615440][ T3297]  __dentry_kill+0x22e/0x4c0
[   68.620041][ T3297]  dput+0x5c/0xd0
[   68.623688][ T3297]  __fput+0x3fb/0x6d0
[   68.627686][ T3297]  __fput_sync+0x96/0xc0
[   68.631944][ T3297]  __se_sys_close+0x109/0x1b0
[   68.636637][ T3297]  __x64_sys_close+0x1f/0x30
[   68.641263][ T3297]  x64_sys_call+0x266c/0x2dc0
[   68.645956][ T3297]  do_syscall_64+0xc9/0x1c0
[   68.650484][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.656418][ T3297] 
[   68.658754][ T3297] read to 0xffff888106a26cc0 of 4 bytes by task 3297 on cpu 1:
[   68.666326][ T3297]  step_into+0xe7/0x840
[   68.670512][ T3297]  path_openat+0x1234/0x1fa0
[   68.675131][ T3297]  do_filp_open+0x107/0x230
[   68.679666][ T3297]  do_sys_openat2+0xab/0x120
[   68.684268][ T3297]  __x64_sys_openat+0xf3/0x120
[   68.689053][ T3297]  x64_sys_call+0x2b30/0x2dc0
[   68.693756][ T3297]  do_syscall_64+0xc9/0x1c0
[   68.698282][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.704234][ T3297] 
[   68.706571][ T3297] value changed: 0x00400008 -> 0x00008008
[   68.712335][ T3297] 
[   68.714671][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   68.720832][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   68.731703][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   68.741774][ T3297] ==================================================================
[   70.074339][ T3303] ==================================================================
[   70.082486][ T3303] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[   70.089186][ T3303] 
[   70.091523][ T3303] write to 0xffff88811a823010 of 8 bytes by task 3297 on cpu 0:
[   70.099255][ T3303]  __dentry_kill+0x13e/0x4c0
[   70.103880][ T3303]  dput+0x5c/0xd0
[   70.107532][ T3303]  do_unlinkat+0x258/0x4d0
[   70.111987][ T3303]  __x64_sys_unlink+0x2e/0x40
[   70.116698][ T3303]  x64_sys_call+0x2329/0x2dc0
[   70.121400][ T3303]  do_syscall_64+0xc9/0x1c0
[   70.125925][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.131832][ T3303] 
[   70.134161][ T3303] read to 0xffff88811a823010 of 8 bytes by task 3303 on cpu 1:
[   70.141712][ T3303]  fast_dput+0x65/0x2c0
[   70.145892][ T3303]  dput+0x24/0xd0
[   70.149542][ T3303]  __fput+0x3fb/0x6d0
[   70.153540][ T3303]  __fput_sync+0x96/0xc0
[   70.157807][ T3303]  __se_sys_close+0x109/0x1b0
[   70.162499][ T3303]  __x64_sys_close+0x1f/0x30
[   70.167118][ T3303]  x64_sys_call+0x266c/0x2dc0
[   70.171850][ T3303]  do_syscall_64+0xc9/0x1c0
[   70.176386][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.182301][ T3303] 
[   70.184634][ T3303] value changed: 0xffff8882374d6488 -> 0x0000000000000000
[   70.191756][ T3303] 
[   70.194088][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   70.200250][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   70.211126][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   70.221197][ T3303] ==================================================================
[   70.473037][ T3303] ==================================================================
[   70.481173][ T3303] BUG: KCSAN: data-race in __dentry_kill / step_into
[   70.487875][ T3303] 
[   70.490209][ T3303] read-write to 0xffff88810697bb40 of 4 bytes by task 3297 on cpu 0:
[   70.498290][ T3303]  __dentry_kill+0x22e/0x4c0
[   70.502891][ T3303]  dput+0x5c/0xd0
[   70.506542][ T3303]  __fput+0x3fb/0x6d0
[   70.510568][ T3303]  __fput_sync+0x96/0xc0
[   70.514825][ T3303]  __se_sys_close+0x109/0x1b0
[   70.520564][ T3303]  __x64_sys_close+0x1f/0x30
[   70.525167][ T3303]  x64_sys_call+0x266c/0x2dc0
[   70.529869][ T3303]  do_syscall_64+0xc9/0x1c0
[   70.536316][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.542239][ T3303] 
[   70.544581][ T3303] read to 0xffff88810697bb40 of 4 bytes by task 3303 on cpu 1:
[   70.552139][ T3303]  step_into+0x12f/0x840
[   70.556403][ T3303]  path_openat+0x1234/0x1fa0
[   70.561020][ T3303]  do_filp_open+0x107/0x230
[   70.565545][ T3303]  do_sys_openat2+0xab/0x120
[   70.570159][ T3303]  __x64_sys_openat+0xf3/0x120
[   70.574949][ T3303]  x64_sys_call+0x2b30/0x2dc0
[   70.579657][ T3303]  do_syscall_64+0xc9/0x1c0
[   70.584177][ T3303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.590202][ T3303] 
[   70.592541][ T3303] value changed: 0x00400008 -> 0x00008008
[   70.598268][ T3303] 
[   70.600606][ T3303] Reported by Kernel Concurrency Sanitizer on:
[   70.606772][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   70.617638][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   70.627714][ T3303] ==================================================================
[   71.456016][ T3297] ==================================================================
[   71.464141][ T3297] BUG: KCSAN: data-race in __dentry_kill / lookup_fast
[   71.471021][ T3297] 
[   71.473357][ T3297] read-write to 0xffff88810694c240 of 4 bytes by task 3303 on cpu 1:
[   71.481440][ T3297]  __dentry_kill+0x22e/0x4c0
[   71.486052][ T3297]  dput+0x5c/0xd0
[   71.489705][ T3297]  __fput+0x3fb/0x6d0
[   71.493702][ T3297]  __fput_sync+0x96/0xc0
[   71.497967][ T3297]  __se_sys_close+0x109/0x1b0
[   71.502761][ T3297]  __x64_sys_close+0x1f/0x30
[   71.507370][ T3297]  x64_sys_call+0x266c/0x2dc0
[   71.512094][ T3297]  do_syscall_64+0xc9/0x1c0
[   71.516627][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.522541][ T3297] 
[   71.524927][ T3297] read to 0xffff88810694c240 of 4 bytes by task 3297 on cpu 0:
[   71.532573][ T3297]  lookup_fast+0xd9/0x2a0
[   71.536925][ T3297]  path_openat+0x41e/0x1fa0
[   71.541451][ T3297]  do_filp_open+0x107/0x230
[   71.545970][ T3297]  do_sys_openat2+0xab/0x120
[   71.550577][ T3297]  __x64_sys_openat+0xf3/0x120
[   71.555370][ T3297]  x64_sys_call+0x2b30/0x2dc0
[   71.560065][ T3297]  do_syscall_64+0xc9/0x1c0
[   71.564587][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.570497][ T3297] 
[   71.572827][ T3297] value changed: 0x00400008 -> 0x00008008
[   71.578563][ T3297] 
[   71.580893][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   71.587069][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[   71.597969][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   71.608072][ T3297] ==================================================================