last executing test programs:

46.688745518s ago: executing program 1 (id=3913):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x40006)

46.56644852s ago: executing program 1 (id=3915):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5882, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000001840)=ANY=[@ANYBLOB="00000c00ffffffffaf5aa5cea8c35d23c8fd94acdf9ec180fefffff76fc2000000bbbbbbbbbbbbaaaaaaaaaabbd7b9db29fe3f66c75d7199227ec3ec6bb1488853b78a59e39577"])
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x2000000)

45.476001794s ago: executing program 1 (id=3940):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$inet(0x2, 0x3, 0x6)
dup3(r1, r2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8001, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x14, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x0, 0x0})

45.329496435s ago: executing program 1 (id=3942):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nodiscard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000019c0)=@assoc_value={<r7=>0x0}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000000)={r7}, &(0x7f00000000c0)=0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='afs_make_fs_calli\x00', r8}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
vmsplice(r4, &(0x7f0000000440)=[{&(0x7f00000003c0)="a71bb85d3924384f590c09af3a0e2335bd9a4c6adb30e76fcdf25737ae752bd6933c574a16d19161b5d0516b420c261eabc781c1383e5577bf33a341c9085eeb728578b6fef2b73fad10b63395dc6cef748b8663b7b88e1615bff67302c1cc8449a93495e4ca8ca6ad", 0x69}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
syz_clone(0x10080400, &(0x7f00000009c0)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0))
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8)

44.629364254s ago: executing program 1 (id=3952):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$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")
pselect6(0x0, 0x0, &(0x7f0000000240)={0x9, 0x5, 0x9, 0x0, 0x299, 0x2, 0xffffffff80000001, 0x2c362cc3}, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
sendfile(r3, r4, 0x0, 0x100)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\xce\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x1)
fsetxattr$security_capability(r7, &(0x7f00000000c0), &(0x7f0000000000)=@v1={0x1000000, [{0xfffffff7, 0x7}]}, 0xc, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000001080)={0x2, 0x76, 0x10b, 0x0, 0x3})
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x23, &(0x7f0000000280)="aebbf3ecff8b62cb081913c94a56b4c69bd0843655b700596ca23814abe1cff7a928d6d604323d163bff9619342997d4e7ec81679348d8e60f4f5093f736e59862549c51186cf05f29dde1be7981b5547b611f9c4f886127e7ab8ba338a118059e8ab4f2", 0x64)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)

44.297851188s ago: executing program 1 (id=3963):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x63, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
truncate(&(0x7f0000000040)='./file0\x00', 0x200000)

44.258474979s ago: executing program 32 (id=3963):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x63, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
truncate(&(0x7f0000000040)='./file0\x00', 0x200000)

3.428681726s ago: executing program 5 (id=4646):
syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='security.ext4'], 0x0, 0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002700)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5be250aa97554f70}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x80101, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafd, 0x0, @perf_bp={0x0, 0x8}, 0x110a, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xa}, {0xffff}, {0x1, 0xffff}}}, 0x24}}, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x1006)

3.192799709s ago: executing program 5 (id=4648):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c762a9ecbee00000000", 0xd8}, {&(0x7f0000000200)="054479604095977eff84048008c48619e2f78413fb86f073d15b7e6c6b82d97667892efde5939c7c299924336a18554c9c411e4ec60552bd414e4ed242704c88bd7acb865226273ef380beaeb4d9867313612d6e390be2d4a159287a49b3b17b0d184edcc538525ce68e92569d6503fb4acf0dca1f78ae65dcce6b896d861228ed78654157685a8b7e99b1ab8e850bfbde89819395e0cdddb8799717c625afbe01e4126a618b6a083539d1b7ed717b488e921ba8cbbfa118073cf9832d978bdab4c40d68435c1c1c1e3906ea45ad91fb88f2fa4e2fd2af3fc9ab", 0xda}], 0x2}, 0x0)

3.061682151s ago: executing program 5 (id=4649):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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")
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

3.040913831s ago: executing program 5 (id=4650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x7)
epoll_create(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8c380, 0x0)

2.971392422s ago: executing program 5 (id=4652):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x1de4, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0xca, &(0x7f0000000400)="925339dc2c698ff676eb8ae46c56ac776e5a11dc5df06afca423bc282402e43bc540bf60983027e4a919b037373403586150c8a1aeef4f53a0ab25e599c2f139c89703a67384f1cb4c8105751689c36031518f1407669a5640782aba16f663295b6aa5f9514a84dc239287cc92800bd469d0169a95bce7a1bfeb2b1213ce4168e13a898be7e540dec2487dde529de09610a2d8faeb40d361d20d793584fa3f3136a674eeaae620cca4f7f3983bfe373bab05387822648d75d50be8b867085b594ded063a4084e5e496e5")
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c)
listen(r2, 0x80080400)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)

2.209890912s ago: executing program 4 (id=4658):
socket$inet(0x2, 0x1, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'team_slave_0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4004801)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}]}, 0xffffffffffffff65}, 0x1, 0x0, 0x0, 0x4000}, 0x8d0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='wg0\x00', 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a)
ptrace(0x10, r0)
ptrace$cont(0x1f, r0, 0x8c, 0x3)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0\x00', 0x3804c13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c1e686563523d72656c617865642c72772c2ccf6b1d811cacb4e1768330964573d0ab1b4425d5249416"], 0x3, 0x9de, &(0x7f0000000040)="$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")
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
io_getevents(0x0, 0x7, 0x0, &(0x7f0000000bc0), 0x0)

2.109115143s ago: executing program 4 (id=4660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000008000"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = semget$private(0x0, 0x3, 0x100)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001480)={0x1, 0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)=""/70, 0x46}], &(0x7f0000001440)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r10}, 0x10)
syz_io_uring_setup(0x10f, &(0x7f00000004c0)={0x0, 0x59f6, 0x2, 0x8, 0xa}, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@deltfilter={0x14e0, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x6, 0xa1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1478, 0x2, [@TCA_CGROUP_ACT={0x504, 0x1, [@m_mpls={0x4c, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0xff, 0x0, 0x2, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x144, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x56, 0xfffffffb}}]}, {0xfe, 0x6, "0cdaca3799699fc2152f0bcca96ea9ac73e99cc68296732bf3fbc2fb94d28a29835c4ed0f5f9f5fbcbd643cc94adcec009ada746f6a61d4a89dde644f1dc20ffbbbdc0647d8e757176678c722d98449a8528298a76e02993f46a43c3f87c40a40b26131aa538f441c68f0f3f47e9abcd206afaf15223542e6e9804f0a8bf724c64202a91a2b6fa4f350d6d8e07e529ef3ec07f978b64c9ef721888ed58259f48301033a325f951334afb586341c1ab4888d1cf3f7d1af2f2a0b3c19272de263494dde5cca704db2e58ec1394fe3fa9a830253a71f954f002e130aff89f2e4fa2892582cece8579d9b34b09cc34c37b9bb81503c526a99ce38fca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x58, 0x17, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xef, 0x2, 0x8315, 0xac8}}]}, {0x82, 0x6, "33bd786c4ba9a975f20832469082e504e8bb38411625234e4f830324cff51eb296ffd285070f91eb498a7fc64549c2dcb108a7f00bdf42fabf6fa4b5e3d4c3890967056c93e522f9d51b76c9df2ed491393e9b054f7983022e6c671ec36ae370777498b2ed6e9fe032a56a90c40977ac919796c283f2b6cd1e2ce97a3032"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x78, 0xa, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x3d, 0x6, "8d771774371049833f33bc47a7cf79f92e40ba1dd2bc972072b596742b8473919ddc06e554084bba912871322cecd92ba3033b48f5dde27640"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x130, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x890d}]}, {0xfc, 0x6, "7e5943dbe7a1edc188f0924bad8047240afed2e2ad800116930a095866ef33ac716f147ae6e9b0750988d604b773af9459407b6432dd64074c120d6d96f94367376747532b3b729f5440a430c1955cbc6c20d545984bdc02d6cc105546a6cee9150b46d487ca19638069ad6a868aebe1b0c6b5b618685286e571319503f24e55b333326b82c1efd7fc1ac7c61b5c4590df33fcf6564d67e3d81689bc3b1e58ab45eaf060746bd44e169b5ce669abf94e79b16785b66f14ebbbb30450beafd104a712a2878ec5c5a6dc899d07e191564df12d396056952294b064d4537a5754f0425d68876bdcf3087cc6b35b9642408e3f2109f0e0e6652f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x28a32899ba473bcf}}}}, @m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_MARK={0x8, 0x5, 0x10000}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "0234fc6bc5a36c697e4b76c95291ddab"}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0x3b, 0x6, "051cf0fd94f89155fbe7a822903b5b33c9e4227f8615f0c9e2a80a9ca43cc352136411ed51b3e173c6595db11fc88296011b2340c79716"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x3ec, 0x1, [@m_nat={0x1f4, 0x1b, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x7655420f608c47bd, 0x1, 0x8}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x1, 0x6b7, 0xc}, @empty, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10, 0x20000000, 0x10001, 0x7}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x10, 0x1bdca172fb9ca9a3, 0xd}, @remote, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x3d3, 0x10000000, 0xca, 0x401}, @private=0xa010101, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x11, 0x9, 0x10000000, 0xe, 0x5}, @empty, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x0, 0x5, 0x6}, @local, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8000, 0x4, 0x800, 0x3}, @empty, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10001, 0x1, 0x40, 0x1}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x6, 0x1e, 0x8}, @multicast2, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x3c, 0x6, "ba41919c3486979b531aaf851474cb6b095542be6f042a03303d6c9e36e93c0c66e632ddabc3779278c83df72b029e63511ed9c0102f5e98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xf8, 0x8, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x3, 0x7f, 0xfffffff9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0xcdd, 0x2, 0x2, 0x4e18}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xa223}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xdf}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b41}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x401}]}, {0x71, 0x6, "95e4349f991e534e5591dbd39f624d2c586ac43f7afe45dac51160befa750fb1431d3d344a30d04d582ee4ef1edab25c7d048779cbcc034729fd89f92a774a8295b8577b4d3e2050f8b1f633c5bdb09b755980019b2dfff42509113a42df877fe188678338b768c183d1f62407"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_skbedit={0xfc, 0x1a, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd, 0x1356bb18, 0x7, 0x2, 0x10000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x21b}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff0}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x97, 0x6, "4ee3c652c4a78a9fd936908542a52f67d90ee499f4f91c162deba9e58f61cd8402e0746d20974c7aba8c97bd8c90aea90dcc398de8664be54400cd9050d3277a9e657764b5a4a598ddbdb5d0846e9f682757375c3e2ca624dc153213aff2e4570d6782425531623d055bdf61c0b9e6c08aa31c5fc3b0a949fedbe4c1a8185c2d5e20bba20bfcf88d07ffe4c981b438d61ca405"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0xb84, 0x1, [@m_mpls={0x110, 0x13, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1a}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x87}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xbb, 0x6, "e62bfe86378a9b4d9201424ec8650b84bae4ccf56550bb568990b924d13ac96d04801f3f591b0c574a32e864b41d99dcbc0496a433f0eceed5d59ec0dd746c17ff25047ee12e2900885c2799b5a36e5ae1ad4e16eb44d2bc58f19c5bc1f3aff3d7d647657404dbac4157cba0a8932784f02cbad098e70d35dd67a90cb92a7d263a88e9f725d511674373eb9504c55691788ff009fa39e1e7ace1b24046853cb1a2e9a84c9893cad3fbcf7d0d5220dccdc4e060c98110aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x140, 0xe, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffd}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa9a4, 0x10, 0x5, 0x6, 0xe06}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0xda, 0x6, "122e78528c61d9da1d6818651cfbd3adefd7a0c1ebdb3b89aed637bc3da70013bd76e4acf2e977de01f15a8901bb6f3b5f901a0997ea3d5b01761829646599da68e461c8c27425359c67d48af37316d15d70ba556810043b682b3ff5f6eff3a5ad9fd1bea561b137afe5ee6409d945e6793eb7a6e92ee32c003777ea344623b5fbe44eaf853805284d8a61d1d8dbd77ccdf52ea8b078289fba518e435f3e920552bf974a0ac85f9df556de2291fd062c057a2ab4d1640157b0fdab2e8fb882aa53c8eed19b7755d1dbf6c9258b000c5790904082b2d1"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x520, 0x14, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x2, 0x4, 0x5, {0x7, 0x2, 0x4, 0x1, 0x4, 0x4}, {0xf, 0x1, 0x80, 0x6, 0x101, 0x56}, 0x9, 0x0, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x5, 0x2, 0xe16, 0x80000000, 0x2, 0x80, 0x2, 0x2, 0xd, 0x7e, 0x7, 0xf7d, 0xfffffff8, 0x10000, 0x10e2, 0x7fff, 0xfffffffa, 0x7, 0xfffffffc, 0x1, 0x3, 0x40, 0x43a3, 0xae, 0x15, 0x76d2, 0x8001, 0xfffffffe, 0x1, 0x1ff, 0xc, 0x2, 0x3, 0x3, 0x3, 0xfff, 0x0, 0x2, 0x9, 0xc9, 0x5, 0x9, 0x2, 0x9, 0x7, 0x1, 0x1000, 0x80000001, 0x9, 0x4, 0x200, 0xfffffffb, 0x0, 0x80000001, 0x9, 0x80000, 0x9, 0x1, 0x0, 0x4, 0xf, 0xfa68, 0x4, 0xfffffffe, 0xa, 0x1, 0x4, 0xc, 0x4, 0xc, 0xfffff800, 0x0, 0xcf, 0x0, 0x2, 0x9, 0xb810, 0x3, 0x47e, 0xfffff800, 0x9, 0x0, 0xac, 0x62, 0x3, 0x40, 0x5d9, 0x1000, 0x4, 0x4, 0x200, 0x9, 0x7fff, 0x48, 0xc, 0xaea, 0x7, 0xfffffff8, 0x8, 0x8, 0xc56, 0x9, 0x3, 0x2, 0x3ff, 0x8, 0x2, 0x5, 0x8, 0x5, 0x4, 0x80000000, 0x3, 0xc4, 0x9, 0x400, 0x6, 0x1000, 0x8, 0x2, 0x6, 0x27a6, 0x3, 0x886, 0x3, 0x9, 0x7694, 0xcc, 0x1ff, 0xfffff800, 0x24, 0x3, 0x4, 0x800, 0xd, 0x7070, 0x8, 0x6, 0xffff, 0x80000001, 0x9, 0x1, 0x5, 0x59, 0xfffffffe, 0xacb, 0x3ff, 0x9, 0x6, 0xbe, 0x9, 0xa3, 0x6, 0x1000, 0x0, 0x1, 0x7, 0x7, 0x8, 0x8, 0x856, 0x1, 0x50, 0xffffffff, 0x5, 0xff, 0x8, 0x5, 0x197, 0x800, 0xfff, 0x9, 0xfffffff8, 0x5, 0x8, 0x7ff, 0x100, 0x2, 0x10000, 0x0, 0x0, 0x0, 0xf, 0x8, 0xb99, 0xa6fd640c, 0x6d6, 0x8, 0x8, 0x7, 0x2, 0x10, 0xe95b, 0x4a4e, 0x2, 0x2, 0x1, 0x9, 0x7, 0x9a, 0x8001, 0x101, 0x1, 0x10, 0x9, 0x4, 0x8000, 0x3, 0xa67c, 0x2, 0xffffffff, 0x4, 0x80000001, 0x1c2, 0x4, 0x9074, 0x0, 0x5, 0x9, 0x8, 0x2, 0x2, 0x400, 0x5, 0x4, 0x800, 0x0, 0x2, 0x0, 0x0, 0xd05d, 0x5, 0x1000, 0x548, 0x1, 0x40000000, 0x8, 0x7cd2, 0x401, 0x6, 0x6, 0x3, 0x5, 0x1000, 0x2, 0x5, 0x1, 0x4, 0x8, 0x55, 0xf, 0x1ff, 0x9, 0x10000, 0x10000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb08}], []]}, {0x9a, 0x6, "f75bafddf711f1f739dce5a47ff78d75a137a3074fb69c93a9bcdd2cb9aee7c8b5ae4a71ba9021b2192699b3e123eaee2c5236cbd84eb263bc8ceae86f9a3c73f5775d8900aef614d80cda6839475b0eca11c80d05bb398db01746b070572cff6a572f2d745d0371266bfe23f3a64e40742918b3d5a3cb39731d967fedfed239f20a6291efdcf9da1d9179c9acf8ef2761af4190df24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x64, 0xf, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x8c, 0x12, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffa, 0x2, 0x6, 0x200, 0xffffffff}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xad}]}, {0x13, 0x6, "3dc76719e49d1e4bb9dbe7d3a2f9ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x170, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x7fff, 0x20000000, 0x7, 0xfffffff7}, @broadcast, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x10000000, 0x3, 0x80000000}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x1, 0x7, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}]}, {0xcd, 0x6, "90d3137ac97428a75bc320a127a7289c1773d15d0565ba9ecb6f755cb4d8e1a302f498cf35eb50302ea8623a88bd6d21f7d5e528941cf6208c4771ac43cca22bae95f313840b21a9aad7dd2dbef2ef6083b99aa9f721847ac84c123598abd68c460ef2834301c16e4210aeac241e0d188f5ad098e43ae8a9a438e7fa807dc789ebbdb521324f1e292b41e8043b9c5d3e78399ba85f4a81230c4c2e5fc8bdfc81111a744dc4ec58596f3adb9c51186024d3332b4aa0544adb9eb189e76fd51f55630b0e8f7f7834232f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x98, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5baf219c, 0x6, 0x4fc8bd06, 0xfffffffc}}]}, {0x51, 0x6, "33c870daa542f5521a9b9d3d5edb60cbe6730fd95adfda00c35e29cc459c7d167419580c7408e0b80637986cda77d7bedeb5251ae5b8ebdebdbabcc9b56b8bced7bc04dcd4749201ecfa23de99"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x718}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6a8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd7}]}, {0xcc, 0x6, "15b10f881f4ae9dbc6b94f1dafccf81c56a279d06583fe1947c9660d6b41e8b132c337a2d8015efb21037db0d2fd0d290a09421907f758a7908773bb5a801ca25b068759f9ad931bb8ca4902f70b21b40db0b331d158fdcef05e0ff1a0ce95f466c8ad328c1d1c0687444266210da89350749488dcbec6eaa727fd5593afbc84198b4d2ce60f29db2c8c5aefe7fd64884481960babe6a4ecff653a7846bc0c5f137ad52e8e27bad0456da32c7a39894d74a5efeebbaece3e4e1de2ca9e1aa953a8a14e8364ca59a2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8a, 0xc}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}]}}]}, 0x14e0}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0ecb177ce633c5b4678f2f018e78c1b3e4f3df5bc11a235581c1c7067a3f5849727a8997c18744af1a65b85ad834683186297f90feced02f729c2e6126e1ffc8433913297572e26e473b029da145497b9947f502505f96ff474a4a93f15ea2bfe1337351e2a86ec904ff6e"], 0x1c}}, 0x4000054)

1.649486189s ago: executing program 2 (id=4668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080))

1.586723149s ago: executing program 5 (id=4670):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f0000000200)={[{@usrjquota}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, 0x0)

1.469990611s ago: executing program 2 (id=4671):
syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='security.ext4'], 0x0, 0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002700)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5be250aa97554f70}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x80101, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafd, 0x0, @perf_bp={0x0, 0x8}, 0x110a, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xa}, {0xffff}, {0x1, 0xffff}}}, 0x24}}, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

1.317525823s ago: executing program 0 (id=4672):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x5])

1.282207213s ago: executing program 0 (id=4675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x18)
epoll_pwait(0xffffffffffffffff, &(0x7f0000002d00), 0x1, 0x7, &(0x7f0000002d40), 0xffffffffffffff96)

1.272055294s ago: executing program 4 (id=4676):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')

1.259775294s ago: executing program 2 (id=4677):
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0xb0d8, {0xffff, 0xa}, {0x1, 0xfffd}, @cond=[{0x5, 0x2, 0x4a2, 0x9, 0x6, 0x80}, {0xffff, 0xffff, 0x3, 0x1, 0x2, 0x1}]})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000668555c9fa31c0010001faf0b29eb4064443372f56dd147151041d35a91874b8c85bdf0371feeaf703102c131c40c5045e9c9e38910405a6db208f677bb3b54ac128c513110b079e766b56f6c7f56b29e628af3b8a913626c00"/108, @ANYRES32=0x0, @ANYRES16=r0], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1.204075755s ago: executing program 0 (id=4679):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x28}}, 0x0) (fail_nth: 1)

1.203792004s ago: executing program 4 (id=4680):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x1de4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0xca, &(0x7f0000000400)="925339dc2c698ff676eb8ae46c56ac776e5a11dc5df06afca423bc282402e43bc540bf60983027e4a919b037373403586150c8a1aeef4f53a0ab25e599c2f139c89703a67384f1cb4c8105751689c36031518f1407669a5640782aba16f663295b6aa5f9514a84dc239287cc92800bd469d0169a95bce7a1bfeb2b1213ce4168e13a898be7e540dec2487dde529de09610a2d8faeb40d361d20d793584fa3f3136a674eeaae620cca4f7f3983bfe373bab05387822648d75d50be8b867085b594ded063a4084e5e496e5")
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c)
listen(r1, 0x80080400)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)

933.560308ms ago: executing program 0 (id=4681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080))

901.504418ms ago: executing program 3 (id=4683):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
fcntl$setpipe(r0, 0x407, 0xa9a1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000480)={0x335, @tick, 0x0, {}, 0x40})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8)
bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

816.027329ms ago: executing program 0 (id=4684):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x1}]}}}], 0x18}}], 0x1, 0x8004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffff, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x66, 0x0, 0x6, 0x4, 0x0, @remote, @multicast2}}}})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000007a00010600000000000000008c36aaf0440d310700000007000000c4ddb2042140490216dafd13c9ad5c6803c205b69f"], 0x18}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltaction={0x14, 0x18, 0x8, 0x70bd27, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xc)
r8 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c)
listen(r8, 0x80080400)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r9, 0x10d, 0xbd, &(0x7f0000000000), &(0x7f0000000280)=0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000b00)={{r9}, "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"})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={<r10=>0x0, 0x3}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000002c0)={r10, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}]}, &(0x7f0000000380)=0xffffffffffffffc0)

782.258369ms ago: executing program 3 (id=4685):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x5])

740.830581ms ago: executing program 3 (id=4686):
syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='security.ext'], 0x0, 0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000615a11200000000000c60000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002700)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5be250aa97554f70}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x80101, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0xffff}, {0x1, 0xffff}}}, 0x24}}, 0x0)

673.513691ms ago: executing program 0 (id=4687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000008000"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = semget$private(0x0, 0x3, 0x100)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001480)={0x1, 0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)=""/70, 0x46}], &(0x7f0000001440)=[0x2]}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r10}, 0x10)
syz_io_uring_setup(0x10f, &(0x7f00000004c0)={0x0, 0x59f6, 0x2, 0x8, 0xa}, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@deltfilter={0x14e0, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x6, 0xa1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1478, 0x2, [@TCA_CGROUP_ACT={0x504, 0x1, [@m_mpls={0x4c, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0xff, 0x0, 0x2, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x144, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x56, 0xfffffffb}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x58, 0x17, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xef, 0x2, 0x8315, 0xac8}}]}, {0x82, 0x6, "33bd786c4ba9a975f20832469082e504e8bb38411625234e4f830324cff51eb296ffd285070f91eb498a7fc64549c2dcb108a7f00bdf42fabf6fa4b5e3d4c3890967056c93e522f9d51b76c9df2ed491393e9b054f7983022e6c671ec36ae370777498b2ed6e9fe032a56a90c40977ac919796c283f2b6cd1e2ce97a3032"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x78, 0xa, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x3d, 0x6, "8d771774371049833f33bc47a7cf79f92e40ba1dd2bc972072b596742b8473919ddc06e554084bba912871322cecd92ba3033b48f5dde27640"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x130, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x890d}]}, {0xfc, 0x6, "7e5943dbe7a1edc188f0924bad8047240afed2e2ad800116930a095866ef33ac716f147ae6e9b0750988d604b773af9459407b6432dd64074c120d6d96f94367376747532b3b729f5440a430c1955cbc6c20d545984bdc02d6cc105546a6cee9150b46d487ca19638069ad6a868aebe1b0c6b5b618685286e571319503f24e55b333326b82c1efd7fc1ac7c61b5c4590df33fcf6564d67e3d81689bc3b1e58ab45eaf060746bd44e169b5ce669abf94e79b16785b66f14ebbbb30450beafd104a712a2878ec5c5a6dc899d07e191564df12d396056952294b064d4537a5754f0425d68876bdcf3087cc6b35b9642408e3f2109f0e0e6652f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x28a32899ba473bcf}}}}, @m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_MARK={0x8, 0x5, 0x10000}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "0234fc6bc5a36c697e4b76c95291ddab"}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0x3b, 0x6, "051cf0fd94f89155fbe7a822903b5b33c9e4227f8615f0c9e2a80a9ca43cc352136411ed51b3e173c6595db11fc88296011b2340c79716"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x3ec, 0x1, [@m_nat={0x1f4, 0x1b, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x7655420f608c47bd, 0x1, 0x8}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x1, 0x6b7, 0xc}, @empty, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10, 0x20000000, 0x10001, 0x7}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x10, 0x1bdca172fb9ca9a3, 0xd}, @remote, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x3d3, 0x10000000, 0xca, 0x401}, @private=0xa010101, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x11, 0x9, 0x10000000, 0xe, 0x5}, @empty, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x0, 0x5, 0x6}, @local, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8000, 0x4, 0x800, 0x3}, @empty, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10001, 0x1, 0x40, 0x1}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x6, 0x1e, 0x8}, @multicast2, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x3c, 0x6, "ba41919c3486979b531aaf851474cb6b095542be6f042a03303d6c9e36e93c0c66e632ddabc3779278c83df72b029e63511ed9c0102f5e98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xf8, 0x8, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x3, 0x7f, 0xfffffff9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0xcdd, 0x2, 0x2, 0x4e18}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xa223}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xdf}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b41}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x401}]}, {0x71, 0x6, "95e4349f991e534e5591dbd39f624d2c586ac43f7afe45dac51160befa750fb1431d3d344a30d04d582ee4ef1edab25c7d048779cbcc034729fd89f92a774a8295b8577b4d3e2050f8b1f633c5bdb09b755980019b2dfff42509113a42df877fe188678338b768c183d1f62407"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_skbedit={0xfc, 0x1a, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd, 0x1356bb18, 0x7, 0x2, 0x10000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x21b}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff0}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x97, 0x6, "4ee3c652c4a78a9fd936908542a52f67d90ee499f4f91c162deba9e58f61cd8402e0746d20974c7aba8c97bd8c90aea90dcc398de8664be54400cd9050d3277a9e657764b5a4a598ddbdb5d0846e9f682757375c3e2ca624dc153213aff2e4570d6782425531623d055bdf61c0b9e6c08aa31c5fc3b0a949fedbe4c1a8185c2d5e20bba20bfcf88d07ffe4c981b438d61ca405"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0xb84, 0x1, [@m_mpls={0x110, 0x13, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1a}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x87}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xbb, 0x6, "e62bfe86378a9b4d9201424ec8650b84bae4ccf56550bb568990b924d13ac96d04801f3f591b0c574a32e864b41d99dcbc0496a433f0eceed5d59ec0dd746c17ff25047ee12e2900885c2799b5a36e5ae1ad4e16eb44d2bc58f19c5bc1f3aff3d7d647657404dbac4157cba0a8932784f02cbad098e70d35dd67a90cb92a7d263a88e9f725d511674373eb9504c55691788ff009fa39e1e7ace1b24046853cb1a2e9a84c9893cad3fbcf7d0d5220dccdc4e060c98110aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x140, 0xe, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffd}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa9a4, 0x10, 0x5, 0x6, 0xe06}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0xda, 0x6, "122e78528c61d9da1d6818651cfbd3adefd7a0c1ebdb3b89aed637bc3da70013bd76e4acf2e977de01f15a8901bb6f3b5f901a0997ea3d5b01761829646599da68e461c8c27425359c67d48af37316d15d70ba556810043b682b3ff5f6eff3a5ad9fd1bea561b137afe5ee6409d945e6793eb7a6e92ee32c003777ea344623b5fbe44eaf853805284d8a61d1d8dbd77ccdf52ea8b078289fba518e435f3e920552bf974a0ac85f9df556de2291fd062c057a2ab4d1640157b0fdab2e8fb882aa53c8eed19b7755d1dbf6c9258b000c5790904082b2d1"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x520, 0x14, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x2, 0x4, 0x5, {0x7, 0x2, 0x4, 0x1, 0x4, 0x4}, {0xf, 0x1, 0x80, 0x6, 0x101, 0x56}, 0x9, 0x0, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x5, 0x2, 0xe16, 0x80000000, 0x2, 0x80, 0x2, 0x2, 0xd, 0x7e, 0x7, 0xf7d, 0xfffffff8, 0x10000, 0x10e2, 0x7fff, 0xfffffffa, 0x7, 0xfffffffc, 0x1, 0x3, 0x40, 0x43a3, 0xae, 0x15, 0x76d2, 0x8001, 0xfffffffe, 0x1, 0x1ff, 0xc, 0x2, 0x3, 0x3, 0x3, 0xfff, 0x0, 0x2, 0x9, 0xc9, 0x5, 0x9, 0x2, 0x9, 0x7, 0x1, 0x1000, 0x80000001, 0x9, 0x4, 0x200, 0xfffffffb, 0x0, 0x80000001, 0x9, 0x80000, 0x9, 0x1, 0x0, 0x4, 0xf, 0xfa68, 0x4, 0xfffffffe, 0xa, 0x1, 0x4, 0xc, 0x4, 0xc, 0xfffff800, 0x0, 0xcf, 0x0, 0x2, 0x9, 0xb810, 0x3, 0x47e, 0xfffff800, 0x9, 0x0, 0xac, 0x62, 0x3, 0x40, 0x5d9, 0x1000, 0x4, 0x4, 0x200, 0x9, 0x7fff, 0x48, 0xc, 0xaea, 0x7, 0xfffffff8, 0x8, 0x8, 0xc56, 0x9, 0x3, 0x2, 0x3ff, 0x8, 0x2, 0x5, 0x8, 0x5, 0x4, 0x80000000, 0x3, 0xc4, 0x9, 0x400, 0x6, 0x1000, 0x8, 0x2, 0x6, 0x27a6, 0x3, 0x886, 0x3, 0x9, 0x7694, 0xcc, 0x1ff, 0xfffff800, 0x24, 0x3, 0x4, 0x800, 0xd, 0x7070, 0x8, 0x6, 0xffff, 0x80000001, 0x9, 0x1, 0x5, 0x59, 0xfffffffe, 0xacb, 0x3ff, 0x9, 0x6, 0xbe, 0x9, 0xa3, 0x6, 0x1000, 0x0, 0x1, 0x7, 0x7, 0x8, 0x8, 0x856, 0x1, 0x50, 0xffffffff, 0x5, 0xff, 0x8, 0x5, 0x197, 0x800, 0xfff, 0x9, 0xfffffff8, 0x5, 0x8, 0x7ff, 0x100, 0x2, 0x10000, 0x0, 0x0, 0x0, 0xf, 0x8, 0xb99, 0xa6fd640c, 0x6d6, 0x8, 0x8, 0x7, 0x2, 0x10, 0xe95b, 0x4a4e, 0x2, 0x2, 0x1, 0x9, 0x7, 0x9a, 0x8001, 0x101, 0x1, 0x10, 0x9, 0x4, 0x8000, 0x3, 0xa67c, 0x2, 0xffffffff, 0x4, 0x80000001, 0x1c2, 0x4, 0x9074, 0x0, 0x5, 0x9, 0x8, 0x2, 0x2, 0x400, 0x5, 0x4, 0x800, 0x0, 0x2, 0x0, 0x0, 0xd05d, 0x5, 0x1000, 0x548, 0x1, 0x40000000, 0x8, 0x7cd2, 0x401, 0x6, 0x6, 0x3, 0x5, 0x1000, 0x2, 0x5, 0x1, 0x4, 0x8, 0x55, 0xf, 0x1ff, 0x9, 0x10000, 0x10000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb08}], []]}, {0x9a, 0x6, "f75bafddf711f1f739dce5a47ff78d75a137a3074fb69c93a9bcdd2cb9aee7c8b5ae4a71ba9021b2192699b3e123eaee2c5236cbd84eb263bc8ceae86f9a3c73f5775d8900aef614d80cda6839475b0eca11c80d05bb398db01746b070572cff6a572f2d745d0371266bfe23f3a64e40742918b3d5a3cb39731d967fedfed239f20a6291efdcf9da1d9179c9acf8ef2761af4190df24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x64, 0xf, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x8c, 0x12, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffa, 0x2, 0x6, 0x200, 0xffffffff}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xad}]}, {0x13, 0x6, "3dc76719e49d1e4bb9dbe7d3a2f9ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x170, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x7fff, 0x20000000, 0x7, 0xfffffff7}, @broadcast, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x10000000, 0x3, 0x80000000}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x1, 0x7, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}]}, {0xcd, 0x6, "90d3137ac97428a75bc320a127a7289c1773d15d0565ba9ecb6f755cb4d8e1a302f498cf35eb50302ea8623a88bd6d21f7d5e528941cf6208c4771ac43cca22bae95f313840b21a9aad7dd2dbef2ef6083b99aa9f721847ac84c123598abd68c460ef2834301c16e4210aeac241e0d188f5ad098e43ae8a9a438e7fa807dc789ebbdb521324f1e292b41e8043b9c5d3e78399ba85f4a81230c4c2e5fc8bdfc81111a744dc4ec58596f3adb9c51186024d3332b4aa0544adb9eb189e76fd51f55630b0e8f7f7834232f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x98, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5baf219c, 0x6, 0x4fc8bd06, 0xfffffffc}}]}, {0x51, 0x6, "33c870daa542f5521a9b9d3d5edb60cbe6730fd95adfda00c35e29cc459c7d167419580c7408e0b80637986cda77d7bedeb5251ae5b8ebdebdbabcc9b56b8bced7bc04dcd4749201ecfa23de99"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x718}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6a8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd7}]}, {0xcc, 0x6, "15b10f881f4ae9dbc6b94f1dafccf81c56a279d06583fe1947c9660d6b41e8b132c337a2d8015efb21037db0d2fd0d290a09421907f758a7908773bb5a801ca25b068759f9ad931bb8ca4902f70b21b40db0b331d158fdcef05e0ff1a0ce95f466c8ad328c1d1c0687444266210da89350749488dcbec6eaa727fd5593afbc84198b4d2ce60f29db2c8c5aefe7fd64884481960babe6a4ecff653a7846bc0c5f137ad52e8e27bad0456da32c7a39894d74a5efeebbaece3e4e1de2ca9e1aa953a8a14e8364ca59a2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8a, 0xc}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}]}}]}, 0x14e0}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0ecb177ce633c5b4678f2f018e78c1b3e4f3df5bc11a235581c1c7067a3f5849727a8997c18744af1a65b85ad834683186297f90feced02f729c2e6126e1ffc8433913297572e26e473b029da145497b9947f502505f96ff474a4a93f15ea2bfe1337351e2a86ec904ff6e"], 0x1c}}, 0x4000054)

586.969952ms ago: executing program 3 (id=4688):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbcf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

524.220683ms ago: executing program 3 (id=4689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x5}, 0x18)
lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f00000001c0)=0xe1, 0x30dd0781039f69fb)

365.625435ms ago: executing program 2 (id=4690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x18)
epoll_pwait(0xffffffffffffffff, &(0x7f0000002d00), 0x1, 0x7, &(0x7f0000002d40), 0xffffffffffffff96)

365.182385ms ago: executing program 3 (id=4691):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000c80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6bad208a00102100fe8000000000000000000000000000bbff0200000000000000140000000000014e214e2004819078aa7b73c2fb48c326"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='mm_page_free\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x7cd, &(0x7f0000000080)={0x0, 0x7e26, 0x18, 0x2})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1000005}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000001240)='devlink_hwerr\x00', r3}, 0x18)
write(r2, &(0x7f00000012c0)="110000001a005f0214f9f4070009040081782e3c508d970000b770e1e4d3dd16a1bf6120ca7dca842c9c6325e888570e997a1ee4162ad72cd572d4edf99f25c46d9de5037331371035d88c0befb3ad68fcedd44e6ce0d4f6", 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_io_uring_setup(0x3e71, &(0x7f0000000400)={0x0, 0x1772e, 0x2000, 0x1, 0x1bd}, &(0x7f00000010c0), &(0x7f0000001100))
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xfffffffffffffe2e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1e000000e1ff0000050000009acf29715d7872274d613c1688a248288f83c96cf8352ea23ee6fa1a7795d02acabd03f2750932f69da07fa6e7ba875bc4e4fb99a95eebb83c5aba9ddec6fb"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x29, 0x0, &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
fsmount(0xffffffffffffffff, 0x0, 0x82)
open(0x0, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/vmallocinfo\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200441, &(0x7f0000001340)={[{@lazytime}, {@noload}, {@i_version}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

364.658745ms ago: executing program 4 (id=4692):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x1}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r5, 0x200002)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10)
connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x709)

240.036707ms ago: executing program 2 (id=4693):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, &(0x7f0000000040)={0x2, [0x0, 0x0]}, 0x8)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x28, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
close_range(r4, r5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x3b}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14004890}, 0x4014)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200"], 0xe4}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
socket$netlink(0x10, 0x3, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0xe8, 0xe8, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x5, 0x1, 0xfff, 0x5, 0x806, 0x9, 0x81, 0x2, 0xe0, 0xfffc, 0x10, 0x0, 0x3, 0x0, 0x4, 0x6]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, @private1, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1420}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)

239.493307ms ago: executing program 4 (id=4694):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000c80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6bad208a00102100fe8000000000000000000000000000bbff0200000000000000140000000000014e214e2004819078aa7b73c2fb48c326"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='mm_page_free\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x7cd, &(0x7f0000000080)={0x0, 0x7e26, 0x18, 0x2})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1000005}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000001240)='devlink_hwerr\x00', r3}, 0x18)
write(r2, &(0x7f00000012c0)="110000001a005f0214f9f4070009040081782e3c508d970000b770e1e4d3dd16a1bf6120ca7dca842c9c6325e888570e997a1ee4162ad72cd572d4edf99f25c46d9de5037331371035d88c0befb3ad68fcedd44e6ce0d4f6", 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_io_uring_setup(0x3e71, &(0x7f0000000400)={0x0, 0x1772e, 0x2000, 0x1, 0x1bd}, &(0x7f00000010c0), &(0x7f0000001100))
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xfffffffffffffe2e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1e000000e1ff0000050000009acf29715d7872274d613c1688a248288f83c96cf8352ea23ee6fa1a7795d02acabd03f2750932f69da07fa6e7ba875bc4e4fb99a95eebb83c5aba9ddec6fb"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x29, 0x0, &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
fsmount(0xffffffffffffffff, 0x0, 0x82)
open(0x0, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/vmallocinfo\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200441, &(0x7f0000001340)={[{@lazytime}, {@noload}, {@i_version}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

0s ago: executing program 2 (id=4695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

+0x607/0x1050
[  201.220336][T13908]  __se_sys_io_uring_enter+0x1e8/0x1b70
[  201.220366][T13908]  ? 0xffffffff81000000
[  201.220384][T13908]  ? get_pid_task+0x94/0xd0
[  201.220616][T13908]  ? proc_fail_nth_write+0x12d/0x160
[  201.220703][T13908]  ? bpf_perf_event_read+0x129/0x150
[  201.220736][T13908]  ? __rcu_read_unlock+0x4e/0x70
[  201.220762][T13908]  ? bpf_trace_run2+0x12c/0x1d0
[  201.220787][T13908]  ? __bpf_trace_sys_enter+0x10/0x30
[  201.220811][T13908]  ? trace_sys_enter+0xcd/0x110
[  201.220880][T13908]  __x64_sys_io_uring_enter+0x78/0x90
[  201.220904][T13908]  x64_sys_call+0x26cb/0x2e10
[  201.220931][T13908]  do_syscall_64+0xc9/0x1a0
[  201.220962][T13908]  ? clear_bhb_loop+0x25/0x80
[  201.221002][T13908]  ? clear_bhb_loop+0x25/0x80
[  201.221022][T13908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.221048][T13908] RIP: 0033:0x7fc36b25e969
[  201.221066][T13908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.221148][T13908] RSP: 002b:00007fc3698c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  201.221170][T13908] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25e969
[  201.221185][T13908] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000006
[  201.221200][T13908] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  201.221214][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.221228][T13908] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  201.221285][T13908]  </TASK>
[  201.659909][T13925] loop1: detected capacity change from 0 to 1024
[  201.700695][T13925] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  201.813526][T13935] netlink: 'syz.0.3893': attribute type 11 has an invalid length.
[  201.874350][T13938] loop1: detected capacity change from 0 to 1024
[  201.904709][T13938] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  202.003554][T13950] loop1: detected capacity change from 0 to 1024
[  202.010234][T13950] EXT4-fs: Ignoring removed bh option
[  202.015922][T13950] EXT4-fs: inline encryption not supported
[  202.021763][T13950] EXT4-fs: Ignoring removed i_version option
[  202.044218][T13950] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  202.057067][T13952] loop2: detected capacity change from 0 to 512
[  202.077278][T13950] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.3898: lblock 1 mapped to illegal pblock 1 (length 1)
[  202.093727][T13952] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.102972][T13952] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  202.114323][T13950] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3898: Failed to acquire dquot type 0
[  202.127925][T13950] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.3898: Freeing blocks not in datazone - block = 0, count = 4096
[  202.142540][T13952] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  202.153133][T13952] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  202.161290][T13952] System zones: 0-2, 18-18, 34-34
[  202.167609][T13950] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3898: Invalid inode bitmap blk 0 in block_group 0
[  202.181490][T13952] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  202.197701][ T3462] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  202.212939][T13950] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  202.215100][T13952] EXT4-fs (loop2): 1 truncate cleaned up
[  202.221567][ T3462] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 0
[  202.229381][T13950] EXT4-fs (loop1): 1 orphan inode deleted
[  202.281427][T13950] SELinux: failed to load policy
[  202.311497][T13963] loop1: detected capacity change from 0 to 512
[  202.326619][T13963] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.335780][T13963] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  202.346790][T13963] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  202.356345][T13963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  202.369269][T13963] System zones: 0-2, 18-18, 34-34
[  202.376401][T13963] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  202.391917][T13967] loop4: detected capacity change from 0 to 1024
[  202.408625][T13963] EXT4-fs (loop1): 1 truncate cleaned up
[  202.415016][T13977] FAULT_INJECTION: forcing a failure.
[  202.415016][T13977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.428582][T13977] CPU: 1 UID: 0 PID: 13977 Comm: syz.3.3908 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  202.428641][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  202.428656][T13977] Call Trace:
[  202.428663][T13977]  <TASK>
[  202.428672][T13977]  dump_stack_lvl+0xf6/0x150
[  202.428700][T13977]  dump_stack+0x15/0x1a
[  202.428742][T13977]  should_fail_ex+0x261/0x270
[  202.428815][T13977]  should_fail+0xb/0x10
[  202.428839][T13977]  should_fail_usercopy+0x1a/0x20
[  202.428933][T13977]  _copy_from_user+0x1c/0xa0
[  202.429005][T13977]  kstrtouint_from_user+0x84/0x100
[  202.429032][T13977]  ? 0xffffffff81000000
[  202.429047][T13977]  ? selinux_file_permission+0x22d/0x360
[  202.429072][T13977]  proc_fail_nth_write+0x54/0x160
[  202.429110][T13977]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  202.429226][T13977]  vfs_write+0x295/0x950
[  202.429244][T13977]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  202.429287][T13977]  ? __fget_files+0x186/0x1c0
[  202.429315][T13977]  ksys_write+0xeb/0x1b0
[  202.429339][T13977]  __x64_sys_write+0x42/0x50
[  202.429371][T13977]  x64_sys_call+0x2a45/0x2e10
[  202.429397][T13977]  do_syscall_64+0xc9/0x1a0
[  202.429427][T13977]  ? clear_bhb_loop+0x25/0x80
[  202.429454][T13977]  ? clear_bhb_loop+0x25/0x80
[  202.429543][T13977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.429569][T13977] RIP: 0033:0x7f579cced41f
[  202.429655][T13977] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  202.429676][T13977] RSP: 002b:00007f579b357030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  202.429710][T13977] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f579cced41f
[  202.429722][T13977] RDX: 0000000000000001 RSI: 00007f579b3570a0 RDI: 0000000000000004
[  202.429733][T13977] RBP: 00007f579b357090 R08: 0000000000000000 R09: 0000000000000000
[  202.429744][T13977] R10: 0000200000000300 R11: 0000000000000293 R12: 0000000000000001
[  202.429757][T13977] R13: 0000000000000000 R14: 00007f579cf15fa0 R15: 00007ffe55b5e3a8
[  202.429779][T13977]  </TASK>
[  202.639172][T13963] FAULT_INJECTION: forcing a failure.
[  202.639172][T13963] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  202.648128][T13967] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.652579][T13963] CPU: 0 UID: 0 PID: 13963 Comm: syz.1.3904 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  202.652615][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  202.652631][T13963] Call Trace:
[  202.652639][T13963]  <TASK>
[  202.652661][T13963]  dump_stack_lvl+0xf6/0x150
[  202.652763][T13963]  dump_stack+0x15/0x1a
[  202.652785][T13963]  should_fail_ex+0x261/0x270
[  202.652817][T13963]  should_fail_alloc_page+0xfd/0x110
[  202.652888][T13963]  __alloc_frozen_pages_noprof+0x11d/0x360
[  202.652919][T13963]  alloc_pages_mpol+0xb6/0x260
[  202.652980][T13963]  folio_alloc_noprof+0xee/0x140
[  202.653020][T13963]  filemap_alloc_folio_noprof+0x6d/0x220
[  202.653051][T13963]  __filemap_get_folio+0x2ab/0x6b0
[  202.653085][T13963]  ext4_block_zero_page_range+0x98/0x590
[  202.653120][T13963]  ext4_zero_partial_blocks+0xe5/0x190
[  202.653187][T13963]  ext4_punch_hole+0x3d9/0x710
[  202.653219][T13963]  ext4_fallocate+0x2eb/0x690
[  202.653276][T13963]  vfs_fallocate+0x368/0x3b0
[  202.653305][T13963]  do_vfs_ioctl+0x1433/0x1570
[  202.653471][T13963]  ? __fget_files+0x186/0x1c0
[  202.653512][T13963]  __se_sys_ioctl+0x80/0x140
[  202.653551][T13963]  __x64_sys_ioctl+0x43/0x50
[  202.653580][T13963]  x64_sys_call+0x168d/0x2e10
[  202.653665][T13963]  do_syscall_64+0xc9/0x1a0
[  202.653697][T13963]  ? clear_bhb_loop+0x25/0x80
[  202.653725][T13963]  ? clear_bhb_loop+0x25/0x80
[  202.653752][T13963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.653835][T13963] RIP: 0033:0x7f484d5be969
[  202.653855][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.653901][T13963] RSP: 002b:00007f484bc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.653927][T13963] RAX: ffffffffffffffda RBX: 00007f484d7e5fa0 RCX: 00007f484d5be969
[  202.653943][T13963] RDX: 00002000000003c0 RSI: 0000000040305829 RDI: 0000000000000004
[  202.653959][T13963] RBP: 00007f484bc27090 R08: 0000000000000000 R09: 0000000000000000
[  202.653976][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.653991][T13963] R13: 0000000000000000 R14: 00007f484d7e5fa0 R15: 00007ffe0ed3a508
[  202.654085][T13963]  </TASK>
[  202.915477][T13967] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #15: block 1: comm syz.4.3905: lblock 1 mapped to illegal pblock 1 (length 8)
[  203.003101][T13967] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  203.015593][T13967] EXT4-fs (loop4): This should not happen!! Data will be lost
[  203.015593][T13967] 
[  203.037913][T13993] FAULT_INJECTION: forcing a failure.
[  203.037913][T13993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.051035][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.0.3914 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  203.051177][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  203.051190][T13993] Call Trace:
[  203.051196][T13993]  <TASK>
[  203.051204][T13993]  dump_stack_lvl+0xf6/0x150
[  203.051229][T13993]  dump_stack+0x15/0x1a
[  203.051250][T13993]  should_fail_ex+0x261/0x270
[  203.051278][T13993]  should_fail+0xb/0x10
[  203.051301][T13993]  should_fail_usercopy+0x1a/0x20
[  203.051336][T13993]  _copy_to_user+0x20/0xa0
[  203.051370][T13993]  simple_read_from_buffer+0xb2/0x130
[  203.051412][T13993]  proc_fail_nth_read+0x103/0x140
[  203.051447][T13993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  203.051488][T13993]  vfs_read+0x1b2/0x710
[  203.051523][T13993]  ? __rcu_read_unlock+0x4e/0x70
[  203.051549][T13993]  ? __fget_files+0x186/0x1c0
[  203.051591][T13993]  ksys_read+0xeb/0x1b0
[  203.051614][T13993]  __x64_sys_read+0x42/0x50
[  203.051637][T13993]  x64_sys_call+0x2a3b/0x2e10
[  203.051662][T13993]  do_syscall_64+0xc9/0x1a0
[  203.051687][T13993]  ? clear_bhb_loop+0x25/0x80
[  203.051770][T13993]  ? clear_bhb_loop+0x25/0x80
[  203.051794][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.051817][T13993] RIP: 0033:0x7fc36b25d37c
[  203.051836][T13993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  203.051883][T13993] RSP: 002b:00007fc3698c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  203.051915][T13993] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25d37c
[  203.051929][T13993] RDX: 000000000000000f RSI: 00007fc3698c70a0 RDI: 0000000000000003
[  203.051943][T13993] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  203.051956][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.051968][T13993] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  203.051990][T13993]  </TASK>
[  203.247637][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  203.247681][   T29] audit: type=1400 audit(1745498255.185:33583): avc:  denied  { write } for  pid=13966 comm="syz.4.3905" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  203.267734][T13986] bond1: entered promiscuous mode
[  203.283396][T13986] bond1: entered allmulticast mode
[  203.302050][T13986] 8021q: adding VLAN 0 to HW filter on device bond1
[  203.312458][T13986] bond1 (unregistering): Released all slaves
[  203.354827][T14001] __nla_validate_parse: 5 callbacks suppressed
[  203.354848][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.370200][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.388505][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.419009][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.428531][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.440522][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.473840][ T3465] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #15: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 8)
[  203.490886][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.491190][ T3465] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  203.499946][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.512109][ T3465] EXT4-fs (loop4): This should not happen!! Data will be lost
[  203.512109][ T3465] 
[  203.533329][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  203.581680][T14007] loop4: detected capacity change from 0 to 512
[  203.591574][T14007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.625737][T14007] EXT4-fs (loop4): 1 truncate cleaned up
[  203.627006][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3920'.
[  203.717263][T14023] loop4: detected capacity change from 0 to 512
[  203.724493][T14023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.743868][T14023] EXT4-fs (loop4): 1 truncate cleaned up
[  203.837543][T14037] loop2: detected capacity change from 0 to 512
[  203.855753][T14037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  203.885307][T14037] EXT4-fs (loop2): 1 truncate cleaned up
[  204.001189][T14048] loop3: detected capacity change from 0 to 512
[  204.010632][T14048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  204.056645][T14048] EXT4-fs (loop3): 1 truncate cleaned up
[  204.220393][T14063] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  204.328119][T14067] loop1: detected capacity change from 0 to 1024
[  204.341044][T14065] loop2: detected capacity change from 0 to 1024
[  204.358976][T14067] EXT4-fs: Ignoring removed bh option
[  204.369098][T14065] EXT4-fs: Ignoring removed bh option
[  204.380114][T14067] EXT4-fs: inline encryption not supported
[  204.386112][T14067] EXT4-fs: Ignoring removed i_version option
[  204.402352][T14065] EXT4-fs: inline encryption not supported
[  204.408337][T14065] EXT4-fs: Ignoring removed i_version option
[  204.424331][T14065] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  204.440722][T14065] EXT4-fs error (device loop2): ext4_map_blocks:709: inode #3: block 1: comm syz.2.3941: lblock 1 mapped to illegal pblock 1 (length 1)
[  204.440827][T14067] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  204.528519][T14067] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.3942: lblock 1 mapped to illegal pblock 1 (length 1)
[  204.572736][T14065] Quota error (device loop2): write_blk: dquota write failed
[  204.580168][T14065] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  204.707271][T14065] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3941: Failed to acquire dquot type 0
[  204.730657][T14065] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3941: Freeing blocks not in datazone - block = 0, count = 4096
[  204.731217][T14067] Quota error (device loop1): write_blk: dquota write failed
[  204.745984][T14065] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3941: Invalid inode bitmap blk 0 in block_group 0
[  204.751447][T14067] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  204.775865][ T3476] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  204.795392][T14067] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3942: Failed to acquire dquot type 0
[  204.807039][T14067] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.3942: Freeing blocks not in datazone - block = 0, count = 4096
[  204.820557][T14065] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  204.829682][ T3476] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  204.829734][T14067] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3942: Invalid inode bitmap blk 0 in block_group 0
[  204.838472][ T3476] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 0
[  204.863062][T14067] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  204.871639][T14065] EXT4-fs (loop2): 1 orphan inode deleted
[  204.892053][T14067] EXT4-fs (loop1): 1 orphan inode deleted
[  204.943480][ T3476] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  204.959200][ T3476] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  204.963763][   T29] audit: type=1404 audit(1745498256.895:33584): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  204.967831][ T3476] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 0
[  204.999933][   T29] audit: type=1400 audit(1745498256.935:33585): avc:  denied  { unmount } for  pid=14066 comm="syz.1.3942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0
[  205.019806][   T29] audit: type=1400 audit(1745498256.935:33586): avc:  denied  { map_create } for  pid=14066 comm="syz.1.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  205.027700][T11297] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /181: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  205.059544][T11297] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  205.098949][T11297] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  205.172975][T14106] loop3: detected capacity change from 0 to 512
[  205.180517][T14106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.199503][T14106] EXT4-fs (loop3): 1 truncate cleaned up
[  205.395166][  T340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.460529][  T340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.517586][  T340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.569923][  T340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.600380][T14119] lo speed is unknown, defaulting to 1000
[  205.668542][  T340] bridge_slave_1: left allmulticast mode
[  205.674494][  T340] bridge_slave_1: left promiscuous mode
[  205.680254][T14136] random: crng reseeded on system resumption
[  205.680397][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.713898][  T340] bridge_slave_0: left allmulticast mode
[  205.719619][  T340] bridge_slave_0: left promiscuous mode
[  205.725288][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.788969][T14141] FAULT_INJECTION: forcing a failure.
[  205.788969][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.802265][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.4.3968 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  205.802294][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  205.802360][T14141] Call Trace:
[  205.802368][T14141]  <TASK>
[  205.802378][T14141]  dump_stack_lvl+0xf6/0x150
[  205.802406][T14141]  dump_stack+0x15/0x1a
[  205.802441][T14141]  should_fail_ex+0x261/0x270
[  205.802530][T14141]  should_fail+0xb/0x10
[  205.802583][T14141]  should_fail_usercopy+0x1a/0x20
[  205.802608][T14141]  strncpy_from_user+0x25/0x230
[  205.802705][T14141]  ? getname_flags+0x81/0x3b0
[  205.802734][T14141]  getname_flags+0xb0/0x3b0
[  205.802756][T14141]  user_path_at+0x26/0x140
[  205.802781][T14141]  do_sys_truncate+0x5f/0x130
[  205.802875][T14141]  __x64_sys_truncate+0x31/0x40
[  205.802964][T14141]  x64_sys_call+0x268f/0x2e10
[  205.802989][T14141]  do_syscall_64+0xc9/0x1a0
[  205.803021][T14141]  ? clear_bhb_loop+0x25/0x80
[  205.803114][T14141]  ? clear_bhb_loop+0x25/0x80
[  205.803134][T14141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.803154][T14141] RIP: 0033:0x7fc89339e969
[  205.803194][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.803218][T14141] RSP: 002b:00007fc891a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  205.803308][T14141] RAX: ffffffffffffffda RBX: 00007fc8935c5fa0 RCX: 00007fc89339e969
[  205.803321][T14141] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000200000000040
[  205.803336][T14141] RBP: 00007fc891a07090 R08: 0000000000000000 R09: 0000000000000000
[  205.803351][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.803414][T14141] R13: 0000000000000000 R14: 00007fc8935c5fa0 R15: 00007ffdc1c6d5c8
[  205.803437][T14141]  </TASK>
[  205.804063][  T340] bond0 (unregistering): (slave gretap1): Releasing active interface
[  206.104899][  T340]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.121718][T14152] loop4: detected capacity change from 0 to 764
[  206.129609][  T340]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.140826][  T340]  (unregistering): Released all slaves
[  206.149767][  T340] bond0 (unregistering): Released all slaves
[  206.179006][T14119] chnl_net:caif_netlink_parms(): no params data found
[  206.200731][T14162] loop3: detected capacity change from 0 to 512
[  206.208506][T14162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  206.213665][T14162] EXT4-fs (loop3): 1 truncate cleaned up
[  206.264905][T14119] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.272321][T14119] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.288765][T14119] bridge_slave_0: entered allmulticast mode
[  206.296448][T14119] bridge_slave_0: entered promiscuous mode
[  206.298676][T14173] netlink: 'syz.2.3978': attribute type 1 has an invalid length.
[  206.331404][  T340] hsr_slave_0: left promiscuous mode
[  206.337696][  T340] hsr_slave_1: left promiscuous mode
[  206.345383][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.354011][  T340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.362457][  T340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.370234][  T340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.382405][  T340] veth1_macvtap: left promiscuous mode
[  206.388011][  T340] veth0_macvtap: left promiscuous mode
[  206.394353][  T340] veth1_vlan: left promiscuous mode
[  206.399613][  T340] veth0_vlan: left promiscuous mode
[  206.405028][T14179] xt_CT: No such helper "snmp_trap"
[  206.479568][T14186] loop2: detected capacity change from 0 to 128
[  206.524576][  T340] team0 (unregistering): Port device team_slave_1 removed
[  206.535049][  T340] team0 (unregistering): Port device team_slave_0 removed
[  206.566313][T14119] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.574107][T14119] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.581581][T14119] bridge_slave_1: entered allmulticast mode
[  206.588262][T14119] bridge_slave_1: entered promiscuous mode
[  206.629208][T14119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.640249][T14119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.671259][T14119] team0: Port device team_slave_0 added
[  206.684080][T14119] team0: Port device team_slave_1 added
[  206.693903][T14191] loop2: detected capacity change from 0 to 512
[  206.701156][T14191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  206.713016][T14119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.719998][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.746141][T14119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.747282][T14191] EXT4-fs (loop2): 1 truncate cleaned up
[  206.758092][T14119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.769586][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.796028][T14119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.827146][T14119] hsr_slave_0: entered promiscuous mode
[  206.833489][T14119] hsr_slave_1: entered promiscuous mode
[  206.864119][T14200] loop2: detected capacity change from 0 to 512
[  206.871487][T14200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  206.895902][T14200] EXT4-fs (loop2): 1 truncate cleaned up
[  206.911206][T14119] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  206.920484][T14119] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  206.929765][T14119] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  206.939062][T14119] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  206.974726][T14119] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.981872][T14119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.989251][T14119] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.996326][T14119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.035842][T14119] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.049130][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.062480][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.075943][T14210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14210 comm=syz.4.3987
[  207.095637][T14119] 8021q: adding VLAN 0 to HW filter on device team0
[  207.104239][T14212] FAULT_INJECTION: forcing a failure.
[  207.104239][T14212] name failslab, interval 1, probability 0, space 0, times 0
[  207.117826][T14212] CPU: 1 UID: 0 PID: 14212 Comm: syz.2.3989 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  207.117892][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  207.117905][T14212] Call Trace:
[  207.117912][T14212]  <TASK>
[  207.117922][T14212]  dump_stack_lvl+0xf6/0x150
[  207.118016][T14212]  dump_stack+0x15/0x1a
[  207.118034][T14212]  should_fail_ex+0x261/0x270
[  207.118073][T14212]  should_failslab+0x8f/0xb0
[  207.118096][T14212]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  207.118133][T14212]  ? __alloc_skb+0x10d/0x320
[  207.118236][T14212]  __alloc_skb+0x10d/0x320
[  207.118298][T14212]  netlink_alloc_large_skb+0xad/0xe0
[  207.118333][T14212]  netlink_sendmsg+0x3da/0x720
[  207.118356][T14212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.118374][T14212]  __sock_sendmsg+0x140/0x180
[  207.118456][T14212]  ____sys_sendmsg+0x350/0x4e0
[  207.118480][T14212]  __sys_sendmsg+0x1a0/0x240
[  207.118516][T14212]  __x64_sys_sendmsg+0x46/0x50
[  207.118543][T14212]  x64_sys_call+0x26f3/0x2e10
[  207.118562][T14212]  do_syscall_64+0xc9/0x1a0
[  207.118584][T14212]  ? clear_bhb_loop+0x25/0x80
[  207.118602][T14212]  ? clear_bhb_loop+0x25/0x80
[  207.118673][T14212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.118691][T14212] RIP: 0033:0x7f23fce9e969
[  207.118704][T14212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.118720][T14212] RSP: 002b:00007f23fb507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.118736][T14212] RAX: ffffffffffffffda RBX: 00007f23fd0c5fa0 RCX: 00007f23fce9e969
[  207.118747][T14212] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000005
[  207.118760][T14212] RBP: 00007f23fb507090 R08: 0000000000000000 R09: 0000000000000000
[  207.118771][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.118782][T14212] R13: 0000000000000000 R14: 00007f23fd0c5fa0 R15: 00007ffd4ef07788
[  207.118799][T14212]  </TASK>
[  207.120547][  T340] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.265417][T14221] loop4: detected capacity change from 0 to 512
[  207.266948][  T340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.276306][T14221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  207.304076][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.322328][T14221] EXT4-fs (loop4): 1 truncate cleaned up
[  207.325941][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.389633][T14119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.400647][T14119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.456987][T14232] loop2: detected capacity change from 0 to 764
[  207.484209][T14119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.494796][ T3377] Process accounting resumed
[  207.509208][T14239] 0ªX¹¦À: renamed from caif0
[  207.516250][T14239] 0ªX¹¦À: entered allmulticast mode
[  207.521574][T14239] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  207.707049][T14119] veth0_vlan: entered promiscuous mode
[  207.731070][T14119] veth1_vlan: entered promiscuous mode
[  207.797911][T14119] veth0_macvtap: entered promiscuous mode
[  207.844590][T14119] veth1_macvtap: entered promiscuous mode
[  207.873158][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.883841][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.883856][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.883873][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.883891][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.883907][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.883932][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.884003][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.912954][T14119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.976114][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.986693][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.996604][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.007129][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.017001][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.027497][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.027522][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.027536][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.030166][T14119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.074201][T14119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.083160][T14119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.092327][T14119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.101199][T14119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.223726][T14277] loop5: detected capacity change from 0 to 1024
[  208.236857][T14277] EXT4-fs: Ignoring removed bh option
[  208.249264][T14277] EXT4-fs: inline encryption not supported
[  208.255298][T14277] EXT4-fs: Ignoring removed i_version option
[  208.299167][T14281] loop3: detected capacity change from 0 to 512
[  208.319812][T14281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.339860][T14281] EXT4-fs (loop3): 1 truncate cleaned up
[  208.341702][T14277] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  208.387014][T14277] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.3964: lblock 1 mapped to illegal pblock 1 (length 1)
[  208.390780][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  208.390800][   T29] audit: type=1400 audit(1745498260.325:33783): avc:  denied  { create } for  pid=14285 comm="syz.0.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.420734][T14277] Quota error (device loop5): write_blk: dquota write failed
[  208.434708][T14289] __nla_validate_parse: 28 callbacks suppressed
[  208.434730][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4008'.
[  208.435507][T14277] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  208.461515][T14277] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3964: Failed to acquire dquot type 0
[  208.475898][T14277] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.3964: Freeing blocks not in datazone - block = 0, count = 4096
[  208.492232][   T29] audit: type=1400 audit(1745498260.425:33784): avc:  denied  { watch watch_reads } for  pid=14285 comm="syz.0.4010" path="/238" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  208.494127][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'.
[  208.544183][   T29] audit: type=1400 audit(1745498260.475:33785): avc:  denied  { connect } for  pid=14292 comm="syz.4.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.564262][   T29] audit: type=1400 audit(1745498260.475:33786): avc:  denied  { name_connect } for  pid=14292 comm="syz.4.4011" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  208.576644][T14277] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3964: Invalid inode bitmap blk 0 in block_group 0
[  208.586743][   T29] audit: type=1400 audit(1745498260.475:33787): avc:  denied  { listen } for  pid=14292 comm="syz.4.4011" lport=56512 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.599703][ T3539] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1)
[  208.623626][   T29] audit: type=1400 audit(1745498260.475:33788): avc:  denied  { accept } for  pid=14292 comm="syz.4.4011" lport=56512 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.654074][T14277] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  208.662261][   T29] audit: type=1400 audit(1745498260.475:33789): avc:  denied  { getopt } for  pid=14292 comm="syz.4.4011" lport=56512 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  208.696696][   T29] audit: type=1400 audit(1745498260.605:33790): avc:  denied  { write } for  pid=14285 comm="syz.0.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.721201][ T3539] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:62: Failed to release dquot type 0
[  208.734268][T14277] EXT4-fs (loop5): 1 orphan inode deleted
[  208.800298][T14277] SELinux: failed to load policy
[  208.836925][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4015'.
[  208.858904][T14301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  208.894523][T14303] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4013'.
[  209.268885][T14260] syz.2.3997 (14260) used greatest stack depth: 8808 bytes left
[  209.277398][T14324] loop0: detected capacity change from 0 to 1024
[  209.295918][T14324] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  209.300615][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'.
[  209.306952][T14324] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  209.350024][T14324] JBD2: no valid journal superblock found
[  209.355892][T14324] EXT4-fs (loop0): Could not load journal inode
[  209.514218][T14334] loop2: detected capacity change from 0 to 512
[  209.556689][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  209.565686][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  209.567179][T14334] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  209.592611][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  209.613643][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  209.622635][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  209.863086][T14364] loop3: detected capacity change from 0 to 128
[  209.880336][T14366] sctp: [Deprecated]: syz.4.4037 (pid 14366) Use of int in max_burst socket option.
[  209.880336][T14366] Use struct sctp_assoc_value instead
[  209.906529][T14366] loop4: detected capacity change from 0 to 512
[  209.913893][T14366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  209.926459][T14366] EXT4-fs (loop4): 1 truncate cleaned up
[  209.993183][T14370] loop5: detected capacity change from 0 to 512
[  210.013902][T14370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  210.044468][T14370] EXT4-fs (loop5): 1 truncate cleaned up
[  211.792697][T14391] FAULT_INJECTION: forcing a failure.
[  211.792697][T14391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  211.805857][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.4.4044 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  211.805888][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  211.805934][T14391] Call Trace:
[  211.805943][T14391]  <TASK>
[  211.806024][T14391]  dump_stack_lvl+0xf6/0x150
[  211.806048][T14391]  dump_stack+0x15/0x1a
[  211.806064][T14391]  should_fail_ex+0x261/0x270
[  211.806089][T14391]  should_fail+0xb/0x10
[  211.806122][T14391]  should_fail_usercopy+0x1a/0x20
[  211.806147][T14391]  _copy_from_user+0x1c/0xa0
[  211.806183][T14391]  __sys_bpf+0x16a/0x800
[  211.806293][T14391]  __x64_sys_bpf+0x43/0x50
[  211.806343][T14391]  x64_sys_call+0x23da/0x2e10
[  211.806369][T14391]  do_syscall_64+0xc9/0x1a0
[  211.806401][T14391]  ? clear_bhb_loop+0x25/0x80
[  211.806505][T14391]  ? clear_bhb_loop+0x25/0x80
[  211.806532][T14391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.806552][T14391] RIP: 0033:0x7fc89339e969
[  211.806566][T14391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.806585][T14391] RSP: 002b:00007fc891a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.806607][T14391] RAX: ffffffffffffffda RBX: 00007fc8935c5fa0 RCX: 00007fc89339e969
[  211.806627][T14391] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000001
[  211.806642][T14391] RBP: 00007fc891a07090 R08: 0000000000000000 R09: 0000000000000000
[  211.806657][T14391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.806671][T14391] R13: 0000000000000000 R14: 00007fc8935c5fa0 R15: 00007ffdc1c6d5c8
[  211.806740][T14391]  </TASK>
[  212.075808][T14364] syz.3.4036 (14364) used greatest stack depth: 6200 bytes left
[  212.258753][T14399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  212.384676][T14410] loop0: detected capacity change from 0 to 764
[  213.087077][T14419] loop2: detected capacity change from 0 to 4096
[  213.151799][T14419] lo speed is unknown, defaulting to 1000
[  213.165969][T14427] hub 1-0:1.0: USB hub found
[  213.178240][T14427] hub 1-0:1.0: 8 ports detected
[  213.206304][T14426] 9pnet: Could not find request transport: 0xffffffffffffffff
[  213.287612][T14437] loop3: detected capacity change from 0 to 512
[  213.295594][T14437] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.302851][T14437] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4058: bg 0: block 248: padding at end of block bitmap is not set
[  213.318029][T14437] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4058: Failed to acquire dquot type 1
[  213.329944][T14437] EXT4-fs (loop3): 1 truncate cleaned up
[  213.444028][T10200] EXT4-fs unmount: 85 callbacks suppressed
[  213.444049][T10200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.477301][T14453] loop0: detected capacity change from 0 to 764
[  213.509957][   T29] kauditd_printk_skb: 337 callbacks suppressed
[  213.509975][   T29] audit: type=1326 audit(1745498265.445:34125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc893395927 code=0x7ffc0000
[  213.539886][   T29] audit: type=1326 audit(1745498265.445:34126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc89333ab39 code=0x7ffc0000
[  213.564332][   T29] audit: type=1326 audit(1745498265.445:34127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc893395927 code=0x7ffc0000
[  213.587968][   T29] audit: type=1326 audit(1745498265.445:34128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc89333ab39 code=0x7ffc0000
[  213.587996][   T29] audit: type=1326 audit(1745498265.445:34129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.588046][   T29] audit: type=1326 audit(1745498265.445:34130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.588078][   T29] audit: type=1326 audit(1745498265.445:34131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.588106][   T29] audit: type=1326 audit(1745498265.445:34132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.588133][   T29] audit: type=1326 audit(1745498265.445:34133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.588306][   T29] audit: type=1326 audit(1745498265.445:34134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.4.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  213.849851][T14119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.878180][T14472] __nla_validate_parse: 14 callbacks suppressed
[  213.878195][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  213.894039][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  213.909419][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  213.931348][T14464] xt_CT: No such helper "snmp_trap"
[  213.966160][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  213.975559][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  214.019887][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  214.073886][T14481] loop2: detected capacity change from 0 to 512
[  214.090050][T14481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.176134][T14493] loop4: detected capacity change from 0 to 512
[  214.199554][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  214.208608][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  214.218754][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'.
[  214.230320][T14493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.243895][T14481] EXT4-fs (loop2): 1 truncate cleaned up
[  214.249987][T14481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.263078][T14493] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.301147][T14499] loop3: detected capacity change from 0 to 512
[  214.322734][T10200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.333898][T14499] EXT4-fs (loop3): bad block size 65536
[  214.361229][T14501] loop5: detected capacity change from 0 to 512
[  214.405709][T14501] EXT4-fs error (device loop5): ext4_orphan_get:1390: comm syz.5.4077: inode #15: comm syz.5.4077: iget: illegal inode #
[  214.407502][T14507] loop3: detected capacity change from 0 to 512
[  214.421185][T14501] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4077: couldn't read orphan inode 15 (err -117)
[  214.438520][T14501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.446854][T14507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  214.481437][T14507] EXT4-fs (loop3): 1 truncate cleaned up
[  214.487759][T14507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.515672][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.545184][T14515] loop2: detected capacity change from 0 to 512
[  214.553532][T14515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.574660][T14515] EXT4-fs (loop2): 1 truncate cleaned up
[  214.580814][T14515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.594287][T14519] Cannot find del_set index 4 as target
[  214.637547][T10200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.677102][T14522] veth0_macvtap: left promiscuous mode
[  214.721132][T14522] macvtap0: refused to change device tx_queue_len
[  214.734891][T14528] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters
[  214.750134][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4086'.
[  214.763525][T14522] loop2: detected capacity change from 0 to 1024
[  214.778890][T14522] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  214.805704][T14522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  214.835817][T14522] System zones: 0-1, 3-36
[  214.846070][T14522] EXT4-fs (loop2): orphan cleanup on readonly fs
[  214.899068][T14522] EXT4-fs (loop2): 1 orphan inode deleted
[  214.907098][T14522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  214.949228][T14534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  214.992097][T10200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.503144][T14542] loop0: detected capacity change from 0 to 764
[  215.602654][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.665645][T14549] xt_CT: No such helper "snmp_trap"
[  215.884943][T14570] bond1: entered promiscuous mode
[  215.890159][T14570] bond1: entered allmulticast mode
[  215.895818][T14570] 8021q: adding VLAN 0 to HW filter on device bond1
[  215.914383][T14570] bond1 (unregistering): Released all slaves
[  215.977431][T14578] netlink: 'syz.3.4102': attribute type 1 has an invalid length.
[  216.046622][T14581] loop3: detected capacity change from 0 to 128
[  216.122456][T14584] 8021q: adding VLAN 0 to HW filter on device team1
[  216.534512][T14611] loop3: detected capacity change from 0 to 512
[  216.555107][T14611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  216.575622][T14611] EXT4-fs (loop3): 1 truncate cleaned up
[  216.599956][T14618] FAULT_INJECTION: forcing a failure.
[  216.599956][T14618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.613059][T14618] CPU: 0 UID: 0 PID: 14618 Comm: syz.2.4117 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  216.613162][T14618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  216.613177][T14618] Call Trace:
[  216.613186][T14618]  <TASK>
[  216.613196][T14618]  dump_stack_lvl+0xf6/0x150
[  216.613221][T14618]  dump_stack+0x15/0x1a
[  216.613237][T14618]  should_fail_ex+0x261/0x270
[  216.613334][T14618]  should_fail+0xb/0x10
[  216.613358][T14618]  should_fail_usercopy+0x1a/0x20
[  216.613447][T14618]  _copy_from_iter+0xd8/0xd10
[  216.613479][T14618]  ? kmalloc_reserve+0x16e/0x190
[  216.613541][T14618]  ? __build_skb_around+0x199/0x1f0
[  216.613566][T14618]  ? __alloc_skb+0x227/0x320
[  216.613588][T14618]  ? __virt_addr_valid+0x1ed/0x250
[  216.613612][T14618]  ? __check_object_size+0x367/0x510
[  216.613643][T14618]  netlink_sendmsg+0x492/0x720
[  216.613674][T14618]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.613762][T14618]  __sock_sendmsg+0x140/0x180
[  216.613819][T14618]  ____sys_sendmsg+0x350/0x4e0
[  216.613846][T14618]  __sys_sendmsg+0x1a0/0x240
[  216.613885][T14618]  __x64_sys_sendmsg+0x46/0x50
[  216.613913][T14618]  x64_sys_call+0x26f3/0x2e10
[  216.613947][T14618]  do_syscall_64+0xc9/0x1a0
[  216.613972][T14618]  ? clear_bhb_loop+0x25/0x80
[  216.614072][T14618]  ? clear_bhb_loop+0x25/0x80
[  216.614104][T14618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.614130][T14618] RIP: 0033:0x7f23fce9e969
[  216.614148][T14618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.614170][T14618] RSP: 002b:00007f23fb507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.614193][T14618] RAX: ffffffffffffffda RBX: 00007f23fd0c5fa0 RCX: 00007f23fce9e969
[  216.614265][T14618] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  216.614276][T14618] RBP: 00007f23fb507090 R08: 0000000000000000 R09: 0000000000000000
[  216.614290][T14618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.614304][T14618] R13: 0000000000000000 R14: 00007f23fd0c5fa0 R15: 00007ffd4ef07788
[  216.614327][T14618]  </TASK>
[  216.827628][T14611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.890730][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.929968][T14119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.949821][T14623] loop3: detected capacity change from 0 to 512
[  216.959587][T14623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  216.982323][T14623] EXT4-fs (loop3): 1 truncate cleaned up
[  216.997384][T14623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.004923][T14630] netlink: 'syz.2.4122': attribute type 1 has an invalid length.
[  217.036541][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.071349][T14639] bond_slave_1: mtu less than device minimum
[  217.115201][T14639] sd 0:0:1:0: device reset
[  217.345938][T14661] loop0: detected capacity change from 0 to 512
[  217.353093][T14661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  217.367085][T14661] EXT4-fs (loop0): 1 truncate cleaned up
[  217.375025][T14661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.385962][T14666] netlink: 'syz.3.4137': attribute type 1 has an invalid length.
[  217.474849][T14666] loop3: detected capacity change from 0 to 128
[  217.484569][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.604245][T14682] loop3: detected capacity change from 0 to 2048
[  217.624841][T14682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.637005][T14682] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.744547][T14690] lo speed is unknown, defaulting to 1000
[  217.843571][T14697] loop0: detected capacity change from 0 to 1024
[  217.850281][T14697] EXT4-fs: Ignoring removed bh option
[  217.855859][T14697] EXT4-fs: inline encryption not supported
[  217.861711][T14697] EXT4-fs: Ignoring removed i_version option
[  217.868222][T14697] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  217.883267][T14697] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.4148: lblock 1 mapped to illegal pblock 1 (length 1)
[  217.899382][T14697] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.4148: Failed to acquire dquot type 0
[  217.911593][T14697] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4148: Freeing blocks not in datazone - block = 0, count = 4096
[  217.926337][T14697] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4148: Invalid inode bitmap blk 0 in block_group 0
[  217.930753][T14702] netlink: 'syz.5.4150': attribute type 1 has an invalid length.
[  217.941754][T14697] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  217.947070][  T340] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  217.957939][T14697] EXT4-fs (loop0): 1 orphan inode deleted
[  217.969656][  T340] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  217.987914][T14697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.004317][T14697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.018436][T14697] SELinux: failed to load policy
[  218.026589][T14702] loop5: detected capacity change from 0 to 128
[  218.199718][T14720] loop0: detected capacity change from 0 to 512
[  218.214378][T14720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.227688][T14720] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.508006][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.613678][T14734] xt_CT: No such helper "snmp_trap"
[  218.818989][T14737] bond1: entered promiscuous mode
[  218.824302][T14737] bond1: entered allmulticast mode
[  218.832402][T14737] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.844053][T14737] bond1 (unregistering): Released all slaves
[  219.080052][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.563177][T14777] __nla_validate_parse: 23 callbacks suppressed
[  219.563192][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4177'.
[  219.734833][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4184'.
[  219.764127][T14796] netlink: 'syz.4.4185': attribute type 1 has an invalid length.
[  219.837120][T14801] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4187'.
[  219.994197][T14823] bond3: entered promiscuous mode
[  219.999351][T14823] bond3: entered allmulticast mode
[  220.005093][T14823] 8021q: adding VLAN 0 to HW filter on device bond3
[  220.029048][T14823] bond3 (unregistering): Released all slaves
[  220.039945][T14828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14828 comm=syz.2.4198
[  220.052573][T14828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14828 comm=syz.2.4198
[  220.070943][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  220.070958][   T29] audit: type=1400 audit(1745498272.005:34323): avc:  denied  { create } for  pid=14827 comm="syz.2.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  220.120457][   T29] audit: type=1400 audit(1745498272.045:34324): avc:  denied  { bind } for  pid=14827 comm="syz.2.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  220.174756][T14830] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4199'.
[  220.342464][T14859] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4214'.
[  220.442734][T14868] FAULT_INJECTION: forcing a failure.
[  220.442734][T14868] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  220.444029][   T29] audit: type=1326 audit(1745498272.385:34325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  220.456092][T14868] CPU: 0 UID: 0 PID: 14868 Comm: syz.0.4218 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  220.456131][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  220.456145][T14868] Call Trace:
[  220.456154][T14868]  <TASK>
[  220.456164][T14868]  dump_stack_lvl+0xf6/0x150
[  220.456196][T14868]  dump_stack+0x15/0x1a
[  220.456234][T14868]  should_fail_ex+0x261/0x270
[  220.456264][T14868]  should_fail_alloc_page+0xfd/0x110
[  220.456296][T14868]  __alloc_frozen_pages_noprof+0x11d/0x360
[  220.456329][T14868]  alloc_pages_mpol+0xb6/0x260
[  220.456423][T14868]  vma_alloc_folio_noprof+0x19c/0x300
[  220.456466][T14868]  handle_mm_fault+0xdda/0x2e80
[  220.456498][T14868]  ? __rcu_read_lock+0x36/0x50
[  220.456525][T14868]  ? __pte_offset_map_lock+0x1d3/0x290
[  220.456579][T14868]  __get_user_pages+0xf4e/0x2340
[  220.456684][T14868]  __gup_longterm_locked+0x2ec/0xfb0
[  220.456810][T14868]  ? ___pte_offset_map+0xc8/0x140
[  220.456853][T14868]  gup_fast_fallback+0x1561/0x1f70
[  220.456977][T14868]  ? ___kmalloc_large_node+0xc3/0x130
[  220.457020][T14868]  pin_user_pages_fast+0x64/0xa0
[  220.457058][T14868]  io_pin_pages+0xb4/0x170
[  220.457129][T14868]  io_sqe_buffer_register+0x18b/0x12a0
[  220.457155][T14868]  ? __memcg_slab_post_alloc_hook+0x473/0x5a0
[  220.457201][T14868]  ? __kvmalloc_node_noprof+0x39b/0x520
[  220.457265][T14868]  ? io_sqe_buffers_register+0xcf/0x550
[  220.457311][T14868]  io_sqe_buffers_register+0x2bd/0x550
[  220.457434][T14868]  __se_sys_io_uring_register+0xb04/0x1f50
[  220.457476][T14868]  ? kstrtouint_from_user+0xbf/0x100
[  220.457578][T14868]  ? 0xffffffff81000000
[  220.457596][T14868]  ? __rcu_read_unlock+0x4e/0x70
[  220.457624][T14868]  ? get_pid_task+0x94/0xd0
[  220.457649][T14868]  ? proc_fail_nth_write+0x12d/0x160
[  220.457693][T14868]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  220.457737][T14868]  ? vfs_write+0x669/0x950
[  220.457764][T14868]  ? putname+0xe1/0x100
[  220.457793][T14868]  ? __fget_files+0x186/0x1c0
[  220.457822][T14868]  ? fput+0x99/0xd0
[  220.457936][T14868]  ? ksys_write+0x180/0x1b0
[  220.457961][T14868]  __x64_sys_io_uring_register+0x55/0x70
[  220.458063][T14868]  x64_sys_call+0xb9d/0x2e10
[  220.458092][T14868]  do_syscall_64+0xc9/0x1a0
[  220.458184][T14868]  ? clear_bhb_loop+0x25/0x80
[  220.458210][T14868]  ? clear_bhb_loop+0x25/0x80
[  220.458238][T14868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.458266][T14868] RIP: 0033:0x7fc36b25e969
[  220.458283][T14868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.458378][T14868] RSP: 002b:00007fc3698c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  220.458424][T14868] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25e969
[  220.458438][T14868] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  220.458454][T14868] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  220.458470][T14868] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001
[  220.458485][T14868] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  220.458562][T14868]  </TASK>
[  220.885293][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'.
[  220.990132][   T29] audit: type=1326 audit(1745498272.395:34326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.013908][   T29] audit: type=1326 audit(1745498272.395:34327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.037641][   T29] audit: type=1326 audit(1745498272.395:34328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.061251][   T29] audit: type=1326 audit(1745498272.395:34329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.084865][   T29] audit: type=1326 audit(1745498272.725:34330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.108599][   T29] audit: type=1326 audit(1745498272.725:34331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.3.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  221.299839][T14889] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4225'.
[  221.339856][T14891] ipvlan2: entered promiscuous mode
[  221.364796][T14891] bridge0: port 3(ipvlan2) entered blocking state
[  221.371373][T14891] bridge0: port 3(ipvlan2) entered disabled state
[  221.424265][T14891] ipvlan2: entered allmulticast mode
[  221.429675][T14891] bridge0: entered allmulticast mode
[  221.462717][T14891] ipvlan2: left allmulticast mode
[  221.467824][T14891] bridge0: left allmulticast mode
[  221.487938][T14900] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4230'.
[  221.535618][   T29] audit: type=1400 audit(1745498273.355:34332): avc:  denied  { nlmsg_read } for  pid=14896 comm="syz.0.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  221.568454][T14900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4230'.
[  221.769667][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4234'.
[  221.865804][T14920] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  222.044982][T14930] loop0: detected capacity change from 0 to 512
[  222.051665][T14930] EXT4-fs: Ignoring removed i_version option
[  222.078529][T14930] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.172613][T14932] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.191233][T14932] FAULT_INJECTION: forcing a failure.
[  222.191233][T14932] name failslab, interval 1, probability 0, space 0, times 0
[  222.204089][T14932] CPU: 0 UID: 0 PID: 14932 Comm: syz.3.4243 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  222.204197][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  222.204209][T14932] Call Trace:
[  222.204216][T14932]  <TASK>
[  222.204224][T14932]  dump_stack_lvl+0xf6/0x150
[  222.204249][T14932]  dump_stack+0x15/0x1a
[  222.204281][T14932]  should_fail_ex+0x261/0x270
[  222.204311][T14932]  should_failslab+0x8f/0xb0
[  222.204337][T14932]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  222.204447][T14932]  ? __alloc_skb+0x10d/0x320
[  222.204468][T14932]  ? __rtnl_unlock+0x99/0xb0
[  222.204489][T14932]  __alloc_skb+0x10d/0x320
[  222.204590][T14932]  netlink_ack+0xf1/0x4f0
[  222.204610][T14932]  ? ref_tracker_free+0x3b8/0x420
[  222.204636][T14932]  netlink_rcv_skb+0x19f/0x230
[  222.204657][T14932]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  222.204718][T14932]  rtnetlink_rcv+0x1c/0x30
[  222.204750][T14932]  netlink_unicast+0x605/0x6c0
[  222.204834][T14932]  netlink_sendmsg+0x609/0x720
[  222.204893][T14932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.204915][T14932]  __sock_sendmsg+0x140/0x180
[  222.204951][T14932]  ____sys_sendmsg+0x350/0x4e0
[  222.205062][T14932]  __sys_sendmsg+0x1a0/0x240
[  222.205118][T14932]  __x64_sys_sendmsg+0x46/0x50
[  222.205142][T14932]  x64_sys_call+0x26f3/0x2e10
[  222.205164][T14932]  do_syscall_64+0xc9/0x1a0
[  222.205203][T14932]  ? clear_bhb_loop+0x25/0x80
[  222.205228][T14932]  ? clear_bhb_loop+0x25/0x80
[  222.205257][T14932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.205283][T14932] RIP: 0033:0x7f579ccee969
[  222.205356][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.205374][T14932] RSP: 002b:00007f579b357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.205397][T14932] RAX: ffffffffffffffda RBX: 00007f579cf15fa0 RCX: 00007f579ccee969
[  222.205412][T14932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  222.205477][T14932] RBP: 00007f579b357090 R08: 0000000000000000 R09: 0000000000000000
[  222.205491][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.205506][T14932] R13: 0000000000000000 R14: 00007f579cf15fa0 R15: 00007ffe55b5e3a8
[  222.205530][T14932]  </TASK>
[  222.474272][T14936] netlink: 'syz.2.4244': attribute type 1 has an invalid length.
[  222.489489][T14934] loop4: detected capacity change from 0 to 764
[  222.526815][T14930] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  222.609619][T14930] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  222.617697][T14930] EXT4-fs (loop0): failed to initialize system zone (-117)
[  222.629735][T14930] EXT4-fs (loop0): mount failed
[  222.730070][T14951] xt_CT: No such helper "snmp_trap"
[  222.936654][T14960] loop5: detected capacity change from 0 to 1024
[  222.943649][T14960] EXT4-fs: Ignoring removed bh option
[  222.949230][T14960] EXT4-fs: inline encryption not supported
[  222.955119][T14960] EXT4-fs: Ignoring removed i_version option
[  222.961840][T14960] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  222.975415][T14960] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.4252: lblock 1 mapped to illegal pblock 1 (length 1)
[  222.989852][T14960] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4252: Failed to acquire dquot type 0
[  223.010833][T14960] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4252: Freeing blocks not in datazone - block = 0, count = 4096
[  223.025610][T14964] netlink: 'syz.3.4253': attribute type 6 has an invalid length.
[  223.042103][T14964] loop3: detected capacity change from 0 to 1764
[  223.048814][T14960] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4252: Invalid inode bitmap blk 0 in block_group 0
[  223.061799][T14964] iso9660: Unknown parameter 'hecR'
[  223.067489][ T3535] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1)
[  223.102839][ T3535] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0
[  223.117007][T14960] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  223.133330][T14960] EXT4-fs (loop5): 1 orphan inode deleted
[  223.157357][T14960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.220774][T14960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.271791][T14960] SELinux: failed to load policy
[  223.577644][T14981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  223.593130][T14984] bond_slave_1: mtu less than device minimum
[  224.340593][T14998] SELinux: failed to load policy
[  224.737390][T15013] __nla_validate_parse: 3 callbacks suppressed
[  224.737412][T15013] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4273'.
[  225.041086][T15028] loop0: detected capacity change from 0 to 512
[  225.049165][T15028] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  225.105817][T15028] EXT4-fs (loop0): 1 truncate cleaned up
[  225.111904][T15026] loop3: detected capacity change from 0 to 1024
[  225.113378][T15028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.149141][T15026] EXT4-fs: Ignoring removed bh option
[  225.154664][T15026] EXT4-fs: inline encryption not supported
[  225.160602][T15026] EXT4-fs: Ignoring removed i_version option
[  225.175097][T15026] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  225.203370][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4280'.
[  225.265067][T15026] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.4279: lblock 1 mapped to illegal pblock 1 (length 1)
[  225.279529][T15026] __quota_error: 52 callbacks suppressed
[  225.279577][T15026] Quota error (device loop3): write_blk: dquota write failed
[  225.292816][T15026] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  225.322286][T15026] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4279: Failed to acquire dquot type 0
[  225.330998][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.367405][T15029] xt_CT: No such helper "snmp_trap"
[  225.373389][T15026] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4279: Freeing blocks not in datazone - block = 0, count = 4096
[  225.394488][T15026] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4279: Invalid inode bitmap blk 0 in block_group 0
[  225.412620][   T31] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  225.427905][   T31] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  225.430295][T15026] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  225.436359][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0
[  225.460728][T15042] netlink: 'syz.0.4281': attribute type 6 has an invalid length.
[  225.480356][T15042] loop0: detected capacity change from 0 to 1764
[  225.496192][T15026] EXT4-fs (loop3): 1 orphan inode deleted
[  225.505569][T15042] iso9660: Unknown parameter 'hecR'
[  225.514510][T15026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.515847][T15047] netlink: 'syz.4.4283': attribute type 1 has an invalid length.
[  225.578837][T15026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.654337][T15026] SELinux: failed to load policy
[  225.707542][   T29] audit: type=1326 audit(1745498277.645:34382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.772085][   T29] audit: type=1326 audit(1745498277.675:34383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.775682][T15053] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4285'.
[  225.796003][   T29] audit: type=1326 audit(1745498277.675:34384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.828784][   T29] audit: type=1326 audit(1745498277.675:34385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.852405][   T29] audit: type=1326 audit(1745498277.675:34386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.876057][   T29] audit: type=1326 audit(1745498277.675:34387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  225.899586][   T29] audit: type=1326 audit(1745498277.675:34388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  226.082519][T15060] bond3: entered promiscuous mode
[  226.087785][T15060] bond3: entered allmulticast mode
[  226.095347][T15060] 8021q: adding VLAN 0 to HW filter on device bond3
[  226.149042][T15060] bond3 (unregistering): Released all slaves
[  226.364336][T15072] bond_slave_1: mtu less than device minimum
[  226.464957][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.473973][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.498122][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.520917][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.530119][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.540932][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.591645][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'.
[  226.751224][T15086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  227.175883][T15112] loop4: detected capacity change from 0 to 512
[  227.198548][T15112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  227.226478][T15112] EXT4-fs (loop4): 1 truncate cleaned up
[  227.232702][T15112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.286512][T15118] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  227.357265][T15120] loop0: detected capacity change from 0 to 1024
[  227.396002][T15120] EXT4-fs: Ignoring removed nobh option
[  227.402661][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.449678][T15120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.532048][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.644321][T15139] loop0: detected capacity change from 0 to 512
[  227.654287][T15135] bond1: entered promiscuous mode
[  227.659386][T15135] bond1: entered allmulticast mode
[  227.677174][T15135] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.686376][T15139] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  227.700140][T15135] bond1 (unregistering): Released all slaves
[  227.710114][T15139] EXT4-fs (loop0): 1 truncate cleaned up
[  227.721602][T15139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.753874][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.917595][T15168] loop3: detected capacity change from 0 to 764
[  228.060535][T15175] xt_CT: No such helper "snmp_trap"
[  228.107236][T15179] loop4: detected capacity change from 0 to 512
[  228.171190][T15179] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  228.189498][T15179] EXT4-fs (loop4): 1 truncate cleaned up
[  228.196113][T15179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.227093][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.754143][T15211] bond3: entered promiscuous mode
[  228.759221][T15211] bond3: entered allmulticast mode
[  228.766321][T15211] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.788763][T15211] bond3 (unregistering): Released all slaves
[  228.841354][T15216] bond3: entered promiscuous mode
[  228.846511][T15216] bond3: entered allmulticast mode
[  228.854456][T15216] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.866753][T15216] bond3 (unregistering): Released all slaves
[  229.111244][T15266] xt_CT: No such helper "snmp_trap"
[  229.123435][T15269] loop0: detected capacity change from 0 to 764
[  229.220480][T15274] xt_CT: No such helper "snmp_trap"
[  229.346058][T15278] bond3: entered promiscuous mode
[  229.351131][T15278] bond3: entered allmulticast mode
[  229.357538][T15278] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.379940][T15278] bond3 (unregistering): Released all slaves
[  229.857090][T15312] loop5: detected capacity change from 0 to 764
[  229.898726][T15314] bond3: entered promiscuous mode
[  229.903897][T15314] bond3: entered allmulticast mode
[  229.909317][T15314] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.933359][T15314] bond3 (unregistering): Released all slaves
[  230.060144][T15327] xt_CT: No such helper "snmp_trap"
[  230.112321][T15334] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  230.353603][T15346] loop0: detected capacity change from 0 to 512
[  230.360922][T15346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  230.375690][T15346] EXT4-fs (loop0): 1 truncate cleaned up
[  230.382062][T15346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.430436][T15346] __nla_validate_parse: 17 callbacks suppressed
[  230.430454][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'.
[  230.530480][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.703590][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4397'.
[  230.712678][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4397'.
[  230.722972][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4397'.
[  230.757583][T15358] bond_slave_1: mtu less than device minimum
[  230.799703][T15358] sd 0:0:1:0: device reset
[  230.829556][T15360] loop5: detected capacity change from 0 to 764
[  231.014583][T15364] xt_CT: No such helper "snmp_trap"
[  231.115666][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  231.115681][   T29] audit: type=1326 audit(1745498283.055:34533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.150003][   T29] audit: type=1326 audit(1745498283.055:34534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.173688][   T29] audit: type=1326 audit(1745498283.055:34535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.197296][   T29] audit: type=1326 audit(1745498283.055:34536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.221012][   T29] audit: type=1326 audit(1745498283.055:34537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.244554][   T29] audit: type=1326 audit(1745498283.085:34538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.268293][   T29] audit: type=1326 audit(1745498283.085:34539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.292025][   T29] audit: type=1326 audit(1745498283.085:34540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.315635][   T29] audit: type=1326 audit(1745498283.085:34541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.339107][   T29] audit: type=1326 audit(1745498283.085:34542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15376 comm="syz.3.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579ccee969 code=0x7ffc0000
[  231.430912][T15391] bond_slave_1: mtu less than device minimum
[  231.451489][T15394] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4411'.
[  231.487920][T15391] sd 0:0:1:0: device reset
[  231.514877][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  231.523887][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  231.532860][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  231.547910][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  231.557097][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  231.751501][T15422] loop5: detected capacity change from 0 to 512
[  231.758394][T15422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  231.770123][T15422] EXT4-fs (loop5): 1 truncate cleaned up
[  231.776224][T15422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.825294][T14119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.840380][T15432] bond_slave_1: mtu less than device minimum
[  231.866418][T15432] sd 0:0:1:0: device reset
[  232.155973][T15455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  232.311629][T15459] loop4: detected capacity change from 0 to 512
[  232.322215][T15459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  232.361353][T15459] EXT4-fs (loop4): 1 truncate cleaned up
[  232.371886][T15459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.373125][T15462] bond_slave_1: mtu less than device minimum
[  232.449357][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.461271][T15462] sd 0:0:1:0: device reset
[  232.522421][T15473] loop4: detected capacity change from 0 to 512
[  232.558582][T15473] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  232.601184][T15473] EXT4-fs (loop4): 1 truncate cleaned up
[  232.618980][T15473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.801084][T15497] loop0: detected capacity change from 0 to 512
[  232.809683][T15497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  232.821013][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.839029][T15497] EXT4-fs (loop0): 1 truncate cleaned up
[  232.863369][T15497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.975418][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.100364][T15525] bond_slave_1: mtu less than device minimum
[  233.133099][T15530] netlink: 'syz.0.4463': attribute type 6 has an invalid length.
[  233.148680][T15530] loop0: detected capacity change from 0 to 1764
[  233.180229][T15530] iso9660: Unknown parameter 'hecR'
[  233.190456][T15525] sd 0:0:1:0: device reset
[  233.363893][T15538] xt_CT: No such helper "snmp_trap"
[  233.400190][T15541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  233.676301][T15543] loop3: detected capacity change from 0 to 512
[  233.734992][T15543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  233.874406][T15543] EXT4-fs (loop3): 1 truncate cleaned up
[  233.880855][T15543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.202356][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.338416][T15574] netlink: 'syz.2.4478': attribute type 6 has an invalid length.
[  234.360635][T15577] loop3: detected capacity change from 0 to 764
[  234.472689][T15581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33012 sclass=netlink_route_socket pid=15581 comm=syz.5.4480
[  234.518456][T15582] xt_CT: No such helper "snmp_trap"
[  234.586704][T15586] loop4: detected capacity change from 0 to 512
[  234.608023][T15586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  234.619501][T15586] EXT4-fs (loop4): 1 truncate cleaned up
[  234.625869][T15586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.674381][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.718821][T15591] loop4: detected capacity change from 0 to 764
[  234.872208][T15593] xt_CT: No such helper "snmp_trap"
[  235.652674][T15638] __nla_validate_parse: 19 callbacks suppressed
[  235.652693][T15638] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4498'.
[  235.844709][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'.
[  236.021657][T15662] netlink: 'syz.4.4505': attribute type 6 has an invalid length.
[  236.076120][T15662] loop4: detected capacity change from 0 to 1764
[  236.109363][T15662] iso9660: Unknown parameter 'hecR'
[  236.233772][T15671] IPv6: sit1: Disabled Multicast RS
[  236.257012][T15671] sit1: entered allmulticast mode
[  236.286141][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  236.286161][   T29] audit: type=1400 audit(1745498288.155:34631): avc:  denied  { execute } for  pid=15670 comm="syz.5.4508" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  236.394495][T15676] IPv6: Can't replace route, no match found
[  236.448261][   T29] audit: type=1400 audit(1745498288.275:34632): avc:  denied  { write } for  pid=15670 comm="syz.5.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  236.528766][T15679] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4510'.
[  236.651618][T15681] bond4: entered promiscuous mode
[  236.656847][T15681] bond4: entered allmulticast mode
[  236.696629][T15681] 8021q: adding VLAN 0 to HW filter on device bond4
[  236.708623][T15685] loop0: detected capacity change from 0 to 512
[  236.736248][T15681] bond4 (unregistering): Released all slaves
[  236.746403][T15685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  236.774410][T15685] EXT4-fs (loop0): 1 truncate cleaned up
[  236.788506][T15685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.912057][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4512'.
[  237.075657][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.086005][T15697] bond3: entered promiscuous mode
[  237.091129][T15697] bond3: entered allmulticast mode
[  237.119140][T15697] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.142821][T15697] bond3 (unregistering): Released all slaves
[  237.182038][T15704] bond1: entered promiscuous mode
[  237.187268][T15704] bond1: entered allmulticast mode
[  237.189422][T15707] netlink: 'syz.3.4520': attribute type 6 has an invalid length.
[  237.195075][T15704] 8021q: adding VLAN 0 to HW filter on device bond1
[  237.211196][T15704] bond1 (unregistering): Released all slaves
[  237.237765][T15707] loop3: detected capacity change from 0 to 1764
[  237.240456][T15712] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4521'.
[  237.256386][T15707] iso9660: Unknown parameter 'hecR'
[  237.296691][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4524'.
[  237.386618][T15723] netlink: 'syz.5.4525': attribute type 6 has an invalid length.
[  237.414704][T15725] xt_CT: No such helper "snmp_trap"
[  237.425027][T15723] loop5: detected capacity change from 0 to 1764
[  237.449975][T15723] iso9660: Unknown parameter 'hecR'
[  237.997913][T15743] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4533'.
[  238.516948][T15761] netlink: 'syz.4.4540': attribute type 6 has an invalid length.
[  238.547709][T15759] xt_CT: No such helper "snmp_trap"
[  238.582690][T15761] loop4: detected capacity change from 0 to 1764
[  238.604372][T15761] iso9660: Unknown parameter 'hecR'
[  238.706817][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'.
[  238.850580][T15774] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4545'.
[  238.905275][T15777] loop3: detected capacity change from 0 to 764
[  238.967793][T15779] bond_slave_1: mtu less than device minimum
[  239.081221][T15779] sd 0:0:1:0: device reset
[  239.215633][T15786] xt_CT: No such helper "snmp_trap"
[  239.489185][T15810] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4558'.
[  239.525663][T15813] loop0: detected capacity change from 0 to 512
[  239.543362][T15813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  239.572424][T15816] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  239.604481][T15813] EXT4-fs (loop0): 1 truncate cleaned up
[  239.610656][T15813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.766603][T15826] bond3: entered promiscuous mode
[  239.771702][T15826] bond3: entered allmulticast mode
[  239.782797][T15826] 8021q: adding VLAN 0 to HW filter on device bond3
[  239.860306][   T29] audit: type=1400 audit(1745498291.795:34633): avc:  denied  { read } for  pid=15830 comm="syz.3.4564" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  239.888438][T15826] bond3 (unregistering): Released all slaves
[  239.910492][   T29] audit: type=1400 audit(1745498291.845:34634): avc:  denied  { create } for  pid=15830 comm="syz.3.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  239.940921][   T29] audit: type=1400 audit(1745498291.875:34635): avc:  denied  { open } for  pid=15830 comm="syz.3.4564" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  240.075381][T10376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.139948][T15836] netlink: 'syz.4.4566': attribute type 10 has an invalid length.
[  240.250480][   T29] audit: type=1400 audit(1745498292.185:34636): avc:  denied  { unmount } for  pid=12242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  240.303692][T15841] netlink: 'syz.4.4566': attribute type 10 has an invalid length.
[  240.331276][T15843] loop0: detected capacity change from 0 to 764
[  240.347634][T15841] team0: entered promiscuous mode
[  240.352834][T15841] team_slave_0: entered promiscuous mode
[  240.358586][T15841] team_slave_1: entered promiscuous mode
[  240.400283][T15845] netlink: 'syz.3.4570': attribute type 6 has an invalid length.
[  240.411685][T15841] 8021q: adding VLAN 0 to HW filter on device team0
[  240.425548][   T29] audit: type=1400 audit(1745498292.355:34637): avc:  denied  { bind } for  pid=15834 comm="syz.4.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  240.445730][   T29] audit: type=1400 audit(1745498292.355:34638): avc:  denied  { read } for  pid=15834 comm="syz.4.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  240.460827][T15850] loop3: detected capacity change from 0 to 1764
[  240.466244][   T29] audit: type=1400 audit(1745498292.355:34639): avc:  denied  { execute_no_trans } for  pid=15834 comm="syz.4.4566" path="/285/file0" dev="tmpfs" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  240.478349][T15850] iso9660: Unknown parameter 'hecR'
[  240.553048][T15851] xt_CT: No such helper "snmp_trap"
[  240.579111][T15841] bridge0: port 3(team0) entered blocking state
[  240.585766][T15841] bridge0: port 3(team0) entered disabled state
[  240.616739][T15841] team0: entered allmulticast mode
[  240.621932][T15841] team_slave_0: entered allmulticast mode
[  240.627816][T15841] team_slave_1: entered allmulticast mode
[  240.679070][T15841] bridge0: port 3(team0) entered blocking state
[  240.685503][T15841] bridge0: port 3(team0) entered forwarding state
[  240.696635][T15853] __nla_validate_parse: 11 callbacks suppressed
[  240.696654][T15853] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4571'.
[  241.273153][   T29] audit: type=1326 audit(1745498293.205:34640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.296921][   T29] audit: type=1326 audit(1745498293.205:34641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.650376][   T29] audit: type=1326 audit(1745498293.265:34642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.674092][   T29] audit: type=1326 audit(1745498293.265:34643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.697761][   T29] audit: type=1326 audit(1745498293.265:34644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.721564][   T29] audit: type=1326 audit(1745498293.265:34645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.745277][   T29] audit: type=1326 audit(1745498293.265:34646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.769155][   T29] audit: type=1326 audit(1745498293.265:34647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.793200][   T29] audit: type=1326 audit(1745498293.265:34648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.816990][   T29] audit: type=1326 audit(1745498293.265:34649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.840649][   T29] audit: type=1326 audit(1745498293.265:34650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.0.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b25e969 code=0x7ffc0000
[  241.985263][T15872] bond_slave_1: mtu less than device minimum
[  242.120574][T15869] sd 0:0:1:0: device reset
[  242.295609][T15888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  242.786311][T15896] bond1: entered promiscuous mode
[  242.791426][T15896] bond1: entered allmulticast mode
[  242.798935][T15896] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.867097][T15896] bond1 (unregistering): Released all slaves
[  242.962183][T15900] loop0: detected capacity change from 0 to 128
[  242.980598][T15900] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  242.995742][T15900] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  243.053496][T15900] syzkaller0: entered allmulticast mode
[  243.063649][T15900] syzkaller0: entered promiscuous mode
[  243.084022][T15900] syzkaller0 (unregistering): left promiscuous mode
[  243.090691][T15900] syzkaller0 (unregistering): left allmulticast mode
[  243.161250][T15907] bridge_slave_0: left allmulticast mode
[  243.167005][T15907] bridge_slave_0: left promiscuous mode
[  243.172773][T15907] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.188092][T15907] bridge_slave_1: left allmulticast mode
[  243.193929][T15907] bridge_slave_1: left promiscuous mode
[  243.199728][T15907] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.211067][T15907] bond0: (slave bond_slave_0): Releasing backup interface
[  243.244986][T15907] bond0: (slave bond_slave_1): Releasing backup interface
[  243.267990][T15907] team0: Port device team_slave_0 removed
[  243.296664][T15907] team0: Port device team_slave_1 removed
[  243.316924][T15907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.324449][T15907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.333811][T15907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.341972][T15907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.364211][ T3377] lo speed is unknown, defaulting to 1000
[  243.398468][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.407447][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.419033][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.441826][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.450896][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.468127][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.496847][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'.
[  243.499358][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'.
[  243.507788][T15925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4596'.
[  243.640555][T15943] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  243.657747][T15939] xt_CT: No such helper "snmp_trap"
[  243.660449][T15945] bond3: entered promiscuous mode
[  243.668184][T15945] bond3: entered allmulticast mode
[  243.673748][T15945] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.694830][T15945] bond3 (unregistering): Released all slaves
[  243.875617][T15969] loop4: detected capacity change from 0 to 512
[  243.889209][T15969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  243.930783][T15975] FAULT_INJECTION: forcing a failure.
[  243.930783][T15975] name failslab, interval 1, probability 0, space 0, times 0
[  243.943513][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.5.4613 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  243.943543][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  243.943558][T15975] Call Trace:
[  243.943565][T15975]  <TASK>
[  243.943574][T15975]  dump_stack_lvl+0xf6/0x150
[  243.943600][T15975]  dump_stack+0x15/0x1a
[  243.943620][T15975]  should_fail_ex+0x261/0x270
[  243.943649][T15975]  should_failslab+0x8f/0xb0
[  243.943677][T15975]  kmem_cache_alloc_noprof+0x59/0x340
[  243.943717][T15975]  ? vm_area_alloc+0x2c/0xb0
[  243.943738][T15975]  ? vma_merge_new_range+0x2df/0x340
[  243.943769][T15975]  vm_area_alloc+0x2c/0xb0
[  243.943786][T15975]  mmap_region+0x83e/0x1490
[  243.943845][T15975]  do_mmap+0x9ef/0xc80
[  243.943876][T15975]  vm_mmap_pgoff+0x16d/0x2d0
[  243.943923][T15975]  ksys_mmap_pgoff+0xd0/0x340
[  243.943948][T15975]  ? fpregs_assert_state_consistent+0x83/0xa0
[  243.943982][T15975]  x64_sys_call+0x1945/0x2e10
[  243.944009][T15975]  do_syscall_64+0xc9/0x1a0
[  243.944041][T15975]  ? clear_bhb_loop+0x25/0x80
[  243.944065][T15975]  ? clear_bhb_loop+0x25/0x80
[  243.944091][T15975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.944117][T15975] RIP: 0033:0x7fbbf2d2e9a3
[  243.944135][T15975] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  243.944156][T15975] RSP: 002b:00007fbbf1396e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  243.944175][T15975] RAX: ffffffffffffffda RBX: 00000000000009fe RCX: 00007fbbf2d2e9a3
[  243.944189][T15975] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  243.944203][T15975] RBP: 00002000000003c2 R08: 00000000ffffffff R09: 0000000000000000
[  243.944217][T15975] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  243.944231][T15975] R13: 00007fbbf1396ef0 R14: 00007fbbf1396eb0 R15: 0000200000000200
[  243.944254][T15975]  </TASK>
[  243.946404][T15969] EXT4-fs (loop4): 1 truncate cleaned up
[  244.090239][T15980] FAULT_INJECTION: forcing a failure.
[  244.090239][T15980] name failslab, interval 1, probability 0, space 0, times 0
[  244.155794][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.0.4614 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  244.155824][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  244.155840][T15980] Call Trace:
[  244.155848][T15980]  <TASK>
[  244.155858][T15980]  dump_stack_lvl+0xf6/0x150
[  244.155924][T15980]  dump_stack+0x15/0x1a
[  244.155943][T15980]  should_fail_ex+0x261/0x270
[  244.155973][T15980]  should_failslab+0x8f/0xb0
[  244.156009][T15980]  __kmalloc_cache_node_noprof+0x58/0x340
[  244.156119][T15980]  ? __get_vm_area_node+0xfb/0x1c0
[  244.156155][T15980]  __get_vm_area_node+0xfb/0x1c0
[  244.156186][T15980]  __vmalloc_node_range_noprof+0x285/0xe80
[  244.156270][T15980]  ? ethtool_get_stats+0x145/0x2c0
[  244.156299][T15980]  ? mntput+0x49/0x70
[  244.156328][T15980]  ? path_openat+0x1ab2/0x2000
[  244.156407][T15980]  ? avc_has_extended_perms+0x6fd/0x8f0
[  244.156431][T15980]  ? ethtool_get_stats+0x145/0x2c0
[  244.156471][T15980]  vzalloc_noprof+0x5e/0x70
[  244.156491][T15980]  ? ethtool_get_stats+0x145/0x2c0
[  244.156517][T15980]  ethtool_get_stats+0x145/0x2c0
[  244.156553][T15980]  dev_ethtool+0x904/0x1570
[  244.156585][T15980]  ? __rcu_read_unlock+0x4e/0x70
[  244.156643][T15980]  dev_ioctl+0x3b3/0xa20
[  244.156741][T15980]  sock_do_ioctl+0x121/0x220
[  244.156773][T15980]  sock_ioctl+0x436/0x630
[  244.156805][T15980]  ? __pfx_sock_ioctl+0x10/0x10
[  244.156882][T15980]  __se_sys_ioctl+0xc9/0x140
[  244.156964][T15980]  __x64_sys_ioctl+0x43/0x50
[  244.157022][T15980]  x64_sys_call+0x168d/0x2e10
[  244.157049][T15980]  do_syscall_64+0xc9/0x1a0
[  244.157080][T15980]  ? clear_bhb_loop+0x25/0x80
[  244.157105][T15980]  ? clear_bhb_loop+0x25/0x80
[  244.157200][T15980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.157226][T15980] RIP: 0033:0x7fc36b25e969
[  244.157245][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.157262][T15980] RSP: 002b:00007fc3698c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.157279][T15980] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25e969
[  244.157291][T15980] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000007
[  244.157350][T15980] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  244.157373][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.157436][T15980] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  244.157528][T15980]  </TASK>
[  244.157536][T15980] syz.0.4614: vmalloc error: size 80, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  244.162797][T15969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.170092][T15980] ,cpuset=/,mems_allowed=0
[  244.427632][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.0.4614 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  244.427664][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  244.427680][T15980] Call Trace:
[  244.427687][T15980]  <TASK>
[  244.427696][T15980]  dump_stack_lvl+0xf6/0x150
[  244.427723][T15980]  dump_stack+0x15/0x1a
[  244.427740][T15980]  warn_alloc+0x145/0x1b0
[  244.427831][T15980]  __vmalloc_node_range_noprof+0x2aa/0xe80
[  244.427874][T15980]  ? mntput+0x49/0x70
[  244.427910][T15980]  ? path_openat+0x1ab2/0x2000
[  244.427986][T15980]  ? avc_has_extended_perms+0x6fd/0x8f0
[  244.428019][T15980]  ? ethtool_get_stats+0x145/0x2c0
[  244.428053][T15980]  vzalloc_noprof+0x5e/0x70
[  244.428134][T15980]  ? ethtool_get_stats+0x145/0x2c0
[  244.428168][T15980]  ethtool_get_stats+0x145/0x2c0
[  244.428204][T15980]  dev_ethtool+0x904/0x1570
[  244.428234][T15980]  ? __rcu_read_unlock+0x4e/0x70
[  244.428309][T15980]  dev_ioctl+0x3b3/0xa20
[  244.428387][T15980]  sock_do_ioctl+0x121/0x220
[  244.428427][T15980]  sock_ioctl+0x436/0x630
[  244.428457][T15980]  ? __pfx_sock_ioctl+0x10/0x10
[  244.428498][T15980]  __se_sys_ioctl+0xc9/0x140
[  244.428531][T15980]  __x64_sys_ioctl+0x43/0x50
[  244.428645][T15980]  x64_sys_call+0x168d/0x2e10
[  244.428672][T15980]  do_syscall_64+0xc9/0x1a0
[  244.428699][T15980]  ? clear_bhb_loop+0x25/0x80
[  244.428741][T15980]  ? clear_bhb_loop+0x25/0x80
[  244.428768][T15980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.428794][T15980] RIP: 0033:0x7fc36b25e969
[  244.428812][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.428835][T15980] RSP: 002b:00007fc3698c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.428933][T15980] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25e969
[  244.428946][T15980] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000007
[  244.428958][T15980] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  244.428973][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.428987][T15980] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  244.429012][T15980]  </TASK>
[  244.429020][T15980] Mem-Info:
[  244.429039][T15980] active_anon:4918 inactive_anon:2 isolated_anon:0
[  244.429039][T15980]  active_file:6418 inactive_file:10542 isolated_file:0
[  244.429039][T15980]  unevictable:0 dirty:139 writeback:0
[  244.429039][T15980]  slab_reclaimable:3085 slab_unreclaimable:22689
[  244.429039][T15980]  mapped:29610 shmem:462 pagetables:1666
[  244.429039][T15980]  sec_pagetables:0 bounce:0
[  244.429039][T15980]  kernel_misc_reclaimable:0
[  244.429039][T15980]  free:1886298 free_pcp:2794 free_cma:0
[  244.429124][T15980] Node 0 active_anon:19672kB inactive_anon:8kB active_file:25672kB inactive_file:42168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118440kB dirty:556kB writeback:0kB shmem:1848kB writeback_tmp:0kB kernel_stack:4864kB pagetables:6664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  244.429182][T15980] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  244.429387][T15980] lowmem_reserve[]: 0 2882 7860 7860
[  244.429421][T15980] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  244.429509][T15980] lowmem_reserve[]: 0 0 4978 4978
[  244.429553][T15980] Node 0 Normal free:4582052kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:19672kB inactive_anon:8kB active_file:25672kB inactive_file:42168kB unevictable:0kB writepending:556kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:7648kB local_pcp:6620kB free_cma:0kB
[  244.429656][T15980] lowmem_reserve[]: 0 0 0 0
[  244.429687][T15980] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 
[  244.624067][T15991] loop3: detected capacity change from 0 to 512
[  244.626662][T15980] 3*4096kB 
[  244.681643][T15991] EXT4-fs: Ignoring removed i_version option
[  244.701710][T15980] (M) = 15360kB
[  244.701734][T15980] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB
[  244.860921][T15980] Node 0 Normal: 534*4kB (ME) 1121*8kB (UME) 888*16kB (ME) 674*32kB (UME) 578*64kB (UME) 367*128kB (UME) 243*256kB (UM) 172*512kB (UM) 114*1024kB (UME) 5*2048kB (ME) 955*4096kB (UM) = 4319776kB
[  244.896307][T15980] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  244.905666][T15980] 17461 total pagecache pages
[  244.910376][T15980] 15 pages in swap cache
[  244.914663][T15980] Free swap  = 120676kB
[  244.918843][T15980] Total swap = 124996kB
[  244.923031][T15980] 2097051 pages RAM
[  244.926861][T15980] 0 pages HighMem/MovableOnly
[  244.931548][T15980] 80823 pages reserved
[  245.064049][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.159453][T15991] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.184655][T15991] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  245.205736][T15991] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  245.219002][T15991] EXT4-fs (loop3): failed to initialize system zone (-117)
[  245.227814][T15991] EXT4-fs (loop3): mount failed
[  245.313097][T16023] loop0: detected capacity change from 0 to 512
[  245.361042][T16023] EXT4-fs: Ignoring removed i_version option
[  245.396867][T16022] bond_slave_1: mtu less than device minimum
[  245.399004][T16023] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.410347][T16023] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  245.423072][T16023] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  245.431092][T16022] sd 0:0:1:0: device reset
[  245.432715][T16023] EXT4-fs (loop0): failed to initialize system zone (-117)
[  245.444559][T16023] EXT4-fs (loop0): mount failed
[  245.478554][T16028] netlink: 'syz.2.4627': attribute type 6 has an invalid length.
[  245.597953][T16034] loop4: detected capacity change from 0 to 512
[  245.629090][T16034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  245.714453][T16034] EXT4-fs (loop4): 1 truncate cleaned up
[  245.720684][T16034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.788045][T16034] __nla_validate_parse: 22 callbacks suppressed
[  245.788063][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4629'.
[  245.843868][T11597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.053177][T16061] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4636'.
[  246.067948][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'.
[  246.077497][T16065] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4637'.
[  246.139470][T16072] loop3: detected capacity change from 0 to 764
[  246.256659][T16090] loop5: detected capacity change from 0 to 512
[  246.264969][T16090] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.276392][T16090] EXT4-fs (loop5): 1 truncate cleaned up
[  246.284523][T16090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.324146][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4646'.
[  246.361520][T16095] xt_CT: No such helper "snmp_trap"
[  246.485883][T14119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.532031][T16100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.591094][T16103] loop5: detected capacity change from 0 to 128
[  246.711897][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4651'.
[  246.721781][T16108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4651'.
[  246.901412][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  246.901482][   T29] audit: type=1326 audit(1745498298.835:34782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  246.931289][   T29] audit: type=1326 audit(1745498298.835:34783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  246.992397][   T29] audit: type=1326 audit(1745498298.895:34784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.016384][   T29] audit: type=1326 audit(1745498298.895:34785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.040016][   T29] audit: type=1326 audit(1745498298.895:34786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.063800][   T29] audit: type=1326 audit(1745498298.895:34787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.087471][   T29] audit: type=1326 audit(1745498298.895:34788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.111152][   T29] audit: type=1326 audit(1745498298.895:34789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.134892][   T29] audit: type=1326 audit(1745498298.895:34790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.158517][   T29] audit: type=1326 audit(1745498298.895:34791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.4.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89339e969 code=0x7ffc0000
[  247.238580][T16121] netlink: 'syz.0.4657': attribute type 6 has an invalid length.
[  247.255084][T16121] loop0: detected capacity change from 0 to 1764
[  247.262181][T16121] iso9660: Unknown parameter 'hecR'
[  247.276370][T16123] loop3: detected capacity change from 0 to 512
[  247.283045][T16123] EXT4-fs: Ignoring removed nobh option
[  247.306007][T16123] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.4656: corrupted inode contents
[  247.398893][T16123] EXT4-fs (loop3): Remounting filesystem read-only
[  247.420383][T16123] EXT4-fs (loop3): 1 truncate cleaned up
[  247.426839][T16123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.440035][T16123] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.476268][T16128] netlink: 'syz.4.4658': attribute type 6 has an invalid length.
[  247.497602][T16128] loop4: detected capacity change from 0 to 1764
[  247.505557][T16128] iso9660: Unknown parameter 'hecR'
[  247.553839][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.648191][T16137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  247.783380][T16147] bond4: entered promiscuous mode
[  247.788481][T16147] bond4: entered allmulticast mode
[  247.851162][T16147] 8021q: adding VLAN 0 to HW filter on device bond4
[  247.880920][T16147] bond4 (unregistering): Released all slaves
[  248.051701][T16153] bond_slave_1: mtu less than device minimum
[  248.100388][T16155] loop3: detected capacity change from 0 to 512
[  248.138211][T16153] sd 0:0:1:0: device reset
[  248.261282][T16161] loop5: detected capacity change from 0 to 512
[  248.280550][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4671'.
[  248.295323][T16161] EXT4-fs error (device loop5): ext4_orphan_get:1390: comm syz.5.4670: inode #15: comm syz.5.4670: iget: illegal inode #
[  248.346096][T16161] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4670: couldn't read orphan inode 15 (err -117)
[  248.360110][T16161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.476551][T16182] FAULT_INJECTION: forcing a failure.
[  248.476551][T16182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.489688][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.0.4679 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  248.489722][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  248.489738][T16182] Call Trace:
[  248.489747][T16182]  <TASK>
[  248.489757][T16182]  dump_stack_lvl+0xf6/0x150
[  248.489867][T16182]  dump_stack+0x15/0x1a
[  248.489887][T16182]  should_fail_ex+0x261/0x270
[  248.489918][T16182]  should_fail+0xb/0x10
[  248.489996][T16182]  should_fail_usercopy+0x1a/0x20
[  248.490021][T16182]  _copy_from_user+0x1c/0xa0
[  248.490055][T16182]  copy_msghdr_from_user+0x54/0x2b0
[  248.490094][T16182]  ? __fget_files+0x186/0x1c0
[  248.490125][T16182]  __sys_sendmsg+0x141/0x240
[  248.490195][T16182]  __x64_sys_sendmsg+0x46/0x50
[  248.490306][T16182]  x64_sys_call+0x26f3/0x2e10
[  248.490373][T16182]  do_syscall_64+0xc9/0x1a0
[  248.490405][T16182]  ? clear_bhb_loop+0x25/0x80
[  248.490431][T16182]  ? clear_bhb_loop+0x25/0x80
[  248.490528][T16182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.490550][T16182] RIP: 0033:0x7fc36b25e969
[  248.490568][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.490590][T16182] RSP: 002b:00007fc3698c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.490612][T16182] RAX: ffffffffffffffda RBX: 00007fc36b485fa0 RCX: 00007fc36b25e969
[  248.490627][T16182] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  248.490684][T16182] RBP: 00007fc3698c7090 R08: 0000000000000000 R09: 0000000000000000
[  248.490696][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.490707][T16182] R13: 0000000000000000 R14: 00007fc36b485fa0 R15: 00007fff0742ed88
[  248.490727][T16182]  </TASK>
[  248.713952][T16191] bond_slave_1: mtu less than device minimum
[  248.741937][T16191] sd 0:0:1:0: device reset
[  248.925103][T16203] loop3: detected capacity change from 0 to 512
[  248.952123][T16203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  248.964604][T16203] EXT4-fs (loop3): 1 truncate cleaned up
[  248.970779][T16203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.035570][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'.
[  249.091999][T12242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.111006][T16211] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  249.524121][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'.
[  249.707959][T16229] bond_slave_1: mtu less than device minimum
[  249.766285][T16230] loop4: detected capacity change from 0 to 512
[  249.878907][T16232] loop3: detected capacity change from 0 to 512
[  249.886719][T16229] sd 0:0:1:0: device reset
[  249.892583][T16232] EXT4-fs: Ignoring removed i_version option
[  249.935905][T16226] ==================================================================
[  249.944052][T16226] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show
[  249.951797][T16226] 
[  249.954151][T16226] read-write to 0xffff888100047178 of 4 bytes by task 16227 on cpu 0:
[  249.962390][T16226]  vmalloc_info_show+0x476/0x780
[  249.967698][T16226]  seq_read_iter+0x2c8/0x970
[  249.972295][T16226]  proc_reg_read_iter+0x118/0x190
[  249.977328][T16226]  vfs_read+0x5e6/0x710
[  249.981478][T16226]  ksys_read+0xeb/0x1b0
[  249.985633][T16226]  __x64_sys_read+0x42/0x50
[  249.990152][T16226]  x64_sys_call+0x2a3b/0x2e10
[  249.994831][T16226]  do_syscall_64+0xc9/0x1a0
[  249.999344][T16226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.005238][T16226] 
[  250.007563][T16226] read-write to 0xffff888100047178 of 4 bytes by task 16226 on cpu 1:
[  250.015707][T16226]  vmalloc_info_show+0x476/0x780
[  250.020664][T16226]  seq_read_iter+0x2c8/0x970
[  250.025264][T16226]  proc_reg_read_iter+0x118/0x190
[  250.030294][T16226]  vfs_read+0x5e6/0x710
[  250.034456][T16226]  ksys_read+0xeb/0x1b0
[  250.038616][T16226]  __x64_sys_read+0x42/0x50
[  250.043119][T16226]  x64_sys_call+0x2a3b/0x2e10
[  250.047812][T16226]  do_syscall_64+0xc9/0x1a0
[  250.052336][T16226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.058292][T16226] 
[  250.060610][T16226] value changed: 0x00000259 -> 0x00000004
[  250.066324][T16226] 
[  250.068645][T16226] Reported by Kernel Concurrency Sanitizer on:
[  250.074804][T16226] CPU: 1 UID: 0 PID: 16226 Comm: syz.3.4691 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
[  250.087401][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  250.097464][T16226] ==================================================================
[  250.116135][T16230] EXT4-fs: Ignoring removed i_version option
[  250.153527][T16232] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.156067][T16230] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.201228][T16230] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  250.212113][T16230] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  250.222864][T16230] EXT4-fs (loop4): failed to initialize system zone (-117)
[  250.230521][T16230] EXT4-fs (loop4): mount failed
[  250.273521][T16232] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  250.304404][T16232] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  250.312483][T16232] EXT4-fs (loop3): failed to initialize system zone (-117)
[  250.319766][T16232] EXT4-fs (loop3): mount failed
[  250.543697][T16167] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters
[  251.017811][T14119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.