last executing test programs:

2.908722209s ago: executing program 4 (id=6522):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")

2.424692913s ago: executing program 4 (id=6530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
fcntl$notify(r2, 0x402, 0x8000003d)
accept(r2, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80)

2.321144774s ago: executing program 4 (id=6532):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "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"})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64], 0x20)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000fff50000000000deffffff00feff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/233, 0xe9}], 0x1}, 0x1e01)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
io_setup(0xa915, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0)

2.069547225s ago: executing program 4 (id=6539):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)

2.004214476s ago: executing program 4 (id=6543):
syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0xfffe, &(0x7f00000081c0), 0x1, 0x8130, &(0x7f0000008200)="$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")

1.757844527s ago: executing program 2 (id=6547):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x8, 0x2b, 0x101, 0x0, 0x33}})
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0)

1.671189408s ago: executing program 2 (id=6550):
r0 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') (async)
add_key$user(&(0x7f0000001e80), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@dax_always}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x46f, &(0x7f0000000480)="$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") (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/4134, 0x1026}], 0x1}, 0x40002022) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8) (async)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090800007b8af8ff72000008bfa2000000000000b704000000000000549792e1cdc781c3ce0499394700000005da6e8c38e301df0941991d65f26c6ba7919a2752be4701ac900fdce82af2139df9f265cf500b529c0e8c7ef0e33a1ca4c5323112"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async)
r10 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x36) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
connect$unix(r12, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e5f}, 0x6e) (async)
sendmmsg$unix(r13, &(0x7f0000000b00)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000380)="6fbed9dc55de2324db063d8ff3ed25029800b70502ad244fe5fe03552ab9140533b438", 0x23}, {&(0x7f0000000a40)="0fef5dea23fd0d3d3f4728094cd4d20f1570470a27ff13a1e81827724a45ecd6d82086167f13852e64af462d8430be06cbdc65bb31d0bdf7428270292789494157a199ffdb05dbc4f67baa13ca8d38ed7d553370245716ff9d4d9a12a77c8d43b133cc9bef173c03d610d607fbcf4fd03fbf6d304fcefedad14230ffb01443ae90a236e971e7ede5e3f135ab0ee1cd0a42f65550e9c696ebd5ce62921fa7a7336eccdc5c2730c8e57178ffeb0611", 0xae}, {&(0x7f00000003c0)="068fea7d54b1942da989d810ce7f775866ee2f590d7c86fb1f40efc1884bbeb54c02de0344d1662bbc488c255f33dd0878988255c8993b0a7c058868db3f35ca66380f81bb62e324fa62d041ed9ec3bdc14436a89e4945e1541155b95f097fd28569cbc9d46349", 0x67}], 0x3, 0x0, 0x0, 0x2400a080}}], 0x1, 0x0)
recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYRES16=r0], 0x14}}, 0x4000004) (async)
setns(r2, 0x24020000)

1.450452749s ago: executing program 2 (id=6553):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
fcntl$notify(r2, 0x402, 0x8000003d)
accept(r2, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80)

1.292118001s ago: executing program 2 (id=6558):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x36, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
socket(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)

1.267656391s ago: executing program 2 (id=6560):
socket(0xa, 0x3, 0x3a)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x2, 0x1001, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r4 = inotify_init()
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7)
write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69)
close(r5)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
preadv(r8, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

1.087692083s ago: executing program 4 (id=6565):
socket(0x27, 0x6, 0x3c)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000002000000011000000800000000000000", @ANYRES32, @ANYBLOB="00000000001aa500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r4 = inotify_init()
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7)
write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69)
close(r5)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x7}, 0x18)
iopl(0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
preadv(r9, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

1.011623583s ago: executing program 0 (id=6566):
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000001200)={@val={0x0, 0x8035}, @void, @eth={@multicast, @random, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x27}}}}}}}}, 0x4e)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x567, 0x60, 0x0, 0x0, 0x0)

917.781534ms ago: executing program 1 (id=6569):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000010140100000000000000080004"], 0x18}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000020000000c00000000000000d1c3f325f415e45210a48250659528a53f95d06202bd43ba7db0170924078fa6cab12b9f6e4fa077b4931c83f6003fcd3dd0fbb29d0b3cec6c4f7758f8375d129866d5ffbd02d71c5d65337a18c1b9717b41f033406957c2c834d67b6adcc5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="16a8", 0x2}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000001b39fb730600000000"], 0x10}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x80c00, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000300)={0x8, 0x10000, 0x0, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r5, 0x0)
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x7)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x30000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000300"/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20)
sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10)
recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
listxattr(0x0, 0x0, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

917.231354ms ago: executing program 1 (id=6570):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "ab2fcf26a5d340cdd6d3a4c4bd24c305f00f8f600d9c855898971dd81b06c10c7f4210b4acf7236375a3101ca49046d4dda4e5adb3cbc8e54a5b3ed55ed1920ea0e947358225a80a2d0ac0fac06a73d681a117a5d10e0a4d8c769d18e1d0f256b080e694d1bd6774152f24076b44ba598ecf2028e48ee915c75eddffd66f452224a3550ddd782259c8a00b1293ea705db3495246fd3579fac1e353a73cb74a1fbb3bc3422317039a4ba47a213a073334ea0a3bfa9f761e7ed32ebf505bc6f2a283d6c5099e7358aac639ba07caf4415632cf10fc6664f894527aa67df185a913a7f160f8cf4684c918b91017323423616f2d1865dbfb11cbb7ed40783fe656d2"})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=")
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64], 0x20)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000fff50000000000deffffff00feff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/233, 0xe9}], 0x1}, 0x1e01)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
io_setup(0xa915, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0)

785.328074ms ago: executing program 1 (id=6573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfe000000, 0x80}}, './file0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a310000000008005a400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}}, 0x0)
sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1}}], 0x1, 0x8000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r8}, 0x20)
connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000280)=""/74, &(0x7f0000000200)=0x4a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_io_uring_complete(0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x2}}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r11}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

712.091195ms ago: executing program 3 (id=6574):
r0 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008b0000009500000000000000a60fb3e8cef07728b02b27265014e20200d423c820c5a22a9e3cb96f0587dd89"], &(0x7f0000003240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc01)
unshare(0x2c020400)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@dellink={0x28, 0x11, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5000, 0x1100}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00')
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r11=>r8, {0x6}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x4058534c, &(0x7f00000004c0)={0x24000, 0x4, 0x2, 0x5f0b, 0xfffff5cb})
write$binfmt_script(r10, &(0x7f0000000d80)={'#! ', './file0'}, 0xb)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
r12 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x1)
acct(&(0x7f0000000200)='./file0\x00')
readahead(r12, 0xa8, 0xfffffffffffffffa)
syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

699.102315ms ago: executing program 0 (id=6575):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0)
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

631.546386ms ago: executing program 0 (id=6576):
socket$igmp(0x2, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x0, 0x0, &(0x7f00000008c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0x9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c9rHFUcAPDv7G7SplETi6j1IEEpLWiTJm2l/ji091Lqj5sXY5OW2u0PmoimCqZQL4J48VDw5MH6X2jRqyfBgwcvnqRQRXpRRFdmd3bdJLvJJs12Yubzgdm8N2923xvCd9/bmfd2AyissfShFLEnIi4nESNtZUlkhWON4+7+/v7pdEuiVnv1t6RenuaXHh8xnD5UIv4eifj+myR2l1fWO7dw9fx0tTp7JctPzF+4PDG3cPXAuQvTZ2fPzl6cem7q6JHDR45OHryn8yu1pU9cf+udkY9Ovv7FZ38lk1/+dDKJY/HrmUZZ+3lslrEYiz9qtQ+W769ExNHNriwn5ex82iXLd7BlVbIYGYyIx2Ikym3/zZH48OVcGwf0VS2JqAEFlYh/KKjmOKD52b63z8GlPo9KgPvhzvH0caBD/Fca1wZjNAYiYu+y53W4pLchaR3ffXvyerpFn67DAZ0tXtuRpZbHf1KPzdHYWc/tultacp03HQGcyv6m+1/ZYP1jy/LiH+6fxWsR8Xin8f/a8f9GW/y/ucH6xT8AAAAAAABsnlvHI+LZTvf/Stm9uZ3xVP3+X9K4//fDfysEj21C/Wvf/yvd3oRqgA7uHI94qeP839Yc39FylnuwMRswOXOuOnswIh6KiP0xsCPNT65Sx4GPd9/oVtY+/y/d0vqbcwGzdtyu7Fj6nJnp+el7OWeg4c61iCcq3ef/pP1/0t7/Z9L3g8s91rF7781T3crWjn+gX2qfR+zr2P8nrWOS1b+fY6I+HphojgpWevK9T77qVr/4h/yk/f+u1eN/NGn/vp659b3+YEQcWqjUupVvdPw/mLxWbr5+6t3p+fkrkxGDyYmV+6fW12bYrprx0IyXNP73P7369b/W+L8tDociYrHHOh/9Z/jnbmX6f8hPGv8z6+r/15+Yujn6dbf6e+v/D9f79P3ZHtf/YHW9Bmje7QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/6NSRDwQSWm8lS6VxscjhiPikdhVql6am3/mzKW3L86kZfXf/y81f+l3pJFPmr//P9qWn1qWPxQRD0fEp+When789KXqTN4nDwAAAAAAAAAAAAAAAAAAAFvEcJf1/6lfynm3Dui7SvZXvEPxVPJuAJAb8Q/FJf6huMQ/FJf4h+LaYPy7XQDbgP4fimqgt8N29rsdQB70/wAAAAAAsK3cevH5G0lELL4wVN9Sg1lZ68bgUF6tA/qplHcDgNyYwwvFZeoPFFePk3+BbSxppf6sdSrvPvs/6U+DAAAAAAAAAAAAAIAV9u259eOa6/+Bbcn6fygu6/+huKz/h+LyGR9YaxW/9f8AAAAAAAAAAAAAkL+5havnp6vV2SsSElstMRARW6AZOSQG8w/PnN+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAln8DAAD//1X3JPo=")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000bc0), 0x6c082, 0x0)
add_key$user(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, &(0x7f0000000b80)="5223402d437b2e4d1b315183e6738282744cf895a1851d481c93f2", 0x1b, r1)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
semget$private(0x0, 0x4000, 0x555)

630.969245ms ago: executing program 3 (id=6577):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
unshare(0x68040200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="060011004e2100003800128008000100736974002c0002"], 0x90}}, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}}, 0xc1)

499.942647ms ago: executing program 3 (id=6578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "29daf598f4151f58"}, 0x28)
write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r2, r3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2, 0x0, 0xfffd}}}}}}, 0x0)
socket$inet6(0xa, 0x1, 0x3a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='btrfs_qgroup_account_extent\x00', r8, 0x0, 0x753}, 0x18)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010405000000000000000000070000000600064000ce0000"], 0x1c}}, 0x2004004)
memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)

499.332777ms ago: executing program 0 (id=6588):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)

499.030306ms ago: executing program 1 (id=6579):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x2043, 0x1, 0x1, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(r2)

476.807616ms ago: executing program 0 (id=6580):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
fcntl$notify(r2, 0x402, 0x8000003d)
accept(r2, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80)

411.625137ms ago: executing program 0 (id=6581):
socket$igmp(0x2, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x0, 0x0, &(0x7f00000008c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0x5, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x6, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004880}, 0x404c001)
close(r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x7151, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

411.248617ms ago: executing program 1 (id=6582):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "ab2fcf26a5d340cdd6d3a4c4bd24c305f00f8f600d9c855898971dd81b06c10c7f4210b4acf7236375a3101ca49046d4dda4e5adb3cbc8e54a5b3ed55ed1920ea0e947358225a80a2d0ac0fac06a73d681a117a5d10e0a4d8c769d18e1d0f256b080e694d1bd6774152f24076b44ba598ecf2028e48ee915c75eddffd66f452224a3550ddd782259c8a00b1293ea705db3495246fd3579fac1e353a73cb74a1fbb3bc3422317039a4ba47a213a073334ea0a3bfa9f761e7ed32ebf505bc6f2a283d6c5099e7358aac639ba07caf4415632cf10fc6664f894527aa67df185a913a7f160f8cf4684c918b91017323423616f2d1865dbfb11cbb7ed40783fe656d2"})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64], 0x20)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000fff50000000000deffffff00feff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/233, 0xe9}], 0x1}, 0x1e01)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
io_setup(0xa915, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0)

390.703907ms ago: executing program 3 (id=6583):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$eJzs3c9rHG0dAPDvzCYxed9oWpFii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM60a3Y32ebN7mwznw/M9plnZvd5vjv7dJ5nNs9OALU1nz2kEWcj4k4SMdexbTbaG+eL/fb+8exutiTRan3j70kkRV65/+vi3w+zhyRiOiJ+fz3ik43ucrefPL2/0my1fT9icWdza3H7ydOLG5sr99burT1YvvTly1eWvrJ8eflY4izjunHz65/5yQ++86X1PzQvJnE1bk9+bzX2xXFc5mM+XhchduZPRMSVLNHjfXnflCEkFdeDo2kUn8fJiDgTc9HI19rmYuPHlVYOGKpWI6IF1FSi/UNNlf2Acmw/jHHwOHt1rT0A6o5/on1tJKbzsdEHe0nHyKg93j11DOVnZfz32blfZEv0uQ4xcQzl9LP7PCI+3Sv+JK/bqfwqThZ/GmnH87L0UkRMFe/FYOP/ya6c+X3ro/78vUv8ncchi/9q8W+Wf/2I5VcdPwD19PJacSLfzdbenv+ynmHZ/4ke/Z/ZHueuo6j6/Ne//1ee76fza+Tpvn5Y1t+51fsluzo5f/nRjZ/1K7+z/5ctWfllX3AUXj2POLcv/h/mHb3kzfFPehz/bJc7A5bxtT/+7Ua/bVXH33oRcb7n+OdtjzZLLe5sbpV5+76fXFzfaK4ttR97lvGb3337V/3Krzr+7PhHn/HfQcc/y9sasIxf33qx2W/b7KHxp3+dSm7nqaki57srOzuPliOmkpvFLh35lw6uS7lP+RpZ/Bc+37v994q/KCo/0Lv/9270t/XN+3v99hv4+HcPnTKvWweHe6gs/tU+n//Djv9PByzjX996/Nl9WTNl4qD4Z7pfKtl95wgBAAAAAACgPtL8O9gkXXiTTtOFhfYc3k/FB2nz4fbOF9YfPn6wGnEh/3vIybT8pnuuvZ5k68vF38OW65f2rX8xIk5HxM8bM/n6wt2HzdWqgwcAAAAAAAAAAAAAAAAAAIAx8WEx/7+8T/U/G+35/wPZOTPk2gFDN8wbzAHjTfuH+srbf1p1LYAqOP9DfWn/UF/aP9SX9g/1pf1DfWn/UF/aP9SX9g8AAAAAJ9Lpz738cxIRu1+dyZfMVLFtstKaAcP27m18fij1AEavMdKnAePkzVf/pv9D7QzU//938eOAw68OUIGkV2beOWgd3Phf9nwmAAAAAAAAAAAAADAE58+a/w91lcZvq64CUJHuifxn9wac6Oc3AOA956f/ob4+0hjfBQI4EQ6bxT/db4P5/wAAAAAAAAAAAAAwMrP5kqQLxS1AZyNNFxYiPh4Rp2IyWd9ori1FxCci4k+NyY9l68tVVxoAAAAAAAAAAAAAAAAAAABOmO0nT++vNJtrjzoT/+nKOdmJ8i6o41KfzkQkoy90JiLGIfbhJCY6cpKI3ezIj0XFHm3HWFQjzatR8X9MAAAAAAAAAAAAAAAAAABQQx1zj3s798sR1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARu/t/f+PnkgOeZ2qYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k//CwAA//9vNjw9")

272.063938ms ago: executing program 2 (id=6584):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)}], 0x1}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040)=0xfffffff7, 0x4)

271.458528ms ago: executing program 1 (id=6585):
r0 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00004d8000/0x4000)=nil, 0x4000, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
close_range(r6, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=0x4)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r12], 0x2c}}, 0x20008000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x5, '\x00', r8, r9, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {&(0x7f0000000b40)}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640", @ANYRES8=r13], 0x18}}], 0x3, 0x0)

265.961648ms ago: executing program 3 (id=6586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
close(r1)

0s ago: executing program 3 (id=6587):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000200)="071590247a32f26319a4e32b375fabebcd6d", &(0x7f0000000240)=""/118}, 0x20)

kernel console output (not intermixed with test programs):

syz.3.5234:19495 failed to unregister, leaking uprobe
[  481.939276][T19556] lo speed is unknown, defaulting to 1000
[  482.039431][T19556] dummy0 speed is unknown, defaulting to 1000
[  483.582202][T19647] net_ratelimit: 102 callbacks suppressed
[  483.582221][T19647] netlink: zone id is out of range
[  483.593296][T19647] netlink: zone id is out of range
[  483.598655][T19647] netlink: zone id is out of range
[  483.603792][T19647] netlink: zone id is out of range
[  483.609635][T19647] netlink: zone id is out of range
[  483.614886][T19647] netlink: zone id is out of range
[  483.620074][T19647] netlink: zone id is out of range
[  483.625315][T19647] netlink: zone id is out of range
[  483.630565][T19647] netlink: zone id is out of range
[  483.635694][T19647] netlink: zone id is out of range
[  484.824015][T19756] lo speed is unknown, defaulting to 1000
[  484.896679][T19756] dummy0 speed is unknown, defaulting to 1000
[  484.966187][T19760] lo speed is unknown, defaulting to 1000
[  485.062566][T19760] dummy0 speed is unknown, defaulting to 1000
[  485.170299][T19770] ref_ctr increment failed for inode: 0x1770 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118a18000
[  485.288654][T19774] __nla_validate_parse: 38 callbacks suppressed
[  485.288672][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5327'.
[  485.414992][T19770] lo speed is unknown, defaulting to 1000
[  485.487954][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5329'.
[  485.496996][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5329'.
[  485.507501][T19770] dummy0 speed is unknown, defaulting to 1000
[  485.591482][T19790] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.5334'.
[  485.817473][T19781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5331'.
[  485.938271][T19769] uprobe: syz.4.5327:19769 failed to unregister, leaking uprobe
[  486.119160][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'.
[  486.128076][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'.
[  486.189854][T19820] lo speed is unknown, defaulting to 1000
[  486.225363][T19820] dummy0 speed is unknown, defaulting to 1000
[  486.402048][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  486.402075][   T29] audit: type=1326 audit(1741581443.757:33582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba8e84127 code=0x7ffc0000
[  486.439130][   T29] audit: type=1326 audit(1741581443.757:33583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ba8e29359 code=0x7ffc0000
[  486.462711][   T29] audit: type=1326 audit(1741581443.757:33584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba8e84127 code=0x7ffc0000
[  486.486450][   T29] audit: type=1326 audit(1741581443.757:33585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ba8e29359 code=0x7ffc0000
[  486.510065][   T29] audit: type=1326 audit(1741581443.757:33586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  486.533806][   T29] audit: type=1326 audit(1741581443.757:33587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  486.557628][   T29] audit: type=1326 audit(1741581443.757:33588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  486.581268][   T29] audit: type=1326 audit(1741581443.757:33589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  486.605192][   T29] audit: type=1326 audit(1741581443.757:33590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  486.628937][   T29] audit: type=1326 audit(1741581443.757:33591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19823 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  487.308871][T19849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5350'.
[  487.341032][T19864] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.5354'.
[  487.354890][T19843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5348'.
[  487.459799][T19861] lo speed is unknown, defaulting to 1000
[  487.502605][T19861] dummy0 speed is unknown, defaulting to 1000
[  490.344693][T19962] lo speed is unknown, defaulting to 1000
[  490.381389][T19962] dummy0 speed is unknown, defaulting to 1000
[  490.743347][T19958] __nla_validate_parse: 28 callbacks suppressed
[  490.743364][T19958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5384'.
[  490.782179][T19960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5385'.
[  490.818230][T19968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5387'.
[  490.941073][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5392'.
[  490.950069][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5392'.
[  490.976635][T19967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5388'.
[  491.048463][T19971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5389'.
[  491.117118][T19985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5393'.
[  491.245226][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5391'.
[  491.382811][T19978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5390'.
[  491.852178][T20011] lo speed is unknown, defaulting to 1000
[  491.886664][T20011] dummy0 speed is unknown, defaulting to 1000
[  492.770797][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  492.770885][   T29] audit: type=1326 audit(1741581449.717:33618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.830773][   T29] audit: type=1326 audit(1741581449.754:33619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.854454][   T29] audit: type=1326 audit(1741581449.754:33620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.878076][   T29] audit: type=1326 audit(1741581449.754:33621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.901724][   T29] audit: type=1326 audit(1741581449.763:33622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.925555][   T29] audit: type=1326 audit(1741581449.763:33623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.949190][   T29] audit: type=1326 audit(1741581449.763:33624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.972929][   T29] audit: type=1326 audit(1741581449.763:33625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  492.996532][   T29] audit: type=1326 audit(1741581449.763:33626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  493.020242][   T29] audit: type=1326 audit(1741581449.763:33627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  494.301163][T20138] lo speed is unknown, defaulting to 1000
[  494.337047][T20138] dummy0 speed is unknown, defaulting to 1000
[  494.805962][T20172] ref_ctr increment failed for inode: 0x1654 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812460c780
[  494.890009][T20174] lo speed is unknown, defaulting to 1000
[  495.036993][T20174] dummy0 speed is unknown, defaulting to 1000
[  495.127583][T20172] lo speed is unknown, defaulting to 1000
[  495.390977][T20172] dummy0 speed is unknown, defaulting to 1000
[  495.840572][T20171] uprobe: syz.2.5461:20171 failed to unregister, leaking uprobe
[  495.940977][T20206] lo speed is unknown, defaulting to 1000
[  495.998735][T20206] dummy0 speed is unknown, defaulting to 1000
[  496.094790][T20217] __nla_validate_parse: 58 callbacks suppressed
[  496.094807][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5475'.
[  496.110180][T20217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5475'.
[  496.166035][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'.
[  496.174944][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'.
[  496.193976][T20214] lo speed is unknown, defaulting to 1000
[  496.293212][T20214] dummy0 speed is unknown, defaulting to 1000
[  496.301122][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5478'.
[  496.461607][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'.
[  496.470708][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'.
[  496.612487][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5481'.
[  496.621622][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5481'.
[  496.920511][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5487'.
[  497.281830][T20265] lo speed is unknown, defaulting to 1000
[  497.326907][T20265] dummy0 speed is unknown, defaulting to 1000
[  497.906496][T20292] lo speed is unknown, defaulting to 1000
[  497.957885][T20292] dummy0 speed is unknown, defaulting to 1000
[  498.321957][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  498.321974][   T29] audit: type=1326 audit(1741581454.909:33698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f030ccb4127 code=0x7ffc0000
[  498.381610][   T29] audit: type=1326 audit(1741581454.947:33699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f030cc59359 code=0x7ffc0000
[  498.405334][   T29] audit: type=1326 audit(1741581454.947:33700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f030ccb4127 code=0x7ffc0000
[  498.428918][   T29] audit: type=1326 audit(1741581454.947:33701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f030cc59359 code=0x7ffc0000
[  498.452476][   T29] audit: type=1326 audit(1741581454.947:33702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  498.476199][   T29] audit: type=1326 audit(1741581454.947:33703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  498.499918][   T29] audit: type=1326 audit(1741581454.947:33704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f030ccb4127 code=0x7ffc0000
[  498.523520][   T29] audit: type=1326 audit(1741581454.947:33705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f030cc59359 code=0x7ffc0000
[  498.547122][   T29] audit: type=1326 audit(1741581454.947:33706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f030ccb4127 code=0x7ffc0000
[  498.570701][   T29] audit: type=1326 audit(1741581454.947:33707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f030cc59359 code=0x7ffc0000
[  499.397946][T20363] ref_ctr increment failed for inode: 0x1799 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118a1b180
[  499.435367][T20365] ref_ctr increment failed for inode: 0x1725 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888124608b00
[  499.447939][T20367] ref_ctr increment failed for inode: 0x162d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812460c780
[  499.487459][T20363] lo speed is unknown, defaulting to 1000
[  499.537299][T20365] lo speed is unknown, defaulting to 1000
[  499.539604][T20363] dummy0 speed is unknown, defaulting to 1000
[  499.658626][T20365] dummy0 speed is unknown, defaulting to 1000
[  499.658766][T20367] lo speed is unknown, defaulting to 1000
[  499.754901][T20367] dummy0 speed is unknown, defaulting to 1000
[  499.839519][T20379] ref_ctr increment failed for inode: 0x1830 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118a1e300
[  499.947788][T20361] uprobe: syz.0.5528:20361 failed to unregister, leaking uprobe
[  499.996111][T20379] lo speed is unknown, defaulting to 1000
[  500.039423][T20364] uprobe: syz.3.5529:20364 failed to unregister, leaking uprobe
[  500.080068][T20379] dummy0 speed is unknown, defaulting to 1000
[  500.116113][T20366] uprobe: syz.1.5530:20366 failed to unregister, leaking uprobe
[  500.654003][T20378] uprobe: syz.4.5534:20378 failed to unregister, leaking uprobe
[  500.853246][T20426] lo speed is unknown, defaulting to 1000
[  500.894948][T20436] ref_ctr increment failed for inode: 0x173a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118a1c200
[  500.921402][T20423] lo speed is unknown, defaulting to 1000
[  500.930583][T20438] ref_ctr increment failed for inode: 0x183b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118a1cd00
[  500.931447][T20426] dummy0 speed is unknown, defaulting to 1000
[  501.033232][T20423] dummy0 speed is unknown, defaulting to 1000
[  501.072065][T20436] lo speed is unknown, defaulting to 1000
[  501.245706][T20438] lo speed is unknown, defaulting to 1000
[  501.253023][T20436] dummy0 speed is unknown, defaulting to 1000
[  501.367797][T20438] dummy0 speed is unknown, defaulting to 1000
[  501.476435][T20447] __nla_validate_parse: 45 callbacks suppressed
[  501.476457][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  501.491705][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  501.621800][T20435] uprobe: syz.3.5552:20435 failed to unregister, leaking uprobe
[  501.659530][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5558'.
[  501.668509][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5558'.
[  501.753683][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5559'.
[  501.790270][T20437] uprobe: syz.4.5553:20437 failed to unregister, leaking uprobe
[  501.827805][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'.
[  501.836761][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'.
[  502.281503][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5570'.
[  502.290469][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5570'.
[  502.319999][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5569'.
[  506.885271][T20674] __nla_validate_parse: 83 callbacks suppressed
[  506.885369][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5644'.
[  506.900696][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5644'.
[  506.927297][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5645'.
[  506.936375][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5645'.
[  506.960434][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'.
[  506.969383][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'.
[  507.006358][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5647'.
[  507.015468][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5647'.
[  507.078869][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'.
[  507.087823][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'.
[  512.578814][T20790] __nla_validate_parse: 42 callbacks suppressed
[  512.578837][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5680'.
[  512.594119][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5680'.
[  512.690856][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  512.699787][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  512.804435][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5686'.
[  512.813416][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5686'.
[  513.525497][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  513.525512][   T29] audit: type=1326 audit(1741581469.139:33714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.555923][   T29] audit: type=1326 audit(1741581469.167:33715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.579470][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5687'.
[  513.579646][   T29] audit: type=1326 audit(1741581469.167:33716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.588462][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5687'.
[  513.612228][   T29] audit: type=1326 audit(1741581469.167:33717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.644640][   T29] audit: type=1326 audit(1741581469.167:33718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.668139][   T29] audit: type=1326 audit(1741581469.167:33719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20813 comm="syz.4.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  513.804963][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5691'.
[  513.813988][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5691'.
[  513.985806][T20817] lo speed is unknown, defaulting to 1000
[  514.017365][T20817] dummy0 speed is unknown, defaulting to 1000
[  514.906620][T20848] lo speed is unknown, defaulting to 1000
[  514.939464][T20848] dummy0 speed is unknown, defaulting to 1000
[  515.055013][   T29] audit: type=1326 audit(1741581470.571:33720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  515.078874][   T29] audit: type=1326 audit(1741581470.571:33721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  515.102597][   T29] audit: type=1326 audit(1741581470.571:33722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  515.126317][   T29] audit: type=1326 audit(1741581470.571:33723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  515.539188][T20863] lo speed is unknown, defaulting to 1000
[  515.572367][T20863] dummy0 speed is unknown, defaulting to 1000
[  515.668915][T20871] lo speed is unknown, defaulting to 1000
[  515.700552][T20871] dummy0 speed is unknown, defaulting to 1000
[  516.089418][T20886] lo speed is unknown, defaulting to 1000
[  516.131392][T20886] dummy0 speed is unknown, defaulting to 1000
[  516.206124][T20888] lo speed is unknown, defaulting to 1000
[  516.246746][T20888] dummy0 speed is unknown, defaulting to 1000
[  516.778734][T20904] lo speed is unknown, defaulting to 1000
[  516.810008][T20904] dummy0 speed is unknown, defaulting to 1000
[  517.149198][T20913] lo speed is unknown, defaulting to 1000
[  517.187463][T20913] dummy0 speed is unknown, defaulting to 1000
[  517.474382][T20920] lo speed is unknown, defaulting to 1000
[  517.508128][T20920] dummy0 speed is unknown, defaulting to 1000
[  517.761059][T20931] lo speed is unknown, defaulting to 1000
[  517.795200][T20931] dummy0 speed is unknown, defaulting to 1000
[  518.254086][T20976] __nla_validate_parse: 19 callbacks suppressed
[  518.254109][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5741'.
[  518.269601][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5741'.
[  518.351164][T20952] lo speed is unknown, defaulting to 1000
[  518.351242][T20980] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5742'.
[  518.385372][T20952] dummy0 speed is unknown, defaulting to 1000
[  518.910237][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'.
[  518.919211][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'.
[  519.418198][T21016] lo speed is unknown, defaulting to 1000
[  519.449820][T21016] dummy0 speed is unknown, defaulting to 1000
[  519.789214][T21027] lo speed is unknown, defaulting to 1000
[  519.807914][T21030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5762'.
[  519.810357][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5763'.
[  519.825867][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5763'.
[  519.835247][T21027] dummy0 speed is unknown, defaulting to 1000
[  520.255930][T21034] lo speed is unknown, defaulting to 1000
[  520.287801][T21034] dummy0 speed is unknown, defaulting to 1000
[  524.091514][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5795'.
[  524.543267][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5799'.
[  524.636404][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  524.636423][   T29] audit: type=1326 audit(1741581479.533:33734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.666442][   T29] audit: type=1326 audit(1741581479.533:33735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.690073][   T29] audit: type=1326 audit(1741581479.533:33736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.713731][   T29] audit: type=1326 audit(1741581479.533:33737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.737349][   T29] audit: type=1326 audit(1741581479.533:33738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.760969][   T29] audit: type=1326 audit(1741581479.533:33739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.784813][   T29] audit: type=1326 audit(1741581479.533:33740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.808401][   T29] audit: type=1326 audit(1741581479.533:33741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.832069][   T29] audit: type=1326 audit(1741581479.533:33742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.855720][   T29] audit: type=1326 audit(1741581479.533:33743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.3.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  524.858882][T21135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5802'.
[  525.134638][T21162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5812'.
[  525.251460][T21176] lo speed is unknown, defaulting to 1000
[  525.300111][T21176] dummy0 speed is unknown, defaulting to 1000
[  525.425544][T21186] lo speed is unknown, defaulting to 1000
[  525.481583][T21186] dummy0 speed is unknown, defaulting to 1000
[  525.752364][T21194] lo speed is unknown, defaulting to 1000
[  525.786731][T21194] dummy0 speed is unknown, defaulting to 1000
[  525.943012][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5835'.
[  526.073764][T21234] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  526.135161][T21237] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  526.275789][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'.
[  526.284706][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'.
[  526.356194][T21257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5849'.
[  526.457056][T21265] netlink: 'syz.3.5852': attribute type 13 has an invalid length.
[  526.492826][T21265] 0�X��D: refused to change device tx_queue_len
[  526.515923][T21265] net_ratelimit: 73 callbacks suppressed
[  526.515939][T21265] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  526.546459][T21272] netlink: 'syz.3.5852': attribute type 4 has an invalid length.
[  526.573066][ T6123] lo speed is unknown, defaulting to 1000
[  526.582491][ T6123] lo speed is unknown, defaulting to 1000
[  526.794986][T21286] lo speed is unknown, defaulting to 1000
[  526.804156][T21291] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5861'.
[  526.844250][T21286] dummy0 speed is unknown, defaulting to 1000
[  527.326347][T21304] lo speed is unknown, defaulting to 1000
[  527.397388][T21304] dummy0 speed is unknown, defaulting to 1000
[  527.411103][T21310] tipc: Can't bind to reserved service type 1
[  527.897177][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5879'.
[  527.913648][T21325] bond_slave_1: entered promiscuous mode
[  527.920216][T21325] bond_slave_1 (unregistering): left promiscuous mode
[  528.230038][T21362] 9pnet_fd: Insufficient options for proto=fd
[  528.394745][T21375] lo speed is unknown, defaulting to 1000
[  528.426562][T21375] dummy0 speed is unknown, defaulting to 1000
[  528.925114][T21407] lo speed is unknown, defaulting to 1000
[  528.957017][T21407] dummy0 speed is unknown, defaulting to 1000
[  529.107908][T21410] lo speed is unknown, defaulting to 1000
[  529.147043][T21410] dummy0 speed is unknown, defaulting to 1000
[  529.344049][T21418] futex_wake_op: syz.0.5907 tries to shift op by -1; fix this program
[  529.439865][T21425] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  530.111968][T21466] lo speed is unknown, defaulting to 1000
[  530.161549][T21466] dummy0 speed is unknown, defaulting to 1000
[  530.284799][T21473] __nla_validate_parse: 8 callbacks suppressed
[  530.284816][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5926'.
[  530.346673][T21477] netlink: '+}[@': attribute type 10 has an invalid length.
[  530.354103][T21477] netlink: 40 bytes leftover after parsing attributes in process `+}[@'.
[  530.364339][T21477] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  530.437260][T21491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5932'.
[  530.533112][T21501] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  530.565864][   T29] kauditd_printk_skb: 810 callbacks suppressed
[  530.565881][   T29] audit: type=1326 audit(1741581485.062:34554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.595885][   T29] audit: type=1326 audit(1741581485.062:34555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.619510][   T29] audit: type=1326 audit(1741581485.062:34556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.643449][   T29] audit: type=1326 audit(1741581485.062:34557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.667279][   T29] audit: type=1326 audit(1741581485.062:34558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.690927][   T29] audit: type=1326 audit(1741581485.062:34559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.714741][   T29] audit: type=1326 audit(1741581485.062:34560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.738431][   T29] audit: type=1326 audit(1741581485.062:34561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.762135][   T29] audit: type=1326 audit(1741581485.072:34562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030ccbd169 code=0x7ffc0000
[  530.789416][T21504] netlink: 'syz.0.5937': attribute type 13 has an invalid length.
[  530.809709][T21504] gretap0: refused to change device tx_queue_len
[  530.821683][T21504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  530.971397][T21513] lo speed is unknown, defaulting to 1000
[  531.065215][T21513] dummy0 speed is unknown, defaulting to 1000
[  531.314947][   T29] audit: type=1326 audit(1741581485.783:34563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba8e8d169 code=0x7ffc0000
[  531.397996][T21548] netlink: 'syz.0.5951': attribute type 13 has an invalid length.
[  531.420401][T21548] gretap0: refused to change device tx_queue_len
[  531.427071][T21548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  531.636472][T21553] lo speed is unknown, defaulting to 1000
[  531.645326][T21570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5959'.
[  531.694589][T21574] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5960'.
[  531.704593][T21553] dummy0 speed is unknown, defaulting to 1000
[  531.777335][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5962'.
[  531.786525][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5962'.
[  531.873658][T21582] netlink: 'syz.2.5964': attribute type 13 has an invalid length.
[  531.891580][T21582] 0�X��D: refused to change device tx_queue_len
[  531.898409][T21582] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  532.380831][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5983'.
[  532.409044][T21634] futex_wake_op: syz.0.5985 tries to shift op by -1; fix this program
[  532.447812][T21629] netlink: 'syz.4.5983': attribute type 4 has an invalid length.
[  532.485537][T21636] netlink: 'syz.0.5986': attribute type 21 has an invalid length.
[  532.493558][T21636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5986'.
[  532.502835][T21636] netlink: 'syz.0.5986': attribute type 1 has an invalid length.
[  532.613937][T21651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5992'.
[  532.654376][T21653] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  532.773753][T21663] lo speed is unknown, defaulting to 1000
[  532.809511][T21663] dummy0 speed is unknown, defaulting to 1000
[  533.828757][T21674] netlink: 'syz.1.6002': attribute type 13 has an invalid length.
[  533.844305][T21674] gretap0: refused to change device tx_queue_len
[  533.858119][T21674] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  534.314604][T21701] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  534.569831][T21711] lo speed is unknown, defaulting to 1000
[  534.640539][T21711] dummy0 speed is unknown, defaulting to 1000
[  534.649372][T21730] x_tables: duplicate underflow at hook 2
[  534.873393][T21743] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  534.910215][T21748] netlink: 'syz.4.6033': attribute type 7 has an invalid length.
[  535.311223][T21788] lo speed is unknown, defaulting to 1000
[  535.333536][T21793] netlink: 'syz.2.6048': attribute type 11 has an invalid length.
[  535.411013][T21788] dummy0 speed is unknown, defaulting to 1000
[  535.418954][T21801] Driver unsupported XDP return value 0 on prog  (id 3863) dev N/A, expect packet loss!
[  535.669822][T21813] __nla_validate_parse: 14 callbacks suppressed
[  535.669849][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6056'.
[  535.685170][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6056'.
[  535.952379][T21832] C�: renamed from team_slave_0
[  535.977536][T21832] netlink: 'syz.2.6065': attribute type 3 has an invalid length.
[  535.985401][T21832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6065'.
[  535.994512][T21832] A link change request failed with some changes committed already. Interface C� may have been left with an inconsistent configuration, please check.
[  536.028960][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6066'.
[  536.038034][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6066'.
[  536.061512][T21839] netlink: 'syz.2.6067': attribute type 13 has an invalid length.
[  536.071753][T21839] 0�X��D: refused to change device tx_queue_len
[  536.078516][T21839] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  536.299088][   T29] kauditd_printk_skb: 265 callbacks suppressed
[  536.299103][   T29] audit: type=1326 audit(1741581490.442:34829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.331872][   T29] audit: type=1326 audit(1741581490.442:34830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.369470][   T29] audit: type=1326 audit(1741581490.507:34831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.407081][   T29] audit: type=1326 audit(1741581490.526:34832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.430744][   T29] audit: type=1326 audit(1741581490.526:34833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.454336][   T29] audit: type=1326 audit(1741581490.526:34834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.477976][   T29] audit: type=1326 audit(1741581490.526:34835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.501633][   T29] audit: type=1326 audit(1741581490.526:34836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.525276][   T29] audit: type=1326 audit(1741581490.526:34837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.548863][   T29] audit: type=1326 audit(1741581490.526:34838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  536.603582][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[  536.612588][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[  536.669143][T21890] lo speed is unknown, defaulting to 1000
[  536.721105][T21890] dummy0 speed is unknown, defaulting to 1000
[  536.776570][T21911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6092'.
[  536.852645][T21918] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  537.022221][T21928] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  537.063779][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'.
[  537.072829][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'.
[  537.358144][T21938] lo speed is unknown, defaulting to 1000
[  537.498723][T21938] dummy0 speed is unknown, defaulting to 1000
[  537.506878][T21939] lo speed is unknown, defaulting to 1000
[  537.572258][T21939] dummy0 speed is unknown, defaulting to 1000
[  537.818349][T21939] chnl_net:caif_netlink_parms(): no params data found
[  537.864128][T21939] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.871272][T21939] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.879011][T21939] bridge_slave_0: entered allmulticast mode
[  537.885874][T21939] bridge_slave_0: entered promiscuous mode
[  537.893193][T21939] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.900586][T21939] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.907970][T21939] bridge_slave_1: entered allmulticast mode
[  537.930365][T21939] bridge_slave_1: entered promiscuous mode
[  537.962570][T21939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.973819][T21939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.000961][T21939] team0: Port device team_slave_0 added
[  538.016219][T21939] team0: Port device team_slave_1 added
[  538.058741][T21939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.065815][T21939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.091850][T21939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.161942][T21939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.168943][T21939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.195036][T21939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.224171][T21939] hsr_slave_0: entered promiscuous mode
[  538.231070][T21939] hsr_slave_1: entered promiscuous mode
[  538.237225][T21939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.244798][T21939] Cannot create hsr debugfs directory
[  538.482224][    C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3)
[  538.490775][    C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3)
[  538.558460][ T8944] bond1 (unregistering): Released all slaves
[  538.566568][ T8944] bond2 (unregistering): Released all slaves
[  538.585933][T21939] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  538.594756][T21939] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  538.604202][T21939] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  538.612880][T21939] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  538.623550][ T8944] tipc: Disabling bearer <udp:syz2>
[  538.628789][ T8944] tipc: Left network mode
[  538.633168][T21939] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.640259][T21939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.647655][T21939] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.654717][T21939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.686344][T21939] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.697735][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.705682][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.723899][T21939] 8021q: adding VLAN 0 to HW filter on device team0
[  538.734538][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.741658][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.754524][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.761615][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.778367][ T8944] hsr_slave_0: left promiscuous mode
[  538.784606][ T8944] hsr_slave_1: left promiscuous mode
[  538.795109][ T8944] pim6reg (unregistering): left allmulticast mode
[  538.891900][T21939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.949006][T21939] veth0_vlan: entered promiscuous mode
[  538.956695][T21939] veth1_vlan: entered promiscuous mode
[  538.971740][T21939] veth0_macvtap: entered promiscuous mode
[  538.978819][T21939] veth1_macvtap: entered promiscuous mode
[  538.989072][T21939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.999866][T21939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.009634][T21939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.018364][T21939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.027075][T21939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.035864][T21939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.097436][ T8944] IPVS: stop unused estimator thread 0...
[  544.914468][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  544.914483][   T29] audit: type=1326 audit(1741581498.497:34911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  544.944334][   T29] audit: type=1326 audit(1741581498.497:34912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.152493][T22007] lo speed is unknown, defaulting to 1000
[  545.227209][   T29] audit: type=1400 audit(1741581498.787:34913): avc:  denied  { write } for  pid=22031 comm="syz.2.6128" lport=36592 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  545.234574][T22007] dummy0 speed is unknown, defaulting to 1000
[  545.251034][   T29] audit: type=1400 audit(1741581498.787:34914): avc:  denied  { setopt } for  pid=22031 comm="syz.2.6128" lport=36592 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  545.398186][   T29] audit: type=1326 audit(1741581498.965:34915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.429741][   T29] audit: type=1326 audit(1741581498.965:34916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.476513][T22051] netlink: 'syz.4.6133': attribute type 1 has an invalid length.
[  545.489247][   T29] audit: type=1326 audit(1741581499.012:34917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.513095][   T29] audit: type=1326 audit(1741581499.012:34918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.536846][   T29] audit: type=1326 audit(1741581499.012:34919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.560455][   T29] audit: type=1326 audit(1741581499.012:34920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.4.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  545.630698][T22007] chnl_net:caif_netlink_parms(): no params data found
[  545.695575][T22007] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.702756][T22007] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.710342][T22007] bridge_slave_0: entered allmulticast mode
[  545.716938][T22007] bridge_slave_0: entered promiscuous mode
[  545.723866][T22007] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.731040][T22007] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.738416][T22007] bridge_slave_1: entered allmulticast mode
[  545.744970][T22007] bridge_slave_1: entered promiscuous mode
[  545.762498][T22007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.773069][T22007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.793465][T22007] team0: Port device team_slave_0 added
[  545.800200][T22007] team0: Port device team_slave_1 added
[  545.818273][T22007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.825529][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.851620][T22007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.863073][T22007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.870220][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.896378][T22007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.922396][T22007] hsr_slave_0: entered promiscuous mode
[  545.928453][T22007] hsr_slave_1: entered promiscuous mode
[  545.934390][T22007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.942020][T22007] Cannot create hsr debugfs directory
[  546.182704][T22007] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  546.191323][T22007] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  546.200886][T22007] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  546.209737][T22007] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  546.244521][T22007] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.256715][T22007] 8021q: adding VLAN 0 to HW filter on device team0
[  546.266168][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.273317][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.284111][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.291282][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.348947][T22007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.407567][T22007] veth0_vlan: entered promiscuous mode
[  546.415838][T22007] veth1_vlan: entered promiscuous mode
[  546.431116][T22007] veth0_macvtap: entered promiscuous mode
[  546.438889][T22007] veth1_macvtap: entered promiscuous mode
[  546.449121][T22007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.459665][T22007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.470721][T22007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.481554][T22007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.492189][T22007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.503056][T22007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.512714][T22007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.521620][T22007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.530344][T22007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.539222][T22007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.579687][ T6135] hid (null): unknown global tag 0xd
[  546.586262][ T6135] hid-generic 0009:0009:0004.0002: collection stack underflow
[  546.586287][ T6135] hid-generic 0009:0009:0004.0002: item 0 2 0 12 parsing failed
[  546.586373][ T6135] hid-generic 0009:0009:0004.0002: probe with driver hid-generic failed with error -22
[  569.118662][ T8975]  (unregistering): Released all slaves
[  569.118613][ T8939] smc: removing ib device syz0
[  569.131080][ T8975] bond1 (unregistering): Released all slaves
[  569.139525][ T8975] bond2 (unregistering): Released all slaves
[  569.147475][ T8975] bond3 (unregistering): Released all slaves
[  569.155736][ T8975] bond4 (unregistering): Released all slaves
[  569.163870][ T8975] bond0 (unregistering): Released all slaves
[  569.289050][ T8975] tipc: Left network mode
[  569.294360][ T8975] IPVS: stopping master sync thread 5411 ...
[  569.392753][ T8939] smc: removing ib device syz1
[  569.676527][ T8975] IPVS: stop unused estimator thread 0...
[  577.054985][T22087] program syz.0.6138 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  577.090629][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  577.090646][   T29] audit: type=1326 audit(1741581528.594:34934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.120401][   T29] audit: type=1326 audit(1741581528.594:34935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.144363][   T29] audit: type=1326 audit(1741581528.594:34936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.168302][   T29] audit: type=1326 audit(1741581528.594:34937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.191909][   T29] audit: type=1326 audit(1741581528.594:34938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.215583][   T29] audit: type=1326 audit(1741581528.594:34939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.235328][T22086] lo speed is unknown, defaulting to 1000
[  577.239326][   T29] audit: type=1326 audit(1741581528.594:34940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.268683][   T29] audit: type=1326 audit(1741581528.594:34941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.292382][   T29] audit: type=1326 audit(1741581528.594:34942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.316050][   T29] audit: type=1326 audit(1741581528.594:34943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22090 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f7a1d169 code=0x7ffc0000
[  577.375904][T22093] loop1: detected capacity change from 0 to 1024
[  577.411615][T22093] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  577.470627][T22093] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  577.485664][T22093] EXT4-fs (loop1): orphan cleanup on readonly fs
[  577.506017][T22086] dummy0 speed is unknown, defaulting to 1000
[  577.513084][T22097] lo speed is unknown, defaulting to 1000
[  577.528752][T22093] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  577.539420][T22093] EXT4-fs (loop1): Remounting filesystem read-only
[  577.546176][T22093] EXT4-fs (loop1): 1 orphan inode deleted
[  577.552796][T22093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  577.565831][T22093] SELinux: (dev loop1, type ext4) getxattr errno 5
[  577.582980][T22093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.691173][T22098] lo speed is unknown, defaulting to 1000
[  577.697154][T22097] dummy0 speed is unknown, defaulting to 1000
[  577.817018][T22098] dummy0 speed is unknown, defaulting to 1000
[  577.872664][T22126] loop1: detected capacity change from 0 to 1024
[  577.879593][T22126] EXT4-fs (loop1): inodes count not valid: 40 vs 32
[  577.890229][T22126] SELinux: security_context_str_to_sid (�Gh�M,	nL�$�\���@
) failed with errno=-22
[  577.978105][T22131] vlan2: entered allmulticast mode
[  577.983656][T22131] bond0: entered allmulticast mode
[  577.988866][T22131] bond_slave_0: entered allmulticast mode
[  577.994649][T22131] bond_slave_1: entered allmulticast mode
[  578.013642][T22131] bond0: left allmulticast mode
[  578.018624][T22131] bond_slave_0: left allmulticast mode
[  578.024261][T22131] bond_slave_1: left allmulticast mode
[  578.081528][T22098] chnl_net:caif_netlink_parms(): no params data found
[  578.234864][T22098] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.242042][T22098] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.260284][T22098] bridge_slave_0: entered allmulticast mode
[  578.271528][T22098] bridge_slave_0: entered promiscuous mode
[  578.291916][T22157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6161'.
[  578.304625][T22098] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.311780][T22098] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.329779][T22098] bridge_slave_1: entered allmulticast mode
[  578.336326][T22098] bridge_slave_1: entered promiscuous mode
[  578.355595][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6161'.
[  578.364812][T22157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6161'.
[  578.376632][T22153] lo speed is unknown, defaulting to 1000
[  578.407377][T22098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.438066][T22098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.486214][T22133] loop1: detected capacity change from 0 to 65536
[  578.504148][T22167] netlink: 'syz.4.6163': attribute type 3 has an invalid length.
[  578.512945][T22153] dummy0 speed is unknown, defaulting to 1000
[  578.529440][T22098] team0: Port device team_slave_0 added
[  578.596010][T22098] team0: Port device team_slave_1 added
[  578.645939][T22098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.652999][T22098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.679336][T22098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.702548][T22098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.709884][T22098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.736256][T22098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.773981][T22098] hsr_slave_0: entered promiscuous mode
[  578.789753][T22098] hsr_slave_1: entered promiscuous mode
[  578.800745][T22098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  578.830783][T22098] Cannot create hsr debugfs directory
[  578.834463][T22193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6174'.
[  579.064921][T22228] SELinux:  policydb version 0 does not match my version range 15-34
[  579.073175][T22228] SELinux: failed to load policy
[  579.090197][ T8964] $H� (unregistering): Released all slaves
[  579.098677][ T8964] bond0 (unregistering): Released all slaves
[  579.107190][ T8964] bond1 (unregistering): Released all slaves
[  579.115587][ T8964] bond2 (unregistering): Released all slaves
[  579.124276][ T8964] bond3 (unregistering): Released all slaves
[  579.182394][ T8964] tipc: Disabling bearer <udp:syz2>
[  579.188025][ T8964] tipc: Left network mode
[  579.211016][T22205] lo speed is unknown, defaulting to 1000
[  579.254944][T22205] dummy0 speed is unknown, defaulting to 1000
[  579.268693][T22239] loop1: detected capacity change from 0 to 764
[  579.277047][T22237] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6186'.
[  579.333175][T22239] rock: directory entry would overflow storage
[  579.339511][T22239] rock: sig=0x4654, size=5, remaining=4
[  579.365134][T22243] SET target dimension over the limit!
[  579.384387][T22239] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.6188'.
[  579.440558][T22249] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6191'.
[  579.518727][T22258] loop1: detected capacity change from 0 to 1764
[  579.530494][T22098] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  579.550798][T22098] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  579.581965][T22098] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  579.606149][ T8964] pim6reg (unregistering): left allmulticast mode
[  579.606152][T22269] loop1: detected capacity change from 0 to 512
[  579.621822][T22269] EXT4-fs: Ignoring removed bh option
[  579.628733][T22269] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  579.639789][T22269] EXT4-fs (loop1): 1 truncate cleaned up
[  579.645905][T22269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  579.692536][T22269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6200'.
[  579.701588][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6200'.
[  579.721238][T22098] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  579.764499][T22284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6205'.
[  579.771909][T22098] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.799845][T22098] 8021q: adding VLAN 0 to HW filter on device team0
[  579.807166][T22007] ------------[ cut here ]------------
[  579.812692][T22007] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29)
[  579.813002][T22007] WARNING: CPU: 0 PID: 22007 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0
[  579.832687][T22007] Modules linked in:
[  579.833297][T22271] lo speed is unknown, defaulting to 1000
[  579.836590][T22007] CPU: 0 UID: 0 PID: 22007 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0
[  579.853322][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  579.863425][T22007] RIP: 0010:inode_set_cached_link+0xc4/0xd0
[  579.869523][T22007] Code: ff 48 c7 c7 df f5 b2 86 e8 79 61 c4 ff c6 05 71 62 0b 05 01 90 48 c7 c7 07 3e 1b 86 4c 89 f6 89 ea 44 89 f9 e8 0d b6 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90
[  579.889363][T22007] RSP: 0018:ffffc90001817ac8 EFLAGS: 00010246
[  579.895564][T22007] RAX: 410a0db98c6ee300 RBX: ffff8881057832a8 RCX: ffff88811b568000
[  579.896522][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.903608][T22007] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  579.910608][ T8975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.918562][T22007] RBP: 0000000000000027 R08: ffffffff81344af7 R09: 0000000000000000
[  579.933812][T22007] R10: 0001ffffffffffff R11: ffff88811b568000 R12: ffff8881057832a8
[  579.938446][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.941816][T22007] R13: ffff8881057832d0 R14: ffff888105783180 R15: 000000000000001d
[  579.948986][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.956970][T22007] FS:  000055555c56c500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[  579.973118][T22007] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.979754][T22007] CR2: 000055555c597528 CR3: 000000013a8b6000 CR4: 00000000003506f0
[  579.987842][T22007] DR0: 0000400000000300 DR1: 0000400000000300 DR2: 0000000000000000
[  579.995860][T22007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  580.004281][T22007] Call Trace:
[  580.007713][T22007]  <TASK>
[  580.010684][T22007]  ? __warn+0x141/0x350
[  580.014884][T22007]  ? report_bug+0x315/0x420
[  580.019446][T22007]  ? inode_set_cached_link+0xc4/0xd0
[  580.020477][T22271] dummy0 speed is unknown, defaulting to 1000
[  580.024753][T22007]  ? handle_bug+0x60/0x90
[  580.035181][T22007]  ? exc_invalid_op+0x1a/0x50
[  580.039988][T22007]  ? asm_exc_invalid_op+0x1a/0x20
[  580.045044][T22007]  ? __warn_printk+0x167/0x1b0
[  580.049861][T22007]  ? inode_set_cached_link+0xc4/0xd0
[  580.055323][T22007]  ? inode_set_cached_link+0xc3/0xd0
[  580.060640][T22007]  __ext4_iget+0x1bb5/0x1e20
[  580.065321][T22007]  ext4_lookup+0x15b/0x390
[  580.069774][T22007]  __lookup_slow+0x18a/0x250
[  580.074438][T22007]  lookup_slow+0x3c/0x60
[  580.078761][T22007]  walk_component+0x1f5/0x230
[  580.083527][T22007]  ? path_lookupat+0xfd/0x2b0
[  580.088231][T22007]  path_lookupat+0x10a/0x2b0
[  580.092877][T22007]  filename_lookup+0x150/0x340
[  580.097699][T22007]  user_path_at+0x3c/0x120
[  580.102143][T22007]  __x64_sys_umount+0x85/0xe0
[  580.106954][T22007]  x64_sys_call+0x20cd/0x2dc0
[  580.111663][T22007]  do_syscall_64+0xc9/0x1c0
[  580.116377][T22007]  ? clear_bhb_loop+0x55/0xb0
[  580.121127][T22007]  ? clear_bhb_loop+0x55/0xb0
[  580.125873][T22007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.131883][T22007] RIP: 0033:0x7f00b1b1e497
[  580.136354][T22007] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  580.156021][T22007] RSP: 002b:00007ffd5ec550c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  580.164547][T22007] RAX: ffffffffffffffda RBX: 00007f00b1b9e08c RCX: 00007f00b1b1e497
[  580.172568][T22007] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5ec55180
[  580.180583][T22007] RBP: 00007ffd5ec55180 R08: 0000000000000000 R09: 0000000000000000
[  580.182487][T22098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.188555][T22007] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5ec56270
[  580.188573][T22007] R13: 00007f00b1b9e08c R14: 0000000000087d9f R15: 00007ffd5ec58430
[  580.214991][T22007]  </TASK>
[  580.218062][T22007] ---[ end trace 0000000000000000 ]---
[  580.236773][T22007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.296599][T22302] loop1: detected capacity change from 0 to 128
[  580.313547][T22294] lo speed is unknown, defaulting to 1000
[  580.333357][T22098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.369995][ T8964] IPVS: stop unused estimator thread 0...
[  580.427124][T22294] dummy0 speed is unknown, defaulting to 1000
[  580.527027][T22098] veth0_vlan: entered promiscuous mode
[  580.551170][T22098] veth1_vlan: entered promiscuous mode
[  580.614761][T22098] veth0_macvtap: entered promiscuous mode
[  580.653379][T22098] veth1_macvtap: entered promiscuous mode
[  580.672693][T22098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.683209][T22098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.693185][T22098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.703704][T22098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.747106][T22098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.765323][T22341] xt_hashlimit: max too large, truncated to 1048576
[  580.790140][T22098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.800816][T22098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.810793][T22098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.821384][T22098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.833225][T22098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.840628][T22332] lo speed is unknown, defaulting to 1000
[  580.859611][T22098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.868411][T22098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.877379][T22098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.886199][T22098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.937596][T22332] dummy0 speed is unknown, defaulting to 1000
[  581.113736][T22362] loop1: detected capacity change from 0 to 512
[  581.165741][T22364] loop9: detected capacity change from 0 to 7
[  581.172013][T22364] Buffer I/O error on dev loop9, logical block 0, async page read
[  581.203847][T22362] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  581.236842][T22364] Buffer I/O error on dev loop9, logical block 0, async page read
[  581.244834][T22364]  loop9: unable to read partition table
[  581.256794][T22362] EXT4-fs (loop1): mount failed
[  581.280123][T22364] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  581.280123][T22364] 
U�������) failed (rc=-5)
[  581.366145][T22362] syzkaller0: entered promiscuous mode
[  581.371758][T22362] syzkaller0: entered allmulticast mode
[  581.416558][T22375] lo speed is unknown, defaulting to 1000
[  581.466177][T22375] dummy0 speed is unknown, defaulting to 1000
[  581.549326][T22367] lo speed is unknown, defaulting to 1000
[  581.714973][T22367] dummy0 speed is unknown, defaulting to 1000
[  581.848801][T22414] loop1: detected capacity change from 0 to 128
[  581.919541][T22409] lo speed is unknown, defaulting to 1000
[  581.958081][T22367] chnl_net:caif_netlink_parms(): no params data found
[  581.998865][T22409] dummy0 speed is unknown, defaulting to 1000
[  582.064503][T22367] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.071687][T22367] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.079116][T22367] bridge_slave_0: entered allmulticast mode
[  582.086572][T22367] bridge_slave_0: entered promiscuous mode
[  582.098441][T22367] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.105679][T22367] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.119717][T22367] bridge_slave_1: entered allmulticast mode
[  582.126899][T22367] bridge_slave_1: entered promiscuous mode
[  582.151912][T22367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.162403][T22367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.198221][T22367] team0: Port device team_slave_0 added
[  582.210373][T22367] team0: Port device team_slave_1 added
[  582.234705][T22367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.241766][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.267753][T22367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.300771][T22367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.307945][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.333949][T22367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.378507][T22367] hsr_slave_0: entered promiscuous mode
[  582.385270][T22367] hsr_slave_1: entered promiscuous mode
[  582.391378][T22367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  582.398986][T22367] Cannot create hsr debugfs directory
[  582.405232][T22437] lo speed is unknown, defaulting to 1000
[  582.453798][T22437] dummy0 speed is unknown, defaulting to 1000
[  582.516657][   T29] kauditd_printk_skb: 332 callbacks suppressed
[  582.516691][   T29] audit: type=1326 audit(1741581533.684:35271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22442 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.582121][   T29] audit: type=1326 audit(1741581533.684:35272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22442 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.656149][T22453] loop1: detected capacity change from 0 to 128
[  582.694966][   T29] audit: type=1326 audit(1741581533.843:35273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.718630][   T29] audit: type=1326 audit(1741581533.843:35274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.742253][   T29] audit: type=1326 audit(1741581533.843:35275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.765989][   T29] audit: type=1326 audit(1741581533.843:35276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.789598][   T29] audit: type=1326 audit(1741581533.843:35277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.813256][   T29] audit: type=1326 audit(1741581533.843:35278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.836971][   T29] audit: type=1326 audit(1741581533.843:35279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.860668][   T29] audit: type=1326 audit(1741581533.843:35280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.4.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1ef8ed169 code=0x7ffc0000
[  582.975069][T22466] lo speed is unknown, defaulting to 1000
[  583.002261][T22468] loop1: detected capacity change from 0 to 128
[  583.025875][T22468] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  583.049911][T22367] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  583.062306][T22468] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  583.074585][T22466] dummy0 speed is unknown, defaulting to 1000
[  583.083207][T22367] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  583.107815][T22468] loop9: detected capacity change from 0 to 7
[  583.114123][T22367] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  583.124846][T22468] Buffer I/O error on dev loop9, logical block 0, async page read
[  583.126955][T22367] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  583.170301][T22468] Buffer I/O error on dev loop9, logical block 0, async page read
[  583.178296][T22468]  loop9: unable to read partition table
[  583.199595][T22367] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.222936][T22468] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  583.222936][T22468] 
U�������) failed (rc=-5)
[  583.235134][T22367] 8021q: adding VLAN 0 to HW filter on device team0
[  583.287283][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.294444][ T8939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.327436][T22007] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  583.346786][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.353895][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.385047][T22367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  583.395599][T22367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  583.570247][T22504] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1
[  583.579317][T22504] ref_ctr increment failed for inode: 0x5c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888132b39080
[  583.603321][T22367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.603728][T22512] loop1: detected capacity change from 0 to 128
[  583.647897][T22515] __nla_validate_parse: 15 callbacks suppressed
[  583.647913][T22515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6285'.
[  583.700088][T22522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6287'.
[  583.737789][T22367] veth0_vlan: entered promiscuous mode
[  583.772589][T22513] lo speed is unknown, defaulting to 1000
[  583.773529][T22367] veth1_vlan: entered promiscuous mode
[  583.807745][T22367] veth0_macvtap: entered promiscuous mode
[  583.830409][T22367] veth1_macvtap: entered promiscuous mode
[  583.842575][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.853191][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.863634][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.874168][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.884152][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.894954][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.908806][T22367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.917434][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.927955][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.937918][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.948380][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.958320][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.968817][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.980690][T22367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.989689][T22367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.998518][T22367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.007342][T22367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.016121][T22367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.029009][T22513] dummy0 speed is unknown, defaulting to 1000
[  584.083564][T22540] loop1: detected capacity change from 0 to 128
[  584.090315][T22540] FAT-fs (loop1): bogus sectors per cluster 0
[  584.096662][T22540] FAT-fs (loop1): Can't find a valid FAT filesystem
[  584.172462][T22540] loop1: detected capacity change from 0 to 512
[  584.238544][T22540] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.6296: casefold flag without casefold feature
[  584.272017][T22540] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.6296: couldn't read orphan inode 15 (err -117)
[  584.292488][T22550] 9pnet_fd: Insufficient options for proto=fd
[  584.302831][T22553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6233'.
[  584.355647][T22540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.469545][T22007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.515506][T22563] Option '    ' to dns_resolver key: bad/missing value
[  584.557802][T22553] sg_write: data in/out 3843/14 bytes for SCSI command 0x0-- guessing data in;
[  584.557802][T22553]    program syz.3.6233 not setting count and/or reply_len properly
[  584.692875][T22577] loop2: detected capacity change from 0 to 1024
[  584.740445][T22577] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  584.751406][T22577] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  584.782386][T22555] lo speed is unknown, defaulting to 1000
[  584.792876][T22577] JBD2: no valid journal superblock found
[  584.798762][T22577] EXT4-fs (loop2): Could not load journal inode
[  584.832245][T22577] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  584.859773][T22587] loop1: detected capacity change from 0 to 128
[  584.872500][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6311'.
[  584.881497][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6311'.
[  584.898702][T22555] dummy0 speed is unknown, defaulting to 1000
[  585.014675][T22555] chnl_net:caif_netlink_parms(): no params data found
[  585.130325][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'.
[  585.139368][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'.
[  585.187675][T22555] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.194883][T22555] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.210950][T22555] bridge_slave_0: entered allmulticast mode
[  585.234264][T22555] bridge_slave_0: entered promiscuous mode
[  585.245462][T22555] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.252649][T22555] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.266839][T22555] bridge_slave_1: entered allmulticast mode
[  585.285098][T22555] bridge_slave_1: entered promiscuous mode
[  585.354947][ T8944] $H� (unregistering): Released all slaves
[  585.393318][ T8944] bond0 (unregistering): Released all slaves
[  585.465208][T22627] loop3: detected capacity change from 0 to 1024
[  585.490778][ T8944] tipc: Disabling bearer <udp:syz2>
[  585.496114][ T8944] tipc: Left network mode
[  585.504275][T22627] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  585.519214][T22555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.535370][T22555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.540063][T22631] loop1: detected capacity change from 0 to 1024
[  585.564325][T22627] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  585.576925][T22555] team0: Port device team_slave_0 added
[  585.583801][T22555] team0: Port device team_slave_1 added
[  585.598700][T22627] EXT4-fs (loop3): orphan cleanup on readonly fs
[  585.602154][T22631] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  585.615969][T22631] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  585.629795][T22627] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  585.653530][T22555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.660702][T22555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.665621][T22631] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  585.686753][T22555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.720883][T22627] EXT4-fs (loop3): Remounting filesystem read-only
[  585.727612][T22627] EXT4-fs (loop3): 1 orphan inode deleted
[  585.737328][T22555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.744364][T22555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.754464][T22627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  585.770468][T22555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.820181][T22627] SELinux: (dev loop3, type ext4) getxattr errno 5
[  585.824382][T22631] EXT4-fs (loop1): invalid journal inode
[  585.834960][T22631] EXT4-fs (loop1): can't get journal size
[  585.838034][T22627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.852023][T22631] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.6326: blocks 2-2 from inode overlap system zone
[  585.890461][T22631] EXT4-fs (loop1): failed to initialize system zone (-117)
[  585.909086][T22624] lo speed is unknown, defaulting to 1000
[  585.919911][T22631] EXT4-fs (loop1): mount failed
[  586.067463][T22555] hsr_slave_0: entered promiscuous mode
[  586.073941][T22555] hsr_slave_1: entered promiscuous mode
[  586.087680][T22555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  586.101849][T22555] Cannot create hsr debugfs directory
[  586.107766][T22624] dummy0 speed is unknown, defaulting to 1000
[  586.209550][ T8932] smc: removing ib device syz!
[  586.470732][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6341'.
[  586.630329][T22555] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  586.646800][T22555] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  586.661451][T22555] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  586.674226][T22555] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  586.741266][T22555] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.760215][T22555] 8021q: adding VLAN 0 to HW filter on device team0
[  586.790388][T22555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  586.800866][T22555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  586.821720][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.828871][ T8957] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.836984][T22690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6349'.
[  586.850857][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.857996][ T8957] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.880356][T22689] lo speed is unknown, defaulting to 1000
[  586.930900][T22689] dummy0 speed is unknown, defaulting to 1000
[  586.930908][T22693] lo speed is unknown, defaulting to 1000
[  586.952345][T22555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.027751][T22693] dummy0 speed is unknown, defaulting to 1000
[  587.206533][T22555] veth0_vlan: entered promiscuous mode
[  587.223032][T22555] veth1_vlan: entered promiscuous mode
[  587.260748][T22721] loop1: detected capacity change from 0 to 128
[  587.264996][T22555] veth0_macvtap: entered promiscuous mode
[  587.273485][T22727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.283025][T22727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.295857][T22727] loop2: detected capacity change from 0 to 512
[  587.297683][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6358'.
[  587.317295][T22727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  587.341334][T22555] veth1_macvtap: entered promiscuous mode
[  587.358796][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.369325][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.379205][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.389699][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.399555][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.409993][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.419848][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.430304][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.441755][T22555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.459751][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.470331][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.480220][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.490800][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.500641][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.511151][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.520992][T22555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.531484][T22555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.542271][T22555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.552175][T22555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.561051][T22555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.569893][T22555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.578704][T22555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.595373][T22736] lo speed is unknown, defaulting to 1000
[  587.658020][T22744] loop4: detected capacity change from 0 to 128
[  587.666709][T22744] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  587.670687][T22736] dummy0 speed is unknown, defaulting to 1000
[  587.682514][T22744] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.712497][T22747] syzkaller0: tun_chr_ioctl cmd 1074025678
[  587.718544][T22747] syzkaller0: group set to 774
[  587.739072][T22555] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  587.834482][T22753] lo speed is unknown, defaulting to 1000
[  587.871903][T22753] dummy0 speed is unknown, defaulting to 1000
[  587.885548][T22755] FAULT_INJECTION: forcing a failure.
[  587.885548][T22755] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  587.898796][T22755] CPU: 0 UID: 0 PID: 22755 Comm: syz.0.6368 Tainted: G        W          6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0
[  587.898902][T22755] Tainted: [W]=WARN
[  587.898911][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  587.898926][T22755] Call Trace:
[  587.898933][T22755]  <TASK>
[  587.898942][T22755]  dump_stack_lvl+0xf2/0x150
[  587.898976][T22755]  dump_stack+0x15/0x1a
[  587.899002][T22755]  should_fail_ex+0x24a/0x260
[  587.899046][T22755]  should_fail+0xb/0x10
[  587.899079][T22755]  should_fail_usercopy+0x1a/0x20
[  587.899137][T22755]  _copy_from_user+0x1c/0xa0
[  587.899161][T22755]  copy_msghdr_from_user+0x54/0x2a0
[  587.899200][T22755]  ? __fget_files+0x17c/0x1c0
[  587.899244][T22755]  __sys_sendmsg+0x13e/0x230
[  587.899281][T22755]  __x64_sys_sendmsg+0x46/0x50
[  587.899324][T22755]  x64_sys_call+0x2734/0x2dc0
[  587.899357][T22755]  do_syscall_64+0xc9/0x1c0
[  587.899394][T22755]  ? clear_bhb_loop+0x55/0xb0
[  587.899427][T22755]  ? clear_bhb_loop+0x55/0xb0
[  587.899533][T22755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.899604][T22755] RIP: 0033:0x7f99de3dd169
[  587.899622][T22755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.899641][T22755] RSP: 002b:00007f99dca26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.899674][T22755] RAX: ffffffffffffffda RBX: 00007f99de5f6080 RCX: 00007f99de3dd169
[  587.899686][T22755] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004
[  587.899698][T22755] RBP: 00007f99dca26090 R08: 0000000000000000 R09: 0000000000000000
[  587.899709][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.899720][T22755] R13: 0000000000000000 R14: 00007f99de5f6080 R15: 00007ffcdff1ad08
[  587.899742][T22755]  </TASK>
[  587.909018][T22098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.120870][T22761] lo speed is unknown, defaulting to 1000
[  588.205385][T22761] dummy0 speed is unknown, defaulting to 1000
[  588.257513][T22774] lo speed is unknown, defaulting to 1000
[  588.340385][T22776] lo speed is unknown, defaulting to 1000
[  588.395681][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1
[  588.403195][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.408653][T22776] dummy0 speed is unknown, defaulting to 1000
[  588.410659][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.424188][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.431639][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.439033][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.446499][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[  588.453949][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.461385][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.468819][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.476324][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[  588.483763][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.491274][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.498748][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.500982][T22785] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  588.506158][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.506201][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.506223][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.506249][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.506274][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.522470][T22785] bond0: (slave sit0): Error -95 calling set_mac_address
[  588.523704][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.567833][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.569839][   T29] kauditd_printk_skb: 336 callbacks suppressed
[  588.569855][   T29] audit: type=1400 audit(1741581539.279:35613): avc:  denied  { ioctl } for  pid=22781 comm="syz.1.6380" path="socket:[97692]" dev="sockfs" ino=97692 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  588.575275][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.613780][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.621223][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.628646][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.636094][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.640157][T22774] dummy0 speed is unknown, defaulting to 1000
[  588.643528][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.657026][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.664423][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.671866][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.679304][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.686720][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.694198][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.701643][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.709142][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.716595][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.724023][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.731511][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.738961][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.746422][ T6122] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  588.755092][ T6122] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  588.855040][   T29] audit: type=1326 audit(1741581539.606:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22791 comm="syz.1.6384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b1b1d169 code=0x7ffc0000
[  588.902942][T22770] loop4: detected capacity change from 0 to 65536
[  588.906244][   T29] audit: type=1326 audit(1741581539.643:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22791 comm="syz.1.6384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b1b1d169 code=0x7ffc0000
[  588.910276][T22770] vfat: Unknown parameter '䃅�����!�Y6#9��2�^�ը���Ah�s9�~���f�3p)Z�|+��\�J�ZƉxQE[��t���QN�3L�V�h�6��XΗɘg�I��(@�.uT6Mb"�'
[  589.024333][   T29] audit: type=1400 audit(1741581539.774:35616): avc:  denied  { getopt } for  pid=22805 comm="syz.1.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  589.081624][T22806] __nla_validate_parse: 6 callbacks suppressed
[  589.081644][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6390'.
[  589.143409][T22817] loop1: detected capacity change from 0 to 128
[  589.156327][   T29] audit: type=1326 audit(1741581539.887:35617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.180217][   T29] audit: type=1326 audit(1741581539.887:35618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.184483][T22806] hsr_slave_1 (unregistering): left promiscuous mode
[  589.204153][   T29] audit: type=1326 audit(1741581539.887:35619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.234563][   T29] audit: type=1326 audit(1741581539.887:35620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.258256][   T29] audit: type=1326 audit(1741581539.887:35621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.282484][   T29] audit: type=1326 audit(1741581539.887:35622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99de3dd169 code=0x7ffc0000
[  589.323206][T22817] smc: net device bond0 applied user defined pnetid SYZ0
[  589.333326][T22818] smc: net device bond0 erased user defined pnetid SYZ0
[  589.430412][T22828] loop3: detected capacity change from 0 to 128
[  589.447344][T22832] loop4: detected capacity change from 0 to 2048
[  589.470634][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6397'.
[  589.479618][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6397'.
[  589.514683][T22832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.538011][T22832] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.703135][T22859] xt_hashlimit: max too large, truncated to 1048576
[  589.712861][T22859] Cannot find set identified by id 0 to match
[  589.767754][T22847] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6396: bg 0: block 345: padding at end of block bitmap is not set
[  589.787011][T22867] loop2: detected capacity change from 0 to 164
[  589.809259][T22847] EXT4-fs (loop4): Remounting filesystem read-only
[  589.816688][T22867] Unable to read rock-ridge attributes
[  589.821325][T22869] loop3: detected capacity change from 0 to 1764
[  589.830385][T22867] iso9660: Corrupted directory entry in block 4 of inode 1792
[  589.879587][T22877] loop3: detected capacity change from 0 to 128
[  589.897592][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6417'.
[  589.906548][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6417'.
[  589.945384][T22555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.995469][T22884] loop4: detected capacity change from 0 to 1024
[  590.012080][T22884] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  590.018121][T22889] lo speed is unknown, defaulting to 1000
[  590.030355][T22884] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  590.044810][T22884] EXT4-fs (loop4): orphan cleanup on readonly fs
[  590.056248][T22884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  590.072359][T22884] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #3: comm syz.4.6418: mark_inode_dirty error
[  590.075810][T22889] dummy0 speed is unknown, defaulting to 1000
[  590.084661][T22884] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6418: Invalid block bitmap block 3 in block_group 0
[  590.103800][T22884] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6418: Invalid block bitmap block 3 in block_group 0
[  590.117484][T22884] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6418: Invalid block bitmap block 3 in block_group 0
[  590.133486][T22884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  590.143113][T22884] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #3: comm syz.4.6418: mark_inode_dirty error
[  590.164371][T22884] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm syz.4.6418: lblock 6 mapped to illegal pblock 1 (length 1)
[  590.164419][T22893] loop3: detected capacity change from 0 to 1024
[  590.186234][T22884] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.6418: lblock 0 mapped to illegal pblock 48 (length 1)
[  590.187245][T22893] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  590.210862][T22884] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.6418: Failed to acquire dquot type 0
[  590.213862][T22893] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  590.223379][T22884] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 49: comm syz.4.6418: lblock 1 mapped to illegal pblock 49 (length 1)
[  590.231725][T22893] EXT4-fs (loop3): orphan cleanup on readonly fs
[  590.245853][T22884] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.6418: Failed to acquire dquot type 0
[  590.263475][T22893] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  590.264263][T22884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  590.273113][T22893] EXT4-fs (loop3): Remounting filesystem read-only
[  590.291038][T22884] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #15: comm syz.4.6418: mark_inode_dirty error
[  590.302921][T22893] EXT4-fs (loop3): 1 orphan inode deleted
[  590.303820][T22884] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  590.318988][T22884] EXT4-fs (loop4): 1 orphan inode deleted
[  590.320037][T22893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  590.325399][T22884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  590.338138][T22893] SELinux: (dev loop3, type ext4) getxattr errno 5
[  590.357182][T22893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.416881][T22898] loop1: detected capacity change from 0 to 512
[  590.438908][T22555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.649239][T22917] loop3: detected capacity change from 0 to 1024
[  590.679238][T22927] loop2: detected capacity change from 0 to 512
[  590.688428][T22917] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  590.717359][T22917] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  590.770174][T22917] EXT4-fs (loop3): orphan cleanup on readonly fs
[  590.795852][T22917] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  590.818243][T22902] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6427'.
[  590.835739][T22917] EXT4-fs (loop3): Remounting filesystem read-only
[  590.847487][T22939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6442'.
[  590.859242][T22917] EXT4-fs (loop3): 1 orphan inode deleted
[  590.876829][T22917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  590.907685][T22917] SELinux: (dev loop3, type ext4) getxattr errno 5
[  590.914933][T22917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.923300][T22941] futex_wake_op: syz.4.6443 tries to shift op by -17; fix this program
[  590.975273][T22951] netlink: 'syz.3.6446': attribute type 4 has an invalid length.
[  590.983098][T22951] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6446'.
[  590.993290][T22953] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6447'.
[  591.029767][T22953] loop2: detected capacity change from 0 to 164
[  591.040377][T22953] ISOFS: unable to read i-node block
[  591.045722][T22953] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  591.047921][T22958] loop3: detected capacity change from 0 to 1024
[  591.059042][T22953] isofs_fill_super: get root inode failed
[  591.068281][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'.
[  591.079456][T22958] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  591.090632][T22958] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  591.100796][T22956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.108280][T22956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.124669][T22956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.132122][T22956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.141003][T22958] JBD2: no valid journal superblock found
[  591.146936][T22958] EXT4-fs (loop3): Could not load journal inode
[  591.151221][T22966] loop1: detected capacity change from 0 to 512
[  591.178811][T22958] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  591.181717][T22966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.288510][T22971] loop3: detected capacity change from 0 to 1764
[  591.644164][T23000] loop2: detected capacity change from 0 to 128
[  591.648386][T23002] loop3: detected capacity change from 0 to 512
[  591.660533][T23002] EXT4-fs: Ignoring removed orlov option
[  591.666241][T23002] EXT4-fs: Ignoring removed nobh option
[  591.673140][T23002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  591.683715][T23002] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  591.691744][T23002] EXT4-fs (loop3): orphan cleanup on readonly fs
[  591.698691][T23002] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6466: bg 0: block 248: padding at end of block bitmap is not set
[  591.714811][T23002] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.6466: Failed to acquire dquot type 1
[  591.727889][T23002] EXT4-fs (loop3): 1 truncate cleaned up
[  591.778795][T23002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  591.794926][T23005] Invalid option length (1047674) for dns_resolver key
[  591.805951][T22367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.846707][T23010] loop3: detected capacity change from 0 to 1024
[  591.853879][T23010] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  591.866442][T23010] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  591.875014][T23010] EXT4-fs (loop3): orphan cleanup on readonly fs
[  591.887828][T23010] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  591.897660][T23010] EXT4-fs (loop3): Remounting filesystem read-only
[  591.904599][T23010] EXT4-fs (loop3): 1 orphan inode deleted
[  591.910904][T23010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  591.923048][T23010] SELinux: (dev loop3, type ext4) getxattr errno 5
[  591.931460][T23010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.974976][T23018] lo speed is unknown, defaulting to 1000
[  592.006063][T23018] dummy0 speed is unknown, defaulting to 1000
[  592.066597][T23023] loop4: detected capacity change from 0 to 512
[  592.066749][T23021] veth0_vlan: entered allmulticast mode
[  592.103361][T23023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  592.116114][T23023] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.128140][T22007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.139982][T23023] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.6474: Failed to acquire dquot type 1
[  592.172873][T22555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  592.205206][T23028] netlink: 'syz.2.6473': attribute type 10 has an invalid length.
[  592.252889][T23028] team0: Device hsr_slave_0 failed to register rx_handler
[  592.253324][T23034] loop3: detected capacity change from 0 to 128
[  592.315332][T23034] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  592.338128][T23021] lo speed is unknown, defaulting to 1000
[  592.379705][T23045] loop1: detected capacity change from 0 to 128
[  592.419713][T23034] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  592.469638][T22367] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  592.530491][T23055] loop4: detected capacity change from 0 to 1024
[  592.554394][T23021] dummy0 speed is unknown, defaulting to 1000
[  592.562071][T23055] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  592.582222][T23055] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  592.590427][T23055] EXT4-fs (loop4): orphan cleanup on readonly fs
[  592.598724][T23055] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  592.617283][T23055] EXT4-fs (loop4): Remounting filesystem read-only
[  592.629094][T23055] EXT4-fs (loop4): 1 orphan inode deleted
[  592.638271][T23055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  592.650375][T23055] SELinux: (dev loop4, type ext4) getxattr errno 5
[  592.657226][T23055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.769851][T23068] loop4: detected capacity change from 0 to 512
[  593.031192][T23080] loop3: detected capacity change from 0 to 128
[  593.271383][T23086] lo speed is unknown, defaulting to 1000
[  593.326220][T23086] dummy0 speed is unknown, defaulting to 1000
[  593.373314][T23096] loop1: detected capacity change from 0 to 1024
[  593.389034][T23096] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  593.400057][T23096] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  593.425753][T23096] JBD2: no valid journal superblock found
[  593.431539][T23096] EXT4-fs (loop1): Could not load journal inode
[  593.706193][T23120] loop3: detected capacity change from 0 to 128
[  593.717020][T23123] lo speed is unknown, defaulting to 1000
[  593.752745][T23124] IPv6: Can't replace route, no match found
[  593.801954][T23123] dummy0 speed is unknown, defaulting to 1000
[  593.857343][T23129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  593.863910][T23129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  593.871731][T23129] vhci_hcd vhci_hcd.0: Device attached
[  593.896854][T23130] vhci_hcd: connection closed
[  593.897085][ T8964] vhci_hcd: stop threads
[  593.906190][ T8964] vhci_hcd: release socket
[  593.910618][ T8964] vhci_hcd: disconnect device
[  594.132536][T23137] loop4: detected capacity change from 0 to 1024
[  594.157287][T23137] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  594.199206][T23137] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  594.215612][T23137] EXT4-fs (loop4): orphan cleanup on readonly fs
[  594.222606][T23137] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  594.239028][T23142] loop3: detected capacity change from 0 to 1024
[  594.268757][T23142] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  594.279465][T23137] EXT4-fs (loop4): Remounting filesystem read-only
[  594.286048][T23137] __quota_error: 378 callbacks suppressed
[  594.286061][T23137] Quota error (device loop4): write_blk: dquota write failed
[  594.299326][T23137] Quota error (device loop4): write_blk: dquota write failed
[  594.306743][T23137] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  594.323959][T23137] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  594.334332][T23142] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  594.342420][T23142] EXT4-fs (loop3): orphan cleanup on readonly fs
[  594.357448][T23142] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  594.368068][T23137] EXT4-fs (loop4): 1 orphan inode deleted
[  594.385116][T23137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  594.398381][T23142] EXT4-fs (loop3): Remounting filesystem read-only
[  594.404979][T23142] Quota error (device loop3): write_blk: dquota write failed
[  594.412468][T23142] Quota error (device loop3): write_blk: dquota write failed
[  594.419905][T23142] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  594.439352][T23137] SELinux: (dev loop4, type ext4) getxattr errno 5
[  594.462450][T23147] loop2: detected capacity change from 0 to 1024
[  594.472537][T23137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.485730][T23147] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  594.496672][T23147] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  594.508639][T23142] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  594.518114][T23142] EXT4-fs (loop3): 1 orphan inode deleted
[  594.526063][T23147] JBD2: no valid journal superblock found
[  594.531814][T23147] EXT4-fs (loop2): Could not load journal inode
[  594.538661][T23142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  594.557373][T23147] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  594.567748][T23142] SELinux: (dev loop3, type ext4) getxattr errno 5
[  594.588440][T23142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.608955][   T29] audit: type=1326 audit(1741581544.995:35975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23146 comm="syz.2.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcff6d169 code=0x7ffc0000
[  594.632609][   T29] audit: type=1326 audit(1741581544.995:35976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23146 comm="syz.2.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2fcff6d169 code=0x7ffc0000
[  594.657966][T23154] netlink: 'syz.0.6529': attribute type 10 has an invalid length.
[  594.694509][T23156] lo speed is unknown, defaulting to 1000
[  594.701171][T23158] loop4: detected capacity change from 0 to 128
[  594.726911][T23158] __nla_validate_parse: 21 callbacks suppressed
[  594.726925][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6532'.
[  594.734142][T23156] dummy0 speed is unknown, defaulting to 1000
[  594.742200][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6532'.
[  594.771581][T23162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6534'.
[  594.781204][T23163] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6531'.
[  594.792573][T23162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6534'.
[  594.801580][T23162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6534'.
[  594.810516][T23162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6534'.
[  594.981642][T23178] loop2: detected capacity change from 0 to 128
[  595.033533][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6541'.
[  595.042674][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6541'.
[  595.044706][T23187] netlink: 'syz.0.6542': attribute type 11 has an invalid length.
[  595.082073][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6528'.
[  595.094128][T23187] SELinux: syz.0.6542 (23187) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  595.094333][T23174] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.160591][T23174] bridge_slave_1 (unregistering): left allmulticast mode
[  595.167803][T23174] bridge_slave_1 (unregistering): left promiscuous mode
[  595.174882][T23174] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.208389][T23183] IPv6: syztnl0: Disabled Multicast RS
[  595.349420][T23201] lo speed is unknown, defaulting to 1000
[  595.429855][T23201] dummy0 speed is unknown, defaulting to 1000
[  595.580288][T23213] netlink: 'syz.0.6552': attribute type 1 has an invalid length.
[  595.590876][T23213] netlink: 'syz.0.6552': attribute type 13 has an invalid length.
[  595.602068][T23213] gretap0: refused to change device tx_queue_len
[  595.608620][T23185] loop4: detected capacity change from 0 to 65536
[  595.636965][T23213] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  595.721632][T23223] netlink: 'syz.3.6557': attribute type 11 has an invalid length.
[  595.749571][T23223] SELinux: syz.3.6557 (23223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  595.811961][T23236] lo speed is unknown, defaulting to 1000
[  595.852829][T23240] loop3: detected capacity change from 0 to 1024
[  595.871966][T23236] dummy0 speed is unknown, defaulting to 1000
[  595.902950][T23240] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  595.941535][T23240] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  595.950124][T23240] EXT4-fs (loop3): orphan cleanup on readonly fs
[  595.958364][T23240] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  595.970560][T23240] EXT4-fs (loop3): Remounting filesystem read-only
[  595.977324][T23240] EXT4-fs (loop3): 1 orphan inode deleted
[  595.983698][T23240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  596.003689][T23240] SELinux: (dev loop3, type ext4) getxattr errno 5
[  596.010700][T23240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.110517][T23258] loop3: detected capacity change from 0 to 128
[  596.119106][T23259] loop1: detected capacity change from 0 to 128
[  596.185370][T23261] can0: slcan on ttyS3.
[  596.276866][T23260] can0 (unregistered): slcan off ttyS3.
[  596.352536][T23271] SELinux: security_context_str_to_sid (���
[  596.352536][T23271] �P/�x�P����_hѫ@
) failed with errno=-22
[  596.399809][T23274] lo speed is unknown, defaulting to 1000
[  596.408653][T23264] IPVS: length: 74 != 8
[  596.436366][T23274] dummy0 speed is unknown, defaulting to 1000
[  596.585260][T23287] loop1: detected capacity change from 0 to 128
[  596.616338][T23291] loop3: detected capacity change from 0 to 1024
[  596.624508][T23291] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  596.639485][T23291] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  596.648381][T23291] EXT4-fs (loop3): orphan cleanup on readonly fs
[  596.655936][T23291] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  596.666293][T23291] EXT4-fs (loop3): Remounting filesystem read-only
[  596.673026][T23291] EXT4-fs (loop3): 1 orphan inode deleted
[  596.679550][T23291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  596.691820][T23291] SELinux: (dev loop3, type ext4) getxattr errno 5
[  596.699893][T23291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.830872][T23301] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  596.839815][T23301] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  597.056158][    C1] ==================================================================
[  597.064287][    C1] BUG: KCSAN: data-race in can_send / can_send
[  597.070471][    C1] 
[  597.072805][    C1] read-write to 0xffff888117566290 of 8 bytes by interrupt on cpu 0:
[  597.080887][    C1]  can_send+0x5a2/0x6d0
[  597.085155][    C1]  bcm_can_tx+0x314/0x420
[  597.089513][    C1]  bcm_tx_timeout_handler+0xea/0x280
[  597.094835][    C1]  __hrtimer_run_queues+0x20d/0x5e0
[  597.100048][    C1]  hrtimer_run_softirq+0xe4/0x2c0
[  597.105080][    C1]  handle_softirqs+0xbf/0x280
[  597.109772][    C1]  run_ksoftirqd+0x1c/0x30
[  597.114198][    C1]  smpboot_thread_fn+0x31c/0x4c0
[  597.119144][    C1]  kthread+0x4ae/0x520
[  597.123231][    C1]  ret_from_fork+0x4b/0x60
[  597.127660][    C1]  ret_from_fork_asm+0x1a/0x30
[  597.132441][    C1] 
[  597.134761][    C1] read-write to 0xffff888117566290 of 8 bytes by interrupt on cpu 1:
[  597.142827][    C1]  can_send+0x5a2/0x6d0
[  597.146986][    C1]  bcm_can_tx+0x314/0x420
[  597.151333][    C1]  bcm_tx_timeout_handler+0xea/0x280
[  597.156629][    C1]  __hrtimer_run_queues+0x20d/0x5e0
[  597.161832][    C1]  hrtimer_run_softirq+0xe4/0x2c0
[  597.166864][    C1]  handle_softirqs+0xbf/0x280
[  597.171547][    C1]  run_ksoftirqd+0x1c/0x30
[  597.175975][    C1]  smpboot_thread_fn+0x31c/0x4c0
[  597.180923][    C1]  kthread+0x4ae/0x520
[  597.185005][    C1]  ret_from_fork+0x4b/0x60
[  597.189435][    C1]  ret_from_fork_asm+0x1a/0x30
[  597.194212][    C1] 
[  597.196532][    C1] value changed: 0x0000000000002b9d -> 0x0000000000002b9e
[  597.203635][    C1] 
[  597.205958][    C1] Reported by Kernel Concurrency Sanitizer on:
[  597.212108][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W          6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0
[  597.224356][    C1] Tainted: [W]=WARN
[  597.228156][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  597.238221][    C1] ==================================================================
[  597.316350][T23305] lo speed is unknown, defaulting to 1000
[  597.349032][T23305] dummy0 speed is unknown, defaulting to 1000