last executing test programs:

2.212595287s ago: executing program 4 (id=601):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.211878887s ago: executing program 4 (id=602):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

2.172563368s ago: executing program 4 (id=603):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r2, 0x0, 0x0, 0x1001f0)

2.110584849s ago: executing program 4 (id=604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
lseek(r5, 0x40000000, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

1.751959506s ago: executing program 1 (id=610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
lseek(r5, 0x40000000, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

1.56207803s ago: executing program 2 (id=612):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x40}}], 0x2, 0x2400c010)

1.521281431s ago: executing program 2 (id=613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.5071975s ago: executing program 2 (id=614):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

1.495678711s ago: executing program 4 (id=615):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb00edf94382d09cfe9d1d50ec", 0xba}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff210002f922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad", 0xde}], 0x1}}], 0x2, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.478671941s ago: executing program 2 (id=616):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

1.459873711s ago: executing program 3 (id=617):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb", 0xae}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x1a8}], 0x1}}], 0x2, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.430337772s ago: executing program 2 (id=618):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='workqueue_execute_end\x00', r3}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000005c0)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240), 0x111}}, 0x20)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000600)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x464}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x3c}}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

972.875661ms ago: executing program 1 (id=623):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2040400)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7fff}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)

779.046845ms ago: executing program 3 (id=627):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

754.009905ms ago: executing program 3 (id=628):
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="ed5203dd641b6f2d7793e2e5c8aea6c0ddfa05a6dbe01e0051de16d3cad550d4355793345fe84d9469834d1d3bb2af0efcec1a53e89bb4122c85aebd9d44f37f94b21b1f7fca329d288313cfc39236a281c9652c923c9aa792049fe3a222dd578f6d1babc325b82493d9e3ea20bfd9055fbca981268d5367cd12c2ced2c89233c68f13beca636a6e51f10fc181da9df16d3edb355e4d206998e1", 0x9a}, {&(0x7f0000000000)="c2fe7e30da9511842445adb52e0f41e5b91e060c40aef7f64e0217dc8e555fa0b18319bfacd79147b1df2a863eaf122883d036a7876e46d5787cdea498333ee352d67b74839ad8170270a3e09d7800f25317fbff716bcefeb9", 0x59}], 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x2, 0x1, [0x5]}, 0xa)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netfilter\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x34}, 0x1, 0x0, 0x0, 0x504b5b652b27e3e7}, 0x8080)
fchdir(r1)
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYRES16=r8])

671.142527ms ago: executing program 3 (id=629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r2, 0x0, 0x0, 0x1001f0)

652.288387ms ago: executing program 4 (id=630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x0)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)

647.917777ms ago: executing program 3 (id=631):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x66, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580), 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x1000)
getsockname$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

537.824179ms ago: executing program 0 (id=632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r2, 0x0, 0x0, 0x1001f0)

529.99682ms ago: executing program 2 (id=633):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffffffffffe3f, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24a81}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x50}}, 0x8000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0xf8, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xe}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x4, 0xe, 0x1, 0x7, 0x81}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0x7, "39701b"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x1, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x9, 0x8, 0x79, 0xf1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0xab, 0x6, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x3, 0x2, "", '\''}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xce, 0x2, 0x6, 0xa}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xef, 0x4, 0x4, 0x5, "fe0542", "13b4cc"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x1, 0x8d, 0x4, "8119"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb8, 0xd5, 0x74, {0x7, 0x25, 0x1, 0x1, 0x4, 0x7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x79, 0x40, 0x6, 0x40, 0x8}, 0x55, &(0x7f0000000380)={0x5, 0xf, 0x55, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x2, 0x7581, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x6, 0xf00, 0xffff}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6, 0x770f, 0xfff, [0xc0, 0xc0c0, 0x17f00, 0x60, 0x3f]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0xff00, 0x200}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc04}}, {0xca, &(0x7f0000000540)=@string={0xca, 0x3, "8e30939225308f991ae8c082e5d2d0566ec3f220d21e4e1c846fbdad987062d94c9b33c2eaeb920d4ec420c7c4856edb75c62b483fd769150e068fe55a0ba48e7e9b4b54a02432a05e4bf394cf18d50e0791534ccaf7ecf5fc50dbbd2947818deab745a36543a783071fc4d4009642ff41670d99825ff5c44b0184836956e6379bd130e09680e7803c060fa05914599e9c454d8f556c550d0536a417102405f05279f7b8347bc28feb083c18fe4c06a35517277d90220887ae09530142e280d74c5c7d29f6846191"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x812}}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x14, r5, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x24008881}, 0x0)

470.674241ms ago: executing program 0 (id=634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x800000000000000}, 0x18)
r2 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xb0f2, 0x0, 0x3, 0x60000002}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

427.113622ms ago: executing program 3 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800471000300000000000069078ac141400ac1e0001860600"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000040000000000"], 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="00000000000000000000000000000000000000000000000000000000af018a86d2bfa99731e02751ac1c7e75230115bf23602e0d096e42a477ceebb924b0386f"], 0x50)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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")
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0800700400000000235e000005000448d3dd5862c28e0fcfedeb1aab008f826114afa8871ef5ad9fd6d70149ad55d6cb9d2479fe95702c1a99c96fe54f5166a69f28e3ff6aa531da00168996dfb1eede20"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008054)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r2}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70504000000000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x5, &(0x7f00000003c0)={0x0, 0x1, 0x0, @thr={&(0x7f0000000340)="ced577f8f25a340d16b2f658306e45bf9adfbac4cac42d850e0d1f71eb1459bfe376abf90adcb638d16fc83681432b97faeb4319353dc700979172d015e8710c9abbcd377de0699204ec92299a8bd8bb59c364c9e408aef6996df338b1c052e2ad681eb514a36a8448e5c1", &(0x7f0000000200)="149daeb2129893ddf682054a1fa6a0e4580db1d24a2e0f25d9624f0cfbae1d1244172980d2b7a642"}}, &(0x7f0000000400))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r9, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000800)=""/144, 0x90}], 0x2)

278.243004ms ago: executing program 0 (id=636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd'])
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x38020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x404, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
signalfd(r2, &(0x7f0000000080)={[0xa39d]}, 0x8)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800)
fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x61f, &(0x7f0000001100)="$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")
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r5)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)
msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000087fd285c63e41580364e19e4423073e6d20800000065dc40917dc07ae5a100c1570700d09e41cacbf4a5"], 0x8, 0x0)

145.162307ms ago: executing program 0 (id=637):
gettid()
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010400000000000000000a0000040900010073797a310000000008000540ffffff70e4f9b1400000000708000a40fffffffc28000000020a050000000000000000000000000308000240000000050900010073797a31"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

119.385707ms ago: executing program 0 (id=638):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

105.116368ms ago: executing program 1 (id=639):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='svc_stats_latency\x00', r2}, 0xfffffffffffffe66) (async)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r3, &(0x7f0000000300)={0xf97cff8c, 0x8}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000072"], 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000680)={0x58, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}]}, 0x58}, 0x1, 0xd00, 0x0, 0x4000401}, 0x4040084) (async)
r7 = socket(0x11, 0x2, 0x100001) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x8, 0x3, {{0x17, 0x4, 0x3, 0x7, 0x5c, 0x68, 0x0, 0xfd, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x1a, 0x0, [{0x6, 0x4, "3e16"}, {0x7, 0x7, "4cc7e196d7"}, {0x2, 0x9, "3fb1346330aadf"}]}, @rr={0x7, 0x17, 0x1b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @remote]}, @rr={0x7, 0x17, 0xaa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast1, @broadcast]}]}}}}}) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x10, 0xfffffdde, 0xba3809c3c48b4df6, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x1, 0x40, 0x0, 0x7}}) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001540), &(0x7f0000001580)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001640)={'erspan0\x00', &(0x7f00000015c0)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0xfffff801, 0x5, {{0x10, 0x4, 0x1, 0x0, 0x40, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x1, [{0x7, 0x12, "b15fddb0f7b84eabb58a950c26fd1db3"}]}, @ssrr={0x89, 0x13, 0xc4, [@private=0xa010101, @rand_addr=0x64010100, @local, @remote]}, @noop]}}}}}) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r14=>0x0}) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0xffffffff, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

85.261759ms ago: executing program 0 (id=640):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb00edf94382d09cfe9d1d50ec41ffebc62ae6", 0xc0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff210002f922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad", 0xde}], 0x1}}], 0x2, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

31.302709ms ago: executing program 1 (id=641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r2, 0x0, 0x0, 0x1001f0)

30.537209ms ago: executing program 1 (id=642):
r0 = syz_open_dev$loop(&(0x7f0000002b00), 0x5, 0x80)
ioctl$BLKBSZGET(r0, 0x80081270, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000300)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x0, 0x0, 0x0, 0x548c, 0x0, @private1, @mcast1, 0x1, 0x0, 0x0, 0x80000001}})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getgroups(0x0, 0x0)
r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='btrfs_handle_em_exist\x00', r8}, 0x18)
mq_unlink(0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020201080000000000400000000000090b000600616dce555dca5221f4cb64797bf1ff61"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4040080)

0s ago: executing program 1 (id=643):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
lseek(r5, 0x40000000, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

kernel console output (not intermixed with test programs):

ansition } for  pid=3176 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.285992][   T29] audit: type=1400 audit(1757270439.921:58): avc:  denied  { noatsecure } for  pid=3176 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.305778][   T29] audit: type=1400 audit(1757270439.921:59): avc:  denied  { write } for  pid=3176 comm="sh" path="pipe:[2519]" dev="pipefs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   18.328056][   T29] audit: type=1400 audit(1757270439.921:60): avc:  denied  { rlimitinh } for  pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.347046][   T29] audit: type=1400 audit(1757270439.921:61): avc:  denied  { siginh } for  pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts.
[   26.473163][   T29] audit: type=1400 audit(1757270448.141:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.474298][ T3290] cgroup: Unknown subsys name 'net'
[   26.495911][   T29] audit: type=1400 audit(1757270448.141:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.523285][   T29] audit: type=1400 audit(1757270448.171:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.642927][ T3290] cgroup: Unknown subsys name 'cpuset'
[   26.649230][ T3290] cgroup: Unknown subsys name 'rlimit'
[   26.760635][   T29] audit: type=1400 audit(1757270448.421:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.783917][   T29] audit: type=1400 audit(1757270448.421:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.804376][   T29] audit: type=1400 audit(1757270448.421:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.817350][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.824786][   T29] audit: type=1400 audit(1757270448.431:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.853601][   T29] audit: type=1400 audit(1757270448.431:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.878638][   T29] audit: type=1400 audit(1757270448.431:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.890665][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.902195][   T29] audit: type=1400 audit(1757270448.501:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.737236][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   28.800574][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   28.831285][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.840233][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.851065][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.858158][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.865421][ T3308] bridge_slave_0: entered allmulticast mode
[   28.871821][ T3308] bridge_slave_0: entered promiscuous mode
[   28.901249][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.908458][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.915733][ T3308] bridge_slave_1: entered allmulticast mode
[   28.922090][ T3308] bridge_slave_1: entered promiscuous mode
[   28.974288][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.986489][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.995685][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   29.022251][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.029445][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.036591][ T3304] bridge_slave_0: entered allmulticast mode
[   29.043000][ T3304] bridge_slave_0: entered promiscuous mode
[   29.064247][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.071379][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.078527][ T3304] bridge_slave_1: entered allmulticast mode
[   29.085064][ T3304] bridge_slave_1: entered promiscuous mode
[   29.102360][ T3308] team0: Port device team_slave_0 added
[   29.118113][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.125208][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.132589][ T3303] bridge_slave_0: entered allmulticast mode
[   29.138942][ T3303] bridge_slave_0: entered promiscuous mode
[   29.151319][ T3308] team0: Port device team_slave_1 added
[   29.164733][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.171895][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.179096][ T3303] bridge_slave_1: entered allmulticast mode
[   29.185548][ T3303] bridge_slave_1: entered promiscuous mode
[   29.191751][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.198854][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.206064][ T3302] bridge_slave_0: entered allmulticast mode
[   29.212720][ T3302] bridge_slave_0: entered promiscuous mode
[   29.227548][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.241984][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.249268][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.256424][ T3302] bridge_slave_1: entered allmulticast mode
[   29.262901][ T3302] bridge_slave_1: entered promiscuous mode
[   29.277377][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.296725][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.303859][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.329811][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.350961][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.369968][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.376970][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.403029][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.419821][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.428967][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.436069][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.443301][ T3314] bridge_slave_0: entered allmulticast mode
[   29.450038][ T3314] bridge_slave_0: entered promiscuous mode
[   29.457178][ T3304] team0: Port device team_slave_0 added
[   29.465262][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.477934][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.491832][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.499022][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.506298][ T3314] bridge_slave_1: entered allmulticast mode
[   29.512786][ T3314] bridge_slave_1: entered promiscuous mode
[   29.519837][ T3304] team0: Port device team_slave_1 added
[   29.536986][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.544106][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.570063][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.603200][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.610158][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.636159][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.653594][ T3303] team0: Port device team_slave_0 added
[   29.672651][ T3302] team0: Port device team_slave_0 added
[   29.678994][ T3303] team0: Port device team_slave_1 added
[   29.691215][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.703472][ T3308] hsr_slave_0: entered promiscuous mode
[   29.709390][ T3308] hsr_slave_1: entered promiscuous mode
[   29.717575][ T3302] team0: Port device team_slave_1 added
[   29.734323][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.743773][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.750806][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.776876][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.788510][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.795526][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.821525][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.874954][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.882006][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.908020][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.931827][ T3304] hsr_slave_0: entered promiscuous mode
[   29.937894][ T3304] hsr_slave_1: entered promiscuous mode
[   29.943807][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   29.949545][ T3304] Cannot create hsr debugfs directory
[   29.955568][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.962661][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.988587][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.004993][ T3314] team0: Port device team_slave_0 added
[   30.012668][ T3303] hsr_slave_0: entered promiscuous mode
[   30.018825][ T3303] hsr_slave_1: entered promiscuous mode
[   30.024682][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   30.030408][ T3303] Cannot create hsr debugfs directory
[   30.042601][ T3314] team0: Port device team_slave_1 added
[   30.075739][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.082768][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.108873][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.137059][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.144059][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.170042][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.199351][ T3302] hsr_slave_0: entered promiscuous mode
[   30.205381][ T3302] hsr_slave_1: entered promiscuous mode
[   30.211123][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   30.216946][ T3302] Cannot create hsr debugfs directory
[   30.294661][ T3314] hsr_slave_0: entered promiscuous mode
[   30.300747][ T3314] hsr_slave_1: entered promiscuous mode
[   30.307774][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   30.313534][ T3314] Cannot create hsr debugfs directory
[   30.377805][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.393663][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.414584][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.432965][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.468618][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.477438][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.489096][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.506541][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.531012][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.546424][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.556102][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.566132][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.601877][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.621584][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.630352][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.640254][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.679531][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.687740][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.697932][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.712504][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   30.723401][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.732384][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.755269][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.762432][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.784419][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.807850][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.814967][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.852953][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.870608][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.881107][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.906415][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.913587][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.923488][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   30.934313][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.946593][  T410] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.953743][  T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.973772][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.985590][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.992678][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.001494][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.008567][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.029792][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.037971][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   31.047111][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.065655][  T410] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.072882][  T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.095998][  T410] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.103157][  T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.111994][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.119064][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.138144][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.145227][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.274173][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.300866][ T3308] veth0_vlan: entered promiscuous mode
[   31.312890][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.343208][ T3308] veth1_vlan: entered promiscuous mode
[   31.353886][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.386509][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.408822][ T3308] veth0_macvtap: entered promiscuous mode
[   31.440425][ T3308] veth1_macvtap: entered promiscuous mode
[   31.483528][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.510124][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.528515][ T3303] veth0_vlan: entered promiscuous mode
[   31.547246][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.558466][ T3304] veth0_vlan: entered promiscuous mode
[   31.568331][ T3303] veth1_vlan: entered promiscuous mode
[   31.578323][ T3304] veth1_vlan: entered promiscuous mode
[   31.585167][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.601371][ T3314] veth0_vlan: entered promiscuous mode
[   31.607765][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.616703][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.634919][ T3314] veth1_vlan: entered promiscuous mode
[   31.656214][ T3303] veth0_macvtap: entered promiscuous mode
[   31.667066][ T3302] veth0_vlan: entered promiscuous mode
[   31.676127][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   31.676141][   T29] audit: type=1400 audit(1757270453.341:81): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.D0NMAD/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   31.686854][ T3314] veth0_macvtap: entered promiscuous mode
[   31.712921][   T29] audit: type=1400 audit(1757270453.381:82): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.719449][ T3303] veth1_macvtap: entered promiscuous mode
[   31.735008][   T29] audit: type=1400 audit(1757270453.381:83): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.D0NMAD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.745377][ T3304] veth0_macvtap: entered promiscuous mode
[   31.765827][   T29] audit: type=1400 audit(1757270453.381:84): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   31.777180][ T3302] veth1_vlan: entered promiscuous mode
[   31.793201][   T29] audit: type=1400 audit(1757270453.381:85): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.D0NMAD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   31.814525][ T3302] veth0_macvtap: entered promiscuous mode
[   31.825200][   T29] audit: type=1400 audit(1757270453.381:86): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.D0NMAD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   31.836052][ T3302] veth1_macvtap: entered promiscuous mode
[   31.858173][   T29] audit: type=1400 audit(1757270453.381:87): avc:  denied  { unmount } for  pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.872868][ T3314] veth1_macvtap: entered promiscuous mode
[   31.894683][   T29] audit: type=1400 audit(1757270453.561:88): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   31.897140][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.917518][   T29] audit: type=1400 audit(1757270453.561:89): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="gadgetfs" ino=3864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   31.925856][ T3304] veth1_macvtap: entered promiscuous mode
[   31.969545][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.978890][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.986796][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.001991][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.015097][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.025967][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.036856][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.047864][   T29] audit: type=1400 audit(1757270453.711:90): avc:  denied  { read write } for  pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.062226][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.089272][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.105190][ T3471] loop1: detected capacity change from 0 to 1024
[   32.111813][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.121549][ T3471] EXT4-fs: Ignoring removed orlov option
[   32.131380][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.140946][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.142988][ T3471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.179141][ T1622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.211114][ T1622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.254604][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.291393][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.337021][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.373165][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.382078][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.391690][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.402813][ T3485] loop4: detected capacity change from 0 to 164
[   32.419495][  T410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.434027][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.442942][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.474467][ T3485] Unable to read rock-ridge attributes
[   32.494927][ T3485] Unable to read rock-ridge attributes
[   32.508957][ T3488] bridge_slave_0: left allmulticast mode
[   32.514778][ T3488] bridge_slave_0: left promiscuous mode
[   32.520471][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.541602][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.550415][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.560575][ T3488] bridge_slave_1: left allmulticast mode
[   32.566363][ T3488] bridge_slave_1: left promiscuous mode
[   32.572159][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.589634][ T3488] bond0: (slave bond_slave_0): Releasing backup interface
[   32.599669][ T3488] bond0: (slave bond_slave_1): Releasing backup interface
[   32.610267][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.619325][ T3490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'.
[   32.629954][ T3488] team0: Port device team_slave_0 removed
[   32.644312][ T3488] team0: Port device team_slave_1 removed
[   32.661257][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   32.668863][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0
[   32.677239][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.677930][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   32.693747][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1
[   32.728641][  T410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.812481][  T410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.821301][ T3499] tipc: Started in network mode
[   32.826239][ T3499] tipc: Node identity a24c17faa1a1, cluster identity 4711
[   32.833513][ T3499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.846361][  T410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.884768][ T3498] tipc: Disabling bearer <eth:syzkaller0>
[   32.950291][ T3508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'.
[   32.959173][ T3508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'.
[   33.020804][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   33.053927][ T3508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'.
[   33.090442][ T3514] 9pnet_fd: Insufficient options for proto=fd
[   33.156491][ T3521] Zero length message leads to an empty skb
[   33.241671][ T3525] loop0: detected capacity change from 0 to 1024
[   33.261903][ T3521] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   33.269302][ T3525] EXT4-fs: Ignoring removed orlov option
[   33.308568][ T3525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.367518][ T3527] loop2: detected capacity change from 0 to 2048
[   33.435116][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.451755][ T3532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   33.531255][ T3527] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.658681][ T3535] infiniband syz2: set active
[   33.663320][ T3538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   33.679514][ T3535] infiniband syz2: added veth0_to_hsr
[   33.696748][ T3535] RDS/IB: syz2: added
[   33.702507][ T3535] smc: adding ib device syz2 with port count 1
[   33.728777][ T3535] smc:    ib device syz2 port 1 has pnetid 
[   34.037150][ T3544] tipc: Started in network mode
[   34.042079][ T3544] tipc: Node identity de57023d5f93, cluster identity 4711
[   34.049371][ T3544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   34.066714][ T3527] syz.2.16 (3527) used greatest stack depth: 8832 bytes left
[   34.076336][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.086401][ T3544] tipc: Disabling bearer <eth:syzkaller0>
[   34.147517][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.220544][ T3550] tipc: Started in network mode
[   34.225499][ T3550] tipc: Node identity e2ad351be3e1, cluster identity 4711
[   34.233018][ T3550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   34.253513][ T3550] tipc: Disabling bearer <eth:syzkaller0>
[   34.331086][ T3567] tipc: Started in network mode
[   34.336254][ T3567] tipc: Node identity 3afa9daf97a7, cluster identity 4711
[   34.343648][ T3567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   34.353349][ T3567] tipc: Disabling bearer <eth:syzkaller0>
[   34.395997][ T3570] tipc: Started in network mode
[   34.400917][ T3570] tipc: Node identity 6a3401c268f5, cluster identity 4711
[   34.408231][ T3570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   34.435009][ T3570] tipc: Disabling bearer <eth:syzkaller0>
[   34.487062][ T3578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.495731][ T3578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.499257][ T3571] bridge_slave_0: left allmulticast mode
[   34.509320][ T3571] bridge_slave_0: left promiscuous mode
[   34.515076][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.528573][ T3571] bridge_slave_1: left allmulticast mode
[   34.534423][ T3571] bridge_slave_1: left promiscuous mode
[   34.540218][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.550969][ T3571] bond0: (slave bond_slave_0): Releasing backup interface
[   34.560877][ T3571] bond0: (slave bond_slave_1): Releasing backup interface
[   34.572953][ T3571] team0: Port device team_slave_0 removed
[   34.581776][ T3571] team0: Port device team_slave_1 removed
[   34.588650][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.596114][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0
[   34.605093][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.612680][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1
[   34.658724][ T3584] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   35.019608][ T3608] loop0: detected capacity change from 0 to 1024
[   35.036561][ T3608] EXT4-fs: Ignoring removed orlov option
[   35.061207][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.173733][ T3618] loop2: detected capacity change from 0 to 1024
[   35.229811][ T3618] EXT4-fs: Ignoring removed orlov option
[   35.396940][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.477971][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.650895][ T3636] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   35.894859][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.003732][ T3644] loop0: detected capacity change from 0 to 164
[   36.023021][ T3644] Unable to read rock-ridge attributes
[   36.049363][ T3644] Unable to read rock-ridge attributes
[   36.125604][ T3656] loop3: detected capacity change from 0 to 1024
[   36.183250][ T3656] EXT4-fs: Ignoring removed orlov option
[   36.217041][ T3656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.301314][ T3668] loop2: detected capacity change from 0 to 1024
[   36.319340][ T3668] EXT4-fs: Ignoring removed orlov option
[   36.349122][ T3671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   36.358497][ T3671] tipc: Disabling bearer <eth:syzkaller0>
[   36.369661][ T3672] loop0: detected capacity change from 0 to 1024
[   36.378089][ T3672] EXT4-fs: Ignoring removed orlov option
[   36.391778][ T3668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.401612][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.488513][ T3672] syz2: rxe_newlink: already configured on veth0_to_hsr
[   36.516638][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.582794][ T3682] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   36.592161][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.690021][   T29] kauditd_printk_skb: 599 callbacks suppressed
[   36.690038][   T29] audit: type=1400 audit(1757270458.351:690): avc:  denied  { create } for  pid=3680 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.727850][ T3688] loop3: detected capacity change from 0 to 2048
[   36.731898][   T29] audit: type=1400 audit(1757270458.391:691): avc:  denied  { ioctl } for  pid=3680 comm="syz.1.64" path="socket:[5230]" dev="sockfs" ino=5230 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.768924][ T3686] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   36.850382][ T3688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.863216][   T29] audit: type=1400 audit(1757270458.431:692): avc:  denied  { mounton } for  pid=3687 comm="syz.3.66" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   36.885541][   T29] audit: type=1400 audit(1757270458.471:693): avc:  denied  { setopt } for  pid=3694 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   36.892467][ T3688] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.905208][   T29] audit: type=1326 audit(1757270458.541:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3667 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   36.938582][   T29] audit: type=1326 audit(1757270458.541:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3667 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   36.961885][   T29] audit: type=1400 audit(1757270458.561:696): avc:  denied  { mount } for  pid=3687 comm="syz.3.66" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.987201][   T29] audit: type=1400 audit(1757270458.651:697): avc:  denied  { read } for  pid=3687 comm="syz.3.66" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   37.010534][   T29] audit: type=1400 audit(1757270458.651:698): avc:  denied  { open } for  pid=3687 comm="syz.3.66" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   37.047883][ T3703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.067296][ T3703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.078751][   T29] audit: type=1400 audit(1757270458.711:699): avc:  denied  { name_bind } for  pid=3702 comm="syz.1.71" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   37.101268][ T3695] loop4: detected capacity change from 0 to 2048
[   37.111570][ T3707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.120454][ T3707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.135153][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.147809][ T3695] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.159761][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.256479][ T3713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.265097][ T3713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.466502][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.497696][ T3715] loop3: detected capacity change from 0 to 1024
[   37.505105][ T3715] EXT4-fs: Ignoring removed orlov option
[   37.516433][ T3715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.670295][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.788826][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.894872][ T3739] __nla_validate_parse: 18 callbacks suppressed
[   37.894900][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   37.925609][ T3742] loop4: detected capacity change from 0 to 1024
[   37.928940][ T3741] netlink: 116 bytes leftover after parsing attributes in process `syz.3.81'.
[   37.932768][ T3742] EXT4-fs: Ignoring removed orlov option
[   37.968454][ T3742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.019053][ T3743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   38.075340][ T3742] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   38.110139][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.232758][ T3752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.311671][ T3752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.489231][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'.
[   38.683717][ T3769] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.696193][ T3768] loop1: detected capacity change from 0 to 1024
[   38.702984][ T3768] EXT4-fs: Ignoring removed orlov option
[   38.715247][ T3768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.897741][ T3777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.910156][ T3774] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   38.915716][ T3777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.038694][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.161757][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   39.369946][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   39.378994][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   39.397965][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   39.406926][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   39.434673][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   39.443721][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'.
[   40.150305][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.208899][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.401540][ T3829] loop0: detected capacity change from 0 to 1024
[   40.446925][ T3829] EXT4-fs: Ignoring removed orlov option
[   40.469720][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.555893][ T3831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   40.713250][ T3838] loop3: detected capacity change from 0 to 2048
[   40.753814][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.753914][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.789515][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.790677][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.791360][ T3838] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.881653][ T3856] loop0: detected capacity change from 0 to 1024
[   40.899392][ T3856] EXT4-fs: Ignoring removed orlov option
[   40.916088][ T3856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.071620][ T3864] syz2: rxe_newlink: already configured on veth0_to_hsr
[   41.207796][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.218934][ T3872] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   41.298814][ T3876] loop4: detected capacity change from 0 to 2048
[   41.315331][ T3876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.340809][ T3880] loop1: detected capacity change from 0 to 1024
[   41.347543][ T3876] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.360587][ T3880] EXT4-fs: Ignoring removed orlov option
[   41.370675][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.490372][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.598972][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.634659][ T3895] loop3: detected capacity change from 0 to 1024
[   41.654211][ T3895] EXT4-fs: Ignoring removed orlov option
[   41.676664][ T3895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.693402][   T29] kauditd_printk_skb: 453 callbacks suppressed
[   41.693417][   T29] audit: type=1400 audit(1757270463.361:1153): avc:  denied  { read open } for  pid=3894 comm="syz.3.132" path="/23/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.723953][   T29] audit: type=1400 audit(1757270463.361:1154): avc:  denied  { write } for  pid=3894 comm="syz.3.132" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.770033][   T29] audit: type=1400 audit(1757270463.431:1155): avc:  denied  { create } for  pid=3907 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   41.792382][   T29] audit: type=1400 audit(1757270463.451:1156): avc:  denied  { create } for  pid=3907 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.812144][   T29] audit: type=1400 audit(1757270463.451:1157): avc:  denied  { setopt } for  pid=3907 comm="syz.1.136" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.844183][ T3909] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   41.850739][   T29] audit: type=1400 audit(1757270463.511:1158): avc:  denied  { create } for  pid=3894 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   41.871096][   T29] audit: type=1400 audit(1757270463.511:1159): avc:  denied  { write } for  pid=3894 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   41.891208][   T29] audit: type=1400 audit(1757270463.511:1160): avc:  denied  { connect } for  pid=3907 comm="syz.1.136" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.912537][   T29] audit: type=1400 audit(1757270463.511:1161): avc:  denied  { execmem } for  pid=3907 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   41.947623][   T29] audit: type=1326 audit(1757270463.601:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   42.040036][ T3915] loop2: detected capacity change from 0 to 2048
[   42.075682][ T3915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.088661][ T3915] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.090196][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.172524][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.317210][ T3926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   42.344388][ T3928] loop4: detected capacity change from 0 to 2048
[   42.390596][ T3928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.444203][ T3928] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.862685][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.943674][ T3944] __nla_validate_parse: 11 callbacks suppressed
[   42.943689][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   42.958928][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   43.000118][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   43.009075][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   43.047565][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   43.056602][ T3944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'.
[   43.129974][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.214333][ T3954] loop4: detected capacity change from 0 to 1024
[   43.242889][ T3954] EXT4-fs: Ignoring removed orlov option
[   43.274106][ T3954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.418547][ T3966] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   43.881605][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.015032][ T3980] loop4: detected capacity change from 0 to 1024
[   44.018741][ T3978] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   44.058891][ T3980] EXT4-fs: Ignoring removed orlov option
[   44.102902][ T3980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.194764][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.203585][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.268772][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.292695][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.402373][ T3991] loop0: detected capacity change from 0 to 1024
[   44.429599][ T3991] EXT4-fs: Ignoring removed orlov option
[   44.457970][ T3991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.491980][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.707943][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.761205][ T3999] loop4: detected capacity change from 0 to 2048
[   44.788968][ T4001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   44.816386][ T3999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.832774][ T3999] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.842698][ T4009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.859570][ T4009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.905651][ T4015] loop1: detected capacity change from 0 to 1024
[   44.912593][ T4015] EXT4-fs: Ignoring removed orlov option
[   44.920830][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.066305][ T4023] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   45.159201][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.552218][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.685264][ T4070] loop0: detected capacity change from 0 to 1024
[   46.692655][ T4070] EXT4-fs: Ignoring removed orlov option
[   46.703033][ T4070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.716104][   T29] kauditd_printk_skb: 466 callbacks suppressed
[   46.716119][   T29] audit: type=1326 audit(1757270468.391:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0664f3d550 code=0x7ffc0000
[   46.746254][   T29] audit: type=1326 audit(1757270468.391:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0664f3d937 code=0x7ffc0000
[   46.769612][   T29] audit: type=1326 audit(1757270468.391:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0664f3d550 code=0x7ffc0000
[   46.793048][   T29] audit: type=1326 audit(1757270468.391:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.816377][   T29] audit: type=1326 audit(1757270468.391:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.839964][   T29] audit: type=1326 audit(1757270468.391:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.863440][   T29] audit: type=1326 audit(1757270468.391:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.886877][   T29] audit: type=1326 audit(1757270468.391:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.910227][   T29] audit: type=1326 audit(1757270468.391:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.933557][   T29] audit: type=1326 audit(1757270468.391:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   46.967625][ T4073] syz2: rxe_newlink: already configured on veth0_to_hsr
[   47.057729][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.114376][ T4085] loop4: detected capacity change from 0 to 1024
[   47.122412][ T4085] EXT4-fs: Ignoring removed orlov option
[   47.135272][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.269725][ T4090] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   47.396554][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.445600][ T4100] loop3: detected capacity change from 0 to 164
[   47.454668][ T4100] Unable to read rock-ridge attributes
[   47.463530][ T4100] Unable to read rock-ridge attributes
[   47.503610][ T4103] loop3: detected capacity change from 0 to 164
[   47.529562][ T4103] Unable to read rock-ridge attributes
[   47.540467][ T4106] loop4: detected capacity change from 0 to 164
[   47.557453][ T4106] Unable to read rock-ridge attributes
[   47.561056][ T4103] Unable to read rock-ridge attributes
[   47.569124][ T4106] Unable to read rock-ridge attributes
[   47.612987][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.630699][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.634229][ T4111] loop0: detected capacity change from 0 to 164
[   47.655485][ T4111] Unable to read rock-ridge attributes
[   47.661449][ T4112] loop4: detected capacity change from 0 to 1024
[   47.663091][ T4111] Unable to read rock-ridge attributes
[   47.673026][ T4112] EXT4-fs: Ignoring removed orlov option
[   47.685473][ T4112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.813609][ T4119] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   47.869120][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.950932][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.198'.
[   47.976429][ T4122] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   48.023283][ T4124] loop2: detected capacity change from 0 to 1024
[   48.031225][ T4124] EXT4-fs: Ignoring removed orlov option
[   48.044888][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.291901][ T4138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.202'.
[   48.347625][ T4142] loop1: detected capacity change from 0 to 164
[   48.359751][ T4142] Unable to read rock-ridge attributes
[   48.377962][ T4142] Unable to read rock-ridge attributes
[   48.441468][ T4144] loop1: detected capacity change from 0 to 1024
[   48.450763][ T4144] EXT4-fs: Ignoring removed orlov option
[   48.476286][ T4144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.524782][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.801428][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.932706][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'.
[   49.036664][ T4173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'.
[   49.115922][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'.
[   49.127751][ T4173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   49.207767][ T4180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   49.334249][ T4190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.362444][ T4190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.468139][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'.
[   49.604083][ T4205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.624280][ T4205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.953499][ T4208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.230'.
[   50.136388][ T4214] loop3: detected capacity change from 0 to 164
[   50.153841][ T4214] Unable to read rock-ridge attributes
[   50.192374][ T4214] Unable to read rock-ridge attributes
[   50.304429][ T4222] FAULT_INJECTION: forcing a failure.
[   50.304429][ T4222] name failslab, interval 1, probability 0, space 0, times 1
[   50.317320][ T4222] CPU: 0 UID: 0 PID: 4222 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.317362][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   50.317376][ T4222] Call Trace:
[   50.317383][ T4222]  <TASK>
[   50.317392][ T4222]  __dump_stack+0x1d/0x30
[   50.317417][ T4222]  dump_stack_lvl+0xe8/0x140
[   50.317442][ T4222]  dump_stack+0x15/0x1b
[   50.317491][ T4222]  should_fail_ex+0x265/0x280
[   50.317519][ T4222]  ? alloc_async+0x2d/0x90
[   50.317541][ T4222]  should_failslab+0x8c/0xb0
[   50.317566][ T4222]  __kmalloc_cache_noprof+0x4c/0x320
[   50.317611][ T4222]  alloc_async+0x2d/0x90
[   50.317663][ T4222]  proc_do_submiturb+0x76d/0x1d20
[   50.317697][ T4222]  proc_submiturb+0x7b/0xa0
[   50.317802][ T4222]  usbdev_ioctl+0xcc2/0x1710
[   50.317841][ T4222]  ? __pfx_usbdev_ioctl+0x10/0x10
[   50.317873][ T4222]  __se_sys_ioctl+0xcb/0x140
[   50.317892][ T4222]  __x64_sys_ioctl+0x43/0x50
[   50.318059][ T4222]  x64_sys_call+0x1816/0x2ff0
[   50.318085][ T4222]  do_syscall_64+0xd2/0x200
[   50.318121][ T4222]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.318150][ T4222]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.318228][ T4222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.318253][ T4222] RIP: 0033:0x7f99b6c8ebe9
[   50.318270][ T4222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.318301][ T4222] RSP: 002b:00007f99b56ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   50.318329][ T4222] RAX: ffffffffffffffda RBX: 00007f99b6ec5fa0 RCX: 00007f99b6c8ebe9
[   50.318394][ T4222] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000006
[   50.318427][ T4222] RBP: 00007f99b56ef090 R08: 0000000000000000 R09: 0000000000000000
[   50.318441][ T4222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.318453][ T4222] R13: 00007f99b6ec6038 R14: 00007f99b6ec5fa0 R15: 00007ffd794ff048
[   50.318500][ T4222]  </TASK>
[   50.322085][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.525821][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.618582][ T4239] loop3: detected capacity change from 0 to 1024
[   50.626334][ T4239] EXT4-fs: Ignoring removed orlov option
[   50.653876][ T4237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'.
[   50.664576][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.709715][ T4247] loop1: detected capacity change from 0 to 164
[   50.725400][ T4247] Unable to read rock-ridge attributes
[   50.735612][ T4247] Unable to read rock-ridge attributes
[   50.827945][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.845015][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.888772][ T4258] loop2: detected capacity change from 0 to 2048
[   50.935711][ T4258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.961660][ T4258] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.006617][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.085880][ T4272] loop3: detected capacity change from 0 to 164
[   51.096098][ T4272] rock: directory entry would overflow storage
[   51.102334][ T4272] rock: sig=0x66, size=4, remaining=3
[   51.131261][ T4276] loop0: detected capacity change from 0 to 164
[   51.154078][ T4272] rock: directory entry would overflow storage
[   51.160281][ T4272] rock: sig=0x66, size=4, remaining=3
[   51.162536][ T4276] Unable to read rock-ridge attributes
[   51.175298][ T4276] Unable to read rock-ridge attributes
[   51.293395][ T4298] 9pnet_fd: Insufficient options for proto=fd
[   51.301722][ T4296] loop3: detected capacity change from 0 to 1024
[   51.306674][ T4298] loop0: detected capacity change from 0 to 1024
[   51.311090][ T4296] EXT4-fs: Ignoring removed orlov option
[   51.316672][ T4298] ext2: Unknown parameter 'uid<00000000000000000000'
[   51.335850][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.390682][ T4301] syz.4.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   51.426282][ T4305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.434907][ T4305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.467041][ T4308] netlink: 'syz.4.268': attribute type 4 has an invalid length.
[   51.474780][ T4308] netlink: 17 bytes leftover after parsing attributes in process `syz.4.268'.
[   51.633441][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.694836][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.711327][ T4316] loop3: detected capacity change from 0 to 164
[   51.731225][   T29] kauditd_printk_skb: 835 callbacks suppressed
[   51.731243][   T29] audit: type=1326 audit(1757270473.391:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.743408][ T4316] Unable to read rock-ridge attributes
[   51.793767][ T4316] Unable to read rock-ridge attributes
[   51.800147][   T29] audit: type=1326 audit(1757270473.391:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.823594][   T29] audit: type=1326 audit(1757270473.391:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.847148][   T29] audit: type=1400 audit(1757270473.401:2477): avc:  denied  { open } for  pid=4318 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   51.866544][   T29] audit: type=1400 audit(1757270473.401:2478): avc:  denied  { kernel } for  pid=4318 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   51.870646][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[   51.886476][   T29] audit: type=1326 audit(1757270473.401:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.918709][   T29] audit: type=1326 audit(1757270473.401:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.942085][   T29] audit: type=1326 audit(1757270473.401:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.965750][   T29] audit: type=1326 audit(1757270473.401:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   51.989091][   T29] audit: type=1326 audit(1757270473.401:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   52.015831][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.024746][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.051272][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.061075][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.085994][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'.
[   52.098598][ T4334] loop1: detected capacity change from 0 to 512
[   52.114698][ T4334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.127592][ T4334] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.157096][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.194105][ T4339] loop1: detected capacity change from 0 to 2048
[   52.200791][ T4340] loop0: detected capacity change from 0 to 1024
[   52.207897][ T4340] EXT4-fs: Ignoring removed orlov option
[   52.217686][ T4339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.232655][ T4339] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.280: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   52.248855][ T4340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.249414][ T4339] EXT4-fs (loop1): Remounting filesystem read-only
[   52.281030][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.311471][ T4345] FAULT_INJECTION: forcing a failure.
[   52.311471][ T4345] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   52.324787][ T4345] CPU: 1 UID: 0 PID: 4345 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.324825][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.324846][ T4345] Call Trace:
[   52.324854][ T4345]  <TASK>
[   52.324864][ T4345]  __dump_stack+0x1d/0x30
[   52.324889][ T4345]  dump_stack_lvl+0xe8/0x140
[   52.324913][ T4345]  dump_stack+0x15/0x1b
[   52.324931][ T4345]  should_fail_ex+0x265/0x280
[   52.324957][ T4345]  should_fail+0xb/0x20
[   52.324981][ T4345]  should_fail_usercopy+0x1a/0x20
[   52.325056][ T4345]  _copy_to_user+0x20/0xa0
[   52.325174][ T4345]  simple_read_from_buffer+0xb5/0x130
[   52.325200][ T4345]  proc_fail_nth_read+0x10e/0x150
[   52.325228][ T4345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   52.325256][ T4345]  vfs_read+0x1a5/0x770
[   52.325295][ T4345]  ? __rcu_read_unlock+0x4f/0x70
[   52.325394][ T4345]  ? __fget_files+0x184/0x1c0
[   52.325483][ T4345]  ksys_read+0xda/0x1a0
[   52.325514][ T4345]  __x64_sys_read+0x40/0x50
[   52.325542][ T4345]  x64_sys_call+0x27bc/0x2ff0
[   52.325569][ T4345]  do_syscall_64+0xd2/0x200
[   52.325677][ T4345]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.325774][ T4345]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.325804][ T4345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.325827][ T4345] RIP: 0033:0x7f664effd5fc
[   52.325852][ T4345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   52.325873][ T4345] RSP: 002b:00007f664da5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.325894][ T4345] RAX: ffffffffffffffda RBX: 00007f664f235fa0 RCX: 00007f664effd5fc
[   52.325941][ T4345] RDX: 000000000000000f RSI: 00007f664da5f0a0 RDI: 0000000000000007
[   52.325986][ T4345] RBP: 00007f664da5f090 R08: 0000000000000000 R09: 0000000000000000
[   52.326001][ T4345] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[   52.326012][ T4345] R13: 00007f664f236038 R14: 00007f664f235fa0 R15: 00007fffd9ece6c8
[   52.326033][ T4345]  </TASK>
[   52.552832][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.613330][ T4349] loop0: detected capacity change from 0 to 2048
[   52.652982][ T4349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.710745][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.740662][ T4372] capability: warning: `syz.0.291' uses 32-bit capabilities (legacy support in use)
[   52.778423][ T4374] loop2: detected capacity change from 0 to 512
[   52.813872][ T4379] loop1: detected capacity change from 0 to 1024
[   52.828127][ T4374] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.293: bg 0: block 248: padding at end of block bitmap is not set
[   52.832524][ T4379] EXT4-fs: Ignoring removed orlov option
[   52.854978][ T4374] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.293: Failed to acquire dquot type 1
[   52.861928][ T4385] dummy0: entered allmulticast mode
[   52.881292][ T4385] dummy0: left allmulticast mode
[   52.881437][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.900473][ T4374] EXT4-fs (loop2): 1 truncate cleaned up
[   52.906261][ T4385] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4385 comm=syz.3.296
[   52.906761][ T4374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.918736][ T4385] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4385 comm=syz.3.296
[   52.936782][ T4374] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.956480][ T4385] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4385 comm=syz.3.296
[   52.981295][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.013851][ T4385] mmap: syz.3.296 (4385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   53.177495][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.256149][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.272318][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.287213][ T4413] lo speed is unknown, defaulting to 1000
[   53.297996][ T4413] lo speed is unknown, defaulting to 1000
[   53.311327][ T4413] lo speed is unknown, defaulting to 1000
[   53.319552][ T4413] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   53.336778][ T4413] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   53.350461][ T4413] lo speed is unknown, defaulting to 1000
[   53.358416][ T4413] lo speed is unknown, defaulting to 1000
[   53.364966][ T4413] lo speed is unknown, defaulting to 1000
[   53.371087][ T4413] lo speed is unknown, defaulting to 1000
[   53.379561][ T4413] lo speed is unknown, defaulting to 1000
[   53.386112][ T4413] lo speed is unknown, defaulting to 1000
[   53.433148][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.441972][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.544081][ T4419] __nla_validate_parse: 4 callbacks suppressed
[   53.544094][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'.
[   54.112502][ T4445] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   54.344661][ T4455] 9pnet: Could not find request transport: 0xffffffffffffffff
[   54.422161][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.444999][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.449450][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.472425][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.691485][ T4480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'.
[   54.701804][ T4476] uprobe: syz.4.327:4476 failed to unregister, leaking uprobe
[   54.725524][ T4480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   55.041836][ T4511] dummy0: entered allmulticast mode
[   55.047388][ T4511] dummy0: left allmulticast mode
[   55.068761][ T4511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4511 comm=syz.2.340
[   55.081301][ T4511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4511 comm=syz.2.340
[   55.152778][ T4520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=4520 comm=syz.2.340
[   55.300601][ T4511] loop2: detected capacity change from 0 to 512
[   55.353751][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.408238][ T4511] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.532640][ T4528] lo speed is unknown, defaulting to 1000
[   55.541393][ T1468] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   55.573051][ T1468] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[   55.585675][ T1468] EXT4-fs (loop2): This should not happen!! Data will be lost
[   55.585675][ T1468] 
[   55.595543][ T1468] EXT4-fs (loop2): Total free blocks count 0
[   55.601545][ T1468] EXT4-fs (loop2): Free/Dirty block details
[   55.607491][ T1468] EXT4-fs (loop2): free_blocks=65280
[   55.612887][ T1468] EXT4-fs (loop2): dirty_blocks=1029
[   55.618208][ T1468] EXT4-fs (loop2): Block reservation details
[   55.624276][ T1468] EXT4-fs (loop2): i_reserved_data_blocks=1029
[   55.663860][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.759127][ T4542] FAULT_INJECTION: forcing a failure.
[   55.759127][ T4542] name failslab, interval 1, probability 0, space 0, times 0
[   55.771939][ T4542] CPU: 0 UID: 0 PID: 4542 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.771973][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   55.771989][ T4542] Call Trace:
[   55.771996][ T4542]  <TASK>
[   55.772005][ T4542]  __dump_stack+0x1d/0x30
[   55.772032][ T4542]  dump_stack_lvl+0xe8/0x140
[   55.772053][ T4542]  dump_stack+0x15/0x1b
[   55.772069][ T4542]  should_fail_ex+0x265/0x280
[   55.772173][ T4542]  should_failslab+0x8c/0xb0
[   55.772200][ T4542]  __kmalloc_noprof+0xa5/0x3e0
[   55.772249][ T4542]  ? sock_kmalloc+0x85/0xc0
[   55.772284][ T4542]  sock_kmalloc+0x85/0xc0
[   55.772317][ T4542]  ipv6_renew_options+0x1fb/0x5f0
[   55.772357][ T4542]  ipv6_set_opt_hdr+0x13b/0x600
[   55.772390][ T4542]  do_ipv6_setsockopt+0x10b9/0x2160
[   55.772418][ T4542]  ? kstrtoull+0x111/0x140
[   55.772444][ T4542]  ? avc_has_perm_noaudit+0x1b1/0x200
[   55.772505][ T4542]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   55.772545][ T4542]  ipv6_setsockopt+0x59/0x130
[   55.772569][ T4542]  udpv6_setsockopt+0x99/0xb0
[   55.772641][ T4542]  sock_common_setsockopt+0x69/0x80
[   55.772682][ T4542]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   55.772773][ T4542]  __sys_setsockopt+0x181/0x200
[   55.772812][ T4542]  __x64_sys_setsockopt+0x64/0x80
[   55.772918][ T4542]  x64_sys_call+0x20ec/0x2ff0
[   55.772939][ T4542]  do_syscall_64+0xd2/0x200
[   55.772972][ T4542]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.773004][ T4542]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   55.773062][ T4542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.773086][ T4542] RIP: 0033:0x7fc4a065ebe9
[   55.773105][ T4542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.773127][ T4542] RSP: 002b:00007fc49f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   55.773149][ T4542] RAX: ffffffffffffffda RBX: 00007fc4a0895fa0 RCX: 00007fc4a065ebe9
[   55.773161][ T4542] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003
[   55.773236][ T4542] RBP: 00007fc49f0bf090 R08: 0000000000000008 R09: 0000000000000000
[   55.773251][ T4542] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   55.773301][ T4542] R13: 00007fc4a0896038 R14: 00007fc4a0895fa0 R15: 00007fffd7539c68
[   55.773327][ T4542]  </TASK>
[   56.110917][ T4551] bridge1: entered promiscuous mode
[   56.123579][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.132038][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.174933][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.203405][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.658392][ T4572] loop1: detected capacity change from 0 to 2048
[   56.736643][ T4572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.752220][   T29] kauditd_printk_skb: 472 callbacks suppressed
[   56.752234][   T29] audit: type=1326 audit(1757270478.401:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.781799][   T29] audit: type=1326 audit(1757270478.401:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.805205][   T29] audit: type=1326 audit(1757270478.401:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.816219][ T4572] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.828574][   T29] audit: type=1326 audit(1757270478.401:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.862338][   T29] audit: type=1326 audit(1757270478.401:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.885865][   T29] audit: type=1326 audit(1757270478.401:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.909277][   T29] audit: type=1326 audit(1757270478.401:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.932900][   T29] audit: type=1326 audit(1757270478.401:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.950741][ T4581] loop2: detected capacity change from 0 to 1024
[   56.956268][   T29] audit: type=1326 audit(1757270478.401:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0664f3ebe9 code=0x7ffc0000
[   56.956305][   T29] audit: type=1326 audit(1757270478.401:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0664f3d550 code=0x7ffc0000
[   57.033023][ T4581] EXT4-fs: Ignoring removed orlov option
[   57.076447][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.086241][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.148134][ T4581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.518009][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.579951][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.715780][ T4599] loop0: detected capacity change from 0 to 2048
[   57.755660][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.769097][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'.
[   57.812564][ T4606] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   57.832463][ T4599] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.958812][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'.
[   58.161500][ T4628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.375'.
[   58.170536][ T4628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.375'.
[   58.180054][ T4627] loop1: detected capacity change from 0 to 2048
[   58.192433][ T4620] lo speed is unknown, defaulting to 1000
[   58.212609][ T4627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.271161][ T4627] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.370577][ T4632] loop3: detected capacity change from 0 to 1024
[   58.378266][ T4632] EXT4-fs: Ignoring removed orlov option
[   58.826601][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.862457][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.146216][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   59.217935][ T4654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   59.335691][ T4663] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   59.429106][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'.
[   59.463425][ T4671] FAULT_INJECTION: forcing a failure.
[   59.463425][ T4671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.476674][ T4671] CPU: 0 UID: 0 PID: 4671 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.476708][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   59.476757][ T4671] Call Trace:
[   59.476762][ T4671]  <TASK>
[   59.476770][ T4671]  __dump_stack+0x1d/0x30
[   59.476793][ T4671]  dump_stack_lvl+0xe8/0x140
[   59.476812][ T4671]  dump_stack+0x15/0x1b
[   59.476853][ T4671]  should_fail_ex+0x265/0x280
[   59.476881][ T4671]  should_fail+0xb/0x20
[   59.476906][ T4671]  should_fail_usercopy+0x1a/0x20
[   59.476938][ T4671]  _copy_to_user+0x20/0xa0
[   59.477057][ T4671]  simple_read_from_buffer+0xb5/0x130
[   59.477084][ T4671]  proc_fail_nth_read+0x10e/0x150
[   59.477119][ T4671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   59.477148][ T4671]  vfs_read+0x1a5/0x770
[   59.477191][ T4671]  ? __rcu_read_unlock+0x4f/0x70
[   59.477218][ T4671]  ? __fget_files+0x184/0x1c0
[   59.477282][ T4671]  ksys_read+0xda/0x1a0
[   59.477306][ T4671]  __x64_sys_read+0x40/0x50
[   59.477327][ T4671]  x64_sys_call+0x27bc/0x2ff0
[   59.477347][ T4671]  do_syscall_64+0xd2/0x200
[   59.477428][ T4671]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.477451][ T4671]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   59.477492][ T4671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.477517][ T4671] RIP: 0033:0x7f99b6c8d5fc
[   59.477531][ T4671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   59.477548][ T4671] RSP: 002b:00007f99b56ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   59.477568][ T4671] RAX: ffffffffffffffda RBX: 00007f99b6ec5fa0 RCX: 00007f99b6c8d5fc
[   59.477583][ T4671] RDX: 000000000000000f RSI: 00007f99b56ef0a0 RDI: 0000000000000004
[   59.477611][ T4671] RBP: 00007f99b56ef090 R08: 0000000000000000 R09: 0000000000000000
[   59.477625][ T4671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.477639][ T4671] R13: 00007f99b6ec6038 R14: 00007f99b6ec5fa0 R15: 00007ffd794ff048
[   59.477663][ T4671]  </TASK>
[   59.529921][ T4675] loop2: detected capacity change from 0 to 2048
[   59.545800][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[   59.693430][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'.
[   59.742247][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.750818][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.774080][ T4675] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.863218][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.871831][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.953449][ T4706] process 'syz.3.404' launched '/dev/fd/8' with NULL argv: empty string added
[   60.005699][ T4707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.404'.
[   60.392909][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'.
[   60.439740][    C1] hrtimer: interrupt took 38081 ns
[   60.566537][ T4729] loop2: detected capacity change from 0 to 1024
[   60.593711][ T4729] ext2: Unknown parameter 'uid<00000000000000000000'
[   60.729877][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   60.756763][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.770387][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.827358][ T4746] FAULT_INJECTION: forcing a failure.
[   60.827358][ T4746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.840627][ T4746] CPU: 1 UID: 0 PID: 4746 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.840659][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   60.840674][ T4746] Call Trace:
[   60.840681][ T4746]  <TASK>
[   60.840691][ T4746]  __dump_stack+0x1d/0x30
[   60.840744][ T4746]  dump_stack_lvl+0xe8/0x140
[   60.840767][ T4746]  dump_stack+0x15/0x1b
[   60.840786][ T4746]  should_fail_ex+0x265/0x280
[   60.840825][ T4746]  should_fail+0xb/0x20
[   60.840849][ T4746]  should_fail_usercopy+0x1a/0x20
[   60.840935][ T4746]  _copy_from_user+0x1c/0xb0
[   60.840973][ T4746]  __sys_bind+0x106/0x2a0
[   60.841004][ T4746]  __x64_sys_bind+0x3f/0x50
[   60.841027][ T4746]  x64_sys_call+0x2b6e/0x2ff0
[   60.841066][ T4746]  do_syscall_64+0xd2/0x200
[   60.841139][ T4746]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   60.841167][ T4746]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   60.841201][ T4746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.841226][ T4746] RIP: 0033:0x7fc4a065ebe9
[   60.841294][ T4746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.841315][ T4746] RSP: 002b:00007fc49f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   60.841337][ T4746] RAX: ffffffffffffffda RBX: 00007fc4a0895fa0 RCX: 00007fc4a065ebe9
[   60.841383][ T4746] RDX: 000000000000001c RSI: 0000200000001240 RDI: 0000000000000003
[   60.841398][ T4746] RBP: 00007fc49f0bf090 R08: 0000000000000000 R09: 0000000000000000
[   60.841412][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.841425][ T4746] R13: 00007fc4a0896038 R14: 00007fc4a0895fa0 R15: 00007fffd7539c68
[   60.841450][ T4746]  </TASK>
[   60.849215][ T4744] loop3: detected capacity change from 0 to 2048
[   60.928419][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.026744][ T4750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.026902][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.036094][ T4750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.051443][ T4744] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.357520][ T4763] loop0: detected capacity change from 0 to 1024
[   61.365077][ T4763] ext2: Unknown parameter 'uid<00000000000000000000'
[   61.395248][ T4766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.403975][ T4766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.467577][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'.
[   61.581065][ T4776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.433'.
[   61.590565][ T4776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.433'.
[   61.703776][ T4788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.747591][ T4788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.779225][ T4794] loop2: detected capacity change from 0 to 1024
[   61.787401][ T4794] ext2: Unknown parameter 'uid<00000000000000000000'
[   61.800770][   T29] kauditd_printk_skb: 441 callbacks suppressed
[   61.800784][   T29] audit: type=1400 audit(1757270483.461:3405): avc:  denied  { ioctl } for  pid=4789 comm="syz.4.439" path="socket:[8778]" dev="sockfs" ino=8778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   61.982297][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.996575][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.180599][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.192919][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.373571][ T4819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   62.389584][ T3378] lo speed is unknown, defaulting to 1000
[   62.429079][ T4823] 9pnet_fd: Insufficient options for proto=fd
[   62.440513][ T4823] loop3: detected capacity change from 0 to 1024
[   62.448488][ T4823] ext2: Unknown parameter 'uid<00000000000000000000'
[   62.508312][   T29] audit: type=1400 audit(1757270484.171:3406): avc:  denied  { write } for  pid=4822 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   62.583122][   T29] audit: type=1400 audit(1757270484.221:3407): avc:  denied  { setopt } for  pid=4825 comm="syz.2.455" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.603765][   T29] audit: type=1400 audit(1757270484.221:3408): avc:  denied  { connect } for  pid=4825 comm="syz.2.455" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.636939][ T4832] loop4: detected capacity change from 0 to 1024
[   62.645040][ T4832] EXT4-fs: Ignoring removed orlov option
[   62.667976][   T29] audit: type=1326 audit(1757270484.291:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.691712][   T29] audit: type=1326 audit(1757270484.291:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.715115][   T29] audit: type=1326 audit(1757270484.291:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.738781][   T29] audit: type=1326 audit(1757270484.291:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.762213][   T29] audit: type=1326 audit(1757270484.291:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.785652][   T29] audit: type=1326 audit(1757270484.291:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   62.915532][ T4836] lo speed is unknown, defaulting to 1000
[   62.963578][ T4842] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   63.153139][ T4853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.192273][ T4853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.286945][ T4848] lo speed is unknown, defaulting to 1000
[   63.296903][ T4856] 9pnet_fd: Insufficient options for proto=fd
[   63.315836][ T4856] loop0: detected capacity change from 0 to 1024
[   63.323477][ T4856] ext2: Unknown parameter 'uid<00000000000000000000'
[   63.492484][ T4859] bridge_slave_0: left allmulticast mode
[   63.498166][ T4859] bridge_slave_0: left promiscuous mode
[   63.503951][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.514874][ T4859] bridge_slave_1: left allmulticast mode
[   63.520556][ T4859] bridge_slave_1: left promiscuous mode
[   63.526345][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.563666][ T4859] bond0: (slave bond_slave_0): Releasing backup interface
[   63.592811][ T4859] bond0: (slave bond_slave_1): Releasing backup interface
[   63.637688][ T4859] team0: Port device team_slave_0 removed
[   63.664392][ T4859] team0: Port device team_slave_1 removed
[   63.701491][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.709053][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.728212][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.736302][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.860951][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.869874][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.030342][ T4870] lo speed is unknown, defaulting to 1000
[   64.060167][ T4871] siw: device registration error -23
[   64.247398][ T4878] __nla_validate_parse: 5 callbacks suppressed
[   64.247414][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'.
[   64.367706][ T4889] FAULT_INJECTION: forcing a failure.
[   64.367706][ T4889] name failslab, interval 1, probability 0, space 0, times 0
[   64.380525][ T4889] CPU: 1 UID: 0 PID: 4889 Comm: syz.2.474 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.380551][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   64.380567][ T4889] Call Trace:
[   64.380575][ T4889]  <TASK>
[   64.380582][ T4889]  __dump_stack+0x1d/0x30
[   64.380602][ T4889]  dump_stack_lvl+0xe8/0x140
[   64.380627][ T4889]  dump_stack+0x15/0x1b
[   64.380684][ T4889]  should_fail_ex+0x265/0x280
[   64.380709][ T4889]  should_failslab+0x8c/0xb0
[   64.380740][ T4889]  __kmalloc_node_noprof+0xa9/0x410
[   64.380891][ T4889]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[   64.380944][ T4889]  __vmalloc_node_range_noprof+0x3f9/0xe00
[   64.381037][ T4889]  ? cred_has_capability+0x210/0x280
[   64.381068][ T4889]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.381147][ T4889]  __vmalloc_noprof+0x83/0xc0
[   64.381181][ T4889]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.381212][ T4889]  bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.381237][ T4889]  ? bpf_prog_alloc+0x2a/0x150
[   64.381325][ T4889]  bpf_prog_alloc+0x3c/0x150
[   64.381375][ T4889]  bpf_prog_load+0x514/0x1070
[   64.381425][ T4889]  ? security_bpf+0x2b/0x90
[   64.381534][ T4889]  __sys_bpf+0x462/0x7b0
[   64.381580][ T4889]  __x64_sys_bpf+0x41/0x50
[   64.381610][ T4889]  x64_sys_call+0x2aea/0x2ff0
[   64.381639][ T4889]  do_syscall_64+0xd2/0x200
[   64.381727][ T4889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.381834][ T4889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.381871][ T4889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.381896][ T4889] RIP: 0033:0x7fc4a065ebe9
[   64.381910][ T4889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.382049][ T4889] RSP: 002b:00007fc49f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   64.382073][ T4889] RAX: ffffffffffffffda RBX: 00007fc4a0895fa0 RCX: 00007fc4a065ebe9
[   64.382089][ T4889] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[   64.382101][ T4889] RBP: 00007fc49f0bf090 R08: 0000000000000000 R09: 0000000000000000
[   64.382114][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.382125][ T4889] R13: 00007fc4a0896038 R14: 00007fc4a0895fa0 R15: 00007fffd7539c68
[   64.382145][ T4889]  </TASK>
[   64.603338][ T4889] syz.2.474: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[   64.620740][ T4889] CPU: 1 UID: 0 PID: 4889 Comm: syz.2.474 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.620907][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   64.620923][ T4889] Call Trace:
[   64.620930][ T4889]  <TASK>
[   64.620940][ T4889]  __dump_stack+0x1d/0x30
[   64.620966][ T4889]  dump_stack_lvl+0xe8/0x140
[   64.621001][ T4889]  dump_stack+0x15/0x1b
[   64.621017][ T4889]  warn_alloc+0x12b/0x1a0
[   64.621145][ T4889]  ? should_failslab+0x8c/0xb0
[   64.621183][ T4889]  __vmalloc_node_range_noprof+0x497/0xe00
[   64.621288][ T4889]  ? cred_has_capability+0x210/0x280
[   64.621313][ T4889]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.621372][ T4889]  __vmalloc_noprof+0x83/0xc0
[   64.621406][ T4889]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.621457][ T4889]  bpf_prog_alloc_no_stats+0x47/0x3a0
[   64.621567][ T4889]  ? bpf_prog_alloc+0x2a/0x150
[   64.621602][ T4889]  bpf_prog_alloc+0x3c/0x150
[   64.621630][ T4889]  bpf_prog_load+0x514/0x1070
[   64.621668][ T4889]  ? security_bpf+0x2b/0x90
[   64.621710][ T4889]  __sys_bpf+0x462/0x7b0
[   64.621769][ T4889]  __x64_sys_bpf+0x41/0x50
[   64.621801][ T4889]  x64_sys_call+0x2aea/0x2ff0
[   64.621886][ T4889]  do_syscall_64+0xd2/0x200
[   64.621925][ T4889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.621956][ T4889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.621985][ T4889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.622022][ T4889] RIP: 0033:0x7fc4a065ebe9
[   64.622041][ T4889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.622122][ T4889] RSP: 002b:00007fc49f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   64.622141][ T4889] RAX: ffffffffffffffda RBX: 00007fc4a0895fa0 RCX: 00007fc4a065ebe9
[   64.622161][ T4889] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[   64.622173][ T4889] RBP: 00007fc49f0bf090 R08: 0000000000000000 R09: 0000000000000000
[   64.622184][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.622195][ T4889] R13: 00007fc4a0896038 R14: 00007fc4a0895fa0 R15: 00007fffd7539c68
[   64.622218][ T4889]  </TASK>
[   64.831980][ T4889] Mem-Info:
[   64.835169][ T4889] active_anon:6487 inactive_anon:0 isolated_anon:0
[   64.835169][ T4889]  active_file:9032 inactive_file:2210 isolated_file:0
[   64.835169][ T4889]  unevictable:0 dirty:210 writeback:0
[   64.835169][ T4889]  slab_reclaimable:3184 slab_unreclaimable:15096
[   64.835169][ T4889]  mapped:29547 shmem:202 pagetables:1142
[   64.835169][ T4889]  sec_pagetables:0 bounce:0
[   64.835169][ T4889]  kernel_misc_reclaimable:0
[   64.835169][ T4889]  free:1895928 free_pcp:5415 free_cma:0
[   64.880122][ T4889] Node 0 active_anon:25948kB inactive_anon:0kB active_file:36128kB inactive_file:8840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118188kB dirty:840kB writeback:0kB shmem:808kB kernel_stack:3456kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   64.897451][ T4894] loop4: detected capacity change from 0 to 1024
[   64.907488][ T4889] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   64.916277][ T4894] EXT4-fs: Ignoring removed orlov option
[   64.942435][ T4889] lowmem_reserve[]: 0 2883 7862 7862
[   64.942474][ T4889] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB
[   64.983981][ T4889] lowmem_reserve[]: 0 0 4978 4978
[   64.989098][ T4889] Node 0 Normal free:4619164kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26528kB inactive_anon:0kB active_file:36128kB inactive_file:8840kB unevictable:0kB writepending:840kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:17160kB local_pcp:9552kB free_cma:0kB
[   65.021225][ T4889] lowmem_reserve[]: 0 0 0 0
[   65.025868][ T4889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   65.038592][ T4889] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB
[   65.054752][ T4889] Node 0 Normal: 1073*4kB (UM) 630*8kB (UME) 362*16kB (UME) 276*32kB (UME) 132*64kB (UME) 68*128kB (UM) 45*256kB (UM) 15*512kB (UM) 12*1024kB (UE) 4*2048kB (UME) 1108*4096kB (UM) = 4619156kB
[   65.073810][ T4889] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   65.083138][ T4889] 11556 total pagecache pages
[   65.087856][ T4889] 0 pages in swap cache
[   65.092026][ T4889] Free swap  = 124996kB
[   65.096237][ T4889] Total swap = 124996kB
[   65.100405][ T4889] 2097051 pages RAM
[   65.104239][ T4889] 0 pages HighMem/MovableOnly
[   65.108929][ T4889] 80446 pages reserved
[   65.224220][ T4899] loop3: detected capacity change from 0 to 1024
[   65.242775][ T4899] EXT4-fs: Ignoring removed orlov option
[   65.307021][ T4915] loop2: detected capacity change from 0 to 1024
[   65.344004][ T4915] EXT4-fs: Ignoring removed orlov option
[   65.515444][ T4929] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   65.570237][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.580390][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.766081][ T4939] 9pnet_fd: Insufficient options for proto=fd
[   65.779066][ T4939] loop2: detected capacity change from 0 to 1024
[   65.792144][ T4939] ext2: Unknown parameter 'uid<00000000000000000000'
[   65.897305][ T4948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'.
[   65.916928][ T4950] loop2: detected capacity change from 0 to 1024
[   65.937852][ T4950] EXT4-fs: Ignoring removed orlov option
[   66.464597][ T4966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   66.491014][ T4970] loop2: detected capacity change from 0 to 1024
[   66.502897][ T4970] EXT4-fs: Ignoring removed orlov option
[   66.805481][   T29] kauditd_printk_skb: 551 callbacks suppressed
[   66.805498][   T29] audit: type=1400 audit(1757270488.471:3966): avc:  denied  { write } for  pid=4969 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   66.833892][ T4973] lo speed is unknown, defaulting to 1000
[   66.874388][   T29] audit: type=1400 audit(1757270488.521:3967): avc:  denied  { create } for  pid=4986 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   66.893895][   T29] audit: type=1400 audit(1757270488.521:3968): avc:  denied  { getopt } for  pid=4986 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   66.898317][ T4985] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   66.913341][   T29] audit: type=1400 audit(1757270488.521:3969): avc:  denied  { connect } for  pid=4986 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   66.939418][   T29] audit: type=1400 audit(1757270488.521:3970): avc:  denied  { name_connect } for  pid=4986 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   66.959625][   T29] audit: type=1326 audit(1757270488.521:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4969 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   66.983056][   T29] audit: type=1326 audit(1757270488.521:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4969 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a065ebe9 code=0x7ffc0000
[   67.007266][   T29] audit: type=1400 audit(1757270488.611:3973): avc:  denied  { name_bind } for  pid=4989 comm="syz.4.503" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   67.028716][   T29] audit: type=1400 audit(1757270488.611:3974): avc:  denied  { node_bind } for  pid=4989 comm="syz.4.503" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   67.049104][   T29] audit: type=1400 audit(1757270488.681:3975): avc:  denied  { write } for  pid=4986 comm="syz.3.502" lport=33304 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   67.142447][ T4994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.157329][ T4994] tipc: Disabling bearer <eth:syzkaller0>
[   67.170776][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.183898][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.271403][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.281457][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.355928][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'.
[   67.411276][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[   67.460195][ T5013] bridge_slave_0: left allmulticast mode
[   67.466030][ T5013] bridge_slave_0: left promiscuous mode
[   67.471685][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.481256][ T5013] bridge_slave_1: left allmulticast mode
[   67.487090][ T5013] bridge_slave_1: left promiscuous mode
[   67.492869][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.511145][ T5013] bond0: (slave bond_slave_0): Releasing backup interface
[   67.528814][ T5013] bond0: (slave bond_slave_1): Releasing backup interface
[   67.565406][ T5013] team0: Port device team_slave_0 removed
[   67.591436][ T5013] team0: Port device team_slave_1 removed
[   67.598469][ T5013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.605887][ T5013] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.614928][ T5013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.622423][ T5013] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.869764][ T5035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'.
[   67.924759][ T5033] loop1: detected capacity change from 0 to 2048
[   67.965566][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'.
[   68.009391][ T5033] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.537977][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.569880][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.596981][ T5052] lo speed is unknown, defaulting to 1000
[   68.725837][ T3308] EXT4-fs unmount: 21 callbacks suppressed
[   68.725856][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.834074][ T5072] 9pnet_fd: Insufficient options for proto=fd
[   68.858179][ T5072] loop1: detected capacity change from 0 to 1024
[   68.875861][ T5072] ext2: Unknown parameter 'uid<00000000000000000000'
[   68.980439][ T5081] loop2: detected capacity change from 0 to 512
[   68.999863][ T5081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.035135][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.044915][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.064308][ T5081] 9pnet_fd: Insufficient options for proto=fd
[   69.085529][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.301768][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'.
[   69.375910][ T5124] 9pnet_fd: Insufficient options for proto=fd
[   69.391404][ T5124] loop2: detected capacity change from 0 to 1024
[   69.416525][ T5124] ext2: Unknown parameter 'uid<00000000000000000000'
[   69.475504][ T5131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.527221][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.545190][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.595265][ T5147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.605546][ T5147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.908484][ T5173] FAULT_INJECTION: forcing a failure.
[   69.908484][ T5173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.921608][ T5173] CPU: 1 UID: 0 PID: 5173 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.921640][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   69.921651][ T5173] Call Trace:
[   69.921657][ T5173]  <TASK>
[   69.921665][ T5173]  __dump_stack+0x1d/0x30
[   69.921701][ T5173]  dump_stack_lvl+0xe8/0x140
[   69.921721][ T5173]  dump_stack+0x15/0x1b
[   69.921742][ T5173]  should_fail_ex+0x265/0x280
[   69.921822][ T5173]  should_fail+0xb/0x20
[   69.921917][ T5173]  should_fail_usercopy+0x1a/0x20
[   69.921948][ T5173]  _copy_to_user+0x20/0xa0
[   69.922003][ T5173]  simple_read_from_buffer+0xb5/0x130
[   69.922026][ T5173]  proc_fail_nth_read+0x10e/0x150
[   69.922060][ T5173]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   69.922122][ T5173]  vfs_read+0x1a5/0x770
[   69.922147][ T5173]  ? __rcu_read_unlock+0x4f/0x70
[   69.922174][ T5173]  ? __fget_files+0x184/0x1c0
[   69.922209][ T5173]  ksys_read+0xda/0x1a0
[   69.922282][ T5173]  __x64_sys_read+0x40/0x50
[   69.922311][ T5173]  x64_sys_call+0x27bc/0x2ff0
[   69.922334][ T5173]  do_syscall_64+0xd2/0x200
[   69.922416][ T5173]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.922442][ T5173]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   69.922479][ T5173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.922531][ T5173] RIP: 0033:0x7fdcb8f7d5fc
[   69.922546][ T5173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   69.922579][ T5173] RSP: 002b:00007fdcb79df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   69.922601][ T5173] RAX: ffffffffffffffda RBX: 00007fdcb91b5fa0 RCX: 00007fdcb8f7d5fc
[   69.922616][ T5173] RDX: 000000000000000f RSI: 00007fdcb79df0a0 RDI: 0000000000000004
[   69.922630][ T5173] RBP: 00007fdcb79df090 R08: 0000000000000000 R09: 0000000000000000
[   69.922759][ T5173] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[   69.922774][ T5173] R13: 00007fdcb91b6038 R14: 00007fdcb91b5fa0 R15: 00007ffed431e968
[   69.922800][ T5173]  </TASK>
[   70.445441][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'.
[   70.471035][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'.
[   70.694083][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.719032][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.775328][ T5211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.795708][ T5211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.208297][ T5216] 9pnet_fd: Insufficient options for proto=fd
[   71.223746][ T5218] loop4: detected capacity change from 0 to 1024
[   71.230748][ T5218] EXT4-fs: Ignoring removed orlov option
[   71.250669][ T5216] loop2: detected capacity change from 0 to 1024
[   71.256608][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.275591][ T5216] ext2: Unknown parameter 'uid<00000000000000000000'
[   71.441066][ T5232] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   71.499027][ T5242] loop0: detected capacity change from 0 to 1024
[   71.576935][ T5242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.668214][ T5242] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.692612][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.768664][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.769988][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.787835][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.815755][ T5263] 9pnet_fd: Insufficient options for proto=fd
[   71.834520][ T5263] loop0: detected capacity change from 0 to 1024
[   71.867145][ T5263] ext2: Unknown parameter 'uid<00000000000000000000'
[   71.963944][ T5265] lo speed is unknown, defaulting to 1000
[   72.037113][ T5271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'.
[   72.088675][   T29] kauditd_printk_skb: 403 callbacks suppressed
[   72.088691][   T29] audit: type=1326 audit(1757270493.751:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5270 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.316549][   T29] audit: type=1326 audit(1757270493.981:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.340145][   T29] audit: type=1326 audit(1757270493.981:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.363614][   T29] audit: type=1326 audit(1757270493.981:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.387013][   T29] audit: type=1326 audit(1757270493.981:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.397364][ T5283] loop4: detected capacity change from 0 to 1024
[   72.410386][   T29] audit: type=1326 audit(1757270493.981:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.440125][   T29] audit: type=1326 audit(1757270493.981:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.456309][ T5283] EXT4-fs: Ignoring removed orlov option
[   72.473308][   T29] audit: type=1326 audit(1757270494.011:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.496708][   T29] audit: type=1326 audit(1757270494.011:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.520188][   T29] audit: type=1326 audit(1757270494.011:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5282 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb8f7ebe9 code=0x7ffc0000
[   72.568838][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.718802][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[   72.723873][ T5305] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   72.743645][ T5304] loop1: detected capacity change from 0 to 1024
[   72.753186][ T5304] EXT4-fs: Ignoring removed orlov option
[   72.764024][ T5304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.868081][ T5292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   72.913598][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.952978][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.962870][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.979536][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.990441][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.017790][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[   73.056941][ T5326] loop0: detected capacity change from 0 to 764
[   73.102215][ T5329] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   73.112094][ T5326] Symlink component flag not implemented
[   73.118608][ T5326] Symlink component flag not implemented (129)
[   73.127574][ T5326] rock: directory entry would overflow storage
[   73.133791][ T5326] rock: sig=0x4f50, size=4, remaining=3
[   73.139412][ T5326] iso9660: Corrupted directory entry in block 6 of inode 1792
[   73.193408][ T5333] FAULT_INJECTION: forcing a failure.
[   73.193408][ T5333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.206604][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.206639][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   73.206652][ T5333] Call Trace:
[   73.206660][ T5333]  <TASK>
[   73.206668][ T5333]  __dump_stack+0x1d/0x30
[   73.206692][ T5333]  dump_stack_lvl+0xe8/0x140
[   73.206715][ T5333]  dump_stack+0x15/0x1b
[   73.206733][ T5333]  should_fail_ex+0x265/0x280
[   73.206778][ T5333]  should_fail+0xb/0x20
[   73.206799][ T5333]  should_fail_usercopy+0x1a/0x20
[   73.206825][ T5333]  _copy_from_iter+0xd2/0xe80
[   73.206855][ T5333]  ? __build_skb_around+0x1a0/0x200
[   73.206880][ T5333]  ? __alloc_skb+0x223/0x320
[   73.206970][ T5333]  netlink_sendmsg+0x471/0x6b0
[   73.207001][ T5333]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.207028][ T5333]  __sock_sendmsg+0x142/0x180
[   73.207260][ T5333]  ____sys_sendmsg+0x31e/0x4e0
[   73.207295][ T5333]  ___sys_sendmsg+0x17b/0x1d0
[   73.207350][ T5333]  __x64_sys_sendmsg+0xd4/0x160
[   73.207454][ T5333]  x64_sys_call+0x191e/0x2ff0
[   73.207484][ T5333]  do_syscall_64+0xd2/0x200
[   73.207517][ T5333]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   73.207543][ T5333]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   73.207577][ T5333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.207599][ T5333] RIP: 0033:0x7f0664f3ebe9
[   73.207616][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.207635][ T5333] RSP: 002b:00007f06639a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.207655][ T5333] RAX: ffffffffffffffda RBX: 00007f0665175fa0 RCX: 00007f0664f3ebe9
[   73.207687][ T5333] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006
[   73.207700][ T5333] RBP: 00007f06639a7090 R08: 0000000000000000 R09: 0000000000000000
[   73.207713][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.207726][ T5333] R13: 00007f0665176038 R14: 00007f0665175fa0 R15: 00007fffa8478418
[   73.207748][ T5333]  </TASK>
[   73.432895][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.580089][ T5347] loop0: detected capacity change from 0 to 1024
[   73.587276][ T5347] EXT4-fs: Ignoring removed orlov option
[   73.596458][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.669209][ T5354] netlink: 277 bytes leftover after parsing attributes in process `syz.3.628'.
[   73.680059][ T5354] futex_wake_op: syz.3.628 tries to shift op by -1; fix this program
[   73.690639][ T5354] program syz.3.628 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.773434][ T5364] syz2: rxe_newlink: already configured on veth0_to_hsr
[   73.855058][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.918724][ T5363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   74.021412][ T5368] lo speed is unknown, defaulting to 1000
[   74.036098][ T5376] loop3: detected capacity change from 0 to 2048
[   74.132288][ T5376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.148238][ T5382] 9pnet_fd: Insufficient options for proto=fd
[   74.154809][ T5376] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.171720][ T5382] loop0: detected capacity change from 0 to 1024
[   74.175536][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'.
[   74.179451][ T5382] ext2: Unknown parameter 'uid<00000000000000000000'
[   74.204940][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.216867][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.267791][ T5386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'.
[   74.314597][ T5390] SELinux: failed to load policy
[   74.337760][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.347953][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.417680][ T5401] loop1: detected capacity change from 0 to 1024
[   74.424843][ T5401] EXT4-fs: Ignoring removed orlov option
[   74.435635][ T5401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.520348][ T5403] ==================================================================
[   74.528480][ T5403] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[   74.536497][ T5403] 
[   74.538927][ T5403] write to 0xffff88811a89a8b8 of 4 bytes by task 5401 on cpu 0:
[   74.546572][ T5403]  writeback_single_inode+0x14a/0x3e0
[   74.551982][ T5403]  sync_inode_metadata+0x5b/0x90
[   74.556953][ T5403]  generic_buffers_fsync_noflush+0xd9/0x120
[   74.562873][ T5403]  ext4_sync_file+0x1ab/0x690
[   74.567560][ T5403]  vfs_fsync_range+0x10a/0x130
[   74.572349][ T5403]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.577933][ T5403]  ext4_file_write_iter+0x383/0xf00
[   74.583240][ T5403]  iter_file_splice_write+0x666/0xa60
[   74.588619][ T5403]  direct_splice_actor+0x156/0x2a0
[   74.593736][ T5403]  splice_direct_to_actor+0x312/0x680
[   74.599131][ T5403]  do_splice_direct+0xda/0x150
[   74.603899][ T5403]  do_sendfile+0x380/0x650
[   74.608331][ T5403]  __x64_sys_sendfile64+0x105/0x150
[   74.613549][ T5403]  x64_sys_call+0x2bb0/0x2ff0
[   74.618321][ T5403]  do_syscall_64+0xd2/0x200
[   74.622848][ T5403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.628747][ T5403] 
[   74.631068][ T5403] read to 0xffff88811a89a8b8 of 4 bytes by task 5403 on cpu 1:
[   74.638610][ T5403]  vfs_fsync_range+0x9b/0x130
[   74.643298][ T5403]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.648881][ T5403]  ext4_file_write_iter+0x383/0xf00
[   74.654092][ T5403]  iter_file_splice_write+0x666/0xa60
[   74.659478][ T5403]  direct_splice_actor+0x156/0x2a0
[   74.664597][ T5403]  splice_direct_to_actor+0x312/0x680
[   74.669980][ T5403]  do_splice_direct+0xda/0x150
[   74.674748][ T5403]  do_sendfile+0x380/0x650
[   74.679183][ T5403]  __x64_sys_sendfile64+0x105/0x150
[   74.684425][ T5403]  x64_sys_call+0x2bb0/0x2ff0
[   74.689121][ T5403]  do_syscall_64+0xd2/0x200
[   74.693645][ T5403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.699552][ T5403] 
[   74.701877][ T5403] value changed: 0x00000038 -> 0x00000002
[   74.707598][ T5403] 
[   74.709926][ T5403] Reported by Kernel Concurrency Sanitizer on:
[   74.716080][ T5403] CPU: 1 UID: 0 PID: 5403 Comm: syz.1.643 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.725722][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   74.735785][ T5403] ==================================================================
[   74.764706][ T5406] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr
[   74.827255][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.849216][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.