last executing test programs:

2m34.715352756s ago: executing program 4 (id=153):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

2m34.714527726s ago: executing program 4 (id=154):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0x1, 0xa, 0x7, 0x100, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x62, &(0x7f0000000280)=""/98, 0x41000, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0xffffff4f, 0xeee}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x4, 0x3, 0x7, 0xb}, {0x5, 0x4, 0xe, 0xc}], 0x10, 0x7}, 0x94)
io_uring_enter(r1, 0x3ca1, 0x1569, 0xa, &(0x7f0000000500)={[0x944]}, 0x8)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000006c0))
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x2802)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r7, &(0x7f0000000900))
r8 = fcntl$getown(r6, 0x9)
fcntl$lock(r5, 0x7, &(0x7f0000000980)={0x1, 0x3, 0x9, 0x5, r8})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x2, 0x2, 0x9, 0x9, 0xf}})
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000a00))
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$xdp(r5, &(0x7f0000000a40)={0x2c, 0xf, r2, 0x2e, r5}, 0x10)
r9 = open_tree(r5, &(0x7f0000000a80)='./file0\x00', 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000b40)={'wg2\x00'})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r12, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, 0x8, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4044810)
setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000cc0)={0x9, 0xb6, 0x2, 0x7b, 0xe, 0x6e, 0x53}, 0xc)

2m34.691630787s ago: executing program 4 (id=155):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/j9S71fj7SaObN23nf9+LMvJm39rwAxtZzEbETEdMR8UZEzBf7k2KJO50l+9yjve2l/b3tpSTa7df/nuT52b7oOibzZFHmbER846sR30mOx21ubj1YrNWq60W63KqvlZubWzdW64sr1ZXqw0rl9sLtmy/derEysLZerf9y9yurr37zN7/+9Lu/3/nyD7JqzRV53e0YpE7Tpw7jZCYj4tXzCDYCE8V6esT14PGkEfGxiPhcfv7Px0T+vxMAuMja7floz3enAYCLLs3HwJK0VIwFzEWalkqdMbxn4lJaazRb1+83Nh4ud8bKLsdUen+1Vr15ZeaP38vvGKaSLL2Q5+X5ebpyJH0rIq5ExI9nnsjTpaVGbXl0tz0AMNaePNL//2um0//3oce3egDAR8bsqCsAAAyd/h8Axo/+HwDGTx/9f/Fl/8651wUAGA7P/wAwfvT/ADB+9P8AMFa+/tpr2dLeL95/vfzm5saDxps3lqvNB6X6xlJpqbG+VlppNFbyd/bUTyuv1misLbwQG2+VW9Vmq9zc3LpXb2w8bN3L3+t9rzo1lFYBAB/kytV3/pBExM7LT+RLdM3loK+Giy0ddQWAkZkYdQWAkTHbF4yv/p/xf3eu9QBGp+fLvGd7br7fTz9EEL9nBP9Xrn2y//F/czzDxWL8H8bX443/vzLwegDDZ/wfxle7nRyd83/6MAsAuJDO8Dv+7R8O6iYEGKnTJvMeyPf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMHMRcR3I0lLxVzgc5GmpVLEUxFxOaaS+6u16s2IeDquRsTUTJZeGHWlAYAzSv+aFPN/XZt/fu5o7nTy75l8HRHf/9nrP3lrsdVaX8j2/+Nw/8zB9GGV9447w7yCAECfnuvzc3n/XSnWXQ/yj/a2lw6W7s+nA67nUbt347/FVMRL+3vb+dLJmYzJfD2b30tc+mdSpDtzkT4bERMDiL/zdkR8olf7k3xs5HIx82l3/ChiPzXU+On74qd5Xmed3Xx9fAB1gXHzzt2IuNPr/EuLa2rv8382v0Kd3e7dTmEH1779rvgH17+JHvGTD3HN333ht187trM938l7O+LZyV7xk8P4yQnxn+8z/p8+9ZkfvXJCXvvnEdeid/zuWOVWfa3c3Ny6sVpfXKmuVB9WKrcXbt986daLlXI+Rl0+GKk+7m8vX3/6pLpl7b90QvzZnu2fPjz2C322/xf/eePbn/2A+F/6fO+f/zM943dkfeIX+4y/eOlXJ07fncVfPqH9p/38r/cZ/92/bC33+VEAYAiam1sPFmu16vqZNrKn0EGUc2wjq+JACzxl488xyALvnO3wqfP6Vz33jcnDe8XBlvytrMQhNycdeCvOtPGosxHnHmu01yXg/L130o+6JgAAAAAAAAAAAAAAwEmG8adLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9f/AgAA//91qMwl")
chdir(0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random='\x00\x00\x00@\x00', @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @local, @remote}}}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

2m34.553674644s ago: executing program 4 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1e, 0xa, 0x5, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAiIiIcdOwFS0IBAogAJiSaUxnaikEuMYiORKAIHoVCiSPSIEom/gAoaBFRItNCjSBFKQ6A6tL7d3CN359fZC9zvJ609szPrmc+zcze7exfAwBrLfiQRuyPi14gYqWdbK4zVf926eXnmr5uXZ5Ko1d76I1mu9+fNyzNF1eK4XXnmSBqRfpLEwQ7tLly8dHa6Wp27kOcnFs+9N7Fw8dKzZ85Nn547PXd+6sSJ48cmX3h+6rm+xHlP1tcDH84f2v/a29femDl57Z0fv06K+Nvi6JOxXoVP1Gp9bq5ce5rSyVCJHWFNKhGRDdfw8vwfiUo0Bm8kXv241M4Bm6qW61K8VAP+x5IouwdAOYo3+uz6t9i2bvVRvhsv1S+Asrhv5Vu9ZCjSvM5w2/VtP41FxMmlv7/ItljxPoQLawBg477N1j/PdFr/pXF/U72782dDo/mzlL0RcW9E7IuI+yKW6z4QEQ+usf22hyTbI6Jt/ZNeX19kq5Ot/17Mn221rv+K1V+MVvLcnuX4h5NTZ6pzR/P/yZEY3p7lJ3u08d0rv3zWrax5/ZdtWfvFWjDvx/Wh7a3HzE4vTm8k5mY3rkQcGOoUf3J7tZlExP6IOLDONs489dWhbmUrx99DH5bDtS8jnqyP/1K0xV9Iej+fnLgrqnNHJ4qz4k4//Xz1zW7tbyj+PsjGf2fH8/92/KNJ8/PahbW3cfW3T7te04yv6/xv7NiW//5genHxwmTEtuT1eqeb9081ji3yRf0s/iOHO8//vdH4TxyMiOwkfigiHo6IR/KxezQiHouIwz3i/+Hlx9/tVvZvGP/ZtvEfba3SNv6NxLZo39M5UTn7/Tetf7GRXN3r3/HaSNPhvV7/ivNhNf1a39kMAAAA/z1pROyOJB2/nU7T8fH6Z/j3xc60Or+w+PSp+ffPz9a/IzAaw2lxp2uk6X7oZH5ZX+Sn2vLH8vvGn1d2LOfHZ+ars2UHDwNuV6f5X6mX/V4pu3fApvOxMhhc5j8MLvMfBpf5D4Orw/zfUUY/gK3X6f3/oxL6AWy9tvnvsR8MENf/MLjMfxhczfM/KbEfwJZa2BErf0leQuKORKQ961zZeBPFOboF4SSbPAt2b0qf8yncWpQs1Xev5Q/WOhSV9IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ/8EAAD//xL/3co=")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x50000a0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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")
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getxattr(0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)={[{@inode32}]})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)

2m34.156890551s ago: executing program 4 (id=172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x1d38, &(0x7f0000000340)={0x0, 0xc9e6, 0x10100, 0x2, 0x20e}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x14000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0)

2m33.449960393s ago: executing program 4 (id=187):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

2m33.449773963s ago: executing program 32 (id=187):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

4.289077445s ago: executing program 1 (id=3253):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)

3.919860691s ago: executing program 5 (id=3261):
syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2, 0x0, 0x71b4}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000f80)={0x24, "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"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141142, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000280)="75fa8bdc5f41a26928516a4c6a932298d500fe4328341f6d6e60455778090269a2c759a831f62ebe6b0013b5fd286b7799484f29c6efc5caff410a39f217a24f21c116a4b96f2c6eed1017aa9532a7783f3835bf98256b95efc33db3943d5d1711e020e6705fdf1eea239577ec9314ca1e07b1e789b3d474c53d8f97fa084129ea303028d92cbf3d2d14166dbaa150ce976eb0e449c861222511b716164a1298cb5d5c23ed916f2a98f60bd3c54023", &(0x7f0000000340)=""/151, &(0x7f0000000580)="84c05fe4d6a88a3f6e9f2ad23dcb12a6d1f7451f3afb3a7b9e886e66eab705a82e59cb1656a9e7fc3ce1888ab77a781ac437dc867967eafd7f0cf4dc4efdd50d326a5785ee59291448f0265b56a6a6b574eb2b695e6efdc7d91cfbbb5dc09451886fd5c13e074b00f518b028700f006c4685b0746e1a9db92deae31eedaaff4c1efda59db8014e630ca03860f67266adfaed28e5c04ceb4b89dd65448c414fd090e078c41e451f67f6c821e7", &(0x7f0000000640)="0d156ce0e19c1962fd39c9a017f5876bc2441358c0ea93ff7065f6da0f65a12b643e51596fbbd2d3943933b86a5953b179d320b0908354d98f261b1d94e87253b421025e8369265e017ea5df53bcbb5adc03746f1d3bb630dffe26d9a072b638397bdcf9050b8cef8783a93d3e4506eaaf14980a70fe8720203ba1b1470a268e8e27a36bc262887d22dd34eca7d4fda2bd9ea04f222ad379823ef0261ec45d31d91695d724a7d45107c413de6dfba69716326ad658b115fcceff48f9eedc918e6cfcdd38a12c00c35afc64704fd68bc1", 0x5, r5}, 0x38)
io_setup(0x6, &(0x7f0000000000)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)='p', 0x1, 0x5ff}])

2.931787954s ago: executing program 1 (id=3267):
r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r1, 0x0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x92d313c4bc651ee1, 0x80, 0x28, 0x1, 0x2b, 0x0, 0x0, 0x7, 0x14c2b, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @rc={0x1f, @none, 0x5}, @xdp={0x2c, 0x10, 0x0, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0xfc3d, &(0x7f0000000180)='bond0\x00', 0x4, 0x2, 0x4})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91107400009500"/16], &(0x7f00000000c0)='GPL\x00'}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r4, &(0x7f0000000300)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
madvise(&(0x7f0000672000/0x3000)=nil, 0x3000, 0x19)

2.727853762s ago: executing program 5 (id=3271):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5<k\xa8\x88\x01\x7fw9j\xdcy<nG3\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"x\xf4>-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f<v\x8d2\xb0\n\xf6\x88\xa8\xf7\x98\x8a33q\xfcI%\x888\b\xd0\xc5\xd5; Y\xc4\xb4\x93\x8f\x12\xa7m $5FL>\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7)
fcntl$addseals(r5, 0x409, 0x8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r5, 0x0)
rmdir(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
pipe(0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x6, 0x100)

2.398049357s ago: executing program 5 (id=3274):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="dcb103333177b84f74e4e4d565486ad459e66873de69ee0f1a005d2faee0d8368077d8ea52eb7a7510c0a7351e5353ceeefa828302ad5747057e89ba624ad8ee145dbb9b8bf4d54c99415377b763a2f2b2622573679b5ebda1a474cb2850e06f42845ebc5671dd0dc3791101ccb043d1fc829f68d4b51bb351117afda2a7c82e28b8a9", @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5f}, 0x18)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138)
write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009)
unshare(0x400)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r5}, 0xc)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73)
r9 = semget(0x1, 0x4, 0x20)
semop(r9, &(0x7f0000000040)=[{0x3, 0x1}, {0x0, 0x7, 0x800}], 0x2)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r11, r10, 0x7}, 0x20)
close(0x3)
close(r11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18)
fchmodat(r1, &(0x7f0000000000)='.\x00', 0xe0)

2.276328042s ago: executing program 5 (id=3276):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

2.215139125s ago: executing program 3 (id=3280):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rss_stat\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x6168, 0x8, 0x6, 0x328}, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x11080})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3c, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c1, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4, 0xfffffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
r7 = gettid()
kcmp(0x0, r7, 0x6, r4, r4)
clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0)

1.85161803s ago: executing program 1 (id=3284):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xf6, 0x21cf9, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r2, r2, 0x0, 0x40000f63c) (fail_nth: 9)

1.842875371s ago: executing program 5 (id=3285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x4, 0x7, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
syz_usbip_server_init(0x1)
syz_io_uring_setup(0x5fce, &(0x7f0000000440)={0x0, 0x939e, 0x1, 0xfffffffc, 0x35}, &(0x7f0000000080), &(0x7f0000000040))
syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x1000, 0x2}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0)

1.577600352s ago: executing program 1 (id=3287):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x141040, 0xc0)
ioctl$TCSBRKP(r2, 0x5425, 0x6)
ioctl$TCSBRKP(r2, 0x5425, 0x80000000)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10)
setitimer(0x2, 0x0, 0x0)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
sync()

1.431475979s ago: executing program 0 (id=3293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c00"], 0x90}}, 0x0)

1.422269249s ago: executing program 0 (id=3294):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = timerfd_create(0x7, 0x0)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94f2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES64=r9, @ANYRES16=r10, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x80095}, 0x200c8c4)

1.39400123s ago: executing program 3 (id=3295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.364624491s ago: executing program 0 (id=3296):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.359512051s ago: executing program 3 (id=3297):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0))
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
dup3(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
timer_settime(0x0, 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0)

1.346912552s ago: executing program 0 (id=3298):
sched_setscheduler(0x0, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r1})
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

1.315661963s ago: executing program 0 (id=3299):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r6 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

1.314815633s ago: executing program 3 (id=3300):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020003001d"], 0x202400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020703b00000000002020207b1af8ff00f7ff00bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000200)='GPL\x00', 0x3080, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005})
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)

1.16767104s ago: executing program 3 (id=3301):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000700)=@llc={0x1a, 0x306, 0x7, 0x40, 0x9, 0x8b, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)="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", 0xff}, {&(0x7f0000000880)="8cb0056f57017a83dc65d7d5aa045c572d2b7c36f02d69819da8685ff8d58f4dccb6a4b91d4bea5cefd9307b33c7963aeb2b2c7059822d02ec94855ef3e86f1a79708abc87e393d0486624d852b4ca6ef78e960ce3482885779f4654216bb6f3e47d222dfaa7d0c0bc7e6763ae5d78449042ad616071cbe45cabd643f1f6a178972787a68f77f273c9012988c77d11470750b620d976e44f98e2a6e0da04f08db97d98b776b76a700f49b7cd382ad8667195b2c21d93c21eca4f9d0b12871689b7d23504958db6ae3a", 0xc9}, {&(0x7f0000000c00)="8a398b9ea13003134cbedf09f8c5840f4991918ac0c1096209b6c24c574c2876fa0a18ee3a1a6dcf60a8588c971c5c5eccd1f7213a22a8352c8d1961a4111b2ef88ef448b5befdcf87ea2ce288f38ade45ca5d61371fffeef59d83d4245af0a9a5d3c0fcd5585c022b589e55a3112dd6aa3f92a96c7c37221d6c9b10c8fb332e9326a3574f29c8b3fe7b66f4d7857aebd7f49ed5df3eb1a3d99e6361025972068b2b13093b55015609d6a0cb2ed39efb6bfb13bed7145af5d5b4c6477fede01cd233b2f2018fffa5c27613bde0880d4a3eee5b3419f7e1b0edf9deb6", 0xdc}, {&(0x7f0000000d00)="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", 0xffffffffffffffbf}, {&(0x7f0000000300)="605fff09", 0x4}, {&(0x7f0000000e00)="af03c5f9167e565665b81de22e4f743eee82158c577becfc7c5b4eb95f1e5b5a17a287aa6d941734fc5b058ba53b4ca11ee1ede84cdab8bd47ca973ef1e6003f6c888359eb6bad2832c6d83bfaff5d17d25171521073b17e214ff02e8726d919d90ff27c40506a7859cf8bda7b1723ad915105e6a4b4c78b9df9bb3a7ecb35958b4e607c9b409511b405ea84ffe351f52c3936c94270a180acc06f50222e6709b94720eb8116d8bba3778d60c2ec863a1026f92efb01320eae5fc8d9b6e0a5ee052521", 0xc3}], 0x6}}], 0x1, 0xc88c4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x20, 0x0, 0x7ffc0002}]})
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xffffffffffffff19)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0x1d)

893.842902ms ago: executing program 1 (id=3302):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)

835.877694ms ago: executing program 1 (id=3303):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000700)=@llc={0x1a, 0x306, 0x7, 0x40, 0x9, 0x8b, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)="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", 0xff}, {&(0x7f0000000880)="8cb0056f57017a83dc65d7d5aa045c572d2b7c36f02d69819da8685ff8d58f4dccb6a4b91d4bea5cefd9307b33c7963aeb2b2c7059822d02ec94855ef3e86f1a79708abc87e393d0486624d852b4ca6ef78e960ce3482885779f4654216bb6f3e47d222dfaa7d0c0bc7e6763ae5d78449042ad616071cbe45cabd643f1f6a178972787a68f77f273c9012988c77d11470750b620d976e44f98e2a6e0da04f08db97d98b776b76a700f49b7cd382ad8667195b2c21d93c21eca4f9d0b12871689b7d23504958db6ae3a", 0xc9}, {&(0x7f0000000c00)="8a398b9ea13003134cbedf09f8c5840f4991918ac0c1096209b6c24c574c2876fa0a18ee3a1a6dcf60a8588c971c5c5eccd1f7213a22a8352c8d1961a4111b2ef88ef448b5befdcf87ea2ce288f38ade45ca5d61371fffeef59d83d4245af0a9a5d3c0fcd5585c022b589e55a3112dd6aa3f92a96c7c37221d6c9b10c8fb332e9326a3574f29c8b3fe7b66f4d7857aebd7f49ed5df3eb1a3d99e6361025972068b2b13093b55015609d6a0cb2ed39efb6bfb13bed7145af5d5b4c6477fede01cd233b2f2018fffa5c27613bde0880d4a3eee5b3419f7e1b0edf9deb6", 0xdc}, {&(0x7f0000000d00)="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", 0xffffffffffffffbf}, {&(0x7f0000000300)="605fff09", 0x4}, {&(0x7f0000000e00)="af03c5f9167e565665b81de22e4f743eee82158c577becfc7c5b4eb95f1e5b5a17a287aa6d941734fc5b058ba53b4ca11ee1ede84cdab8bd47ca973ef1e6003f6c888359eb6bad2832c6d83bfaff5d17d25171521073b17e214ff02e8726d919d90ff27c40506a7859cf8bda7b1723ad915105e6a4b4c78b9df9bb3a7ecb35958b4e607c9b409511b405ea84ffe351f52c3936c94270a180acc06f50222e6709b94720eb8116d8bba3778d60c2ec863a1026f92efb01320eae5fc8d9b6e0a5ee052521", 0xc3}], 0x6}}], 0x1, 0xc88c4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x20, 0x0, 0x7ffc0002}]})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xffffffffffffff19)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r5, 0x40085507, &(0x7f0000000100)=0x1d)

509.963148ms ago: executing program 0 (id=3305):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rss_stat\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x6168, 0x8, 0x6, 0x328}, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x11080})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3c, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x5c1, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4, 0xfffffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
r7 = gettid()
kcmp(0x0, r7, 0x6, r4, r4)
clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0)

393.470473ms ago: executing program 2 (id=3309):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
io_uring_setup(0x6f94, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)

183.598682ms ago: executing program 2 (id=3310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c000380"], 0x90}}, 0x0)

155.871123ms ago: executing program 2 (id=3311):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32], 0x44}}, 0x0)

132.485845ms ago: executing program 2 (id=3312):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="70b90700000002001400030076657468315f746f5f6261746164760014001680100001800c0004"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)=' \t', 0x2}], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
pipe2(0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
ptrace(0x10, 0x0)
ptrace$cont(0x21, 0x0, 0x80000001, 0x4)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x7, 0x7, 0x8, 0xc0, 0x8, &(0x7f0000000280)="f92e7355e06f1685579334d081e7d259c0f179c58014ded803f262dedfc8ee2597674cbfeedaeda01079a871ae3251ea9f7faeeb73c44337beeda96441015e0f026fb89652a9162a49766d737578c48d2d70f7595814c785330c701064dc2878c831a2b15d2032493effb8af00bfa4e390d3e7a3dae6f979d5e9c771daf3e3a159741ded5dda6d69764e1b17664446ad45009f375144a0d689788fd2d5511131a485ec62ef34840b1a7b7e071cb151b505c8ece605ad68e48f95013434b533c1"})
write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x88f7}}}}, 0x12)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba18}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xe, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)

57.743328ms ago: executing program 5 (id=3313):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

42.894618ms ago: executing program 2 (id=3314):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x3e, 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x200000004000000}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
unshare(0x22020400)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)

15.55581ms ago: executing program 2 (id=3315):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = timerfd_create(0x7, 0x0)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94f2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES64=r9, @ANYRES16=r10, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x80095}, 0x200c8c4)

0s ago: executing program 3 (id=3316):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r6 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

pped block 4294967295 (level 0)
[  159.886317][T10109] EXT4-fs (loop3): Remounting filesystem read-only
[  159.892960][T10109] EXT4-fs (loop3): 1 orphan inode deleted
[  159.898811][T10109] EXT4-fs (loop3): 1 truncate cleaned up
[  159.922732][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'.
[  159.942374][T10109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.177896][T10132] loop5: detected capacity change from 0 to 512
[  160.199326][T10132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.391550][T10132] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2473: invalid indirect mapped block 4294967295 (level 0)
[  160.497122][T10132] EXT4-fs (loop5): Remounting filesystem read-only
[  160.503931][T10132] EXT4-fs (loop5): 1 orphan inode deleted
[  160.509674][T10132] EXT4-fs (loop5): 1 truncate cleaned up
[  160.516192][T10132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.658731][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.705081][T10142] loop3: detected capacity change from 0 to 764
[  160.771733][T10142] 9pnet: Could not find request transport: r
[  160.837617][T10145] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.876886][T10142] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  160.887420][T10142] SELinux: failed to load policy
[  160.917924][T10152] loop3: detected capacity change from 0 to 1024
[  160.924836][T10152] EXT4-fs: inline encryption not supported
[  160.930681][T10152] EXT4-fs: Ignoring removed orlov option
[  160.942820][T10152] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  161.011300][T10152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  161.026012][T10152] System zones: 0-1, 3-12
[  161.030799][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.037001][T10152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.145443][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.349258][T10177] loop5: detected capacity change from 0 to 512
[  161.387901][T10177] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  161.442229][T10177] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2485: invalid indirect mapped block 4294967295 (level 0)
[  161.488909][T10177] EXT4-fs (loop5): Remounting filesystem read-only
[  161.496084][T10177] EXT4-fs (loop5): 1 orphan inode deleted
[  161.501869][T10177] EXT4-fs (loop5): 1 truncate cleaned up
[  161.508954][T10177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.575549][T10187] loop3: detected capacity change from 0 to 764
[  161.617689][T10187] 9pnet: Could not find request transport: r
[  161.723920][T10187] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  161.734519][T10187] SELinux: failed to load policy
[  161.758120][T10199] v: renamed from ip6_vti0 (while UP)
[  161.775796][T10202] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  161.782337][T10202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.789856][T10202] vhci_hcd vhci_hcd.0: Device attached
[  161.792406][T10199] vlan2: entered allmulticast mode
[  161.800732][T10199] hsr0: entered allmulticast mode
[  161.805791][T10199] hsr_slave_0: entered allmulticast mode
[  161.811434][T10199] hsr_slave_1: entered allmulticast mode
[  161.817429][   T29] kauditd_printk_skb: 362 callbacks suppressed
[  161.817441][   T29] audit: type=1326 audit(1763675449.559:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff4b436e3aa code=0x7ffc0000
[  161.820517][T10203] vhci_hcd: connection closed
[  161.823624][   T29] audit: type=1326 audit(1763675449.559:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  161.875966][   T29] audit: type=1326 audit(1763675449.559:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  161.899614][   T29] audit: type=1326 audit(1763675449.559:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  161.905505][   T12] vhci_hcd: stop threads
[  161.923537][   T29] audit: type=1326 audit(1763675449.559:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4b436f783 code=0x7ffc0000
[  161.927864][   T12] vhci_hcd: release socket
[  161.927880][   T12] vhci_hcd: disconnect device
[  161.951372][   T29] audit: type=1326 audit(1763675449.569:10219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4b436f783 code=0x7ffc0000
[  161.983819][   T29] audit: type=1326 audit(1763675449.569:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  162.007444][   T29] audit: type=1326 audit(1763675449.569:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  162.031186][   T29] audit: type=1326 audit(1763675449.569:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  162.054768][   T29] audit: type=1326 audit(1763675449.569:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10201 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b436f749 code=0x7ffc0000
[  162.141110][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.227292][T10218] SELinux: failed to load policy
[  162.248482][T10221] loop2: detected capacity change from 0 to 1024
[  162.274492][T10221] EXT4-fs: Ignoring removed orlov option
[  162.298150][T10228] loop5: detected capacity change from 0 to 764
[  162.306909][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.330220][T10228] 9pnet: Could not find request transport: r
[  162.504290][T10238] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.537407][T10239] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  162.611031][T10239] SELinux: failed to load policy
[  162.618917][T10221] __nla_validate_parse: 12 callbacks suppressed
[  162.618999][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'.
[  162.686621][T10231] loop3: detected capacity change from 0 to 512
[  162.705329][T10231] EXT4-fs: Ignoring removed i_version option
[  162.711398][T10231] EXT4-fs: Ignoring removed bh option
[  162.739118][T10252] loop5: detected capacity change from 0 to 764
[  162.749109][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.761695][T10231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.829837][T10231] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.843090][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2515'.
[  162.917108][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.927920][T10266] loop5: detected capacity change from 0 to 764
[  162.995750][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'.
[  163.055987][T10278] v: renamed from ip6_vti0 (while UP)
[  163.071300][T10278] vlan2: entered allmulticast mode
[  163.076517][T10278] hsr0: entered allmulticast mode
[  163.081801][T10278] hsr_slave_0: entered allmulticast mode
[  163.087662][T10278] hsr_slave_1: entered allmulticast mode
[  163.104876][T10283] SELinux: failed to load policy
[  163.145013][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'.
[  163.174059][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'.
[  163.220678][T10295] netlink: 'syz.1.2531': attribute type 6 has an invalid length.
[  163.226517][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.239095][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.245699][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2532'.
[  163.402873][T10309] SELinux: failed to load policy
[  163.475745][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2540'.
[  163.489751][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'.
[  163.539663][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2544'.
[  163.733663][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'.
[  163.775002][T10333] loop2: detected capacity change from 0 to 1024
[  163.782931][T10333] EXT4-fs: Ignoring removed orlov option
[  163.801665][T10333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.870809][T10347] loop5: detected capacity change from 0 to 764
[  163.892363][T10348] xt_CT: You must specify a L4 protocol and not use inversions on it
[  163.908089][T10347] 9pnet: Could not find request transport: r
[  164.023171][T10347] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  164.033703][T10347] SELinux: failed to load policy
[  164.085503][T10363] loop5: detected capacity change from 0 to 764
[  164.113847][T10363] rock: directory entry would overflow storage
[  164.120044][T10363] rock: sig=0x4f50, size=4, remaining=3
[  164.125733][T10363] iso9660: Corrupted directory entry in block 6 of inode 1792
[  164.163433][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.386968][T10392] loop1: detected capacity change from 0 to 512
[  164.412291][T10392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  164.437469][T10392] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2573: invalid indirect mapped block 4294967295 (level 0)
[  164.457625][T10396] xt_CT: You must specify a L4 protocol and not use inversions on it
[  164.476996][T10392] EXT4-fs (loop1): Remounting filesystem read-only
[  164.505664][T10392] EXT4-fs (loop1): 1 orphan inode deleted
[  164.511552][T10392] EXT4-fs (loop1): 1 truncate cleaned up
[  164.521727][T10392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.585178][T10387] loop5: detected capacity change from 0 to 512
[  164.602086][T10387] EXT4-fs: Ignoring removed i_version option
[  164.608138][T10387] EXT4-fs: Ignoring removed bh option
[  164.639414][T10387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.664234][T10387] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.869213][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.941986][T10404] loop3: detected capacity change from 0 to 764
[  164.967706][T10404] rock: directory entry would overflow storage
[  164.973917][T10404] rock: sig=0x4f50, size=4, remaining=3
[  164.979492][T10404] iso9660: Corrupted directory entry in block 6 of inode 1792
[  165.184738][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.250185][T10417] loop1: detected capacity change from 0 to 764
[  165.313153][T10422] loop5: detected capacity change from 0 to 1024
[  165.348617][T10426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  165.349892][T10422] EXT4-fs: Ignoring removed orlov option
[  165.355155][T10426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  165.355255][T10426] vhci_hcd vhci_hcd.0: Device attached
[  165.421848][T10422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.424246][T10427] vhci_hcd: connection closed
[  165.447084][  T297] vhci_hcd: stop threads
[  165.456099][  T297] vhci_hcd: release socket
[  165.460527][  T297] vhci_hcd: disconnect device
[  165.605225][T10442] xt_CT: You must specify a L4 protocol and not use inversions on it
[  165.754457][T10446] loop2: detected capacity change from 0 to 764
[  165.767248][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.783144][T10446] 9pnet: Could not find request transport: r
[  165.831836][T10450] loop5: detected capacity change from 0 to 1024
[  165.859602][T10450] EXT4-fs: Ignoring removed orlov option
[  165.878304][T10450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.891641][T10446] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  165.902034][T10446] SELinux: failed to load policy
[  165.990799][T10461] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.007072][T10437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  166.013686][T10437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  166.021309][T10437] vhci_hcd vhci_hcd.0: Device attached
[  166.106059][T10437] loop1: detected capacity change from 0 to 512
[  166.120411][T10437] EXT4-fs: Ignoring removed i_version option
[  166.126535][T10437] EXT4-fs: Ignoring removed bh option
[  166.126612][T10467] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  166.138399][T10467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  166.145904][T10467] vhci_hcd vhci_hcd.0: Device attached
[  166.188411][T10437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.211521][T10469] vhci_hcd: connection closed
[  166.211905][   T12] vhci_hcd: stop threads
[  166.221066][   T12] vhci_hcd: release socket
[  166.225480][   T12] vhci_hcd: disconnect device
[  166.234041][T10437] ext4 filesystem being mounted at /487/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.274504][ T3407] usb 3-1: new high-speed USB device number 5 using vhci_hcd
[  166.360153][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.385694][T10462] vhci_hcd: connection reset by peer
[  166.403857][   T31] vhci_hcd: stop threads
[  166.408212][   T31] vhci_hcd: release socket
[  166.412665][   T31] vhci_hcd: disconnect device
[  166.500024][T10487] 9pnet: Could not find request transport: r
[  166.508207][T10493] loop3: detected capacity change from 0 to 1024
[  166.519797][T10493] EXT4-fs: inline encryption not supported
[  166.525844][T10493] EXT4-fs: Ignoring removed nobh option
[  166.531511][T10493] EXT4-fs: Ignoring removed bh option
[  166.548204][T10493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.592158][T10505] netlink: 'syz.0.2610': attribute type 12 has an invalid length.
[  166.644915][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.793032][T10525] 9pnet: Could not find request transport: r
[  166.829600][T10534] netlink: 'syz.2.2622': attribute type 12 has an invalid length.
[  166.838778][T10532] loop3: detected capacity change from 0 to 764
[  166.904754][   T29] kauditd_printk_skb: 391 callbacks suppressed
[  166.904767][   T29] audit: type=1326 audit(1763675454.924:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  166.941469][   T29] audit: type=1326 audit(1763675454.955:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  166.942220][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.965096][   T29] audit: type=1326 audit(1763675454.966:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  166.997620][   T29] audit: type=1326 audit(1763675454.966:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  167.021252][   T29] audit: type=1326 audit(1763675454.966:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  167.044892][   T29] audit: type=1326 audit(1763675454.966:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  167.068528][   T29] audit: type=1326 audit(1763675454.966:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33193f749 code=0x7ffc0000
[  167.125561][T10555] loop3: detected capacity change from 0 to 764
[  167.132003][T10543] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  167.138509][T10543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  167.146096][T10543] vhci_hcd vhci_hcd.0: Device attached
[  167.154270][   T29] audit: type=1326 audit(1763675454.997:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee40f749 code=0x7ffc0000
[  167.154589][T10554] vhci_hcd: connection closed
[  167.177963][   T29] audit: type=1326 audit(1763675454.997:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ee40f749 code=0x7ffc0000
[  167.206226][   T29] audit: type=1326 audit(1763675454.997:10624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f37ee40f749 code=0x7ffc0000
[  167.243432][  T146] vhci_hcd: stop threads
[  167.246963][T10555] rock: directory entry would overflow storage
[  167.247704][  T146] vhci_hcd: release socket
[  167.253848][T10555] rock: sig=0x4f50, size=4, remaining=3
[  167.258240][  T146] vhci_hcd: disconnect device
[  167.268541][T10555] iso9660: Corrupted directory entry in block 6 of inode 1792
[  167.285504][T10558] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.342003][T10565] loop3: detected capacity change from 0 to 764
[  167.388744][T10565] 9pnet: Could not find request transport: r
[  167.418360][T10569] __nla_validate_parse: 17 callbacks suppressed
[  167.418373][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'.
[  167.448181][T10565] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  167.476337][T10565] SELinux: failed to load policy
[  167.598293][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'.
[  167.701749][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2647'.
[  167.717821][T10601] loop2: detected capacity change from 0 to 764
[  167.757419][T10601] 9pnet: Could not find request transport: r
[  167.825553][T10610] loop1: detected capacity change from 0 to 512
[  167.834831][T10610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  167.863220][T10601] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  167.873857][T10610] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2651: invalid indirect mapped block 4294967295 (level 0)
[  167.888215][T10601] SELinux: failed to load policy
[  167.895159][T10612] SELinux: failed to load policy
[  167.905205][T10610] EXT4-fs (loop1): Remounting filesystem read-only
[  167.913972][T10610] EXT4-fs (loop1): 1 orphan inode deleted
[  167.919722][T10610] EXT4-fs (loop1): 1 truncate cleaned up
[  167.932426][T10610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.012422][T10627] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  168.018959][T10627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  168.026614][T10627] vhci_hcd vhci_hcd.0: Device attached
[  168.039803][T10628] vhci_hcd: connection closed
[  168.040164][   T42] vhci_hcd: stop threads
[  168.049149][   T42] vhci_hcd: release socket
[  168.053556][   T42] vhci_hcd: disconnect device
[  168.149627][T10641] loop5: detected capacity change from 0 to 764
[  168.176090][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'.
[  168.227915][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.237515][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.256108][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2668'.
[  168.491775][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.500384][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.605165][T10663] loop3: detected capacity change from 0 to 764
[  168.631786][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.646529][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'.
[  168.769416][T10675] loop2: detected capacity change from 0 to 1024
[  168.778632][T10675] EXT4-fs: inline encryption not supported
[  168.785493][T10675] EXT4-fs: Ignoring removed nobh option
[  168.791114][T10675] EXT4-fs: Ignoring removed bh option
[  168.808782][T10675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.894327][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.916748][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'.
[  169.052926][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'.
[  169.076222][T10695] loop1: detected capacity change from 0 to 1024
[  169.087272][T10695] EXT4-fs: Ignoring removed orlov option
[  169.115481][T10695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.191946][T10695] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.211245][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'.
[  169.216611][T10715] loop2: detected capacity change from 0 to 764
[  169.242416][T10715] rock: directory entry would overflow storage
[  169.248730][T10715] rock: sig=0x4f50, size=4, remaining=3
[  169.254283][T10715] iso9660: Corrupted directory entry in block 6 of inode 1792
[  169.279759][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.327661][T10717] loop5: detected capacity change from 0 to 4096
[  169.347247][T10725] netlink: 'syz.0.2702': attribute type 12 has an invalid length.
[  169.361638][T10723] loop2: detected capacity change from 0 to 512
[  169.374806][T10717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.394968][T10723] EXT4-fs: Ignoring removed i_version option
[  169.401048][T10723] EXT4-fs: Ignoring removed bh option
[  169.406410][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2704'.
[  169.446845][T10723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.474431][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.476167][T10723] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.558492][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.761387][T10772] SELinux: failed to load policy
[  170.025122][T10801] SELinux: failed to load policy
[  170.166188][T10820] netlink: 'syz.2.2745': attribute type 12 has an invalid length.
[  170.232192][T10822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.538107][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.593108][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.670082][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.732553][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.863187][T10829] chnl_net:caif_netlink_parms(): no params data found
[  170.911622][   T42] bridge_slave_1: left allmulticast mode
[  170.917373][   T42] bridge_slave_1: left promiscuous mode
[  170.923173][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.930477][T10871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  170.937057][T10871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  170.944750][T10871] vhci_hcd vhci_hcd.0: Device attached
[  170.965374][   T42] bridge_slave_0: left allmulticast mode
[  170.971122][   T42] bridge_slave_0: left promiscuous mode
[  170.976828][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.016231][T10875] vhci_hcd: connection closed
[  171.016503][   T31] vhci_hcd: stop threads
[  171.025530][   T31] vhci_hcd: release socket
[  171.029983][   T31] vhci_hcd: disconnect device
[  171.178798][ T3407] vhci_hcd: vhci_device speed not set
[  171.485816][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.496438][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.511126][   T42] bond0 (unregistering): (slave macvlan1): Releasing backup interface
[  171.519874][   T42] veth1_vlan: left allmulticast mode
[  171.526178][   T42] bond0 (unregistering): Released all slaves
[  171.535901][   T42] bond1 (unregistering): Released all slaves
[  171.643715][T10829] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.650968][T10829] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.674605][T10920] loop1: detected capacity change from 0 to 1024
[  171.712067][T10920] EXT4-fs: Ignoring removed orlov option
[  171.717778][   T29] kauditd_printk_skb: 485 callbacks suppressed
[  171.717791][   T29] audit: type=1326 audit(1763675459.963:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2c5f1e3aa code=0x7ffc0000
[  171.747596][   T29] audit: type=1326 audit(1763675459.963:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2c5f1e3aa code=0x7ffc0000
[  171.770989][   T29] audit: type=1326 audit(1763675459.963:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe2c5f1de97 code=0x7ffc0000
[  171.777127][T10829] bridge_slave_0: entered allmulticast mode
[  171.794703][   T29] audit: type=1326 audit(1763675459.963:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe2c5f20eea code=0x7ffc0000
[  171.851302][T10829] bridge_slave_0: entered promiscuous mode
[  171.857443][T10927] loop3: detected capacity change from 0 to 2048
[  171.864230][T10927] EXT4-fs: Ignoring removed bh option
[  171.905086][T10920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.924532][   T42] hsr_slave_0: left promiscuous mode
[  171.924986][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.942759][   T42] hsr_slave_1: left promiscuous mode
[  171.948790][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.956425][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.969174][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.972926][T10920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  171.976648][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.977163][   T29] audit: type=1326 audit(1763675460.236:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c5f1df90 code=0x7ffc0000
[  172.015605][   T29] audit: type=1326 audit(1763675460.236:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe2c5f1e497 code=0x7ffc0000
[  172.039587][   T29] audit: type=1326 audit(1763675460.236:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c5f1df90 code=0x7ffc0000
[  172.063685][   T29] audit: type=1326 audit(1763675460.236:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c5f1f749 code=0x7ffc0000
[  172.087387][   T29] audit: type=1326 audit(1763675460.236:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c5f1f749 code=0x7ffc0000
[  172.111116][   T29] audit: type=1326 audit(1763675460.236:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c5f1f749 code=0x7ffc0000
[  172.137679][   T42] veth1_macvtap: left promiscuous mode
[  172.143275][   T42] veth0_macvtap: left promiscuous mode
[  172.148752][   T42] veth1_vlan: left promiscuous mode
[  172.154065][   T42] veth0_vlan: left promiscuous mode
[  172.201922][T10946] loop5: detected capacity change from 0 to 1024
[  172.223918][T10946] EXT4-fs: Ignoring removed orlov option
[  172.235292][   T42] team0 (unregistering): Port device team_slave_1 removed
[  172.246659][T10946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.259551][   T42] team0 (unregistering): Port device team_slave_0 removed
[  172.267480][  T297] smc: removing ib device syz!
[  172.298439][T10829] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.305556][T10829] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.313002][T10829] bridge_slave_1: entered allmulticast mode
[  172.319508][T10829] bridge_slave_1: entered promiscuous mode
[  172.356497][T10829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.371248][T10829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.393900][T10949] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.417661][T10829] team0: Port device team_slave_0 added
[  172.428690][T10949] __nla_validate_parse: 11 callbacks suppressed
[  172.428703][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2776'.
[  172.435520][T10829] team0: Port device team_slave_1 added
[  172.465135][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.495114][T10829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.502069][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.528015][T10829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.594975][T10829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.602027][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.628067][T10829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.685726][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.715774][T10829] hsr_slave_0: entered promiscuous mode
[  172.721898][T10829] hsr_slave_1: entered promiscuous mode
[  172.752865][T10829] debugfs: 'hsr0' already exists in 'hsr'
[  172.758636][T10829] Cannot create hsr debugfs directory
[  172.924680][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.240475][T10829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.280236][T10829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  173.310806][T10829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  173.329591][T10829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  173.344567][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'.
[  173.403166][T10829] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.415845][T11033] loop3: detected capacity change from 0 to 1024
[  173.427985][T11033] EXT4-fs: Ignoring removed orlov option
[  173.435086][T10829] 8021q: adding VLAN 0 to HW filter on device team0
[  173.443963][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'.
[  173.467714][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.474879][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.485022][T11033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.503098][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.510186][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.551844][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.561359][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.629108][T11061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.659533][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.677529][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'.
[  173.817939][T10829] veth0_vlan: entered promiscuous mode
[  173.830343][T10829] veth1_vlan: entered promiscuous mode
[  173.854392][T10829] veth0_macvtap: entered promiscuous mode
[  173.863792][T10829] veth1_macvtap: entered promiscuous mode
[  173.885543][T10829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.897283][T10829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.918835][  T146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.931158][  T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.953151][  T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.971286][  T146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.009823][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.025386][T11097] SELinux: failed to load policy
[  174.185718][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'.
[  174.225425][T11116] loop5: detected capacity change from 0 to 1024
[  174.246963][T11118] loop1: detected capacity change from 0 to 512
[  174.255418][T11118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  174.276517][T11116] EXT4-fs: Ignoring removed orlov option
[  174.283298][T11118] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2802: invalid indirect mapped block 4294967295 (level 0)
[  174.304086][T11118] EXT4-fs (loop1): Remounting filesystem read-only
[  174.317933][T11118] EXT4-fs (loop1): 1 orphan inode deleted
[  174.323732][T11118] EXT4-fs (loop1): 1 truncate cleaned up
[  174.361807][T11116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.375318][T11118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.457537][T11127] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.489666][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'.
[  174.849718][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.058679][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.079953][T11145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  175.086485][T11145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  175.094013][T11145] vhci_hcd vhci_hcd.0: Device attached
[  175.129803][T11146] vhci_hcd: connection closed
[  175.130044][   T42] vhci_hcd: stop threads
[  175.139081][   T42] vhci_hcd: release socket
[  175.143695][   T42] vhci_hcd: disconnect device
[  175.224419][T11155] loop1: detected capacity change from 0 to 764
[  175.368289][T11166] loop1: detected capacity change from 0 to 764
[  175.394787][T11166] 9pnet: Could not find request transport: r
[  175.500489][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2827'.
[  175.510559][T11166] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  175.521138][T11166] SELinux: failed to load policy
[  175.580438][T11187] loop3: detected capacity change from 0 to 2048
[  175.606066][T11187] EXT4-fs: Ignoring removed bh option
[  175.628188][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'.
[  175.660106][T11193] loop2: detected capacity change from 0 to 1024
[  175.671972][T11193] EXT4-fs: Ignoring removed orlov option
[  175.699453][T11187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.744322][T11193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.777712][T11198] SELinux: failed to load policy
[  175.794159][T11179] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  175.841607][T11179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  175.854293][T11179] EXT4-fs (loop3): This should not happen!! Data will be lost
[  175.854293][T11179] 
[  175.864042][T11179] EXT4-fs (loop3): Total free blocks count 0
[  175.870064][T11179] EXT4-fs (loop3): Free/Dirty block details
[  175.876090][T11179] EXT4-fs (loop3): free_blocks=2415919104
[  175.879843][T11206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.881801][T11179] EXT4-fs (loop3): dirty_blocks=16
[  175.895009][T11179] EXT4-fs (loop3): Block reservation details
[  175.900983][T11179] EXT4-fs (loop3): i_reserved_data_blocks=1
[  176.010526][T11211] loop1: detected capacity change from 0 to 764
[  176.029786][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.056751][T11211] rock: directory entry would overflow storage
[  176.062931][T11211] rock: sig=0x4f50, size=4, remaining=3
[  176.068535][T11211] iso9660: Corrupted directory entry in block 6 of inode 1792
[  176.162802][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2841'.
[  176.261445][T11225] loop1: detected capacity change from 0 to 2048
[  176.298815][T11225] EXT4-fs: Ignoring removed bh option
[  176.320173][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.356769][T11233] loop5: detected capacity change from 0 to 512
[  176.364134][T11233] EXT4-fs: Ignoring removed i_version option
[  176.370287][T11233] EXT4-fs: Ignoring removed bh option
[  176.390409][T11233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.404012][T11233] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.429938][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.559002][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.603648][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'.
[  176.639621][   T29] kauditd_printk_skb: 393 callbacks suppressed
[  176.639636][   T29] audit: type=1326 audit(1763675465.150:11513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.697723][   T29] audit: type=1326 audit(1763675465.150:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.721372][   T29] audit: type=1326 audit(1763675465.150:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.745108][   T29] audit: type=1326 audit(1763675465.150:11516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.768936][   T29] audit: type=1326 audit(1763675465.150:11517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.792992][   T29] audit: type=1326 audit(1763675465.150:11518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.816664][   T29] audit: type=1326 audit(1763675465.150:11519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.840647][   T29] audit: type=1326 audit(1763675465.150:11520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.864797][   T29] audit: type=1326 audit(1763675465.150:11521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.888636][   T29] audit: type=1326 audit(1763675465.150:11522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.5.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  176.980505][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.992446][T11266] SELinux: failed to load policy
[  177.034901][T11272] loop1: detected capacity change from 0 to 512
[  177.049985][T11272] EXT4-fs: Ignoring removed i_version option
[  177.056865][T11272] EXT4-fs: Ignoring removed bh option
[  177.078681][T11277] netlink: 'syz.0.2864': attribute type 12 has an invalid length.
[  177.087793][T11279] loop5: detected capacity change from 0 to 1024
[  177.116397][T11279] EXT4-fs: Ignoring removed orlov option
[  177.140689][T11273] loop3: detected capacity change from 0 to 2048
[  177.152471][T11273] EXT4-fs: Ignoring removed bh option
[  177.180988][T11272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.195551][T11279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.217117][T11272] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.218444][T11273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.283238][T11279] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.324098][T11299] __nla_validate_parse: 4 callbacks suppressed
[  177.324113][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  177.355256][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2866'.
[  177.411066][T11303] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2874'.
[  177.421545][T11262] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  177.449772][T11262] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  177.461976][T11262] EXT4-fs (loop3): This should not happen!! Data will be lost
[  177.461976][T11262] 
[  177.471663][T11262] EXT4-fs (loop3): Total free blocks count 0
[  177.477673][T11262] EXT4-fs (loop3): Free/Dirty block details
[  177.483565][T11262] EXT4-fs (loop3): free_blocks=2415919104
[  177.489318][T11262] EXT4-fs (loop3): dirty_blocks=16
[  177.494511][T11262] EXT4-fs (loop3): Block reservation details
[  177.500615][T11262] EXT4-fs (loop3): i_reserved_data_blocks=1
[  177.593070][T11307] SELinux: failed to load policy
[  177.695890][T11315] loop5: detected capacity change from 0 to 764
[  177.831983][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2882'.
[  178.024755][T11328] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2885'.
[  178.045305][T11329] loop5: detected capacity change from 0 to 2048
[  178.058809][T11329] EXT4-fs: Ignoring removed bh option
[  178.103814][T11326] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  178.119217][T11326] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  178.131504][T11326] EXT4-fs (loop5): This should not happen!! Data will be lost
[  178.131504][T11326] 
[  178.141248][T11326] EXT4-fs (loop5): Total free blocks count 0
[  178.147233][T11326] EXT4-fs (loop5): Free/Dirty block details
[  178.153236][T11326] EXT4-fs (loop5): free_blocks=2415919104
[  178.158946][T11326] EXT4-fs (loop5): dirty_blocks=16
[  178.164077][T11326] EXT4-fs (loop5): Block reservation details
[  178.170213][T11326] EXT4-fs (loop5): i_reserved_data_blocks=1
[  178.202464][T11335] loop2: detected capacity change from 0 to 2048
[  178.209333][T11335] EXT4-fs: Ignoring removed bh option
[  178.251546][T11335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  178.272856][T11335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  178.285234][T11335] EXT4-fs (loop2): This should not happen!! Data will be lost
[  178.285234][T11335] 
[  178.295051][T11335] EXT4-fs (loop2): Total free blocks count 0
[  178.301059][T11335] EXT4-fs (loop2): Free/Dirty block details
[  178.306975][T11335] EXT4-fs (loop2): free_blocks=2415919104
[  178.312956][T11335] EXT4-fs (loop2): dirty_blocks=16
[  178.318153][T11335] EXT4-fs (loop2): Block reservation details
[  178.324331][T11335] EXT4-fs (loop2): i_reserved_data_blocks=1
[  178.327569][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'.
[  178.419914][T11357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  178.426484][T11357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  178.433997][T11357] vhci_hcd vhci_hcd.0: Device attached
[  178.454006][T11364] loop3: detected capacity change from 0 to 1024
[  178.468573][T11364] EXT4-fs: inline encryption not supported
[  178.488552][T11364] EXT4-fs: Ignoring removed nobh option
[  178.494236][T11364] EXT4-fs: Ignoring removed bh option
[  178.665079][ T1049] usb 3-1: new low-speed USB device number 6 using vhci_hcd
[  178.769587][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'.
[  178.797095][T11386] tipc: Started in network mode
[  178.802015][T11386] tipc: Node identity a673a59157a9, cluster identity 4711
[  178.809769][T11386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.817876][T11386] tipc: Disabling bearer <eth:syzkaller0>
[  178.952378][T11396] loop2: detected capacity change from 0 to 1024
[  178.952378][T11394] loop5: detected capacity change from 0 to 764
[  178.965612][T11396] EXT4-fs: inline encryption not supported
[  178.971673][T11396] EXT4-fs: Ignoring removed nobh option
[  178.977273][T11396] EXT4-fs: Ignoring removed bh option
[  179.052965][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2914'.
[  179.062009][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'.
[  179.092240][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'.
[  179.183830][T11361] vhci_hcd: connection reset by peer
[  179.192645][  T297] vhci_hcd: stop threads
[  179.196941][  T297] vhci_hcd: release socket
[  179.201570][  T297] vhci_hcd: disconnect device
[  179.333466][T11428] x_tables: duplicate underflow at hook 1
[  179.761996][T11457] loop1: detected capacity change from 0 to 764
[  180.102976][T11467] loop1: detected capacity change from 0 to 764
[  180.140733][T11467] 9pnet: Could not find request transport: r
[  180.247546][T11467] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  180.257935][T11467] SELinux: failed to load policy
[  180.364128][T11480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  180.370669][T11480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  180.378287][T11480] vhci_hcd vhci_hcd.0: Device attached
[  180.483434][T11484] loop3: detected capacity change from 0 to 512
[  180.496696][T11484] EXT4-fs: Ignoring removed i_version option
[  180.502731][T11484] EXT4-fs: Ignoring removed bh option
[  180.534094][T11484] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.608488][ T3427] usb 5-1: new low-speed USB device number 9 using vhci_hcd
[  180.889353][  T297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.907826][T11492] chnl_net:caif_netlink_parms(): no params data found
[  180.950269][  T297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.002482][T11492] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.009688][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.017091][T11492] bridge_slave_0: entered allmulticast mode
[  181.023857][T11492] bridge_slave_0: entered promiscuous mode
[  181.039239][  T297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.050900][T11492] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.058123][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.065359][T11492] bridge_slave_1: entered allmulticast mode
[  181.072126][T11492] bridge_slave_1: entered promiscuous mode
[  181.118577][  T297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.141680][T11517] loop1: detected capacity change from 0 to 2048
[  181.148576][T11517] EXT4-fs: Ignoring removed bh option
[  181.153362][T11481] vhci_hcd: connection reset by peer
[  181.159924][ T9324] vhci_hcd: stop threads
[  181.164245][ T9324] vhci_hcd: release socket
[  181.168655][ T9324] vhci_hcd: disconnect device
[  181.174017][T11518] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  181.191166][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.205329][T11517] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  181.211389][T11515] bond1: entered promiscuous mode
[  181.220348][T11517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  181.225312][T11515] bond1: entered allmulticast mode
[  181.237433][T11517] EXT4-fs (loop1): This should not happen!! Data will be lost
[  181.237433][T11517] 
[  181.252278][T11517] EXT4-fs (loop1): Total free blocks count 0
[  181.258378][T11517] EXT4-fs (loop1): Free/Dirty block details
[  181.258717][T11515] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.264259][T11517] EXT4-fs (loop1): free_blocks=2415919104
[  181.264293][T11517] EXT4-fs (loop1): dirty_blocks=16
[  181.281861][T11517] EXT4-fs (loop1): Block reservation details
[  181.287878][T11517] EXT4-fs (loop1): i_reserved_data_blocks=1
[  181.304642][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.384222][T11492] team0: Port device team_slave_0 added
[  181.398716][  T297] bridge_slave_1: left allmulticast mode
[  181.404597][  T297] bridge_slave_1: left promiscuous mode
[  181.410475][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.427746][  T297] bridge_slave_0: left allmulticast mode
[  181.433414][  T297] bridge_slave_0: left promiscuous mode
[  181.439147][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.595709][T11528] loop5: detected capacity change from 0 to 512
[  181.602427][T11528] EXT4-fs: Ignoring removed i_version option
[  181.608555][T11528] EXT4-fs: Ignoring removed bh option
[  181.619864][T11528] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.743477][  T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.753088][  T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.762535][  T297] bond0 (unregistering): Released all slaves
[  181.771279][  T297] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  181.779671][  T297] wireguard0: left promiscuous mode
[  181.785610][  T297] bond1 (unregistering): Released all slaves
[  181.794169][T11492] team0: Port device team_slave_1 added
[  181.815592][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.822691][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.848646][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.862204][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.869277][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.895431][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.906734][  T297] tipc: Left network mode
[  181.962179][T11492] hsr_slave_0: entered promiscuous mode
[  181.968690][T11492] hsr_slave_1: entered promiscuous mode
[  181.983583][T11492] debugfs: 'hsr0' already exists in 'hsr'
[  181.989365][T11492] Cannot create hsr debugfs directory
[  182.036787][  T297] hsr_slave_0: left promiscuous mode
[  182.044252][  T297] hsr_slave_1: left promiscuous mode
[  182.050208][  T297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.057679][  T297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.074980][  T297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.082586][  T297] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.102967][T11560] loop2: detected capacity change from 0 to 1024
[  182.103595][  T297] veth1_macvtap: left promiscuous mode
[  182.110356][T11560] EXT4-fs: inline encryption not supported
[  182.121313][T11560] EXT4-fs: Ignoring removed nobh option
[  182.126938][T11560] EXT4-fs: Ignoring removed bh option
[  182.127101][  T297] veth0_macvtap: left promiscuous mode
[  182.137939][  T297] veth1_vlan: left promiscuous mode
[  182.143401][  T297] veth0_vlan: left promiscuous mode
[  182.320359][   T29] kauditd_printk_skb: 252 callbacks suppressed
[  182.320374][   T29] audit: type=1326 audit(1763675471.103:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.351481][   T29] audit: type=1326 audit(1763675471.103:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.375157][   T29] audit: type=1326 audit(1763675471.103:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.399112][   T29] audit: type=1326 audit(1763675471.103:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.422772][   T29] audit: type=1326 audit(1763675471.103:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.446381][   T29] audit: type=1326 audit(1763675471.103:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.469933][   T29] audit: type=1326 audit(1763675471.103:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.493573][   T29] audit: type=1326 audit(1763675471.103:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.517223][   T29] audit: type=1326 audit(1763675471.103:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.540882][   T29] audit: type=1326 audit(1763675471.103:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7600f749 code=0x7ffc0000
[  182.564834][T11577] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  182.571379][T11577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.578927][T11577] vhci_hcd vhci_hcd.0: Device attached
[  182.584087][T11589] loop5: detected capacity change from 0 to 512
[  182.590952][T11589] EXT4-fs: Ignoring removed i_version option
[  182.597010][T11589] EXT4-fs: Ignoring removed bh option
[  182.632027][T11589] ext4 filesystem being mounted at /533/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.745384][T11492] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  182.757564][T11492] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  182.768537][T11492] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  182.793666][T11492] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  182.888739][T11492] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.914961][T11630] __nla_validate_parse: 7 callbacks suppressed
[  182.914978][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'.
[  182.943759][T11492] 8021q: adding VLAN 0 to HW filter on device team0
[  182.966470][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.973556][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.013961][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.021239][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.107289][T11583] vhci_hcd: connection closed
[  183.107499][  T297] vhci_hcd: stop threads
[  183.116576][  T297] vhci_hcd: release socket
[  183.120992][  T297] vhci_hcd: disconnect device
[  183.159560][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.456181][ T1049] usb 3-1: enqueue for inactive port 0
[  183.458278][T11492] veth0_vlan: entered promiscuous mode
[  183.469545][T11492] veth1_vlan: entered promiscuous mode
[  183.476391][ T1049] usb 3-1: enqueue for inactive port 0
[  183.552064][ T1049] vhci_hcd: vhci_device speed not set
[  183.561177][T11492] veth0_macvtap: entered promiscuous mode
[  183.589444][T11492] veth1_macvtap: entered promiscuous mode
[  183.625419][T11492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.654353][T11672] loop2: detected capacity change from 0 to 512
[  183.654702][T11492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.666937][T11672] EXT4-fs: Ignoring removed i_version option
[  183.673913][T11672] EXT4-fs: Ignoring removed bh option
[  183.692896][   T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.711949][   T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.728512][T11672] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.734833][   T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.780106][   T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.980711][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2980'.
[  184.035397][T11685] SELinux: failed to load policy
[  184.099153][T11690] loop5: detected capacity change from 0 to 764
[  184.209792][T11699] loop5: detected capacity change from 0 to 512
[  184.217288][T11699] EXT4-fs: Ignoring removed i_version option
[  184.224321][T11699] EXT4-fs: Ignoring removed bh option
[  184.276908][T11699] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.560161][   T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.649249][   T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.734489][   T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.764659][T11725] loop2: detected capacity change from 0 to 512
[  184.781198][T11725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  184.804460][   T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.831311][T11708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  184.842290][T11708] block device autoloading is deprecated and will be removed.
[  184.861663][T11725] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2993: invalid indirect mapped block 4294967295 (level 0)
[  184.907879][T11704] chnl_net:caif_netlink_parms(): no params data found
[  184.923582][T11725] EXT4-fs (loop2): Remounting filesystem read-only
[  184.962449][T11725] EXT4-fs (loop2): 1 orphan inode deleted
[  184.968199][T11725] EXT4-fs (loop2): 1 truncate cleaned up
[  185.002119][   T42] bridge_slave_1: left allmulticast mode
[  185.007822][   T42] bridge_slave_1: left promiscuous mode
[  185.013646][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.064943][   T42] bridge_slave_0: left allmulticast mode
[  185.070692][   T42] bridge_slave_0: left promiscuous mode
[  185.076453][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.084208][T11742] loop5: detected capacity change from 0 to 512
[  185.097629][T11742] EXT4-fs: Ignoring removed i_version option
[  185.103748][T11742] EXT4-fs: Ignoring removed bh option
[  185.127822][T11742] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.275483][T11762] loop5: detected capacity change from 0 to 512
[  185.298554][T11762] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  185.356002][T11762] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3000: invalid indirect mapped block 4294967295 (level 0)
[  185.370868][T11762] EXT4-fs (loop5): Remounting filesystem read-only
[  185.388239][T11762] EXT4-fs (loop5): 1 orphan inode deleted
[  185.394039][T11762] EXT4-fs (loop5): 1 truncate cleaned up
[  185.431021][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.437829][ T3427] usb 5-1: enqueue for inactive port 0
[  185.440339][  T297] smc: removing ib device syz1
[  185.445010][ T3427] usb 5-1: enqueue for inactive port 0
[  185.457260][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.467438][   T42] bond0 (unregistering): Released all slaves
[  185.475646][   T42] bond1 (unregistering): Released all slaves
[  185.522812][ T3427] vhci_hcd: vhci_device speed not set
[  185.552502][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'.
[  185.595997][T11704] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.603165][T11704] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.610990][T11704] bridge_slave_0: entered allmulticast mode
[  185.617752][T11704] bridge_slave_0: entered promiscuous mode
[  185.632099][T11704] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.639235][T11704] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.647121][T11704] bridge_slave_1: entered allmulticast mode
[  185.658398][T11704] bridge_slave_1: entered promiscuous mode
[  185.696730][T11781] loop1: detected capacity change from 0 to 764
[  185.722275][T11781] 9pnet: Could not find request transport: r
[  185.744123][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.773156][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.810632][T11704] team0: Port device team_slave_0 added
[  185.817353][T11704] team0: Port device team_slave_1 added
[  185.836212][T11781] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  185.847465][T11781] SELinux: failed to load policy
[  185.860377][   T42] hsr_slave_0: left promiscuous mode
[  185.866900][   T42] hsr_slave_1: left promiscuous mode
[  185.874828][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.882283][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.890309][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.891171][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.897940][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.907488][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.924626][   T42] veth1_macvtap: left promiscuous mode
[  185.930369][   T42] veth0_macvtap: left promiscuous mode
[  185.936514][   T42] veth1_vlan: left promiscuous mode
[  185.941877][   T42] veth0_vlan: left promiscuous mode
[  185.998596][   T42] team0 (unregistering): Port device team_slave_1 removed
[  186.008170][   T42] team0 (unregistering): Port device team_slave_0 removed
[  186.038749][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.045720][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.072160][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.086766][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.093778][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.112961][T11803] loop5: detected capacity change from 0 to 512
[  186.119754][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.128929][T11803] EXT4-fs: Ignoring removed i_version option
[  186.142499][T11803] EXT4-fs: Ignoring removed bh option
[  186.162733][T11803] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.162742][T11704] hsr_slave_0: entered promiscuous mode
[  186.179827][T11704] hsr_slave_1: entered promiscuous mode
[  186.185881][T11704] debugfs: 'hsr0' already exists in 'hsr'
[  186.191649][T11704] Cannot create hsr debugfs directory
[  186.538600][T11834] loop2: detected capacity change from 0 to 1024
[  186.558137][T11836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.561437][T11834] EXT4-fs: Ignoring removed orlov option
[  186.585302][T11836] tipc: Disabling bearer <eth:syzkaller0>
[  186.604584][T11704] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  186.624626][T11704] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  186.638503][T11704] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  186.684958][T11704] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  186.701037][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3015'.
[  186.727421][T11854] loop1: detected capacity change from 0 to 764
[  186.766159][T11860] xt_CT: You must specify a L4 protocol and not use inversions on it
[  186.844617][T11854] 9pnet: Could not find request transport: r
[  186.895769][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3017'.
[  186.902744][T11704] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.928780][T11704] 8021q: adding VLAN 0 to HW filter on device team0
[  186.959913][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.967056][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.975617][T11854] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  186.987022][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3018'.
[  186.990594][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.003280][ T9321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.012349][T11854] SELinux: failed to load policy
[  187.058852][T11704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.069336][T11704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.271048][   T29] kauditd_printk_skb: 442 callbacks suppressed
[  187.271064][   T29] audit: type=1326 audit(1763675476.279:12227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.300999][   T29] audit: type=1326 audit(1763675476.279:12228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.324626][   T29] audit: type=1326 audit(1763675476.279:12229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.348306][   T29] audit: type=1326 audit(1763675476.279:12230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.372357][   T29] audit: type=1326 audit(1763675476.279:12231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.396082][   T29] audit: type=1326 audit(1763675476.279:12232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.420357][   T29] audit: type=1326 audit(1763675476.279:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.444418][   T29] audit: type=1326 audit(1763675476.279:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.461056][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.468014][   T29] audit: type=1326 audit(1763675476.279:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.499186][   T29] audit: type=1326 audit(1763675476.279:12236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8c97df749 code=0x7ffc0000
[  187.556595][T11913] SELinux: failed to load policy
[  187.580511][T10829] EXT4-fs unmount: 34 callbacks suppressed
[  187.580527][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.599757][T11921] loop1: detected capacity change from 0 to 1024
[  187.609067][T11921] EXT4-fs: inline encryption not supported
[  187.615036][T11921] EXT4-fs: Ignoring removed nobh option
[  187.620721][T11921] EXT4-fs: Ignoring removed bh option
[  187.647915][T11921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.714671][T11704] veth0_vlan: entered promiscuous mode
[  187.720639][T11936] loop5: detected capacity change from 0 to 1024
[  187.735013][T11704] veth1_vlan: entered promiscuous mode
[  187.735240][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.741418][T11936] EXT4-fs: Ignoring removed orlov option
[  187.783206][T11936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.809233][T11704] veth0_macvtap: entered promiscuous mode
[  187.819084][T11704] veth1_macvtap: entered promiscuous mode
[  187.840034][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'.
[  187.851696][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.863154][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.887906][  T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.918311][ T9321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.956962][ T9321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.988656][ T9321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.023020][T11946] tipc: Started in network mode
[  188.028315][T11946] tipc: Node identity 168c234cb2cb, cluster identity 4711
[  188.036090][T11946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.052598][T11946] syzkaller0: entered promiscuous mode
[  188.058130][T11946] syzkaller0: entered allmulticast mode
[  188.064655][T11949] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.104813][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3026'.
[  188.126073][T11946] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  188.154461][T11946] tipc: Resetting bearer <eth:syzkaller0>
[  188.197100][T11944] tipc: Resetting bearer <eth:syzkaller0>
[  188.204491][T11944] tipc: Disabling bearer <eth:syzkaller0>
[  188.520537][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.550341][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'.
[  188.604923][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.613551][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.684721][T11977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.692767][T11977] tipc: Disabling bearer <eth:syzkaller0>
[  188.722753][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.731928][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.756069][T11979] loop5: detected capacity change from 0 to 512
[  188.768857][T11979] EXT4-fs: Ignoring removed i_version option
[  188.774958][T11979] EXT4-fs: Ignoring removed bh option
[  188.792094][T11979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.806940][T11979] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.835663][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.947618][T11985] SELinux: failed to load policy
[  188.998778][T11995] FAULT_INJECTION: forcing a failure.
[  188.998778][T11995] name failslab, interval 1, probability 0, space 0, times 0
[  189.011579][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.3.3049 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  189.011607][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  189.011622][T11995] Call Trace:
[  189.011632][T11995]  <TASK>
[  189.011639][T11995]  __dump_stack+0x1d/0x30
[  189.011675][T11995]  dump_stack_lvl+0xe8/0x140
[  189.011695][T11995]  dump_stack+0x15/0x1b
[  189.011712][T11995]  should_fail_ex+0x265/0x280
[  189.011745][T11995]  should_failslab+0x8c/0xb0
[  189.011776][T11995]  kmem_cache_alloc_noprof+0x50/0x480
[  189.011804][T11995]  ? skb_clone+0x151/0x1f0
[  189.011913][T11995]  skb_clone+0x151/0x1f0
[  189.011931][T11995]  __netlink_deliver_tap+0x2c9/0x500
[  189.011954][T11995]  netlink_unicast+0x66b/0x690
[  189.011990][T11995]  netlink_sendmsg+0x58b/0x6b0
[  189.012009][T11995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.012054][T11995]  __sock_sendmsg+0x145/0x180
[  189.012141][T11995]  ____sys_sendmsg+0x31e/0x4e0
[  189.012163][T11995]  ___sys_sendmsg+0x17b/0x1d0
[  189.012188][T11995]  __x64_sys_sendmsg+0xd4/0x160
[  189.012209][T11995]  x64_sys_call+0x191e/0x3000
[  189.012232][T11995]  do_syscall_64+0xd2/0x200
[  189.012289][T11995]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  189.012315][T11995]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  189.012408][T11995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.012427][T11995] RIP: 0033:0x7fd06f55f749
[  189.012442][T11995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.012460][T11995] RSP: 002b:00007fd06dfbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.012476][T11995] RAX: ffffffffffffffda RBX: 00007fd06f7b5fa0 RCX: 00007fd06f55f749
[  189.012486][T11995] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000005
[  189.012497][T11995] RBP: 00007fd06dfbf090 R08: 0000000000000000 R09: 0000000000000000
[  189.012578][T11995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.012590][T11995] R13: 00007fd06f7b6038 R14: 00007fd06f7b5fa0 R15: 00007ffc73f51758
[  189.012605][T11995]  </TASK>
[  189.012819][T11995] netlink: 'syz.3.3049': attribute type 13 has an invalid length.
[  189.235026][T11995] gretap0: refused to change device tx_queue_len
[  189.243408][T11995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  189.289687][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  189.358499][T12012] loop1: detected capacity change from 0 to 1024
[  189.374651][T12012] EXT4-fs: inline encryption not supported
[  189.389465][T12012] EXT4-fs: Ignoring removed nobh option
[  189.395409][T12012] EXT4-fs: Ignoring removed bh option
[  189.424484][T12012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.585505][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.697866][T12067] gre1: entered allmulticast mode
[  189.771657][T12037] netlink: 'syz.3.3067': attribute type 4 has an invalid length.
[  190.039106][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.053494][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.189612][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.199761][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.505776][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3100'.
[  190.520919][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[  190.536399][T12214] team0: Port device team_slave_1 removed
[  190.581794][T12219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.591321][T12219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.631625][T12222] hub 9-0:1.0: USB hub found
[  190.636332][T12222] hub 9-0:1.0: 8 ports detected
[  190.829052][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'.
[  191.308340][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3118'.
[  191.319042][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'.
[  191.362288][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'.
[  191.527259][T12274] loop2: detected capacity change from 0 to 512
[  191.545627][T12274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  191.570569][T12274] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3125: invalid indirect mapped block 4294967295 (level 0)
[  191.601296][T12274] EXT4-fs (loop2): Remounting filesystem read-only
[  191.607927][T12274] EXT4-fs (loop2): 1 orphan inode deleted
[  191.613817][T12274] EXT4-fs (loop2): 1 truncate cleaned up
[  191.712953][T12274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.755628][T12285] loop5: detected capacity change from 0 to 1024
[  191.790378][T12285] EXT4-fs: Ignoring removed orlov option
[  191.815575][T12285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.880586][T12301] loop1: detected capacity change from 0 to 764
[  191.972118][T12311] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.017126][T12317] loop3: detected capacity change from 0 to 1024
[  192.034005][T12317] EXT4-fs: Ignoring removed orlov option
[  192.053303][T12317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.144849][   T29] kauditd_printk_skb: 290 callbacks suppressed
[  192.144863][   T29] audit: type=1326 audit(1763675481.424:12527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06f55df90 code=0x7ffc0000
[  192.234805][   T29] audit: type=1326 audit(1763675481.455:12528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd06f55e497 code=0x7ffc0000
[  192.258405][   T29] audit: type=1326 audit(1763675481.455:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06f55df90 code=0x7ffc0000
[  192.282262][   T29] audit: type=1326 audit(1763675481.455:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.306057][   T29] audit: type=1326 audit(1763675481.466:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.318515][T12329] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.329954][   T29] audit: type=1326 audit(1763675481.466:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.361538][   T29] audit: type=1326 audit(1763675481.476:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.385183][   T29] audit: type=1326 audit(1763675481.476:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.408960][   T29] audit: type=1326 audit(1763675481.476:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.432589][   T29] audit: type=1326 audit(1763675481.476:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.3.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f55f749 code=0x7ffc0000
[  192.576122][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.576887][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.626435][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.667027][T12332] 9pnet: Could not find request transport: r
[  192.679595][T12336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.696300][T12336] tipc: Disabling bearer <eth:syzkaller0>
[  192.779494][T12349] loop2: detected capacity change from 0 to 1024
[  192.791824][T12332] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  192.795647][T12349] EXT4-fs: inline encryption not supported
[  192.802101][T12332] SELinux: failed to load policy
[  192.807988][T12349] EXT4-fs: Ignoring removed nobh option
[  192.818408][T12349] EXT4-fs: Ignoring removed bh option
[  192.827116][T12351] hub 9-0:1.0: USB hub found
[  192.831912][T12351] hub 9-0:1.0: 8 ports detected
[  192.868943][T12349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.876794][T12358] __nla_validate_parse: 3 callbacks suppressed
[  192.876809][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'.
[  192.907475][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.924362][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.979000][T12372] tipc: Started in network mode
[  192.984224][T12372] tipc: Node identity fa2e8467dd32, cluster identity 4711
[  192.991861][T12372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.998982][T12372] syzkaller0: entered promiscuous mode
[  192.999248][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.004493][T12372] syzkaller0: entered allmulticast mode
[  193.006731][T12372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  193.042168][T12372] tipc: Resetting bearer <eth:syzkaller0>
[  193.059745][T12371] tipc: Resetting bearer <eth:syzkaller0>
[  193.068049][T12371] tipc: Disabling bearer <eth:syzkaller0>
[  193.146038][T12383] hub 9-0:1.0: USB hub found
[  193.150730][T12383] hub 9-0:1.0: 8 ports detected
[  193.166896][T12385] loop3: detected capacity change from 0 to 764
[  193.190058][T12385] 9pnet: Could not find request transport: r
[  193.208144][T12390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3166'.
[  193.296457][T12385] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  193.306829][T12385] SELinux: failed to load policy
[  193.365819][T12400] loop2: detected capacity change from 0 to 1024
[  193.381117][T12400] EXT4-fs: inline encryption not supported
[  193.396894][T12404] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.401674][T12406] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  193.405526][T12400] EXT4-fs: Ignoring removed nobh option
[  193.415034][T12406] SELinux: failed to load policy
[  193.420491][T12400] EXT4-fs: Ignoring removed bh option
[  193.447920][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'.
[  193.496646][T12400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.521411][T12408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  193.527945][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  193.535499][T12408] vhci_hcd vhci_hcd.0: Device attached
[  193.567080][T12417] loop5: detected capacity change from 0 to 512
[  193.594587][T12417] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  193.636613][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.649219][T12417] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3175: invalid indirect mapped block 4294967295 (level 0)
[  193.668298][T12417] EXT4-fs (loop5): Remounting filesystem read-only
[  193.679047][T12417] EXT4-fs (loop5): 1 orphan inode deleted
[  193.684800][T12417] EXT4-fs (loop5): 1 truncate cleaned up
[  193.698743][T12417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.870461][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'.
[  193.941129][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'.
[  193.953911][T12430] loop2: detected capacity change from 0 to 1024
[  193.970490][T12430] EXT4-fs: Ignoring removed orlov option
[  194.007957][T12430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.150037][T12444] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.178526][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'.
[  194.237679][ T9324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.285639][T12413] vhci_hcd: connection closed
[  194.285829][  T564] vhci_hcd: stop threads
[  194.294770][  T564] vhci_hcd: release socket
[  194.299295][  T564] vhci_hcd: disconnect device
[  194.324524][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.377680][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.420309][T12450] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  194.430748][ T9324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.438374][T12450] SELinux: failed to load policy
[  194.483665][ T9324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.505087][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'.
[  194.520507][T12437] chnl_net:caif_netlink_parms(): no params data found
[  194.577189][T12460] loop2: detected capacity change from 0 to 2048
[  194.587207][T12460] EXT4-fs: Ignoring removed bh option
[  194.595049][ T9324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.632772][T12460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.652211][T12474] loop5: detected capacity change from 0 to 1024
[  194.664171][T12460] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  194.679181][T12460] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  194.691375][T12460] EXT4-fs (loop2): This should not happen!! Data will be lost
[  194.691375][T12460] 
[  194.700924][T12474] EXT4-fs: Ignoring removed orlov option
[  194.701060][T12460] EXT4-fs (loop2): Total free blocks count 0
[  194.712665][T12460] EXT4-fs (loop2): Free/Dirty block details
[  194.718702][T12460] EXT4-fs (loop2): free_blocks=2415919104
[  194.724525][T12460] EXT4-fs (loop2): dirty_blocks=16
[  194.729726][T12460] EXT4-fs (loop2): Block reservation details
[  194.736220][T12460] EXT4-fs (loop2): i_reserved_data_blocks=1
[  194.744045][T12474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.798111][T12437] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.805301][T12437] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.812969][T12437] bridge_slave_0: entered allmulticast mode
[  194.819617][T12437] bridge_slave_0: entered promiscuous mode
[  194.826796][T12437] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.833963][T12437] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.841405][T12437] bridge_slave_1: entered allmulticast mode
[  194.847877][T12437] bridge_slave_1: entered promiscuous mode
[  194.867797][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.884684][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'.
[  194.887894][T12481] loop3: detected capacity change from 0 to 512
[  194.907055][T12481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  194.910364][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.931175][T12481] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3193: invalid indirect mapped block 4294967295 (level 0)
[  194.946054][ T9324] bridge_slave_1: left allmulticast mode
[  194.951788][ T9324] bridge_slave_1: left promiscuous mode
[  194.957583][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.966186][T12481] EXT4-fs (loop3): Remounting filesystem read-only
[  194.982457][T12481] EXT4-fs (loop3): 1 orphan inode deleted
[  194.988235][T12481] EXT4-fs (loop3): 1 truncate cleaned up
[  194.994352][T12481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.046410][ T9324] bridge_slave_0: left promiscuous mode
[  195.052335][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.138769][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.166512][T12500] loop5: detected capacity change from 0 to 764
[  195.180409][T12500] rock: directory entry would overflow storage
[  195.186651][T12500] rock: sig=0x4f50, size=4, remaining=3
[  195.192321][T12500] iso9660: Corrupted directory entry in block 6 of inode 1792
[  195.321933][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.338789][ T9324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.354565][ T9324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.386623][ T9324] bond0 (unregistering): Released all slaves
[  195.401149][ T3400] syz0: Port: 1 Link DOWN
[  195.412229][T12437] team0: Port device team_slave_0 added
[  195.419963][T12437] team0: Port device team_slave_1 added
[  195.444557][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.451607][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.477658][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.493907][ T9324] tipc: Left network mode
[  195.521326][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'.
[  195.531991][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.539050][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.565180][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.592960][ T9324] hsr_slave_0: left promiscuous mode
[  195.600064][ T9324] hsr_slave_1: left promiscuous mode
[  195.606701][ T9324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.614196][ T9324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.629630][ T9324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.632384][T12524] hub 9-0:1.0: USB hub found
[  195.637075][ T9324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.649272][T12524] hub 9-0:1.0: 8 ports detected
[  195.654287][ T9324] veth1_macvtap: left promiscuous mode
[  195.660086][ T9324] veth0_macvtap: left promiscuous mode
[  195.665833][ T9324] veth1_vlan: left promiscuous mode
[  195.676153][ T9324] veth0_vlan: left promiscuous mode
[  195.716656][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.766480][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'.
[  195.840593][ T9324] team0 (unregistering): Port device team_slave_1 removed
[  195.866129][ T9324] team0 (unregistering): Port device team_slave_0 removed
[  195.918221][  T564] smc: removing ib device syz0
[  195.990742][T12437] hsr_slave_0: entered promiscuous mode
[  196.023952][T12437] hsr_slave_1: entered promiscuous mode
[  196.036594][T12437] debugfs: 'hsr0' already exists in 'hsr'
[  196.042446][T12437] Cannot create hsr debugfs directory
[  196.205842][T12531] team0: Port device team_slave_1 removed
[  196.644774][T12437] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  196.661698][T12437] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  196.673374][T12437] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  196.684583][T12437] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  196.733515][T12437] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.763935][T12437] 8021q: adding VLAN 0 to HW filter on device team0
[  196.799020][T12437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.809514][T12437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.849603][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.856678][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.885400][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.892563][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.000867][T12437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.187159][T12437] veth0_vlan: entered promiscuous mode
[  197.202036][T12437] veth1_vlan: entered promiscuous mode
[  197.250369][T12437] veth0_macvtap: entered promiscuous mode
[  197.277751][T12437] veth1_macvtap: entered promiscuous mode
[  197.306554][T12437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.325800][T12437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.337120][ T9324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.381765][ T9324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.421491][ T9324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.443252][ T9324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.444549][   T29] kauditd_printk_skb: 281 callbacks suppressed
[  197.444561][   T29] audit: type=1326 audit(1763675486.988:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6625f749 code=0x7ffc0000
[  197.481929][   T29] audit: type=1326 audit(1763675486.988:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6625f749 code=0x7ffc0000
[  197.556867][T12666] loop1: detected capacity change from 0 to 764
[  197.607081][T12666] 9pnet: Could not find request transport: r
[  197.620383][   T29] audit: type=1326 audit(1763675487.062:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a6625f749 code=0x7ffc0000
[  197.644123][   T29] audit: type=1326 audit(1763675487.062:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a6625f783 code=0x7ffc0000
[  197.667590][   T29] audit: type=1326 audit(1763675487.062:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a6625e1ff code=0x7ffc0000
[  197.691057][   T29] audit: type=1326 audit(1763675487.062:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0a6625f7d7 code=0x7ffc0000
[  197.714647][   T29] audit: type=1326 audit(1763675487.062:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a6625df90 code=0x7ffc0000
[  197.738269][   T29] audit: type=1326 audit(1763675487.062:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a6625e3aa code=0x7ffc0000
[  197.743850][T12666] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  197.761818][   T29] audit: type=1326 audit(1763675487.062:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6625f749 code=0x7ffc0000
[  197.761846][   T29] audit: type=1326 audit(1763675487.072:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a6625f749 code=0x7ffc0000
[  197.795290][T12673] __nla_validate_parse: 3 callbacks suppressed
[  197.795306][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'.
[  197.905155][T12666] SELinux: failed to load policy
[  197.962637][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'.
[  198.090484][T12690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  198.105291][T12688] hub 9-0:1.0: USB hub found
[  198.110665][T12688] hub 9-0:1.0: 8 ports detected
[  198.214089][T12697] loop1: detected capacity change from 0 to 1024
[  198.229813][T12697] EXT4-fs: Ignoring removed orlov option
[  198.266404][T12697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.418507][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  198.469054][T12709] 9pnet: Could not find request transport: r
[  198.520003][T12712] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3238'.
[  198.572705][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3239'.
[  198.610281][T12709] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  198.628935][T12709] SELinux: failed to load policy
[  198.635554][T12437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.652684][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3239'.
[  198.740191][T12725] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  198.746778][T12725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  198.754358][T12725] vhci_hcd vhci_hcd.0: Device attached
[  198.791565][T12726] vhci_hcd: connection closed
[  198.792641][  T564] vhci_hcd: stop threads
[  198.801695][  T564] vhci_hcd: release socket
[  198.806106][  T564] vhci_hcd: disconnect device
[  198.878740][T12735] loop1: detected capacity change from 0 to 764
[  198.905569][T12735] 9pnet: Could not find request transport: r
[  198.936450][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'.
[  198.946376][T12741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'.
[  199.023867][T12735] SELinux:  policydb magic number 0x5f434d53 does not match expected magic number 0xf97cff8c
[  199.037555][T12735] SELinux: failed to load policy
[  199.250363][T12749] loop2: detected capacity change from 0 to 512
[  199.364519][T12749] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3251: bad orphan inode 11862016
[  199.380628][T12749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  199.394218][T12749] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.554448][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  199.569954][T12774] loop3: detected capacity change from 0 to 512
[  199.578139][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'.
[  199.587798][T12774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  199.654127][T12774] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3260: invalid indirect mapped block 4294967295 (level 0)
[  199.699069][T12774] EXT4-fs (loop3): Remounting filesystem read-only
[  199.715596][T12774] EXT4-fs (loop3): 1 orphan inode deleted
[  199.721450][T12774] EXT4-fs (loop3): 1 truncate cleaned up
[  199.751652][T12774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.792539][T12772] loop5: detected capacity change from 0 to 2048
[  199.822070][T12772] EXT4-fs: Ignoring removed bh option
[  199.915513][T12772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.963424][T12772] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  199.992316][T12772] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  200.005300][T12772] EXT4-fs (loop5): This should not happen!! Data will be lost
[  200.005300][T12772] 
[  200.015089][T12772] EXT4-fs (loop5): Total free blocks count 0
[  200.021108][T12772] EXT4-fs (loop5): Free/Dirty block details
[  200.027004][T12772] EXT4-fs (loop5): free_blocks=2415919104
[  200.032760][T12772] EXT4-fs (loop5): dirty_blocks=16
[  200.037873][T12772] EXT4-fs (loop5): Block reservation details
[  200.043954][T12772] EXT4-fs (loop5): i_reserved_data_blocks=1
[  200.151606][T12789] loop2: detected capacity change from 0 to 2048
[  200.162535][T12789] EXT4-fs: Ignoring removed bh option
[  200.167978][T12791] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  200.174483][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.182016][T12791] vhci_hcd vhci_hcd.0: Device attached
[  200.194996][T12792] vhci_hcd: connection closed
[  200.195305][ T9324] vhci_hcd: stop threads
[  200.204275][ T9324] vhci_hcd: release socket
[  200.208688][ T9324] vhci_hcd: disconnect device
[  200.214627][T12789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.265750][T12788] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  200.281047][T12788] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  200.293254][T12788] EXT4-fs (loop2): This should not happen!! Data will be lost
[  200.293254][T12788] 
[  200.303060][T12788] EXT4-fs (loop2): Total free blocks count 0
[  200.309124][T12788] EXT4-fs (loop2): Free/Dirty block details
[  200.315095][T12788] EXT4-fs (loop2): free_blocks=2415919104
[  200.320808][T12788] EXT4-fs (loop2): dirty_blocks=16
[  200.325932][T12788] EXT4-fs (loop2): Block reservation details
[  200.331964][T12788] EXT4-fs (loop2): i_reserved_data_blocks=1
[  200.373106][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.404203][T12797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.411602][T12797] syzkaller0: entered promiscuous mode
[  200.417135][T12797] syzkaller0: entered allmulticast mode
[  200.434961][T12797] tipc: Resetting bearer <eth:syzkaller0>
[  200.441648][T12796] tipc: Resetting bearer <eth:syzkaller0>
[  200.449194][T12796] tipc: Disabling bearer <eth:syzkaller0>
[  200.602106][T12804] loop3: detected capacity change from 0 to 764
[  200.620839][T12804] rock: directory entry would overflow storage
[  200.627389][T12804] rock: sig=0x4f50, size=4, remaining=3
[  200.633101][T12804] iso9660: Corrupted directory entry in block 6 of inode 1792
[  200.707040][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.733206][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3271'.
[  200.744641][T12807] loop3: detected capacity change from 0 to 764
[  200.768545][T12811] FAULT_INJECTION: forcing a failure.
[  200.768545][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.781691][T12811] CPU: 1 UID: 0 PID: 12811 Comm: syz.0.3272 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.781715][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.781726][T12811] Call Trace:
[  200.781732][T12811]  <TASK>
[  200.781758][T12811]  __dump_stack+0x1d/0x30
[  200.781779][T12811]  dump_stack_lvl+0xe8/0x140
[  200.781799][T12811]  dump_stack+0x15/0x1b
[  200.781890][T12811]  should_fail_ex+0x265/0x280
[  200.781918][T12811]  should_fail+0xb/0x20
[  200.781932][T12811]  should_fail_usercopy+0x1a/0x20
[  200.781948][T12811]  strncpy_from_user+0x25/0x230
[  200.782054][T12811]  ? kmem_cache_alloc_noprof+0x242/0x480
[  200.782078][T12811]  ? getname_flags+0x80/0x3b0
[  200.782104][T12811]  getname_flags+0xae/0x3b0
[  200.782128][T12811]  user_path_at+0x28/0x130
[  200.782215][T12811]  __se_sys_mount+0x25b/0x2e0
[  200.782235][T12811]  ? fput+0x8f/0xc0
[  200.782250][T12811]  __x64_sys_mount+0x67/0x80
[  200.782271][T12811]  x64_sys_call+0x2b51/0x3000
[  200.782338][T12811]  do_syscall_64+0xd2/0x200
[  200.782359][T12811]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  200.782381][T12811]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  200.782482][T12811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.782515][T12811] RIP: 0033:0x7f0a6625f749
[  200.782529][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.782612][T12811] RSP: 002b:00007f0a64cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  200.782629][T12811] RAX: ffffffffffffffda RBX: 00007f0a664b5fa0 RCX: 00007f0a6625f749
[  200.782640][T12811] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[  200.782652][T12811] RBP: 00007f0a64cc7090 R08: 0000200000000140 R09: 0000000000000000
[  200.782672][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.782683][T12811] R13: 00007f0a664b6038 R14: 00007f0a664b5fa0 R15: 00007ffd91e736b8
[  200.782698][T12811]  </TASK>
[  201.007582][T12807] rock: directory entry would overflow storage
[  201.013804][T12807] rock: sig=0x4f50, size=4, remaining=3
[  201.019395][T12807] iso9660: Corrupted directory entry in block 6 of inode 1792
[  201.078156][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.142544][T12820] loop5: detected capacity change from 0 to 1024
[  201.180650][T12820] EXT4-fs: Ignoring removed orlov option
[  201.232159][T12820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.253100][T12829] loop3: detected capacity change from 0 to 512
[  201.260091][T12830] hub 9-0:1.0: USB hub found
[  201.268353][T12830] hub 9-0:1.0: 8 ports detected
[  201.273805][T12829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  201.311472][T12829] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3280: invalid indirect mapped block 4294967295 (level 0)
[  201.357310][T12838] loop2: detected capacity change from 0 to 1024
[  201.374551][T12836] tipc: Started in network mode
[  201.379491][T12836] tipc: Node identity f643a70f56c, cluster identity 4711
[  201.386583][T12836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.446469][T12840] xt_CT: You must specify a L4 protocol and not use inversions on it
[  201.467563][T12841] syzkaller0: entered promiscuous mode
[  201.473058][T12841] syzkaller0: entered allmulticast mode
[  201.479327][T12829] EXT4-fs (loop3): Remounting filesystem read-only
[  201.485907][T12829] EXT4-fs (loop3): 1 orphan inode deleted
[  201.491680][T12829] EXT4-fs (loop3): 1 truncate cleaned up
[  201.498339][T12838] EXT4-fs: Ignoring removed orlov option
[  201.509712][T12829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.522944][T12836] tipc: Resetting bearer <eth:syzkaller0>
[  201.533965][T12835] tipc: Resetting bearer <eth:syzkaller0>
[  201.540642][T12838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.554601][T12835] tipc: Disabling bearer <eth:syzkaller0>
[  201.583744][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.611604][T12848] FAULT_INJECTION: forcing a failure.
[  201.611604][T12848] name failslab, interval 1, probability 0, space 0, times 0
[  201.624338][T12848] CPU: 1 UID: 0 PID: 12848 Comm: syz.1.3284 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  201.624362][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.624373][T12848] Call Trace:
[  201.624378][T12848]  <TASK>
[  201.624384][T12848]  __dump_stack+0x1d/0x30
[  201.624433][T12848]  dump_stack_lvl+0xe8/0x140
[  201.624452][T12848]  dump_stack+0x15/0x1b
[  201.624469][T12848]  should_fail_ex+0x265/0x280
[  201.624517][T12848]  should_failslab+0x8c/0xb0
[  201.624598][T12848]  __kmalloc_noprof+0xa5/0x570
[  201.624627][T12848]  ? copy_splice_read+0xc2/0x660
[  201.624649][T12848]  copy_splice_read+0xc2/0x660
[  201.624753][T12848]  ? __pfx_copy_splice_read+0x10/0x10
[  201.624772][T12848]  splice_direct_to_actor+0x26f/0x680
[  201.624792][T12848]  ? __pfx_direct_splice_actor+0x10/0x10
[  201.624885][T12848]  do_splice_direct+0xda/0x150
[  201.624908][T12848]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  201.624933][T12848]  do_sendfile+0x380/0x650
[  201.624965][T12848]  __x64_sys_sendfile64+0x105/0x150
[  201.625071][T12848]  x64_sys_call+0x2bb4/0x3000
[  201.625093][T12848]  do_syscall_64+0xd2/0x200
[  201.625174][T12848]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  201.625197][T12848]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  201.625223][T12848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.625294][T12848] RIP: 0033:0x7f6fafdef749
[  201.625308][T12848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.625323][T12848] RSP: 002b:00007f6fae857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  201.625342][T12848] RAX: ffffffffffffffda RBX: 00007f6fb0045fa0 RCX: 00007f6fafdef749
[  201.625354][T12848] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  201.625367][T12848] RBP: 00007f6fae857090 R08: 0000000000000000 R09: 0000000000000000
[  201.625379][T12848] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001
[  201.625414][T12848] R13: 00007f6fb0046038 R14: 00007f6fb0045fa0 R15: 00007ffc36d5e638
[  201.625433][T12848]  </TASK>
[  201.710022][T12850] xt_CT: You must specify a L4 protocol and not use inversions on it
[  201.860788][T12855] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  201.867453][T12855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.875083][T12855] vhci_hcd vhci_hcd.0: Device attached
[  201.887407][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.963420][T12867] syz.1.3287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  202.031786][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.081896][T12881] hub 9-0:1.0: USB hub found
[  202.087263][T12881] hub 9-0:1.0: 8 ports detected
[  202.105082][ T3407] usb 11-1: new low-speed USB device number 7 using vhci_hcd
[  202.118964][T12887] loop3: detected capacity change from 0 to 764
[  202.127694][T12887] rock: directory entry would overflow storage
[  202.134082][T12887] rock: sig=0x4f50, size=4, remaining=3
[  202.139655][T12887] iso9660: Corrupted directory entry in block 6 of inode 1792
[  202.209966][   T29] kauditd_printk_skb: 597 callbacks suppressed
[  202.210041][   T29] audit: type=1326 audit(1763675491.997:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.224699][T12889] xt_CT: You must specify a L4 protocol and not use inversions on it
[  202.258596][   T29] audit: type=1326 audit(1763675491.997:13426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.282270][   T29] audit: type=1326 audit(1763675491.997:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.306046][   T29] audit: type=1326 audit(1763675491.997:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.329599][   T29] audit: type=1326 audit(1763675491.997:13429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.353352][   T29] audit: type=1326 audit(1763675491.997:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.377062][   T29] audit: type=1326 audit(1763675492.007:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.400682][   T29] audit: type=1326 audit(1763675492.007:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.424267][   T29] audit: type=1326 audit(1763675492.007:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.447881][   T29] audit: type=1326 audit(1763675492.007:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12852 comm="syz.1.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fafe22005 code=0x7ffc0000
[  202.652073][T12856] vhci_hcd: connection reset by peer
[  202.658454][   T31] vhci_hcd: stop threads
[  202.662731][   T31] vhci_hcd: release socket
[  202.667142][   T31] vhci_hcd: disconnect device
[  202.709261][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.718053][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.785600][T12898] loop2: detected capacity change from 0 to 1024
[  202.799904][T12898] EXT4-fs: inline encryption not supported
[  202.808760][T12898] EXT4-fs: Ignoring removed nobh option
[  202.814361][T12898] EXT4-fs: Ignoring removed bh option
[  202.817986][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.828429][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.841799][T12898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.916560][T10829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.997093][T12912] FAULT_INJECTION: forcing a failure.
[  202.997093][T12912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.010196][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.2.3308 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  203.010222][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  203.010233][T12912] Call Trace:
[  203.010241][T12912]  <TASK>
[  203.010272][T12912]  __dump_stack+0x1d/0x30
[  203.010292][T12912]  dump_stack_lvl+0xe8/0x140
[  203.010311][T12912]  dump_stack+0x15/0x1b
[  203.010385][T12912]  should_fail_ex+0x265/0x280
[  203.010439][T12912]  should_fail+0xb/0x20
[  203.010447][T12912]  should_fail_usercopy+0x1a/0x20
[  203.010484][T12912]  _copy_from_iter+0xd2/0xe80
[  203.010497][T12912]  ? __build_skb_around+0x1ab/0x200
[  203.010513][T12912]  ? __alloc_skb+0x223/0x320
[  203.010560][T12912]  netlink_sendmsg+0x471/0x6b0
[  203.010573][T12912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.010584][T12912]  __sock_sendmsg+0x145/0x180
[  203.010597][T12912]  ____sys_sendmsg+0x31e/0x4e0
[  203.010609][T12912]  ___sys_sendmsg+0x17b/0x1d0
[  203.010680][T12912]  __x64_sys_sendmsg+0xd4/0x160
[  203.010692][T12912]  x64_sys_call+0x191e/0x3000
[  203.010704][T12912]  do_syscall_64+0xd2/0x200
[  203.010716][T12912]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  203.010807][T12912]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  203.010878][T12912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.010890][T12912] RIP: 0033:0x7fbb7600f749
[  203.010900][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.010955][T12912] RSP: 002b:00007fbb74a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.010972][T12912] RAX: ffffffffffffffda RBX: 00007fbb76265fa0 RCX: 00007fbb7600f749
[  203.010979][T12912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  203.010986][T12912] RBP: 00007fbb74a6f090 R08: 0000000000000000 R09: 0000000000000000
[  203.010992][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.010999][T12912] R13: 00007fbb76266038 R14: 00007fbb76265fa0 R15: 00007fffac799a38
[  203.011010][T12912]  </TASK>
[  203.246457][T12918] __nla_validate_parse: 5 callbacks suppressed
[  203.246468][T12918] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3310'.
[  203.275569][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  203.300680][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'.
[  203.317474][T12922] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  203.337862][T12924] loop5: detected capacity change from 0 to 1024
[  203.344842][T12924] EXT4-fs: Ignoring removed orlov option
[  203.352151][T12924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.433752][T12924] ==================================================================
[  203.441866][T12924] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  203.451094][T12924] 
[  203.453424][T12924] write to 0xffff888119e89758 of 4 bytes by task 12928 on cpu 1:
[  203.461143][T12924]  writeback_single_inode+0x150/0x3f0
[  203.466536][T12924]  sync_inode_metadata+0x5b/0x90
[  203.471490][T12924]  generic_buffers_fsync_noflush+0xd9/0x120
[  203.475973][T12933] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.477394][T12924]  ext4_sync_file+0x1ab/0x690
[  203.477425][T12924]  vfs_fsync_range+0x10d/0x130
[  203.495171][T12924]  ext4_buffered_write_iter+0x34f/0x3c0
[  203.500729][T12924]  ext4_file_write_iter+0x387/0xf60
[  203.505923][T12924]  iter_file_splice_write+0x666/0xa60
[  203.511290][T12924]  direct_splice_actor+0x156/0x2a0
[  203.516393][T12924]  splice_direct_to_actor+0x312/0x680
[  203.521774][T12924]  do_splice_direct+0xda/0x150
[  203.526609][T12924]  do_sendfile+0x380/0x650
[  203.531016][T12924]  __x64_sys_sendfile64+0x105/0x150
[  203.536211][T12924]  x64_sys_call+0x2bb4/0x3000
[  203.540873][T12924]  do_syscall_64+0xd2/0x200
[  203.545364][T12924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.551241][T12924] 
[  203.553554][T12924] read to 0xffff888119e89758 of 4 bytes by task 12924 on cpu 0:
[  203.561163][T12924]  generic_buffers_fsync_noflush+0x80/0x120
[  203.567045][T12924]  ext4_sync_file+0x1ab/0x690
[  203.571708][T12924]  vfs_fsync_range+0x10d/0x130
[  203.576461][T12924]  ext4_buffered_write_iter+0x34f/0x3c0
[  203.581990][T12924]  ext4_file_write_iter+0x387/0xf60
[  203.587178][T12924]  iter_file_splice_write+0x666/0xa60
[  203.592551][T12924]  direct_splice_actor+0x156/0x2a0
[  203.597659][T12924]  splice_direct_to_actor+0x312/0x680
[  203.603024][T12924]  do_splice_direct+0xda/0x150
[  203.607773][T12924]  do_sendfile+0x380/0x650
[  203.612186][T12924]  __x64_sys_sendfile64+0x105/0x150
[  203.617377][T12924]  x64_sys_call+0x2bb4/0x3000
[  203.622048][T12924]  do_syscall_64+0xd2/0x200
[  203.626538][T12924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.632414][T12924] 
[  203.634718][T12924] value changed: 0x00000070 -> 0x00000002
[  203.640438][T12924] 
[  203.642741][T12924] Reported by Kernel Concurrency Sanitizer on:
[  203.648873][T12924] CPU: 0 UID: 0 PID: 12924 Comm: syz.5.3313 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  203.658682][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  203.668817][T12924] ==================================================================
[  203.681485][T12932] loop3: detected capacity change from 0 to 1024
[  203.688998][T12932] EXT4-fs: Ignoring removed orlov option
[  203.699839][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3313'.
[  203.715643][T12932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.818820][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.853138][T12938] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.865196][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'.
[  203.908822][T11492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.934034][ T3407] usb 11-1: enqueue for inactive port 0
[  206.939681][ T3407] usb 11-1: enqueue for inactive port 0
[  207.010237][ T3407] vhci_hcd: vhci_device speed not set