last executing test programs:

6m18.216693243s ago: executing program 4 (id=152):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000006332f34e15036ef5f4a3007502cee628879bb337fb66f929ea50fbdda7bb059695d4399b4fc0220a9eb8d55574965dd9c3e57a0f71b222b942a53f172e460538b54c5c4e7957dac7f7c38d100af80bbbc972d946e6cccf1f57a1170c4bc4d82b0654daa0a4bafa85e2a04866e1fc60b37ae54811a7424747872c0238e1c7be4aa3f9d8b1655aa8b314ee781099ff7b9e9cd34306b7fe1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000010000000000000c0000000c0941963dd140e78e000000000000000000000000003dac8274dafc139042fc3b2fcbaa9da4c8c0c2b0ac5e5ae953fc9b95ff41ddd1374243289c9c3f1cb4d09963bac85c1c8ca2af5bc33f759327a2d5568cb298d0bf53224a8d4ac22ba61cddab9fef540d105e9bc147"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000800)={@private2}, &(0x7f0000000080)=0x14)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000120095067afc0455f9c63a91ea000000"], 0x14}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x83, &(0x7f00000000c0), 0x8)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800800, &(0x7f0000000840)=ANY=[@ANYRES64=r7], 0x5, 0x807, &(0x7f0000001880)="$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")
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f0000000d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001001a000d00ff07060002000600000000000000000000000000090000000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"/24], 0x48, 0x880}], 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000400)={{0x2c, @empty, 0x4e22, 0x1, 'none\x00', 0x2f, 0x2, 0xd}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x1, 0x76, 0x2, 0xa}}, 0x44)

6m17.500097884s ago: executing program 4 (id=154):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJImTfO+yQsvaD0FBA2UbkyNrYKHigcRLBT0bLtstqFmky3ZTWlCwBYRvAgqHgS99OyPevPqj6v+Fx7EUjUtVjxIZDYz7bbZ/GySrebzgck+z8xsnue788zMMzsPswHsW8Ppn0LE4Yh4L4kYzOYnEdHTTHVHnFxZ7/bSYjmdkhiIV39NmuvcWlosR8t7UoeyzKMR8e3bEUcKq8utzy9MlarVymyWH21MXxitzy8cPT9dmqxMVmaOj42PHzvxzInjOxfr7z8sDFx//6Unvzj551uPXHv3uyROxkC2rDWOnTIcw9ln0pN+hPd4cacL67Ck0xVgW9Jds2tlL4/DMRhdzRQA8G/2ZkQsAwD7TOL8DwD7TP49wK2lxXI+dfYbib1144WI6FuJP7+/ubKkO7tn19e8D9p/K7nnzkgSEUM7UP5wRHzy1eufpVPs0n1IgHYuX4mIs0PDq4//yaoxC1v11DrLDmSvw/fNd/yDvfN12v95tl3/r3Cn/xNt+j+9bfbd7dhw/z+4A4Ws40ZfxPMtY9tut8SfGerKcv9p9vl6knPnq5X02PbfiBiJnt40P7ZOGSM3/7q51rLW/t9vH7zxaVp++np3jcLP3b33vmei1Cg9SMytblyJeKx7Vfwtlwd9zb5uu/7v6U2W8fJz73y81rI0/jTefFodf2Sjk3bH8tWIJ9pu/7sj2pJ1xyeONpvDaN4o2vjyx4/61yq/dfunU1p+fi2wF9Lt379+/ENJ63jN+tbL+P7q4DdrLds4/vbt/0DyWjOd9yMulRqN2bGIA8krq+cfu/vePJ+vn8Y/8nj7/T8//rVr/+k14dlNxt99/ZfPtx//7krjn9jC9k9nZA3hTovYKHHt9lTXWuVvbvuPN1Mj2ZzNHP82W8EH+OgAAAAAAAAAAAAAAAAAAAAAAAAAYNMKETEQSaF4J10oFIsrv+H9/+gvVGv1xpFztbmZiWj+VvZQ9BTyR10OtjwPdSx7Hn6eP3Zf/umI+F9EfNh7MMmfozjR4dgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHdojd//T/3U2+naAQC7pq/TFQAA9pzzPwDsP87/ALD/9EUklztdCQBgT7n+B4D9x/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXXb61Kl0Wv5jabGc5icuzs9N1S4enajUp4rTc+ViuTZ7oThZq01WK8VybXqj/1et1S6Mx8zcpdFGpd4Yrc8vnJmuzc00zpyfLk1WzlR69iQqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANia+vzCVKlarcxKbCOx/HBUo/OJrqw5dbYa/Z0pPXkoNsFOJzp8YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h/g7AAD//7AaJtI=")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000012b, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
sendfile(r5, r3, 0x0, 0x7ffff000)
close(r0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="ff000600090706000101070008000200"], 0x14)
accept(r0, 0x0, 0x0)

6m16.47765626s ago: executing program 4 (id=168):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

6m14.933173154s ago: executing program 4 (id=182):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x42, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x341141, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000006000000a2", @ANYRES32=r0, @ANYRES32, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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")
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private1, 0x6}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)

6m14.700731468s ago: executing program 4 (id=185):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000006332f34e15036ef5f4a3007502cee628879bb337fb66f929ea50fbdda7bb059695d4399b4fc0220a9eb8d55574965dd9c3e57a0f71b222b942a53f172e460538b54c5c4e7957dac7f7c38d100af80bbbc972d946e6cccf1f57a1170c4bc4d82b0654daa0a4bafa85e2a04866e1fc60b37ae54811a7424747872c0238e1c7be4aa3f9d8b1655aa8b314ee781099ff7b9e9cd34306b7fe1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000010000000000000c0000000c0941963dd140e78e000000000000000000000000003dac8274dafc139042fc3b2fcbaa9da4c8c0c2b0ac5e5ae953fc9b95ff41ddd1374243289c9c3f1cb4d09963bac85c1c8ca2af5bc33f759327a2d5568cb298d0bf53224a8d4ac22ba61cddab9fef540d105e9bc147"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000800)={@private2}, &(0x7f0000000080)=0x14)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000120095067afc0455f9c63a91ea000000"], 0x14}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x83, &(0x7f00000000c0), 0x8)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800800, &(0x7f0000000840)=ANY=[@ANYRES64=r7], 0x5, 0x807, &(0x7f0000001880)="$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")
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f0000000d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001001a000d00ff07060002000600000000000000000000000000090000000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"/24], 0x48, 0x880}], 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000400)={{0x2c, @empty, 0x4e22, 0x1, 'none\x00', 0x2f, 0x2, 0xd}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x1, 0x76, 0x2, 0xa}}, 0x44)

6m14.340105344s ago: executing program 4 (id=189):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000000c0)=""/91)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xed7b}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1, {0x599f}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000040)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast2, @in=@private}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$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")

6m14.334073664s ago: executing program 32 (id=189):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000000c0)=""/91)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xed7b}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1, {0x599f}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000040)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast2, @in=@private}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$eJzs0jFoW0cYAOD/vaKoHYJFCLjQpRCTSUmKOiRQiVKMIrzYIaQhQ+dCMhQSyODBSFUyp8nULSGJDcaL6dBOhi7GMhgb5MnIq+dCvWkwr8h6XmxTCsZ13XzfoNP999/9d/wvONfS+CPLsiQisuJB7Md8JeLxF3+/+9uF+u2Jz+98c/deRBKPImLy2qPfBitJnnFw6i/5fCqfTxQr3bdr47sLpfUrm52x92lEYRC/EBGtwf7W7MjRekl8dfIn8z+yWFsZefb8SePFdO3hVmNmp5DHX918V23eH60+SIfzpfS43dkx39jJ6u+N3prbyKb+fH3xeqHT7VdW87xyctJK/Bct7mUDn2aD/n89s/PmcrvX7k9enX96o3ypt9x8ud/338/6mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAdgsbYy8uz5k8aL6drDrcbMzpffX6t/9lP9h1c331Wb90erD9Jh3lL679Qf696a28g+jtcXrxc6F/qV1TyvnJxOfc7W4f6/udzutfuTV+ef3ihf6i03XyY/Pz7rOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA50v99nZE3L0XkcR3ETGelmYH8awYUdo+mj9VHI4TxUr37dr47kJp/cpmZ+z9nTy+lEa04pP9/7/u/04fOuGj4dCKiPT03sU/81cAAAD//xmKiIU=")

5m39.338484206s ago: executing program 3 (id=687):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={0x0, 0x20})

5m39.270853397s ago: executing program 3 (id=688):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000003500))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r9, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/139, 0x8b}], 0x4, &(0x7f00000009c0)=""/67, 0x43}, 0x5}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000a40)=""/27, 0x1b}, {&(0x7f0000000a80)=""/187, 0xbb}, {&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/126, 0x7e}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/159, 0x9f}, {&(0x7f0000001e40)=""/173, 0xad}], 0x8, &(0x7f0000001f80)=""/202, 0xca}, 0x62}, {{&(0x7f0000002080)=@x25, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002100)=""/235, 0xeb}, {&(0x7f0000002200)=""/132, 0x84}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003300)=""/199, 0xc7}, 0x8000}], 0x3, 0x2102, &(0x7f00000034c0)={0x0, 0x989680})
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)

5m38.465058379s ago: executing program 3 (id=695):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/14, 0xe, 0x0, &(0x7f0000000380)=""/228, 0xe4}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000880000008800000005000000030000000000000c030000000d000000000000010400000044002b070000000007000084ff0700000e000000050000000500000005000000030000000100008001000000030000000f0000000e000000020000000100000005000000010000007f0000000900000000000000ffffffff0d00000005000000030000000d0000000000000a000000000070000000"], &(0x7f00000005c0)=""/27, 0xa5, 0x1b, 0x1, 0x2, 0x10000, @value}, 0x28)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3)
set_mempolicy(0x4002, &(0x7f0000000080)=0x82, 0xfffffffffffffffe)
mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x2, 0x4000010, 0xffffffffffffffff, 0x2c1d2000)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r2 = syz_clone(0x4802000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRESHEX=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='powernv_throttle\x00', r6}, 0xfffffffffffffd0f)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x0)
eventfd2(0x4831c019, 0x80000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18)

5m38.164003074s ago: executing program 3 (id=697):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x42, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x341141, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000006000000a2", @ANYRES32=r0, @ANYRES32, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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")
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private1, 0x6}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)

5m38.103332085s ago: executing program 3 (id=699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
r1 = open(0x0, 0x4000, 0x0)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

5m37.852498449s ago: executing program 3 (id=703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
inotify_init()

5m37.833540769s ago: executing program 33 (id=703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
inotify_init()

3m27.71142034s ago: executing program 2 (id=2768):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32, @ANYBLOB="180008"], 0x40}}, 0x0)

3m27.70241268s ago: executing program 2 (id=2770):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3m27.304533077s ago: executing program 2 (id=2776):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
socket(0xa, 0x2400000001, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

3m26.41330294s ago: executing program 2 (id=2793):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000e40)='io_uring_file_get\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
set_mempolicy(0x3, &(0x7f00000001c0)=0xfffffffffffff6f3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r3, 0x10, 0x3ffd, 0x8000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000ac0)='svcsock_tcp_recv_short\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x4)
umount2(&(0x7f00000002c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)
keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='mm_page_alloc\x00', r6}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r7 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x8f\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\xa3v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
close(r7)
recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001300)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f00000014c0)=""/109, 0x6d}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000002080)=""/4087, 0xff7}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000880)=""/190, 0xbe}, {&(0x7f0000000e80)=""/239, 0xef}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000f80)=""/228, 0xe4}, {&(0x7f0000001080)=""/146, 0x92}, {&(0x7f0000001180)=""/191, 0xbf}, {&(0x7f0000001240)=""/175, 0xaf}], 0xe}, 0x7}, {{&(0x7f0000001cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000a40)=""/29, 0x1d}, {&(0x7f0000001e00)=""/116, 0x74}], 0x4, &(0x7f0000000800)=""/3, 0x3}, 0x20000006}, {{&(0x7f0000001f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000000b00)=""/32, 0x20}, {&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000000d80)=""/76, 0xfffffffffffffee3}, {&(0x7f0000003c80)=""/117, 0x75}, {&(0x7f0000003d00)=""/242, 0xf2}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/142, 0x8e}], 0x7}, 0x5}, {{&(0x7f0000003140)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f00000031c0)=""/111, 0x6f}, {&(0x7f0000003240)=""/88, 0x58}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000003300)=""/249, 0xf9}, {&(0x7f0000000cc0)=""/186, 0xba}, {&(0x7f00000034c0)=""/249, 0xf9}, {&(0x7f0000001400)=""/144, 0x9a}], 0x7}, 0x3}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f0000003780)=[{&(0x7f00000036c0)=""/186, 0xba}], 0x1, &(0x7f00000037c0)=""/24, 0x18}, 0x3}, {{&(0x7f0000003800)=@rc, 0x80, &(0x7f0000000680)=[{&(0x7f0000001540)=""/128}], 0x0, &(0x7f0000000b40)=""/236, 0xec}, 0xa}], 0x6, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700})
keyctl$chown(0x4, r5, 0x0, 0x0)

3m25.910716849s ago: executing program 2 (id=2802):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r4 = open(&(0x7f0000000340)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00'})
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x300, 0x70bd25, 0x2080000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7fffffff, 0x200, 0x200, 0x5, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="00bd7014fdc5d67fc50000000000f55a23f957d8"], 0x4c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

3m25.742989801s ago: executing program 2 (id=2805):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1, 0x0, 0x7}, 0x18)
socket(0xa, 0x2400000001, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

3m25.742629671s ago: executing program 34 (id=2805):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1, 0x0, 0x7}, 0x18)
socket(0xa, 0x2400000001, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

2.009314288s ago: executing program 5 (id=5719):
sendmsg$unix(0xffffffffffffffff, 0x0, 0x84)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a3200"], 0x1ac}}, 0x0)

1.981620849s ago: executing program 5 (id=5721):
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/22, 0x16, <r2=>0x0, &(0x7f0000000100)=""/1, 0x1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x40, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setlease(r7, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x1000000)

1.93366447s ago: executing program 6 (id=5723):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1c, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x8, r1, 0x1, 0x2, 0x6, @random="0700ffffa1f6"}, 0x14)

1.91881194s ago: executing program 6 (id=5724):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
ppoll(&(0x7f0000000d40)=[{r0}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)

1.842409871s ago: executing program 6 (id=5725):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000200))
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

1.820313921s ago: executing program 7 (id=5726):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x404, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb22, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)

1.770788722s ago: executing program 7 (id=5727):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x227d4000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xfe, "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"}, &(0x7f0000000000)=0x106)
r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x16, 0xa01}, 0x14}}, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x1c, {0x9, 0x1}, 0x6}, 0x1)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, {0x8, 0x5}, 0x5}, 0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bcb0000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r11=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x7, @mcast2, 0x4}, {0xa, 0x1, 0xe, @loopback, 0x427}, r11, 0x4}}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2a8}, 0x1c)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

1.323286219s ago: executing program 0 (id=5730):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x7, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioperm(0x0, 0x9, 0x58)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000)

1.24747946s ago: executing program 0 (id=5732):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631380fc00082ce0db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_step\x00', r1, 0x0, 0x5c}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {0x0}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c4594498ae1c0663d773af1d41f6f96be8e2", 0x2fa}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000000000000242fa1b79b8571108f3e165700000008000000", @ANYRES32=0x0, @ANYBLOB="ac14ea8d28000000000000000000000007000000019404000094040000440cc79a000000080000000200"/58], 0x48}, 0x0)
r9 = socket(0x10, 0x3, 0x9)
connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000101000000000300000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x2004c084}, 0x0)

1.178129021s ago: executing program 0 (id=5733):
sendmsg$unix(0xffffffffffffffff, 0x0, 0x84)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000002401000005"], 0x1ac}}, 0x0)

1.160755791s ago: executing program 0 (id=5734):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x100000000000000)

1.124430402s ago: executing program 1 (id=5735):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631380fc00082ce0db5b6861589bcfe8875a060300000023000000"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_step\x00', r0, 0x0, 0x5c}, 0x18)
socket$packet(0x11, 0x3, 0x300)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000001740)="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", 0x2fa}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000000000000242fa1b79b8571108f3e165700000008000000", @ANYRES32=0x0, @ANYBLOB="ac14ea8d28000000000000000000000007000000019404000094040000440cc79a000000080000000200"/58], 0x48}, 0x0)
socket(0x10, 0x3, 0x9)

1.123825542s ago: executing program 5 (id=5736):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
ppoll(&(0x7f0000000d40)=[{r0}], 0x1, 0x0, 0x0, 0x0)

1.070812543s ago: executing program 0 (id=5737):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$vga_arbiter(r0, 0x0, 0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0xb}, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={<r3=>0x0})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x68b0}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r3, 0x2, r0, 0x9})
mknod$loop(0x0, 0x100000000000600d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

1.070537533s ago: executing program 1 (id=5738):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x10)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x0, r0})

910.918346ms ago: executing program 7 (id=5739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd", 0x2}], 0x1, 0x0, 0x0)

887.876866ms ago: executing program 7 (id=5740):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@abort}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000000800030003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

726.690208ms ago: executing program 7 (id=5741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

555.065911ms ago: executing program 7 (id=5742):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x43, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0x3e}, &(0x7f0000000240), 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1})
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0xfffffffffffffea9, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

318.969905ms ago: executing program 6 (id=5743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x0)

254.528525ms ago: executing program 5 (id=5744):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631380fc00082ce0db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_step\x00', r1, 0x0, 0x5c}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)}, {&(0x7f0000001740)="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", 0x2fa}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000000000000242fa1b79b8571108f3e165700000008000000", @ANYRES32=0x0, @ANYBLOB="ac14ea8d28000000000000000000000007000000019404000094040000440cc79a000000080000000200"/58], 0x48}, 0x0)
r9 = socket(0x10, 0x3, 0x9)
connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000101000000000300000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x2004c084}, 0x0)

235.615786ms ago: executing program 6 (id=5745):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000000c0)=""/91)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xed7b}, 0x8)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r5=>r1, {0x599f}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000040)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast2, @in=@private}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$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")
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a2c000000050a01020000000000000000020000000900030073797a3200000000090001008b7c1473797a300000000014000000020a031747d21400000000000000000014000000b2edcafd16bb06a37dc00b4d3365c621ba9ddea294c1a13d7eab1100000000bec45fcdd3595a"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES16=0x0], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800"], 0xe8}}, 0x0)

235.243066ms ago: executing program 1 (id=5746):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x0, 0x0, 0x4}]}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x86}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00')
getdents64(r3, &(0x7f0000003f80)=""/4101, 0x1005)
getdents(r3, 0x0, 0x0)

182.551677ms ago: executing program 1 (id=5747):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1c, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x8, r1, 0x1, 0x2, 0x6, @random="0700ffffa1f6"}, 0x14)

163.165437ms ago: executing program 1 (id=5748):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
write(r3, &(0x7f0000002140)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = memfd_secret(0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r5)
r7 = socket(0x40000000015, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001})
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r7, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback, 0xa7a}, 0x1c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0xffffffff, 0xfffffee2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x80000001})
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0)

75.297059ms ago: executing program 1 (id=5749):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@usrquota}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=@newsa={0x174, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc}, {@in=@empty, 0x0, 0x33}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x8000000000000001, 0x0, 0x3}, {0x4, 0x5, 0x0, 0x800000000}, {}, 0x70bd2a, 0x0, 0xa, 0x2}, [@algo_auth={0x84, 0x1, {{'sha256\x00'}, 0x1e0, "4b453b2d159285e722bf6aa0604d03408f2de30cad2b0a0e75eda35a0432f646df4d7f0fee84739fdfd68d3f51b660e9088a8e1b17c5b86a75a2bf3a"}}]}, 0x174}}, 0x0)

74.830559ms ago: executing program 6 (id=5750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@init_itable_val}, {@jqfmt_vfsold}, {@noblock_validity}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x431, &(0x7f0000000d80)="$eJzs289PHFUcAPDvzAKV/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGViWXQp0Yav7+SQD78285b3vzrzd9+YxAXSt4exHErE/In6PiIFadm2B4dqvW8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YlIP0viSJN65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+WOLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4ijTYY3OvhkpdLm6jrrQF066elgQ9iSUq2bRm+1/w9EKVZP3kC8+mlHGwfsqEqlUnmg9eGlCvA/lkSnWwB0RvFFn81/i22Xhh53hRsv1SZAWdy38q12pCfSvExvw/y2nYYj4szSP19lW+zMfQgAgDW+z8Y/zzYb/6VRf1/o3nwNZTAi7ouIgxFxKiIORcT9EdWyD0bEQ1usv3GRZP34J72+rcA2KRv/vZivba0d/xWjvxgs5bkD1fh7k7Oz5Znj+XsyEr17svz4BnX88MpvX7Q6Vj/+y7as/mIsmLfjes+eta+ZnlyYvJOY6934JGKop1n8ycpKQBIRhyNiaJt1zD79zdFWx24f/wbasM5U+Triqdr5X4qG+AvJxuuTY/dEeeb4WHFVrPfLr1ffbFX/HcXfBtn539v0+l+JfzCpX6+d33odV//4vOWcZrvXf1/y9pp9H04uLFwaj+hLXq81un7/REO5idXyWfwjx5r3/4Ox+k4ciYjsIn44Ih6JiEfztj8WEY9HxLEN4v/p5Sfe2378OyuLf3pL53810ReNe5onSud//K42iy7+4lbiz87/yWpqJN+zmc+/zbRre1czAAAA/PekEbE/knR0JZ2mo6O1/+E/FHvT8tz8wjNn5z64OF17RmAwetPiTtdA3f3Q8XxaX+QnGvIn8vvGX5b6q/nRqbnydKeDhy63r0X/z/xZ6nTrgB3neS3oXvo/dC/9H7qX/g/dq0n/7+9EO4Dd1+z7/+MOtAPYfQ3937IfdBHzf+he+j90L/0futJ8f9z+IXkJiXWJSO+KZkjsUKLTn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//5tD5to=")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

70.384569ms ago: executing program 5 (id=5751):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)

427.62µs ago: executing program 0 (id=5752):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)={[{@shortname_win95}, {@shortname_mixed}, {@fat=@errors_remount}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfa, 0x2b4, &(0x7f00000009c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x4000000)

0s ago: executing program 5 (id=5753):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x227d4000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xfe, "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"}, &(0x7f0000000000)=0x106)
r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x16, 0xa01}, 0x14}}, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x1c, {0x9, 0x1}, 0x6}, 0x1)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, {0x8, 0x5}, 0x5}, 0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bcb0000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r11=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x7, @mcast2, 0x4}, {0xa, 0x1, 0xe, @loopback, 0x427}, r11, 0x4}}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2a8}, 0x1c)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

kernel console output (not intermixed with test programs):

][T18056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18056 comm=syz.1.5170
[  386.403883][T18072] loop6: detected capacity change from 0 to 8192
[  386.415166][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  386.415237][   T29] audit: type=1326 audit(1745091390.926:18546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  386.456624][T18074] loop5: detected capacity change from 0 to 2048
[  386.464255][   T29] audit: type=1400 audit(1745091390.936:18547): avc:  denied  { mounton } for  pid=18071 comm="syz.6.5174" path="/295/file2" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  386.487175][   T29] audit: type=1400 audit(1745091390.966:18548): avc:  denied  { mount } for  pid=18071 comm="syz.6.5174" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  386.509576][   T29] audit: type=1326 audit(1745091390.966:18549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  386.534621][   T29] audit: type=1400 audit(1745091391.036:18550): avc:  denied  { unlink } for  pid=11066 comm="syz-executor" name="file0" dev="tmpfs" ino=2295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  386.564884][   T29] audit: type=1400 audit(1745091391.076:18551): avc:  denied  { unmount } for  pid=13713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  386.598080][T18074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.619266][T18074] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.629886][   T29] audit: type=1400 audit(1745091391.136:18552): avc:  denied  { mount } for  pid=18073 comm="syz.5.5175" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  386.683176][   T29] audit: type=1326 audit(1745091391.166:18553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  386.707007][   T29] audit: type=1326 audit(1745091391.166:18554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  386.732175][   T29] audit: type=1326 audit(1745091391.166:18555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  386.766165][T18084] IPv6: Can't replace route, no match found
[  386.778520][T18081] loop6: detected capacity change from 0 to 164
[  386.830107][T18087] wireguard0: entered promiscuous mode
[  386.835647][T18087] wireguard0: entered allmulticast mode
[  386.922691][T18096] loop6: detected capacity change from 0 to 512
[  386.978975][T18101] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5185'.
[  386.998573][T18096] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  387.032402][  T362] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set
[  387.038788][T18096] EXT4-fs (loop6): 1 truncate cleaned up
[  387.090346][  T362] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 454 with error 117
[  387.098525][T18096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.102947][  T362] EXT4-fs (loop5): This should not happen!! Data will be lost
[  387.102947][  T362] 
[  387.214485][T18112] IPv6: Can't replace route, no match found
[  387.241690][T18114] netlink: 'syz.0.5191': attribute type 10 has an invalid length.
[  387.249802][T18114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5191'.
[  387.282903][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.533197][T18126] loop6: detected capacity change from 0 to 164
[  387.710816][T18135] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5199'.
[  387.819042][T18141] netlink: '+}[@': attribute type 21 has an invalid length.
[  387.826506][T18141] netlink: '+}[@': attribute type 1 has an invalid length.
[  387.833790][T18141] netlink: 144 bytes leftover after parsing attributes in process `+}[@'.
[  387.875166][T18143] loop6: detected capacity change from 0 to 518
[  387.939070][T18143] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  387.963615][T18143] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.5203: iget: special inode unallocated
[  387.977236][T18119] Cannot find set identified by id 0 to match
[  387.990587][T18143] EXT4-fs (loop6): get root inode failed
[  387.996298][T18143] EXT4-fs (loop6): mount failed
[  388.015829][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.175402][T18166] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5214'.
[  388.239829][T18168] SELinux: ebitmap: truncated map
[  388.260052][T18168] SELinux: failed to load policy
[  388.293741][T18175] netlink: 'syz.6.5217': attribute type 10 has an invalid length.
[  388.357713][T18172] loop5: detected capacity change from 0 to 8192
[  388.366777][T18177] FAULT_INJECTION: forcing a failure.
[  388.366777][T18177] name failslab, interval 1, probability 0, space 0, times 0
[  388.379855][T18177] CPU: 1 UID: 0 PID: 18177 Comm: syz.7.5218 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  388.379940][T18177] Tainted: [W]=WARN
[  388.379948][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  388.379963][T18177] Call Trace:
[  388.379970][T18177]  <TASK>
[  388.379979][T18177]  dump_stack_lvl+0xf6/0x150
[  388.380005][T18177]  dump_stack+0x15/0x1a
[  388.380020][T18177]  should_fail_ex+0x261/0x270
[  388.380079][T18177]  should_failslab+0x8f/0xb0
[  388.380105][T18177]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  388.380148][T18177]  ? alloc_vmap_area+0x1d5/0x1800
[  388.380263][T18177]  ? ring_buffer_lock_reserve+0xd7b/0xee0
[  388.380292][T18177]  alloc_vmap_area+0x1d5/0x1800
[  388.380323][T18177]  ? should_fail_ex+0xd7/0x270
[  388.380418][T18177]  ? should_failslab+0x8f/0xb0
[  388.380442][T18177]  ? __kmalloc_cache_node_noprof+0x194/0x340
[  388.380501][T18177]  __get_vm_area_node+0x162/0x1c0
[  388.380544][T18177]  __vmalloc_node_range_noprof+0x285/0xe80
[  388.380630][T18177]  ? sel_write_load+0x15b/0x3c0
[  388.380690][T18177]  ? _parse_integer_limit+0x167/0x180
[  388.380720][T18177]  ? _parse_integer+0x27/0x30
[  388.380747][T18177]  ? avc_has_perm_noaudit+0x1cc/0x210
[  388.380778][T18177]  ? sel_write_load+0x15b/0x3c0
[  388.380806][T18177]  vmalloc_noprof+0x5e/0x70
[  388.380857][T18177]  ? sel_write_load+0x15b/0x3c0
[  388.380917][T18177]  sel_write_load+0x15b/0x3c0
[  388.380944][T18177]  ? __pfx_sel_write_load+0x10/0x10
[  388.380996][T18177]  vfs_write+0x295/0x950
[  388.381018][T18177]  ? putname+0xe1/0x100
[  388.381107][T18177]  ? __fget_files+0x186/0x1c0
[  388.381153][T18177]  ksys_write+0xeb/0x1b0
[  388.381177][T18177]  __x64_sys_write+0x42/0x50
[  388.381199][T18177]  x64_sys_call+0x2a45/0x2e10
[  388.381225][T18177]  do_syscall_64+0xc9/0x1a0
[  388.381254][T18177]  ? clear_bhb_loop+0x25/0x80
[  388.381337][T18177]  ? clear_bhb_loop+0x25/0x80
[  388.381365][T18177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.381385][T18177] RIP: 0033:0x7f884a01e169
[  388.381401][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.381423][T18177] RSP: 002b:00007f8848687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  388.381447][T18177] RAX: ffffffffffffffda RBX: 00007f884a245fa0 RCX: 00007f884a01e169
[  388.381478][T18177] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005
[  388.381546][T18177] RBP: 00007f8848687090 R08: 0000000000000000 R09: 0000000000000000
[  388.381561][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.381575][T18177] R13: 0000000000000000 R14: 00007f884a245fa0 R15: 00007ffe2a81bf58
[  388.381611][T18177]  </TASK>
[  388.381792][T18177] syz.7.5218: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  388.431202][T18160] loop0: detected capacity change from 0 to 164
[  388.435795][T18177] ,cpuset=/,mems_allowed=0
[  388.446888][T18177] CPU: 1 UID: 0 PID: 18177 Comm: syz.7.5218 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  388.447040][T18177] Tainted: [W]=WARN
[  388.447048][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  388.447064][T18177] Call Trace:
[  388.447071][T18177]  <TASK>
[  388.447082][T18177]  dump_stack_lvl+0xf6/0x150
[  388.447112][T18177]  dump_stack+0x15/0x1a
[  388.447134][T18177]  warn_alloc+0x145/0x1b0
[  388.447181][T18177]  __vmalloc_node_range_noprof+0x2aa/0xe80
[  388.447225][T18177]  ? _parse_integer_limit+0x167/0x180
[  388.447324][T18177]  ? _parse_integer+0x27/0x30
[  388.447350][T18177]  ? avc_has_perm_noaudit+0x1cc/0x210
[  388.447386][T18177]  ? sel_write_load+0x15b/0x3c0
[  388.447415][T18177]  vmalloc_noprof+0x5e/0x70
[  388.447438][T18177]  ? sel_write_load+0x15b/0x3c0
[  388.447466][T18177]  sel_write_load+0x15b/0x3c0
[  388.447562][T18177]  ? __pfx_sel_write_load+0x10/0x10
[  388.447609][T18177]  vfs_write+0x295/0x950
[  388.447695][T18177]  ? putname+0xe1/0x100
[  388.447725][T18177]  ? __fget_files+0x186/0x1c0
[  388.447754][T18177]  ksys_write+0xeb/0x1b0
[  388.447779][T18177]  __x64_sys_write+0x42/0x50
[  388.447804][T18177]  x64_sys_call+0x2a45/0x2e10
[  388.447906][T18177]  do_syscall_64+0xc9/0x1a0
[  388.447938][T18177]  ? clear_bhb_loop+0x25/0x80
[  388.447965][T18177]  ? clear_bhb_loop+0x25/0x80
[  388.448065][T18177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.448085][T18177] RIP: 0033:0x7f884a01e169
[  388.448104][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.448159][T18177] RSP: 002b:00007f8848687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  388.448183][T18177] RAX: ffffffffffffffda RBX: 00007f884a245fa0 RCX: 00007f884a01e169
[  388.448199][T18177] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005
[  388.448214][T18177] RBP: 00007f8848687090 R08: 0000000000000000 R09: 0000000000000000
[  388.448229][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.448283][T18177] R13: 0000000000000000 R14: 00007f884a245fa0 R15: 00007ffe2a81bf58
[  388.448307][T18177]  </TASK>
[  388.448533][T18177] Mem-Info:
[  388.473635][T18177] active_anon:3610 inactive_anon:32 isolated_anon:0
[  388.473635][T18177]  active_file:15954 inactive_file:2233 isolated_file:0
[  388.473635][T18177]  unevictable:0 dirty:81 writeback:0
[  388.473635][T18177]  slab_reclaimable:3071 slab_unreclaimable:20366
[  388.473635][T18177]  mapped:28445 shmem:861 pagetables:906
[  388.473635][T18177]  sec_pagetables:0 bounce:0
[  388.473635][T18177]  kernel_misc_reclaimable:0
[  388.473635][T18177]  free:1837405 free_pcp:8583 free_cma:0
[  388.521108][T18185] FAULT_INJECTION: forcing a failure.
[  388.521108][T18185] name failslab, interval 1, probability 0, space 0, times 0
[  388.525786][T18177] Node 0 active_anon:13512kB inactive_anon:128kB active_file:63816kB inactive_file:8932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113780kB dirty:324kB writeback:0kB shmem:2516kB writeback_tmp:0kB kernel_stack:3008kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  388.531048][T18185] CPU: 0 UID: 0 PID: 18185 Comm: syz.6.5222 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  388.531093][T18185] Tainted: [W]=WARN
[  388.531101][T18185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  388.531161][T18185] Call Trace:
[  388.531169][T18185]  <TASK>
[  388.531178][T18185]  dump_stack_lvl+0xf6/0x150
[  388.531208][T18185]  dump_stack+0x15/0x1a
[  388.531230][T18185]  should_fail_ex+0x261/0x270
[  388.531269][T18185]  should_failslab+0x8f/0xb0
[  388.531297][T18185]  __kmalloc_noprof+0xad/0x410
[  388.531333][T18185]  ? alloc_pipe_info+0x1cb/0x360
[  388.531361][T18185]  alloc_pipe_info+0x1cb/0x360
[  388.531387][T18185]  splice_direct_to_actor+0x621/0x680
[  388.531435][T18185]  ? __pfx_direct_splice_actor+0x10/0x10
[  388.531476][T18185]  ? selinux_file_permission+0x32a/0x360
[  388.531504][T18185]  do_splice_direct+0xd9/0x150
[  388.531562][T18185]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  388.531607][T18185]  do_sendfile+0x40a/0x690
[  388.531643][T18185]  __x64_sys_sendfile64+0x113/0x160
[  388.531675][T18185]  x64_sys_call+0xfc3/0x2e10
[  388.531755][T18185]  do_syscall_64+0xc9/0x1a0
[  388.531786][T18185]  ? clear_bhb_loop+0x25/0x80
[  388.531862][T18185]  ? clear_bhb_loop+0x25/0x80
[  388.531888][T18185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.531995][T18185] RIP: 0033:0x7f81b255e169
[  388.532013][T18185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.532036][T18185] RSP: 002b:00007f81b0bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  388.532061][T18185] RAX: ffffffffffffffda RBX: 00007f81b2785fa0 RCX: 00007f81b255e169
[  388.532076][T18185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  388.532091][T18185] RBP: 00007f81b0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  388.532107][T18185] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001
[  388.532122][T18185] R13: 0000000000000000 R14: 00007f81b2785fa0 R15: 00007ffca19334a8
[  388.532145][T18185]  </TASK>
[  388.604785][T18187] FAULT_INJECTION: forcing a failure.
[  388.604785][T18187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.610676][T18177] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  388.610743][T18177] lowmem_reserve[]: 0 2882 7860 7860
[  388.610778][T18177] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  388.618835][T18187] CPU: 0 UID: 0 PID: 18187 Comm: syz.6.5224 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  388.618878][T18187] Tainted: [W]=WARN
[  388.618926][T18187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  388.618943][T18187] Call Trace:
[  388.618950][T18187]  <TASK>
[  388.618961][T18187]  dump_stack_lvl+0xf6/0x150
[  388.618992][T18187]  dump_stack+0x15/0x1a
[  388.619014][T18187]  should_fail_ex+0x261/0x270
[  388.619045][T18187]  should_fail+0xb/0x10
[  388.619072][T18187]  should_fail_usercopy+0x1a/0x20
[  388.619173][T18187]  strncpy_from_user+0x25/0x230
[  388.619214][T18187]  ? getname_flags+0x81/0x3b0
[  388.619247][T18187]  getname_flags+0xb0/0x3b0
[  388.619312][T18187]  do_sys_openat2+0x65/0x110
[  388.619350][T18187]  __x64_sys_openat+0xf8/0x120
[  388.619388][T18187]  x64_sys_call+0x1ac/0x2e10
[  388.619416][T18187]  do_syscall_64+0xc9/0x1a0
[  388.619528][T18187]  ? clear_bhb_loop+0x25/0x80
[  388.619556][T18187]  ? clear_bhb_loop+0x25/0x80
[  388.619583][T18187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.619611][T18187] RIP: 0033:0x7f81b255e169
[  388.619629][T18187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.619668][T18187] RSP: 002b:00007f81b0bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  388.619691][T18187] RAX: ffffffffffffffda RBX: 00007f81b2785fa0 RCX: 00007f81b255e169
[  388.619707][T18187] RDX: 0000000000000000 RSI: 0000200000001600 RDI: ffffffffffffff9c
[  388.619723][T18187] RBP: 00007f81b0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  388.619738][T18187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.619753][T18187] R13: 0000000000000000 R14: 00007f81b2785fa0 R15: 00007ffca19334a8
[  388.619778][T18187]  </TASK>
[  389.438583][T18177] lowmem_reserve[]: 0 0 4978 4978
[  389.443705][T18177] Node 0 Normal free:4394460kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:13592kB inactive_anon:80kB active_file:63816kB inactive_file:8932kB unevictable:0kB writepending:420kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:31224kB local_pcp:21732kB free_cma:0kB
[  389.474138][T18177] lowmem_reserve[]: 0 0 0 0
[  389.478786][T18177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  389.491600][T18177] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB
[  389.507727][T18177] Node 0 Normal: 417*4kB (UME) 855*8kB (UME) 510*16kB (UME) 1298*32kB (UME) 1374*64kB (UME) 836*128kB (UME) 701*256kB (UME) 682*512kB (UME) 600*1024kB (UME) 98*2048kB (UME) 683*4096kB (UM) = 4394460kB
[  389.527788][T18177] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  389.537170][T18177] 18772 total pagecache pages
[  389.541856][T18177] 7 pages in swap cache
[  389.545999][T18177] Free swap  = 124380kB
[  389.550160][T18177] Total swap = 124996kB
[  389.554301][T18177] 2097051 pages RAM
[  389.558146][T18177] 0 pages HighMem/MovableOnly
[  389.562875][T18177] 80823 pages reserved
[  389.635761][T18197] loop6: detected capacity change from 0 to 128
[  389.760899][T18212] loop5: detected capacity change from 0 to 2048
[  389.769849][T18215] loop6: detected capacity change from 0 to 512
[  389.810102][T18215] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5236: corrupted in-inode xattr: invalid ea_ino
[  389.824874][T18215] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5236: couldn't read orphan inode 15 (err -117)
[  389.839540][T18212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.852476][T18215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.123821][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.189942][T18235] loop6: detected capacity change from 0 to 512
[  390.197233][T18235] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  390.209978][T18235] EXT4-fs (loop6): 1 truncate cleaned up
[  390.216764][T18235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.373048][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.510493][T18239] loop6: detected capacity change from 0 to 512
[  390.550827][T18239] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  390.581699][T18239] EXT4-fs (loop6): 1 truncate cleaned up
[  390.601854][T18242] netlink: 'syz.0.5243': attribute type 10 has an invalid length.
[  390.609828][T18242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5243'.
[  390.610931][T18239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.633614][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.654397][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.655906][T18244] netlink: 'syz.5.5244': attribute type 10 has an invalid length.
[  390.671488][T18244] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5244'.
[  390.692548][T18247] FAULT_INJECTION: forcing a failure.
[  390.692548][T18247] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.694430][T18245] Cannot find set identified by id 0 to match
[  390.705754][T18247] CPU: 0 UID: 0 PID: 18247 Comm: syz.6.5245 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  390.705842][T18247] Tainted: [W]=WARN
[  390.705852][T18247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  390.705868][T18247] Call Trace:
[  390.705877][T18247]  <TASK>
[  390.705888][T18247]  dump_stack_lvl+0xf6/0x150
[  390.705960][T18247]  dump_stack+0x15/0x1a
[  390.705982][T18247]  should_fail_ex+0x261/0x270
[  390.706042][T18247]  should_fail+0xb/0x10
[  390.706067][T18247]  should_fail_usercopy+0x1a/0x20
[  390.706099][T18247]  strncpy_from_user+0x25/0x230
[  390.706141][T18247]  ? getname_flags+0x81/0x3b0
[  390.706238][T18247]  getname_flags+0xb0/0x3b0
[  390.706276][T18247]  __x64_sys_renameat2+0x61/0xa0
[  390.706318][T18247]  x64_sys_call+0x2cf7/0x2e10
[  390.706346][T18247]  do_syscall_64+0xc9/0x1a0
[  390.706378][T18247]  ? clear_bhb_loop+0x25/0x80
[  390.706405][T18247]  ? clear_bhb_loop+0x25/0x80
[  390.706435][T18247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.706472][T18247] RIP: 0033:0x7f81b255e169
[  390.706493][T18247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.706516][T18247] RSP: 002b:00007f81b0bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  390.706540][T18247] RAX: ffffffffffffffda RBX: 00007f81b2785fa0 RCX: 00007f81b255e169
[  390.706556][T18247] RDX: ffffffffffffff9c RSI: 0000200000001100 RDI: ffffffffffffff9c
[  390.706572][T18247] RBP: 00007f81b0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  390.706587][T18247] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001
[  390.706675][T18247] R13: 0000000000000000 R14: 00007f81b2785fa0 R15: 00007ffca19334a8
[  390.706764][T18247]  </TASK>
[  390.750474][T18249] loop6: detected capacity change from 0 to 512
[  390.753680][T18250] Cannot find set identified by id 0 to match
[  390.755932][T18249] EXT4-fs: Ignoring removed mblk_io_submit option
[  390.908462][T18249] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  390.931583][T18249] EXT4-fs (loop6): 1 truncate cleaned up
[  390.937950][T18249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.980510][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.054738][T18257] loop6: detected capacity change from 0 to 512
[  391.063684][T18257] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5249: corrupted in-inode xattr: invalid ea_ino
[  391.083892][T18257] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5249: couldn't read orphan inode 15 (err -117)
[  391.097006][T18257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.214794][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.244390][T18272] loop6: detected capacity change from 0 to 1024
[  391.252305][T18272] EXT4-fs: Ignoring removed oldalloc option
[  391.258372][T18272] EXT4-fs: Ignoring removed orlov option
[  391.264088][T18272] EXT4-fs: Ignoring removed oldalloc option
[  391.270084][T18272] EXT4-fs: Ignoring removed nomblk_io_submit option
[  391.290457][T18272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.622202][   T29] kauditd_printk_skb: 510 callbacks suppressed
[  391.622219][   T29] audit: type=1400 audit(1745091396.136:19066): avc:  denied  { append } for  pid=18283 comm="syz.5.5258" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  391.663066][T18285] program syz.5.5258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  391.715704][T18285] FAULT_INJECTION: forcing a failure.
[  391.715704][T18285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.728915][T18285] CPU: 0 UID: 0 PID: 18285 Comm: syz.5.5258 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  391.728964][T18285] Tainted: [W]=WARN
[  391.729012][T18285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  391.729025][T18285] Call Trace:
[  391.729033][T18285]  <TASK>
[  391.729044][T18285]  dump_stack_lvl+0xf6/0x150
[  391.729108][T18285]  dump_stack+0x15/0x1a
[  391.729127][T18285]  should_fail_ex+0x261/0x270
[  391.729152][T18285]  should_fail+0xb/0x10
[  391.729170][T18285]  should_fail_usercopy+0x1a/0x20
[  391.729196][T18285]  _copy_from_user+0x1c/0xa0
[  391.729298][T18285]  scsi_ioctl+0x10eb/0x14d0
[  391.729385][T18285]  ? avc_has_perm+0xd6/0x150
[  391.729456][T18285]  ? file_has_perm+0x334/0x380
[  391.729482][T18285]  ? do_vfs_ioctl+0x977/0x1570
[  391.729530][T18285]  sg_ioctl+0xce9/0x1850
[  391.729599][T18285]  ? __fget_files+0x186/0x1c0
[  391.729625][T18285]  ? __pfx_sg_ioctl+0x10/0x10
[  391.729650][T18285]  __se_sys_ioctl+0xc9/0x140
[  391.729682][T18285]  __x64_sys_ioctl+0x43/0x50
[  391.729752][T18285]  x64_sys_call+0x168d/0x2e10
[  391.729778][T18285]  do_syscall_64+0xc9/0x1a0
[  391.729802][T18285]  ? clear_bhb_loop+0x25/0x80
[  391.729826][T18285]  ? clear_bhb_loop+0x25/0x80
[  391.729852][T18285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.729914][T18285] RIP: 0033:0x7f656062e169
[  391.729933][T18285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.729956][T18285] RSP: 002b:00007f655ec97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  391.729978][T18285] RAX: ffffffffffffffda RBX: 00007f6560855fa0 RCX: 00007f656062e169
[  391.729993][T18285] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003
[  391.730004][T18285] RBP: 00007f655ec97090 R08: 0000000000000000 R09: 0000000000000000
[  391.730015][T18285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.730042][T18285] R13: 0000000000000000 R14: 00007f6560855fa0 R15: 00007ffc7287f488
[  391.730060][T18285]  </TASK>
[  391.858067][   T29] audit: type=1400 audit(1745091396.176:19067): avc:  denied  { write } for  pid=18281 comm="syz.0.5257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  392.042754][T18291] loop5: detected capacity change from 0 to 8192
[  392.142255][T18299] loop5: detected capacity change from 0 to 512
[  392.156457][   T29] audit: type=1326 audit(1745091396.666:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  392.180246][   T29] audit: type=1326 audit(1745091396.666:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  392.203848][   T29] audit: type=1326 audit(1745091396.666:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  392.227544][   T29] audit: type=1326 audit(1745091396.666:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  392.268096][T18299] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5264: corrupted in-inode xattr: invalid ea_ino
[  392.284359][   T29] audit: type=1326 audit(1745091396.766:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18296 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc31e169 code=0x7ffc0000
[  392.308107][   T29] audit: type=1326 audit(1745091396.766:19073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18296 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f38fc31e169 code=0x7ffc0000
[  392.331611][   T29] audit: type=1326 audit(1745091396.776:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18296 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc31e169 code=0x7ffc0000
[  392.360194][   T29] audit: type=1326 audit(1745091396.876:19075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18284 comm="syz.7.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  392.360607][T18299] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5264: couldn't read orphan inode 15 (err -117)
[  392.587994][T18320] tipc: Started in network mode
[  392.592988][T18320] tipc: Node identity ac14140f, cluster identity 4711
[  392.605698][T18320] tipc: New replicast peer: 255.15.0.0
[  392.611485][T18320] tipc: Enabled bearer <udp:syz2>, priority 10
[  392.639512][T18330] loop5: detected capacity change from 0 to 2048
[  392.668021][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  392.683353][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[  392.750431][T18336] loop5: detected capacity change from 0 to 2048
[  392.780435][T18336] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.790734][T12250] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  392.812053][T12250] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  392.929570][T18336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5276: bg 0: block 345: padding at end of block bitmap is not set
[  393.045006][T18350] syzkaller0: entered promiscuous mode
[  393.050746][T18350] syzkaller0: entered allmulticast mode
[  393.095908][T18366] IPv6: Can't replace route, no match found
[  393.114761][T18363] loop5: detected capacity change from 0 to 512
[  393.162801][T18363] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5286: Failed to acquire dquot type 1
[  393.177480][T18371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.183948][T18363] EXT4-fs (loop5): 1 truncate cleaned up
[  393.205106][T18363] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.236871][T18371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.328927][T18371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.381171][T18371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.461271][T18399] IPv6: Can't replace route, no match found
[  393.494323][T18401] loop5: detected capacity change from 0 to 2048
[  393.510776][T18371] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.512194][T18401] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.523144][T18371] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.542967][T18371] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.555055][T18371] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.727865][T12247] tipc: Node number set to 2886997007
[  393.738721][T18306] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  393.792873][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 838 with error 117
[  393.805668][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  393.805668][   T37] 
[  394.120901][   T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  394.131303][   T10] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  394.177787][T18432] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5308'.
[  394.207892][T18434] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5309'.
[  394.421820][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 854 with max blocks 1 with error 28
[  394.434324][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  394.434324][   T37] 
[  394.444045][   T37] EXT4-fs (loop5): Total free blocks count 0
[  394.450062][   T37] EXT4-fs (loop5): Free/Dirty block details
[  394.455972][   T37] EXT4-fs (loop5): free_blocks=0
[  394.460965][   T37] EXT4-fs (loop5): dirty_blocks=16
[  394.466095][   T37] EXT4-fs (loop5): Block reservation details
[  394.472180][   T37] EXT4-fs (loop5): i_reserved_data_blocks=1
[  394.582711][T18446] loop5: detected capacity change from 0 to 512
[  394.602061][T18446] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5314: corrupted in-inode xattr: invalid ea_ino
[  394.616773][T18446] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5314: couldn't read orphan inode 15 (err -117)
[  394.874370][T18475] loop5: detected capacity change from 0 to 512
[  394.881371][T18479] FAULT_INJECTION: forcing a failure.
[  394.881371][T18479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.894724][T18479] CPU: 1 UID: 0 PID: 18479 Comm: syz.1.5327 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  394.894829][T18479] Tainted: [W]=WARN
[  394.894838][T18479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  394.894854][T18479] Call Trace:
[  394.894863][T18479]  <TASK>
[  394.894870][T18479]  dump_stack_lvl+0xf6/0x150
[  394.894893][T18479]  dump_stack+0x15/0x1a
[  394.894910][T18479]  should_fail_ex+0x261/0x270
[  394.894947][T18479]  should_fail+0xb/0x10
[  394.894972][T18479]  should_fail_usercopy+0x1a/0x20
[  394.895010][T18479]  _copy_from_user+0x1c/0xa0
[  394.895046][T18479]  copy_msghdr_from_user+0x54/0x2b0
[  394.895146][T18479]  ? __fget_files+0x186/0x1c0
[  394.895174][T18479]  __sys_sendmsg+0x141/0x240
[  394.895273][T18479]  __x64_sys_sendmsg+0x46/0x50
[  394.895302][T18479]  x64_sys_call+0x26f3/0x2e10
[  394.895382][T18479]  do_syscall_64+0xc9/0x1a0
[  394.895406][T18479]  ? clear_bhb_loop+0x25/0x80
[  394.895429][T18479]  ? clear_bhb_loop+0x25/0x80
[  394.895455][T18479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.895557][T18479] RIP: 0033:0x7f38fc31e169
[  394.895575][T18479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.895598][T18479] RSP: 002b:00007f38fa987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.895619][T18479] RAX: ffffffffffffffda RBX: 00007f38fc545fa0 RCX: 00007f38fc31e169
[  394.895632][T18479] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005
[  394.895644][T18479] RBP: 00007f38fa987090 R08: 0000000000000000 R09: 0000000000000000
[  394.895654][T18479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.895721][T18479] R13: 0000000000000000 R14: 00007f38fc545fa0 R15: 00007fffee1743a8
[  394.895756][T18479]  </TASK>
[  395.085137][T18475] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5326: corrupted in-inode xattr: invalid ea_ino
[  395.099876][T18475] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5326: couldn't read orphan inode 15 (err -117)
[  395.144274][T18486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.205223][T18492] pim6reg: entered allmulticast mode
[  395.237620][T18492] pim6reg: left allmulticast mode
[  395.292306][T18486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.348969][T18486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.400178][T18486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.439932][T18508] netlink: 'syz.5.5339': attribute type 10 has an invalid length.
[  395.447804][T18508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5339'.
[  395.469674][T18486] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.481538][T18486] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.501989][T18486] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.517951][T18518] Cannot find set identified by id 0 to match
[  395.533391][T18486] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.832178][T18540] FAULT_INJECTION: forcing a failure.
[  395.832178][T18540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.850953][T18540] CPU: 0 UID: 0 PID: 18540 Comm: syz.0.5350 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  395.850991][T18540] Tainted: [W]=WARN
[  395.850999][T18540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  395.851013][T18540] Call Trace:
[  395.851021][T18540]  <TASK>
[  395.851029][T18540]  dump_stack_lvl+0xf6/0x150
[  395.851130][T18540]  dump_stack+0x15/0x1a
[  395.851149][T18540]  should_fail_ex+0x261/0x270
[  395.851246][T18540]  should_fail+0xb/0x10
[  395.851266][T18540]  should_fail_usercopy+0x1a/0x20
[  395.851312][T18540]  strncpy_from_user+0x25/0x230
[  395.851385][T18540]  ? getname_flags+0x81/0x3b0
[  395.851416][T18540]  getname_flags+0xb0/0x3b0
[  395.851444][T18540]  do_sys_openat2+0x65/0x110
[  395.851475][T18540]  __x64_sys_openat+0xf8/0x120
[  395.851528][T18540]  x64_sys_call+0x1ac/0x2e10
[  395.851695][T18540]  do_syscall_64+0xc9/0x1a0
[  395.851719][T18540]  ? clear_bhb_loop+0x25/0x80
[  395.851741][T18540]  ? clear_bhb_loop+0x25/0x80
[  395.851797][T18540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.851822][T18540] RIP: 0033:0x7fa053c2e169
[  395.851840][T18540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.851863][T18540] RSP: 002b:00007fa052297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  395.851881][T18540] RAX: ffffffffffffffda RBX: 00007fa053e55fa0 RCX: 00007fa053c2e169
[  395.851896][T18540] RDX: 0000000000000000 RSI: 0000200000001600 RDI: ffffffffffffff9c
[  395.851986][T18540] RBP: 00007fa052297090 R08: 0000000000000000 R09: 0000000000000000
[  395.852000][T18540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.852011][T18540] R13: 0000000000000000 R14: 00007fa053e55fa0 R15: 00007ffcc76ee3c8
[  395.852031][T18540]  </TASK>
[  395.905610][T18544] loop6: detected capacity change from 0 to 512
[  395.936669][T18546] loop0: detected capacity change from 0 to 512
[  395.999393][T18544] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  396.093276][T18546] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5350: Failed to acquire dquot type 1
[  396.105570][T18544] EXT4-fs (loop6): 1 truncate cleaned up
[  396.115338][T18546] EXT4-fs (loop0): 1 truncate cleaned up
[  396.126861][T18546] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.356199][T18566] netlink: 'syz.5.5358': attribute type 10 has an invalid length.
[  396.364145][T18566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5358'.
[  396.411537][T18570] netlink: 'syz.0.5360': attribute type 10 has an invalid length.
[  396.419585][T18570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5360'.
[  396.442397][T18573] Cannot find set identified by id 0 to match
[  396.451782][T18575] loop6: detected capacity change from 0 to 512
[  396.461331][T18575] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  396.483837][T18575] EXT4-fs (loop6): 1 truncate cleaned up
[  396.524949][T18579] Cannot find set identified by id 0 to match
[  396.541254][T18581] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5363'.
[  396.554988][T18583] netlink: 'syz.6.5365': attribute type 10 has an invalid length.
[  396.563018][T18583] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5365'.
[  396.598715][T18587] FAULT_INJECTION: forcing a failure.
[  396.598715][T18587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.611861][T18587] CPU: 1 UID: 0 PID: 18587 Comm: syz.1.5367 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  396.611922][T18587] Tainted: [W]=WARN
[  396.611929][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  396.611941][T18587] Call Trace:
[  396.611947][T18587]  <TASK>
[  396.611955][T18587]  dump_stack_lvl+0xf6/0x150
[  396.611978][T18587]  dump_stack+0x15/0x1a
[  396.611998][T18587]  should_fail_ex+0x261/0x270
[  396.612023][T18587]  should_fail+0xb/0x10
[  396.612086][T18587]  should_fail_usercopy+0x1a/0x20
[  396.612117][T18587]  _copy_from_user+0x1c/0xa0
[  396.612171][T18587]  copy_msghdr_from_user+0x54/0x2b0
[  396.612208][T18587]  ? do_recvmmsg+0x2b8/0x6e0
[  396.612241][T18587]  do_recvmmsg+0x24d/0x6e0
[  396.612357][T18587]  __x64_sys_recvmmsg+0xe4/0x170
[  396.612416][T18587]  x64_sys_call+0x1b90/0x2e10
[  396.612439][T18587]  do_syscall_64+0xc9/0x1a0
[  396.612488][T18587]  ? clear_bhb_loop+0x25/0x80
[  396.612515][T18587]  ? clear_bhb_loop+0x25/0x80
[  396.612539][T18587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.612559][T18587] RIP: 0033:0x7f38fc31e169
[  396.612614][T18587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.612631][T18587] RSP: 002b:00007f38fa987038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  396.612714][T18587] RAX: ffffffffffffffda RBX: 00007f38fc545fa0 RCX: 00007f38fc31e169
[  396.612729][T18587] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000005
[  396.612743][T18587] RBP: 00007f38fa987090 R08: 0000000000000000 R09: 0000000000000000
[  396.612757][T18587] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001
[  396.612772][T18587] R13: 0000000000000000 R14: 00007f38fc545fa0 R15: 00007fffee1743a8
[  396.612801][T18587]  </TASK>
[  396.806240][T18591] set match dimension is over the limit!
[  396.815255][   T29] kauditd_printk_skb: 218 callbacks suppressed
[  396.815274][   T29] audit: type=1400 audit(1745091401.326:19290): avc:  denied  { create } for  pid=18590 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.818175][T18592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18592 comm=syz.1.5369
[  396.821550][   T29] audit: type=1400 audit(1745091401.326:19291): avc:  denied  { write } for  pid=18590 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.841172][T18592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18592 comm=syz.1.5369
[  396.853682][   T29] audit: type=1400 audit(1745091401.326:19292): avc:  denied  { read } for  pid=18590 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.905658][   T29] audit: type=1400 audit(1745091401.326:19293): avc:  denied  { setopt } for  pid=18590 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  396.925838][   T29] audit: type=1400 audit(1745091401.326:19294): avc:  denied  { write } for  pid=18590 comm="syz.1.5369" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  397.246627][T18604] loop5: detected capacity change from 0 to 2048
[  397.267089][   T29] audit: type=1400 audit(1745091401.776:19295): avc:  denied  { create } for  pid=18607 comm="syz.0.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  397.360024][T18604] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.379822][   T29] audit: type=1400 audit(1745091401.896:19296): avc:  denied  { add_name } for  pid=18603 comm="syz.5.5373" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  397.400862][   T29] audit: type=1400 audit(1745091401.896:19297): avc:  denied  { create } for  pid=18603 comm="syz.5.5373" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  397.455723][   T29] audit: type=1400 audit(1745091401.916:19298): avc:  denied  { read write } for  pid=18603 comm="syz.5.5373" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  397.478614][   T29] audit: type=1400 audit(1745091401.916:19299): avc:  denied  { open } for  pid=18603 comm="syz.5.5373" path="/411/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  397.826114][T18627] loop6: detected capacity change from 0 to 2048
[  397.912466][T18612] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5373: bg 0: block 345: padding at end of block bitmap is not set
[  397.927276][T18612] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  397.940109][T18612] EXT4-fs (loop5): This should not happen!! Data will be lost
[  397.940109][T18612] 
[  397.976718][T18641] netlink: 'syz.6.5388': attribute type 10 has an invalid length.
[  397.984673][T18641] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5388'.
[  398.001120][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  398.013922][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  398.013922][   T37] 
[  398.049850][T18644] set match dimension is over the limit!
[  398.060360][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28
[  398.073291][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  398.073291][   T37] 
[  398.082987][   T37] EXT4-fs (loop5): Total free blocks count 0
[  398.088998][   T37] EXT4-fs (loop5): Free/Dirty block details
[  398.094909][   T37] EXT4-fs (loop5): free_blocks=0
[  398.099988][   T37] EXT4-fs (loop5): dirty_blocks=1808
[  398.402614][T18661] loop0: detected capacity change from 0 to 512
[  398.431896][T18661] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5393: Failed to acquire dquot type 1
[  398.459352][T18661] EXT4-fs (loop0): 1 truncate cleaned up
[  398.468522][T18661] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.862432][T18671] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.921280][T18676] netlink: 'syz.0.5399': attribute type 10 has an invalid length.
[  398.929179][T18676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5399'.
[  398.942378][T18671] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.982606][T18676] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  399.009287][T18676] team0: Failed to send options change via netlink (err -105)
[  399.016987][T18676] team0: Port device geneve1 added
[  399.034519][T18671] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.102030][T18671] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.167398][T18685] FAULT_INJECTION: forcing a failure.
[  399.167398][T18685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  399.180863][T18685] CPU: 1 UID: 0 PID: 18685 Comm: syz.1.5404 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  399.180959][T18685] Tainted: [W]=WARN
[  399.180969][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  399.180985][T18685] Call Trace:
[  399.180994][T18685]  <TASK>
[  399.181004][T18685]  dump_stack_lvl+0xf6/0x150
[  399.181039][T18685]  dump_stack+0x15/0x1a
[  399.181061][T18685]  should_fail_ex+0x261/0x270
[  399.181090][T18685]  should_fail+0xb/0x10
[  399.181198][T18685]  should_fail_usercopy+0x1a/0x20
[  399.181233][T18685]  _copy_from_user+0x1c/0xa0
[  399.181268][T18685]  copy_from_sockptr+0x65/0xb0
[  399.181298][T18685]  packet_setsockopt+0x8c3/0xfe0
[  399.181356][T18685]  ? __pfx_packet_setsockopt+0x10/0x10
[  399.181379][T18685]  __sys_setsockopt+0x187/0x200
[  399.181402][T18685]  __x64_sys_setsockopt+0x66/0x80
[  399.181429][T18685]  x64_sys_call+0x2a09/0x2e10
[  399.181483][T18685]  do_syscall_64+0xc9/0x1a0
[  399.181515][T18685]  ? clear_bhb_loop+0x25/0x80
[  399.181540][T18685]  ? clear_bhb_loop+0x25/0x80
[  399.181712][T18685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.181737][T18685] RIP: 0033:0x7f38fc31e169
[  399.181756][T18685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.181776][T18685] RSP: 002b:00007f38fa987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  399.181866][T18685] RAX: ffffffffffffffda RBX: 00007f38fc545fa0 RCX: 00007f38fc31e169
[  399.181934][T18685] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000007
[  399.181967][T18685] RBP: 00007f38fa987090 R08: 0000000000000004 R09: 0000000000000000
[  399.181981][T18685] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.181996][T18685] R13: 0000000000000000 R14: 00007f38fc545fa0 R15: 00007fffee1743a8
[  399.182019][T18685]  </TASK>
[  399.489642][T18691] loop5: detected capacity change from 0 to 164
[  399.532204][T18696] netlink: 'syz.7.5408': attribute type 10 has an invalid length.
[  399.645446][T18702] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.655413][T18702] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.693117][T18705] loop5: detected capacity change from 0 to 2048
[  399.715016][T18706] pim6reg: entered allmulticast mode
[  399.724663][T18706] pim6reg: left allmulticast mode
[  399.735992][T18705] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.781289][T18702] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.791125][T18702] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.890255][T18702] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.900191][T18702] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.937416][   T57] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[  399.962022][T18702] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.971933][T18702] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.986713][   T57] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 187 with error 117
[  399.999377][   T57] EXT4-fs (loop5): This should not happen!! Data will be lost
[  399.999377][   T57] 
[  400.014430][T18722] xt_TCPMSS: Only works on TCP SYN packets
[  400.024886][T18722] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5417'.
[  400.047655][T18702] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.056002][T18702] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.068185][T18702] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.076425][T18702] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.089296][T18702] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.097531][T18702] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.110191][T18702] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.118451][T18702] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.217426][T18671] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.239592][T18671] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.272075][T18671] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.290549][T18671] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.420389][T18735] syzkaller0: entered promiscuous mode
[  400.425919][T18735] syzkaller0: entered allmulticast mode
[  400.639352][T18715] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 203 with max blocks 2 with error 117
[  400.651910][T18715] EXT4-fs (loop5): This should not happen!! Data will be lost
[  400.651910][T18715] 
[  400.699843][T18750] syzkaller0: entered promiscuous mode
[  400.705390][T18750] syzkaller0: entered allmulticast mode
[  400.995830][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5416'.
[  401.044072][T18762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18762 comm=syz.6.5430
[  401.056830][T18762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18762 comm=syz.6.5430
[  401.259159][T18770] loop6: detected capacity change from 0 to 128
[  401.711857][T18779] Cannot find set identified by id 0 to match
[  401.792332][T18794] loop5: detected capacity change from 0 to 2048
[  401.849594][   T29] kauditd_printk_skb: 303 callbacks suppressed
[  401.849611][   T29] audit: type=1400 audit(1745091406.366:19599): avc:  denied  { module_request } for  pid=18797 comm="syz.7.5444" kmod="br_netfilter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  401.880272][T18796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18796 comm=syz.0.5445
[  401.892983][T18796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18796 comm=syz.0.5445
[  401.901646][T18801] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5444'.
[  401.921689][   T29] audit: type=1400 audit(1745091406.436:19600): avc:  denied  { create } for  pid=18797 comm="syz.7.5444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  401.942842][   T29] audit: type=1400 audit(1745091406.456:19601): avc:  denied  { ioctl } for  pid=18797 comm="syz.7.5444" path="socket:[63074]" dev="sockfs" ino=63074 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  402.080915][   T29] audit: type=1107 audit(1745091406.506:19602): pid=18805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  402.094692][   T29] audit: type=1400 audit(1745091406.596:19603): avc:  denied  { create } for  pid=18811 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  402.115010][   T29] audit: type=1400 audit(1745091406.596:19604): avc:  denied  { write } for  pid=18811 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  402.135249][   T29] audit: type=1400 audit(1745091406.636:19605): avc:  denied  { create } for  pid=18811 comm="+}[@" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  402.217580][T18817] netlink: 'syz.7.5452': attribute type 10 has an invalid length.
[  402.225547][T18817] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5452'.
[  402.234898][T18820] netlink: 'syz.5.5454': attribute type 10 has an invalid length.
[  402.242949][T18820] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5454'.
[  402.261694][   T29] audit: type=1400 audit(1745091406.776:19606): avc:  denied  { create } for  pid=18815 comm="syz.7.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  402.281614][   T29] audit: type=1400 audit(1745091406.776:19607): avc:  denied  { ioctl } for  pid=18815 comm="syz.7.5452" path="socket:[63102]" dev="sockfs" ino=63102 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  402.306709][   T29] audit: type=1400 audit(1745091406.776:19608): avc:  denied  { connect } for  pid=18815 comm="syz.7.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  402.341367][T18818] loop0: detected capacity change from 0 to 2048
[  402.432611][T18829] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5456'.
[  402.441822][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5456'.
[  402.470449][T18829] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5456'.
[  402.530514][T18822] set match dimension is over the limit!
[  402.530526][T18821] Cannot find set identified by id 0 to match
[  402.578699][T18833] loop6: detected capacity change from 0 to 512
[  402.585691][T18833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  402.638638][T18833] EXT4-fs (loop6): 1 truncate cleaned up
[  402.864822][T18837] chnl_net:caif_netlink_parms(): no params data found
[  402.894305][ T1799] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.910912][T18851] loop6: detected capacity change from 0 to 128
[  402.944886][T18837] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.952037][T18837] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.961018][T18837] bridge_slave_0: entered allmulticast mode
[  402.968576][T18837] bridge_slave_0: entered promiscuous mode
[  402.976836][ T1799] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.988903][T18837] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.996112][T18837] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.003586][T18837] bridge_slave_1: entered allmulticast mode
[  403.011966][T18837] bridge_slave_1: entered promiscuous mode
[  403.020707][T18861] loop6: detected capacity change from 0 to 512
[  403.028811][T18861] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  403.040342][T18861] EXT4-fs (loop6): 1 truncate cleaned up
[  403.041399][ T1799] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.072383][T18837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.084856][T18837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.120894][T18867] netlink: 'syz.7.5465': attribute type 10 has an invalid length.
[  403.131453][T18837] team0: Port device team_slave_0 added
[  403.131772][T18870] FAULT_INJECTION: forcing a failure.
[  403.131772][T18870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.150171][T18870] CPU: 0 UID: 0 PID: 18870 Comm: syz.5.5468 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  403.150278][T18870] Tainted: [W]=WARN
[  403.150286][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  403.150301][T18870] Call Trace:
[  403.150309][T18870]  <TASK>
[  403.150319][T18870]  dump_stack_lvl+0xf6/0x150
[  403.150347][T18870]  dump_stack+0x15/0x1a
[  403.150368][T18870]  should_fail_ex+0x261/0x270
[  403.150477][T18870]  should_fail+0xb/0x10
[  403.150502][T18870]  should_fail_usercopy+0x1a/0x20
[  403.150534][T18870]  _copy_from_iter+0xd8/0xd10
[  403.150652][T18870]  ? kmalloc_reserve+0x16e/0x190
[  403.150671][T18870]  ? __build_skb_around+0x199/0x1f0
[  403.150806][T18870]  ? __alloc_skb+0x227/0x320
[  403.150824][T18870]  ? __virt_addr_valid+0x1ed/0x250
[  403.150914][T18870]  ? __check_object_size+0x367/0x510
[  403.150976][T18870]  netlink_sendmsg+0x492/0x720
[  403.151117][T18870]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.151139][T18870]  __sock_sendmsg+0x140/0x180
[  403.151170][T18870]  ____sys_sendmsg+0x350/0x4e0
[  403.151273][T18870]  __sys_sendmsg+0x1a0/0x240
[  403.151387][T18870]  __x64_sys_sendmsg+0x46/0x50
[  403.151411][T18870]  x64_sys_call+0x26f3/0x2e10
[  403.151436][T18870]  do_syscall_64+0xc9/0x1a0
[  403.151462][T18870]  ? clear_bhb_loop+0x25/0x80
[  403.151492][T18870]  ? clear_bhb_loop+0x25/0x80
[  403.151524][T18870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.151546][T18870] RIP: 0033:0x7f656062e169
[  403.151564][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.151583][T18870] RSP: 002b:00007f655ec97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.151656][T18870] RAX: ffffffffffffffda RBX: 00007f6560855fa0 RCX: 00007f656062e169
[  403.151669][T18870] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003
[  403.151682][T18870] RBP: 00007f655ec97090 R08: 0000000000000000 R09: 0000000000000000
[  403.151694][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.151706][T18870] R13: 0000000000000000 R14: 00007f6560855fa0 R15: 00007ffc7287f488
[  403.151727][T18870]  </TASK>
[  403.152999][ T1799] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.222136][T18873] loop5: detected capacity change from 0 to 2048
[  403.389563][T18837] team0: Port device team_slave_1 added
[  403.402870][T18873] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.441643][T18837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.448747][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.474873][T18837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.630585][ T1799] bridge0: port 3(batadv0) entered disabled state
[  403.638852][ T1799] bridge_slave_1: left allmulticast mode
[  403.644596][ T1799] bridge_slave_1: left promiscuous mode
[  403.648853][   T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set
[  403.650477][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.673482][ T1799] bridge_slave_0: left allmulticast mode
[  403.674822][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 130 with error 117
[  403.679334][ T1799] bridge_slave_0: left promiscuous mode
[  403.691793][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  403.691793][   T37] 
[  403.697452][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.756804][T18889] loop6: detected capacity change from 0 to 2048
[  403.872751][T18893] netlink: 'syz.7.5476': attribute type 10 has an invalid length.
[  403.880643][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5476'.
[  403.915347][T18884] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 146 with max blocks 2 with error 117
[  403.927953][T18884] EXT4-fs (loop5): This should not happen!! Data will be lost
[  403.927953][T18884] 
[  403.963553][T18889] EXT4-fs mount: 30 callbacks suppressed
[  403.963573][T18889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.984157][T18889] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.008095][   T51] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[  404.022525][   T51] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[  404.036817][   T51] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  404.051117][   T51] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  404.196226][T18900] set match dimension is over the limit!
[  404.260080][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.289861][T18902] loop5: detected capacity change from 0 to 512
[  404.296827][T18902] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  404.322719][T18902] EXT4-fs (loop5): 1 truncate cleaned up
[  404.329047][T18902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.397137][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.410035][ T1799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.428167][ T1799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.437966][ T1799] bond0 (unregistering): Released all slaves
[  404.448442][T18837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.455430][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.481635][T18837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.492265][T18899] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5474: bg 0: block 345: padding at end of block bitmap is not set
[  404.526388][T18899] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  404.539025][T18899] EXT4-fs (loop6): This should not happen!! Data will be lost
[  404.539025][T18899] 
[  404.549882][ T1799] tipc: Disabling bearer <udp:syz2>
[  404.555175][ T1799] tipc: Left network mode
[  404.557680][T18837] hsr_slave_0: entered promiscuous mode
[  404.567872][T10492] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[  404.571280][T18837] hsr_slave_1: entered promiscuous mode
[  404.582213][T10492] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[  404.602139][T10492] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  404.606773][   T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  404.616476][T10492] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  404.629242][   T51] EXT4-fs (loop6): This should not happen!! Data will be lost
[  404.629242][   T51] 
[  404.700730][ T1799] batman_adv: batadv0: Interface deactivated: dummy0
[  404.707512][ T1799] batman_adv: batadv0: Removing interface: dummy0
[  404.735730][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.743336][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.751332][ T1799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.758864][ T1799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.770295][ T1799] veth1_macvtap: left promiscuous mode
[  404.775900][ T1799] veth0_macvtap: left promiscuous mode
[  404.781719][ T1799] veth1_vlan: left promiscuous mode
[  404.787143][ T1799] veth0_vlan: left promiscuous mode
[  404.795673][T18918] netlink: 'syz.7.5481': attribute type 10 has an invalid length.
[  404.807113][   T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28
[  404.819949][   T37] EXT4-fs (loop6): This should not happen!! Data will be lost
[  404.819949][   T37] 
[  404.829825][   T37] EXT4-fs (loop6): Total free blocks count 0
[  404.835955][   T37] EXT4-fs (loop6): Free/Dirty block details
[  404.842035][   T37] EXT4-fs (loop6): free_blocks=0
[  404.847238][ T1799] pim6reg (unregistering): left allmulticast mode
[  404.886222][ T1799] team0 (unregistering): Port device team_slave_1 removed
[  404.896707][ T1799] team0 (unregistering): Port device team_slave_0 removed
[  405.148683][T18936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18936 comm=syz.5.5489
[  405.161298][T18936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18936 comm=syz.5.5489
[  405.196030][T18939] netlink: 'syz.5.5490': attribute type 10 has an invalid length.
[  405.203997][T18939] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5490'.
[  405.247349][T18837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  405.259282][T18837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  405.271919][T18837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  405.290078][T18837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  405.312218][T18940] Cannot find set identified by id 0 to match
[  405.344850][T18837] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.358490][T18837] 8021q: adding VLAN 0 to HW filter on device team0
[  405.368106][ T1799] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.375376][ T1799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.386661][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.393757][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.436864][T18945] netlink: 'syz.7.5492': attribute type 10 has an invalid length.
[  405.444966][T18945] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5492'.
[  405.477352][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.515878][T18953] set match dimension is over the limit!
[  405.586454][T18837] veth0_vlan: entered promiscuous mode
[  405.604990][T18837] veth1_vlan: entered promiscuous mode
[  405.611056][T18955] loop0: detected capacity change from 0 to 164
[  405.629909][T18837] veth0_macvtap: entered promiscuous mode
[  405.637749][T18837] veth1_macvtap: entered promiscuous mode
[  405.651113][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.661650][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.671539][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.682016][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.692037][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.702607][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.714208][T18837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.723000][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.733716][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.743616][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.754053][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.763975][T18837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.774431][T18837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.785013][T18837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.801673][T18837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.810599][T18837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.819432][T18837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.828204][T18837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.919074][T18965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.959880][T18965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.977013][T18967] pim6reg: entered allmulticast mode
[  405.983115][T18967] pim6reg: left allmulticast mode
[  406.011149][T18965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.079997][T18965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.131089][T18965] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.143699][T18965] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.155461][T18965] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.165260][T18981] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.175161][T18981] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.189895][T18965] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.209273][T18982] pim6reg: entered allmulticast mode
[  406.216752][T18982] pim6reg: left allmulticast mode
[  406.231430][T18981] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.241340][T18981] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.307205][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5501'.
[  406.319635][T18981] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.329450][T18981] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.380447][T18981] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.390649][T18981] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.431515][T18996] netlink: 'syz.7.5506': attribute type 10 has an invalid length.
[  406.440900][T18981] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.449282][T18981] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.461652][T18981] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.470050][T18981] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.482210][T18981] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.490464][T18981] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.502336][T18981] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.510595][T18981] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.552816][T18997] set match dimension is over the limit!
[  406.690530][T19003] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.700460][T19003] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.740504][T19003] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.750425][T19003] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.772126][T19004] netlink: 'syz.5.5509': attribute type 10 has an invalid length.
[  406.784601][T19004] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  406.793967][T19004] team0: Failed to send options change via netlink (err -105)
[  406.801528][T19004] team0: Port device geneve1 added
[  406.809592][T19003] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.819661][T19003] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.870266][T19003] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.880220][T19003] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.112309][T19008] netlink: 'syz.0.5511': attribute type 10 has an invalid length.
[  407.120199][T19008] __nla_validate_parse: 4 callbacks suppressed
[  407.120212][T19008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5511'.
[  407.198232][T19009] Cannot find set identified by id 0 to match
[  407.286547][T19011] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.296506][T19011] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.337407][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  407.337423][   T29] audit: type=1404 audit(1745091411.846:19803): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  407.359456][   T29] audit: type=1404 audit(1745091411.876:19804): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  407.374675][   T29] audit: type=1400 audit(1745091411.876:19805): avc:  denied  { read } for  pid=19010 comm="syz.7.5512" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  407.376002][T19011] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.397980][   T29] audit: type=1400 audit(1745091411.876:19806): avc:  denied  { open } for  pid=19010 comm="syz.7.5512" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  407.407667][T19011] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.431281][   T29] audit: type=1400 audit(1745091411.876:19807): avc:  denied  { ioctl } for  pid=19010 comm="syz.7.5512" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  407.466162][   T29] audit: type=1400 audit(1745091411.876:19808): avc:  denied  { create } for  pid=19010 comm="syz.7.5512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  407.486107][   T29] audit: type=1400 audit(1745091411.876:19809): avc:  denied  { setopt } for  pid=19010 comm="syz.7.5512" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  407.511244][T19013] pim6reg: entered allmulticast mode
[  407.516622][T19014] pim6reg: left allmulticast mode
[  407.539954][T19011] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.549779][T19011] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.590158][T19011] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.600061][T19011] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.639351][T19011] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  407.647633][T19011] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.659411][T19011] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  407.667712][T19011] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.680358][T19011] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  407.688665][T19011] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.700352][T19011] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  407.708711][T19011] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.743919][   T29] audit: type=1400 audit(1745091412.256:19810): avc:  denied  { map_create } for  pid=19015 comm="syz.7.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  407.764658][   T29] audit: type=1400 audit(1745091412.256:19811): avc:  denied  { perfmon } for  pid=19015 comm="syz.7.5513" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  407.771924][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5513'.
[  407.787057][   T29] audit: type=1400 audit(1745091412.256:19812): avc:  denied  { map_read map_write } for  pid=19015 comm="syz.7.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  408.028354][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[  408.095579][T19035] netlink: 'syz.0.5522': attribute type 10 has an invalid length.
[  408.103622][T19035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5522'.
[  408.170602][T19039] loop6: detected capacity change from 0 to 2048
[  408.185111][T19042] Cannot find set identified by id 0 to match
[  408.316806][T19049] loop6: detected capacity change from 0 to 164
[  408.374070][T19052] FAULT_INJECTION: forcing a failure.
[  408.374070][T19052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.387271][T19052] CPU: 0 UID: 0 PID: 19052 Comm: syz.6.5529 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  408.387308][T19052] Tainted: [W]=WARN
[  408.387317][T19052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  408.387333][T19052] Call Trace:
[  408.387340][T19052]  <TASK>
[  408.387350][T19052]  dump_stack_lvl+0xf6/0x150
[  408.387377][T19052]  dump_stack+0x15/0x1a
[  408.387468][T19052]  should_fail_ex+0x261/0x270
[  408.387498][T19052]  should_fail+0xb/0x10
[  408.387523][T19052]  should_fail_usercopy+0x1a/0x20
[  408.387553][T19052]  _copy_from_user+0x1c/0xa0
[  408.387613][T19052]  __se_sys_name_to_handle_at+0x20f/0x580
[  408.387671][T19052]  ? fput+0x99/0xd0
[  408.387697][T19052]  ? ksys_write+0x180/0x1b0
[  408.387722][T19052]  __x64_sys_name_to_handle_at+0x67/0x80
[  408.387748][T19052]  x64_sys_call+0x2739/0x2e10
[  408.387775][T19052]  do_syscall_64+0xc9/0x1a0
[  408.387820][T19052]  ? clear_bhb_loop+0x25/0x80
[  408.387849][T19052]  ? clear_bhb_loop+0x25/0x80
[  408.387907][T19052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.387933][T19052] RIP: 0033:0x7f81b255e169
[  408.387948][T19052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.387969][T19052] RSP: 002b:00007f81b0bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[  408.388054][T19052] RAX: ffffffffffffffda RBX: 00007f81b2785fa0 RCX: 00007f81b255e169
[  408.388070][T19052] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  408.388085][T19052] RBP: 00007f81b0bc7090 R08: 0000000000000000 R09: 0000000000000000
[  408.388100][T19052] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  408.388115][T19052] R13: 0000000000000000 R14: 00007f81b2785fa0 R15: 00007ffca19334a8
[  408.388139][T19052]  </TASK>
[  408.588152][T19054] loop6: detected capacity change from 0 to 512
[  408.595084][T19054] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  408.607142][T19054] EXT4-fs (loop6): 1 truncate cleaned up
[  408.613633][T19054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.645175][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.694637][T19062] netlink: 'syz.6.5533': attribute type 10 has an invalid length.
[  408.702787][T19062] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5533'.
[  408.896166][T19065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19065 comm=syz.1.5534
[  408.908913][T19065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19065 comm=syz.1.5534
[  408.956860][T19069] loop0: detected capacity change from 0 to 2048
[  408.979760][T19069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.992037][T19069] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.118834][ T1799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set
[  409.144923][ T1799] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 259 with error 117
[  409.157639][ T1799] EXT4-fs (loop0): This should not happen!! Data will be lost
[  409.157639][ T1799] 
[  409.906263][   T57] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 275 with max blocks 2 with error 117
[  409.918776][   T57] EXT4-fs (loop0): This should not happen!! Data will be lost
[  409.918776][   T57] 
[  409.930136][T11534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.963399][T19096] block device autoloading is deprecated and will be removed.
[  409.972857][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'.
[  410.021971][T19098] loop0: detected capacity change from 0 to 512
[  410.029256][T19098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  410.040507][T19098] EXT4-fs (loop0): 1 truncate cleaned up
[  410.046709][T19098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.068745][T19098] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.089860][T19103] netlink: 'syz.1.5547': attribute type 10 has an invalid length.
[  410.097942][T19103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5547'.
[  410.107224][T19103] batadv0: entered promiscuous mode
[  410.112668][T19103] batadv0: entered allmulticast mode
[  410.119932][T19103] bridge0: port 3(batadv0) entered blocking state
[  410.126405][T19103] bridge0: port 3(batadv0) entered disabled state
[  410.135977][T19103] bridge0: port 3(batadv0) entered blocking state
[  410.142499][T19103] bridge0: port 3(batadv0) entered forwarding state
[  410.151383][T19105] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.163089][T19103] batman_adv: batadv0: Adding interface: dummy0
[  410.169432][T19103] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.195121][T19103] batman_adv: batadv0: Interface activated: dummy0
[  410.205117][T19106] pim6reg: entered allmulticast mode
[  410.212759][T19107] batadv0: mtu less than device minimum
[  410.218891][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.229628][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.240315][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.251018][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.261754][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.272413][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.283061][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.293794][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.304512][T19107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.316949][T19109] xt_connbytes: Forcing CT accounting to be enabled
[  410.321159][T19106] pim6reg: left allmulticast mode
[  410.323638][T19109] Cannot find set identified by id 0 to match
[  410.341042][T19105] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.380396][T19105] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.430267][T19105] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.498199][T19105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.509827][T19105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.521665][T19105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.533131][T19105] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.627964][   T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  410.637264][   T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  410.687110][T19114] loop0: detected capacity change from 0 to 164
[  410.737751][T19116] netlink: 'syz.0.5551': attribute type 10 has an invalid length.
[  410.746213][T19116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5551'.
[  410.815942][T19003] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  410.818876][T19117] Cannot find set identified by id 0 to match
[  410.824219][T19003] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.841848][T19003] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  410.850121][T19003] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.861667][T19003] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  410.870074][T19003] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.881868][T19003] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  410.890104][T19003] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.948257][T19121] loop5: detected capacity change from 0 to 2048
[  410.979676][T19121] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  411.045324][T19133] loop5: detected capacity change from 0 to 128
[  411.054315][T19135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.078391][T19133] syzkaller0: entered promiscuous mode
[  411.083996][T19133] syzkaller0: entered allmulticast mode
[  411.125476][T19135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.139988][T19136] pim6reg: entered allmulticast mode
[  411.145838][T19136] pim6reg: left allmulticast mode
[  411.184564][T19135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.311782][T19135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.324638][T19143] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.334647][T19143] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.365483][T19135] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.380064][T19135] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.394320][T19135] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.431329][T19144] netlink: 'syz.7.5563': attribute type 10 has an invalid length.
[  411.439404][T19144] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5563'.
[  411.456302][T19144] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  411.466717][T19144] team0: Failed to send options change via netlink (err -105)
[  411.474272][T19144] team0: Port device geneve1 added
[  411.490618][T19135] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.516407][T19143] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.526475][T19143] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.591026][T19143] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.600906][T19143] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.679977][T19149] netlink: 'syz.1.5565': attribute type 10 has an invalid length.
[  411.687948][T19149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5565'.
[  411.751085][T19143] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.760938][T19143] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.837101][T19143] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  411.845747][T19143] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.860155][T19143] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  411.868598][T19143] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.881928][T19143] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  411.890283][T19143] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.901930][T19143] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  411.910334][T19143] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.030574][T19163] netlink: 'syz.7.5571': attribute type 10 has an invalid length.
[  412.107178][T19169] loop5: detected capacity change from 0 to 512
[  412.114658][T19169] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  412.128095][T19169] EXT4-fs (loop5): 1 truncate cleaned up
[  412.134181][T19169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.165041][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.458505][   T29] kauditd_printk_skb: 441 callbacks suppressed
[  412.458520][   T29] audit: type=1326 audit(1745091416.976:20254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19172 comm="syz.5.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656062e169 code=0x7ffc0000
[  412.488440][   T29] audit: type=1326 audit(1745091416.976:20255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19172 comm="syz.5.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656062e169 code=0x7ffc0000
[  412.528759][   T29] audit: type=1400 audit(1745091417.046:20256): avc:  denied  { bind } for  pid=19175 comm="syz.1.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  412.548660][   T29] audit: type=1400 audit(1745091417.046:20257): avc:  denied  { name_bind } for  pid=19175 comm="syz.1.5576" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  412.570066][   T29] audit: type=1400 audit(1745091417.046:20258): avc:  denied  { node_bind } for  pid=19175 comm="syz.1.5576" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  412.626244][T19180] loop1: detected capacity change from 0 to 512
[  412.640758][T19180] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.5578: corrupted inode contents
[  412.653233][T19180] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.5578: mark_inode_dirty error
[  412.664839][T19180] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.5578: corrupted inode contents
[  412.676923][T19180] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.5578: mark_inode_dirty error
[  412.688435][T19180] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.5578: corrupted inode contents
[  412.700581][T19180] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  412.709371][T19180] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.5578: corrupted inode contents
[  412.722964][T19180] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.5578: mark_inode_dirty error
[  412.744325][T19185] loop0: detected capacity change from 0 to 2048
[  412.749708][T19180] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  412.762531][T19187] netlink: 'syz.5.5580': attribute type 10 has an invalid length.
[  412.762876][T19180] EXT4-fs (loop1): 1 truncate cleaned up
[  412.770468][T19187] __nla_validate_parse: 1 callbacks suppressed
[  412.770483][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5580'.
[  412.776560][T19180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.804257][T19180] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  412.804333][ T1799] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  412.824498][ T1799] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1
[  412.837424][T19185] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  412.864913][   T29] audit: type=1400 audit(1745091417.376:20259): avc:  denied  { add_name } for  pid=19179 comm="syz.1.5578" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  412.887180][   T29] audit: type=1400 audit(1745091417.376:20260): avc:  denied  { create } for  pid=19179 comm="syz.1.5578" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  412.923649][   T29] audit: type=1326 audit(1745091417.426:20261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19191 comm="syz.6.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  412.924129][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5578'.
[  412.947490][   T29] audit: type=1326 audit(1745091417.426:20262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19191 comm="syz.6.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b255e169 code=0x7ffc0000
[  413.029582][T19199] netlink: 'syz.5.5586': attribute type 10 has an invalid length.
[  413.091556][T18837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.152669][T19211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.161916][T19211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.434974][T19223] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.497173][T19224] pim6reg: entered allmulticast mode
[  413.507355][T19223] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.520891][T19224] pim6reg: left allmulticast mode
[  413.561655][T19223] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.630053][T19223] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.689573][T19223] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.701524][T19223] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.715268][T19223] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.727681][T19223] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.789733][T19237] netlink: 'syz.0.5601': attribute type 4 has an invalid length.
[  413.804847][T19237] netlink: 'syz.0.5601': attribute type 4 has an invalid length.
[  413.885319][T19245] loop0: detected capacity change from 0 to 2048
[  413.946736][T19245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.973117][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5609'.
[  413.993978][T19262] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.050617][T19268] pim6reg: entered allmulticast mode
[  414.056518][T19268] pim6reg: left allmulticast mode
[  414.065618][T19262] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.103994][T19270] loop5: detected capacity change from 0 to 512
[  414.111416][T19270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  414.121656][T19270] EXT4-fs (loop5): orphan cleanup on readonly fs
[  414.128580][T19270] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5613: Failed to acquire dquot type 1
[  414.140672][T19270] EXT4-fs (loop5): 1 truncate cleaned up
[  414.146821][T19270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  414.161285][T19262] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.208073][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.219724][T19262] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.350900][T19277] loop5: detected capacity change from 0 to 128
[  414.424849][T19282] loop5: detected capacity change from 0 to 512
[  414.431913][T19282] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  414.442880][T19282] EXT4-fs (loop5): 1 truncate cleaned up
[  414.449223][T19282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.480620][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.719408][T11534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.447424][T19326] IPv6: Can't replace route, no match found
[  415.702176][T19342] loop0: detected capacity change from 0 to 2048
[  415.769420][T19342] netlink: 72 bytes leftover after parsing attributes in process `+}[@'.
[  415.810610][T19344] FAULT_INJECTION: forcing a failure.
[  415.810610][T19344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.823928][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.0.5638 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  415.823968][T19344] Tainted: [W]=WARN
[  415.823977][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  415.823992][T19344] Call Trace:
[  415.824002][T19344]  <TASK>
[  415.824010][T19344]  dump_stack_lvl+0xf6/0x150
[  415.824094][T19344]  dump_stack+0x15/0x1a
[  415.824109][T19344]  should_fail_ex+0x261/0x270
[  415.824133][T19344]  should_fail+0xb/0x10
[  415.824151][T19344]  should_fail_usercopy+0x1a/0x20
[  415.824172][T19344]  strncpy_from_user+0x25/0x230
[  415.824228][T19344]  ? __se_sys_memfd_create+0x1ea/0x5a0
[  415.824258][T19344]  __se_sys_memfd_create+0x218/0x5a0
[  415.824313][T19344]  __x64_sys_memfd_create+0x31/0x40
[  415.824340][T19344]  x64_sys_call+0x1163/0x2e10
[  415.824359][T19344]  do_syscall_64+0xc9/0x1a0
[  415.824387][T19344]  ? clear_bhb_loop+0x25/0x80
[  415.824431][T19344]  ? clear_bhb_loop+0x25/0x80
[  415.824449][T19344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.824467][T19344] RIP: 0033:0x7fa053c2e169
[  415.824480][T19344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.824502][T19344] RSP: 002b:00007fa052296e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  415.824518][T19344] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007fa053c2e169
[  415.824528][T19344] RDX: 00007fa052296ef0 RSI: 0000000000000000 RDI: 00007fa053cb1404
[  415.824539][T19344] RBP: 0000200000000200 R08: 00007fa052296bb7 R09: 00007fa052296e40
[  415.824549][T19344] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  415.824559][T19344] R13: 00007fa052296ef0 R14: 00007fa052296eb0 R15: 0000200000000940
[  415.824576][T19344]  </TASK>
[  416.316417][T19359] loop1: detected capacity change from 0 to 512
[  416.323704][T19359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  416.336144][T19359] EXT4-fs (loop1): 1 truncate cleaned up
[  416.342632][T19359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.379263][T18837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.407066][T19366] loop5: detected capacity change from 0 to 2048
[  416.429736][T19366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.533844][T19368] loop1: detected capacity change from 0 to 164
[  416.569595][T19375] loop1: detected capacity change from 0 to 512
[  416.576696][T19375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  416.588707][T19375] EXT4-fs (loop1): 1 truncate cleaned up
[  416.594781][T19375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.631847][T18837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.650938][T19378] netlink: 'syz.1.5651': attribute type 10 has an invalid length.
[  416.658840][T19378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5651'.
[  416.725470][T19379] Cannot find set identified by id 0 to match
[  416.993833][T19386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19386 comm=syz.0.5654
[  417.006457][T19386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19386 comm=syz.0.5654
[  417.117060][T19390] netlink: 'syz.0.5656': attribute type 10 has an invalid length.
[  417.124980][T19390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5656'.
[  417.197963][T19391] Cannot find set identified by id 0 to match
[  417.249232][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.515017][T19409] netlink: 'syz.1.5664': attribute type 10 has an invalid length.
[  417.522946][T19409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5664'.
[  417.575206][T19262] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.586773][T19262] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.588229][T19410] Cannot find set identified by id 0 to match
[  417.599170][T19262] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.613087][T19262] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.718144][   T29] kauditd_printk_skb: 336 callbacks suppressed
[  417.718159][   T29] audit: type=1400 audit(1745091422.236:20597): avc:  denied  { create } for  pid=19413 comm="syz.6.5666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  417.747516][   T29] audit: type=1400 audit(1745091422.256:20598): avc:  denied  { ioctl } for  pid=19413 comm="syz.6.5666" path="socket:[67802]" dev="sockfs" ino=67802 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  417.772771][   T29] audit: type=1400 audit(1745091422.266:20599): avc:  denied  { write } for  pid=19413 comm="syz.6.5666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  417.879301][   T29] audit: type=1400 audit(1745091422.396:20600): avc:  denied  { read } for  pid=19415 comm="syz.6.5667" dev="nsfs" ino=4026532772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  417.901016][   T29] audit: type=1400 audit(1745091422.396:20601): avc:  denied  { open } for  pid=19415 comm="syz.6.5667" path="net:[4026532772]" dev="nsfs" ino=4026532772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  417.966570][T19418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19418 comm=syz.0.5668
[  418.008003][T19420] loop6: detected capacity change from 0 to 2048
[  418.031407][T19420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.078279][T19418] loop0: detected capacity change from 0 to 128
[  418.231912][T19436] netlink: 'syz.5.5674': attribute type 10 has an invalid length.
[  418.288969][   T29] audit: type=1400 audit(1745091422.796:20602): avc:  denied  { read write } for  pid=19437 comm="syz.0.5675" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  418.312560][   T29] audit: type=1400 audit(1745091422.806:20603): avc:  denied  { open } for  pid=19437 comm="syz.0.5675" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  418.384992][   T29] audit: type=1326 audit(1745091422.856:20604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.0.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053c2e169 code=0x7ffc0000
[  418.408711][   T29] audit: type=1326 audit(1745091422.856:20605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.0.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa053c2e169 code=0x7ffc0000
[  418.432663][   T29] audit: type=1326 audit(1745091422.856:20606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.0.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053c2e169 code=0x7ffc0000
[  418.612855][T19452] loop5: detected capacity change from 0 to 512
[  418.652262][T19452] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  418.702130][T19452] EXT4-fs (loop5): 1 truncate cleaned up
[  418.708431][T19452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.810162][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.832304][T19450] loop1: detected capacity change from 0 to 164
[  418.853673][T19456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19456 comm=syz.0.5681
[  418.965213][T19456] loop0: detected capacity change from 0 to 128
[  418.974058][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.106833][T19467] IPv6: Can't replace route, no match found
[  419.273133][T19478] loop0: detected capacity change from 0 to 2048
[  419.318758][T19478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.347966][T19478] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.744091][T19487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5690: bg 0: block 345: padding at end of block bitmap is not set
[  419.765907][T19487] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  419.778675][T19487] EXT4-fs (loop0): This should not happen!! Data will be lost
[  419.778675][T19487] 
[  419.799693][T10492] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  419.812563][T10492] EXT4-fs (loop0): This should not happen!! Data will be lost
[  419.812563][T10492] 
[  419.856512][T10492] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28
[  419.869519][T10492] EXT4-fs (loop0): This should not happen!! Data will be lost
[  419.869519][T10492] 
[  419.879257][T10492] EXT4-fs (loop0): Total free blocks count 0
[  419.885301][T10492] EXT4-fs (loop0): Free/Dirty block details
[  419.891396][T10492] EXT4-fs (loop0): free_blocks=0
[  419.922870][T19492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19492 comm=syz.7.5694
[  420.097606][T19503] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.140026][T19503] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.191507][T19503] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.250936][T19503] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.270439][T19510] netlink: 'syz.1.5701': attribute type 10 has an invalid length.
[  420.278543][T19510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5701'.
[  420.345725][T19515] Cannot find set identified by id 0 to match
[  420.421870][T19516] loop0: detected capacity change from 0 to 164
[  420.896990][T19536] loop5: detected capacity change from 0 to 512
[  420.904111][T19536] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  420.915336][T19536] EXT4-fs (loop5): 1 truncate cleaned up
[  420.923454][T19536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.963688][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.030968][T19543] loop5: detected capacity change from 0 to 2048
[  421.049530][T19543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.061865][T19543] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.295062][T19549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5714: bg 0: block 345: padding at end of block bitmap is not set
[  421.313125][T19549] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  421.325846][T19549] EXT4-fs (loop5): This should not happen!! Data will be lost
[  421.325846][T19549] 
[  421.345834][T10492] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  421.358567][T10492] EXT4-fs (loop5): This should not happen!! Data will be lost
[  421.358567][T10492] 
[  421.407082][T10492] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28
[  421.419849][T10492] EXT4-fs (loop5): This should not happen!! Data will be lost
[  421.419849][T10492] 
[  421.429589][T10492] EXT4-fs (loop5): Total free blocks count 0
[  421.435657][T10492] EXT4-fs (loop5): Free/Dirty block details
[  421.441607][T10492] EXT4-fs (loop5): free_blocks=0
[  421.447583][T19556] af_packet: tpacket_rcv: packet too big, clamped from 55282 to 3952. macoff=96
[  421.478054][T19503] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.490925][T19503] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.502753][T19503] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.515649][T19503] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.554315][T19558] loop6: detected capacity change from 0 to 2048
[  421.614022][T19562] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5719'.
[  421.638359][T19565] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  421.642174][T19564] IPVS: stopping master sync thread 19565 ...
[  421.787628][T19576] loop6: detected capacity change from 0 to 2048
[  421.810516][T19576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.822906][T19576] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.961239][   T37] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set
[  421.993005][   T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 408 with error 117
[  422.005639][   T37] EXT4-fs (loop6): This should not happen!! Data will be lost
[  422.005639][   T37] 
[  422.026709][T19587] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.070031][T19587] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.105984][T19588] netlink: 'syz.1.5728': attribute type 10 has an invalid length.
[  422.114031][T19588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5728'.
[  422.133829][T19588] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  422.148992][T19588] team0: Failed to send options change via netlink (err -105)
[  422.156542][T19588] team0: Port device geneve1 added
[  422.175160][T19587] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.230238][T19587] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.277071][T19587] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.289478][T19587] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.301630][T19587] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.313885][T19587] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.390575][T19596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19596 comm=syz.0.5732
[  422.403408][T19596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19596 comm=syz.0.5732
[  422.420249][T19594] loop1: detected capacity change from 0 to 2048
[  422.523086][T19606] loop0: detected capacity change from 0 to 2048
[  422.551069][T19606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.563457][T19606] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.733529][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  422.733544][   T29] audit: type=1326 audit(1745091427.226:20766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="syz.7.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.740182][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5740'.
[  422.763394][   T29] audit: type=1326 audit(1745091427.226:20767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="syz.7.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.796073][   T29] audit: type=1326 audit(1745091427.226:20768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="syz.7.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.819846][   T29] audit: type=1326 audit(1745091427.226:20769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.843066][   T29] audit: type=1326 audit(1745091427.226:20770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.866236][   T29] audit: type=1326 audit(1745091427.226:20771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.889656][   T29] audit: type=1326 audit(1745091427.226:20772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.912945][   T29] audit: type=1326 audit(1745091427.236:20773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.936096][   T29] audit: type=1326 audit(1745091427.236:20774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  422.959200][   T29] audit: type=1326 audit(1745091427.236:20775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19616 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a01e169 code=0x7ffc0000
[  423.083321][T19624] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.093197][T19624] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.131129][T19624] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.140982][T19624] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.152637][T19625] netlink: 'syz.7.5742': attribute type 10 has an invalid length.
[  423.160538][T19625] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5742'.
[  423.182146][T19625] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  423.209219][T19612] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5737: bg 0: block 345: padding at end of block bitmap is not set
[  423.224345][T19612] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117
[  423.236957][T19612] EXT4-fs (loop0): This should not happen!! Data will be lost
[  423.236957][T19612] 
[  423.249282][T19624] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.259123][T19624] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.260790][ T1799] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117
[  423.281761][ T1799] EXT4-fs (loop0): This should not happen!! Data will be lost
[  423.281761][ T1799] 
[  423.302901][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.331726][ T1799] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28
[  423.344561][ T1799] EXT4-fs (loop0): This should not happen!! Data will be lost
[  423.344561][ T1799] 
[  423.354294][ T1799] EXT4-fs (loop0): Total free blocks count 0
[  423.360380][ T1799] EXT4-fs (loop0): Free/Dirty block details
[  423.366357][ T1799] EXT4-fs (loop0): free_blocks=0
[  423.376855][T19624] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.386790][T19624] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.398655][    C1] net_ratelimit: 10 callbacks suppressed
[  423.398674][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c
[  423.442795][T19632] loop6: detected capacity change from 0 to 2048
[  423.477035][T19638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19638 comm=syz.5.5744
[  423.489705][T19638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19638 comm=syz.5.5744
[  423.506161][T19624] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.514461][T19624] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.549292][T19640] loop1: detected capacity change from 0 to 1024
[  423.571194][T19640] EXT4-fs: Ignoring removed oldalloc option
[  423.571408][T19624] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.577182][T19640] EXT4-fs: Ignoring removed orlov option
[  423.585402][T19624] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.591147][T19640] EXT4-fs: Ignoring removed oldalloc option
[  423.605175][T19640] EXT4-fs: Ignoring removed nomblk_io_submit option
[  423.611664][T19624] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.620107][T19624] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.626506][T19644] loop6: detected capacity change from 0 to 512
[  423.641946][T19644] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  423.651983][T19624] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.652069][T19644] ==================================================================
[  423.652102][T19644] BUG: KCSAN: data-race in desc_read_finalized_seq / prb_reserve
[  423.660396][T19624] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.668291][T19644] 
[  423.668300][T19644] write to 0xffffffff869418e8 of 8 bytes by task 19624 on cpu 0:
[  423.668319][T19644]  prb_reserve+0x750/0xb80
[  423.668353][T19644]  vprintk_store+0x552/0x860
[  423.703387][T19644]  vprintk_emit+0x1a0/0x6c0
[  423.707917][T19644]  dev_vprintk_emit+0x24a/0x2a0
[  423.712792][T19644]  dev_printk_emit+0x84/0xb0
[  423.717394][T19644]  __netdev_printk+0x352/0x3e0
[  423.722179][T19644]  netdev_info+0x9e/0xd0
[  423.726453][T19644]  nsim_udp_tunnel_set_port+0x175/0x190
[  423.732023][T19644]  __udp_tunnel_nic_device_sync+0x594/0xa00
[  423.737956][T19644]  __udp_tunnel_nic_add_port+0x68a/0x700
[  423.743603][T19644]  udp_tunnel_push_rx_port+0xee/0x120
[  423.748993][T19644]  vxlan_offload_rx_ports+0xfa/0x170
[  423.754292][T19644]  vxlan_netdevice_event+0xd3/0x2c0
[  423.759506][T19644]  raw_notifier_call_chain+0x6f/0x1d0
[  423.764902][T19644]  call_netdevice_notifiers_info+0xae/0x100
[  423.770820][T19644]  call_netdevice_notifiers+0x4e/0x70
[  423.776210][T19644]  udp_tunnel_nic_netdevice_event+0xa4a/0xc80
[  423.782292][T19644]  raw_notifier_call_chain+0x6f/0x1d0
[  423.787696][T19644]  call_netdevice_notifiers_info+0xae/0x100
[  423.793613][T19644]  register_netdevice+0xd13/0xee0
[  423.798656][T19644]  nsim_create+0x5a7/0x760
[  423.803084][T19644]  __nsim_dev_port_add+0x4aa/0x670
[  423.808213][T19644]  nsim_dev_reload_up+0x439/0x510
[  423.813254][T19644]  devlink_reload+0x326/0x5b0
[  423.817937][T19644]  devlink_nl_reload_doit+0x4da/0x930
[  423.823316][T19644]  genl_rcv_msg+0x69b/0x6f0
[  423.827835][T19644]  netlink_rcv_skb+0x12f/0x230
[  423.832627][T19644]  genl_rcv+0x28/0x40
[  423.836619][T19644]  netlink_unicast+0x605/0x6c0
[  423.841403][T19644]  netlink_sendmsg+0x609/0x720
[  423.846184][T19644]  __sock_sendmsg+0x140/0x180
[  423.850879][T19644]  ____sys_sendmsg+0x350/0x4e0
[  423.855740][T19644]  __sys_sendmsg+0x1a0/0x240
[  423.860338][T19644]  __x64_sys_sendmsg+0x46/0x50
[  423.865110][T19644]  x64_sys_call+0x26f3/0x2e10
[  423.869794][T19644]  do_syscall_64+0xc9/0x1a0
[  423.874305][T19644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.880202][T19644] 
[  423.882526][T19644] read to 0xffffffff869418e8 of 8 bytes by task 19644 on cpu 1:
[  423.890165][T19644]  desc_read_finalized_seq+0x163/0x280
[  423.895658][T19644]  _prb_read_valid+0x142/0x710
[  423.900437][T19644]  prb_read_valid+0x42/0x70
[  423.904980][T19644]  console_unlock+0x1be/0x350
[  423.909675][T19644]  vprintk_emit+0x470/0x6c0
[  423.914230][T19644]  vprintk_default+0x26/0x30
[  423.918832][T19644]  vprintk+0x1d/0x30
[  423.922746][T19644]  _printk+0x7f/0xb0
[  423.927090][T19644]  __ext4_msg+0x198/0x1b0
[  423.931434][T19644]  ext4_fill_super+0x1f1c/0x3580
[  423.936405][T19644]  get_tree_bdev_flags+0x2b4/0x330
[  423.941539][T19644]  get_tree_bdev+0x1f/0x30
[  423.945969][T19644]  ext4_get_tree+0x1c/0x30
[  423.950392][T19644]  vfs_get_tree+0x56/0x1e0
[  423.954831][T19644]  do_new_mount+0x246/0x6b0
[  423.959337][T19644]  path_mount+0x49b/0xb30
[  423.963685][T19644]  __se_sys_mount+0x28f/0x2e0
[  423.968365][T19644]  __x64_sys_mount+0x67/0x80
[  423.972970][T19644]  x64_sys_call+0xd11/0x2e10
[  423.977567][T19644]  do_syscall_64+0xc9/0x1a0
[  423.982079][T19644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.988069][T19644] 
[  423.990393][T19644] value changed: 0x0000000000001ee5 -> 0x0000000000000000
[  423.997520][T19644] 
[  423.999841][T19644] Reported by Kernel Concurrency Sanitizer on:
[  424.005992][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.6.5750 Tainted: G        W           6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[  424.020067][T19644] Tainted: [W]=WARN
[  424.023872][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  424.033933][T19644] ==================================================================
[  424.050057][T19640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.085199][T19644] EXT4-fs (loop6): 1 truncate cleaned up
[  424.091336][T19644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.134919][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.173802][T19653] loop0: detected capacity change from 0 to 128
[  424.587633][T18837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.628927][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b