last executing test programs:

4.01111227s ago: executing program 1 (id=1720):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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")
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000d40)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000020d000400088038010c8054000b800800090078a52528080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a0000000000080009000000000008000a00000000000c000b8008000900000000001c000b80080009000000000008000a0000000000080009000000000024000b800800890000000000080009000000000008002a0000000000080009000000000054000b8008000a000000000008000a000000000008000a000000000008000a000000000008000a00000000a1"], 0x164}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0)

3.092820668s ago: executing program 1 (id=1732):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x48401, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

3.080057189s ago: executing program 0 (id=1733):
unshare(0x22020400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

3.066415s ago: executing program 1 (id=1734):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0)

3.054838151s ago: executing program 0 (id=1735):
syslog(0x9, 0xfffffffffffffffc, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000180))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faaea00", "036c47c678eb1f04000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff09000000000000e8f200001d0200", "b900000000fffffffff2060000000000000200"})
fdatasync(r0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$ptp(r4, &(0x7f00000000c0)=""/173, 0xad)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=@newchain={0x488, 0x64, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0x4}, {0x3, 0xe}}, [@f_rsvp6={{0xa}, {0x458, 0x2, [@TCA_RSVP_POLICE={0x434, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xf0, 0x2, 0x4, 0x3, 0x0, 0x3c, 0x3, 0x7ff, 0xa, 0x1, 0xffff, 0x7, 0xf, 0xf788, 0x9, 0x3, 0x1, 0x0, 0xfff, 0x81, 0x40, 0x5, 0x4, 0xffffffff, 0x9, 0x5c27, 0x3, 0x1, 0xfc, 0x7, 0x0, 0x40, 0x6, 0x8e2d, 0xe0a8, 0x1, 0x5f69, 0xff, 0xb6, 0x7, 0x5, 0x4, 0x8, 0x714, 0x9, 0x80000000, 0x9, 0x1, 0x7, 0x9, 0x800, 0x7fffffff, 0x2, 0x5, 0x8, 0x2, 0x1000, 0x32ea, 0x8, 0x4, 0xb, 0x96, 0x2, 0xfffff203, 0x5, 0x8, 0x2, 0x2, 0xe0000000, 0x4, 0x2, 0xff, 0x9, 0x10000, 0x80, 0x3, 0x7, 0x800, 0xae7, 0x9, 0x1ff, 0xb, 0x9, 0x7fffffff, 0xdda, 0x2, 0x7, 0x7, 0xd, 0x3, 0x1, 0x1000, 0xfffffe01, 0x2, 0x1, 0x5, 0x7, 0x8, 0x9, 0xf, 0x9, 0x6, 0x10, 0xffff, 0x0, 0x1, 0x2, 0x10000, 0xfffffffb, 0x8, 0x468, 0x5, 0x7, 0xe40e, 0x8, 0x2, 0xfff, 0xff, 0x7ff, 0x8, 0x80000001, 0x10000, 0x81, 0x3, 0x7, 0x7, 0xcd, 0x7, 0x745, 0x7, 0xff, 0x0, 0x101, 0x5, 0x3, 0x400, 0xff, 0x8, 0x9, 0x6, 0x9, 0x4a, 0x9, 0x3, 0x2, 0x1c3, 0x4, 0xbb3e, 0x5, 0x1, 0x0, 0x1, 0x2, 0x6, 0x48, 0x3, 0x8, 0xbb92, 0x7a43, 0x3ff, 0x3, 0xfffffff8, 0x7fffffff, 0x9, 0x1000000, 0x6, 0x7ff, 0x7f, 0x8, 0x100, 0x8001, 0x81, 0x2, 0x8001, 0x401, 0x7000000, 0x3, 0x5, 0x34a, 0x9, 0xd40, 0x1, 0x3, 0x2, 0x7, 0x3, 0xf, 0x180000, 0x59bc, 0xffffffff, 0x3, 0x0, 0x2, 0x200, 0x6, 0x9, 0x3, 0x2, 0x651, 0x8000, 0x68b1, 0x5, 0x4, 0xa, 0x80000001, 0x7, 0x9d6a, 0xff3a, 0x4, 0x0, 0x6, 0x1, 0x0, 0x1, 0x7, 0x0, 0x7, 0x2, 0x3, 0xdc2, 0xffff, 0x5, 0x5, 0x6, 0x8, 0x401, 0x8, 0x8, 0xfff, 0x5, 0x7f, 0x6, 0x4, 0x100, 0x4, 0x10000, 0xfffffe01, 0x4, 0x9, 0x1, 0x6, 0x100, 0x6, 0x5, 0x401, 0x9466, 0x1, 0x5, 0x4, 0x7, 0x1, 0x1, 0x5, 0x0, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_SRC={0x14, 0x3, @private0}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
syslog(0x9, 0xfffffffffffffffc, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async)
creat(&(0x7f0000000100)='./bus\x00', 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) (async)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) (async)
pipe(&(0x7f0000000180)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) (async)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faaea00", "036c47c678eb1f04000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff09000000000000e8f200001d0200", "b900000000fffffffff2060000000000000200"}) (async)
fdatasync(r0) (async)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
read$ptp(r4, &(0x7f00000000c0)=""/173, 0xad) (async)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=@newchain={0x488, 0x64, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0x4}, {0x3, 0xe}}, [@f_rsvp6={{0xa}, {0x458, 0x2, [@TCA_RSVP_POLICE={0x434, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xf0, 0x2, 0x4, 0x3, 0x0, 0x3c, 0x3, 0x7ff, 0xa, 0x1, 0xffff, 0x7, 0xf, 0xf788, 0x9, 0x3, 0x1, 0x0, 0xfff, 0x81, 0x40, 0x5, 0x4, 0xffffffff, 0x9, 0x5c27, 0x3, 0x1, 0xfc, 0x7, 0x0, 0x40, 0x6, 0x8e2d, 0xe0a8, 0x1, 0x5f69, 0xff, 0xb6, 0x7, 0x5, 0x4, 0x8, 0x714, 0x9, 0x80000000, 0x9, 0x1, 0x7, 0x9, 0x800, 0x7fffffff, 0x2, 0x5, 0x8, 0x2, 0x1000, 0x32ea, 0x8, 0x4, 0xb, 0x96, 0x2, 0xfffff203, 0x5, 0x8, 0x2, 0x2, 0xe0000000, 0x4, 0x2, 0xff, 0x9, 0x10000, 0x80, 0x3, 0x7, 0x800, 0xae7, 0x9, 0x1ff, 0xb, 0x9, 0x7fffffff, 0xdda, 0x2, 0x7, 0x7, 0xd, 0x3, 0x1, 0x1000, 0xfffffe01, 0x2, 0x1, 0x5, 0x7, 0x8, 0x9, 0xf, 0x9, 0x6, 0x10, 0xffff, 0x0, 0x1, 0x2, 0x10000, 0xfffffffb, 0x8, 0x468, 0x5, 0x7, 0xe40e, 0x8, 0x2, 0xfff, 0xff, 0x7ff, 0x8, 0x80000001, 0x10000, 0x81, 0x3, 0x7, 0x7, 0xcd, 0x7, 0x745, 0x7, 0xff, 0x0, 0x101, 0x5, 0x3, 0x400, 0xff, 0x8, 0x9, 0x6, 0x9, 0x4a, 0x9, 0x3, 0x2, 0x1c3, 0x4, 0xbb3e, 0x5, 0x1, 0x0, 0x1, 0x2, 0x6, 0x48, 0x3, 0x8, 0xbb92, 0x7a43, 0x3ff, 0x3, 0xfffffff8, 0x7fffffff, 0x9, 0x1000000, 0x6, 0x7ff, 0x7f, 0x8, 0x100, 0x8001, 0x81, 0x2, 0x8001, 0x401, 0x7000000, 0x3, 0x5, 0x34a, 0x9, 0xd40, 0x1, 0x3, 0x2, 0x7, 0x3, 0xf, 0x180000, 0x59bc, 0xffffffff, 0x3, 0x0, 0x2, 0x200, 0x6, 0x9, 0x3, 0x2, 0x651, 0x8000, 0x68b1, 0x5, 0x4, 0xa, 0x80000001, 0x7, 0x9d6a, 0xff3a, 0x4, 0x0, 0x6, 0x1, 0x0, 0x1, 0x7, 0x0, 0x7, 0x2, 0x3, 0xdc2, 0xffff, 0x5, 0x5, 0x6, 0x8, 0x401, 0x8, 0x8, 0xfff, 0x5, 0x7f, 0x6, 0x4, 0x100, 0x4, 0x10000, 0xfffffe01, 0x4, 0x9, 0x1, 0x6, 0x100, 0x6, 0x5, 0x401, 0x9466, 0x1, 0x5, 0x4, 0x7, 0x1, 0x1, 0x5, 0x0, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_SRC={0x14, 0x3, @private0}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)

3.040602292s ago: executing program 1 (id=1736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth0_vlan\x00', @local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='xs_stream_read_request\x00', r0}, 0x18)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
readv(r6, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1)

2.855162988s ago: executing program 0 (id=1737):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGBITSW(r1, 0x40044590, &(0x7f0000000840)=""/243)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000180)=0x4)
pselect6(0x40, &(0x7f0000000340)={0x0, 0x1cbbcb80, 0x401, 0xfffffffffffffff7, 0x0, 0x1, 0x6e4fab20, 0xfff}, &(0x7f0000000380)={0x7, 0x14, 0x1, 0x2, 0x154, 0x7, 0x1, 0xf07}, &(0x7f00000003c0)={0x3, 0x4, 0x2, 0x7fff, 0x4, 0x7, 0x8, 0x9}, &(0x7f0000000400), 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00')
close(r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
io_setup(0x9, &(0x7f0000000040))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000004000000fb0002000000000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

2.47559247s ago: executing program 0 (id=1739):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x16)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
close(r1)

2.453682102s ago: executing program 0 (id=1740):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa300000000000007020000b70400000000000085000000240000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10)
r2 = timerfd_create(0x9, 0x80800)
timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x5}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}]}]}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001800000000000000400000085000000990000001d3d3000f7ffff19195900000b0000000000000000000000184900000100000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x1, 0x1}, {0x5, 0x1, 0x6, 0x4}, {0x0, 0x1, 0x2, 0x6}], 0x10, 0xa8a, @void, @value}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/dev_mcast\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xb, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd2d, 0x24dfdbfd, {{}, {}, {0xfffffffffffffe9b, 0x19, {0x4a4, 0x10, 0x83}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000000)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0xf], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r11 = socket$rds(0x15, 0x5, 0x0)
r12 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040)
sendmsg$rds(r11, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001340)={<r13=>0x0, "ae2a9f89545ec74c94867f3c25928b07"})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002340)={r13, "3c0ea5871cb61a2cc4fb23ca29ca6298"})

2.428475694s ago: executing program 0 (id=1741):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth0_vlan\x00', @local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='xs_stream_read_request\x00', r0}, 0x18)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1)

1.611285664s ago: executing program 3 (id=1751):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa300000000000007020000b70400000000000085000000240000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10)
r2 = timerfd_create(0x9, 0x80800)
timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x5}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}]}]}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001800000000000000400000085000000990000001d3d3000f7ffff19195900000b0000000000000000000000184900000100000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x1, 0x1}, {0x5, 0x1, 0x6, 0x4}, {0x0, 0x1, 0x2, 0x6}], 0x10, 0xa8a, @void, @value}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/dev_mcast\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xb, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd2d, 0x24dfdbfd, {{}, {}, {0xfffffffffffffe9b, 0x19, {0x4a4, 0x10, 0x83}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000000)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0xf], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r11 = socket$rds(0x15, 0x5, 0x0)
r12 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040)
sendmsg$rds(r11, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001340)={<r13=>0x0, "ae2a9f89545ec74c94867f3c25928b07"})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002340)={r13, "3c0ea5871cb61a2cc4fb23ca29ca6298"})

1.592892675s ago: executing program 3 (id=1752):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = getpid()
prlimit64(r0, 0xb, &(0x7f0000000440)={0x84}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = eventfd(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='cpu&00\t||')
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$eventfd(r1, &(0x7f00000001c0), 0x8)

1.260878153s ago: executing program 2 (id=1760):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGBITSW(r1, 0x40044590, &(0x7f0000000840)=""/243)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000180)=0x4)
pselect6(0x40, &(0x7f0000000340)={0x0, 0x1cbbcb80, 0x401, 0xfffffffffffffff7, 0x0, 0x1, 0x6e4fab20, 0xfff}, &(0x7f0000000380)={0x7, 0x14, 0x1, 0x2, 0x154, 0x7, 0x1, 0xf07}, &(0x7f00000003c0)={0x3, 0x4, 0x2, 0x7fff, 0x4, 0x7, 0x8, 0x9}, &(0x7f0000000400), 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00')
close(r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
io_setup(0x9, &(0x7f0000000040))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000004000000fb0002000000000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

1.141194613s ago: executing program 2 (id=1762):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x16)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
close(0xffffffffffffffff)

1.140863923s ago: executing program 2 (id=1763):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xb000001c})
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
connect$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x4, 0x4000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=def'])
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x200)
sendfile(0xffffffffffffffff, r5, 0x0, 0xe065)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000002c0))

749.358097ms ago: executing program 4 (id=1769):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_getevents(0x0, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

749.069807ms ago: executing program 4 (id=1770):
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r0, @ANYBLOB="00001c001d000000000000002300000000000040", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000dbc1f7ab00000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006cb74fd66c3eaa8000000000000000000000000000000000000ffffffff00"/192])
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0000000008003950723030302e7d"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000ef5abbda7274af98f2c7f6d00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050009000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001880)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r0, @ANYRESDEC=r7, @ANYRESDEC=r2, @ANYRES64=<r9=>r3], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r6, &(0x7f0000001900)=ANY=[@ANYRESOCT=r9], 0x7c8)
readv(r4, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r10 = socket$tipc(0x1e, 0x1, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

736.652378ms ago: executing program 3 (id=1771):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905000000"])

717.146029ms ago: executing program 4 (id=1772):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGBITSW(r1, 0x40044590, &(0x7f0000000840)=""/243)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000180)=0x4)
pselect6(0x40, &(0x7f0000000340)={0x0, 0x1cbbcb80, 0x401, 0xfffffffffffffff7, 0x0, 0x1, 0x6e4fab20, 0xfff}, &(0x7f0000000380)={0x7, 0x14, 0x1, 0x2, 0x154, 0x7, 0x1, 0xf07}, &(0x7f00000003c0)={0x3, 0x4, 0x2, 0x7fff, 0x4, 0x7, 0x8, 0x9}, &(0x7f0000000400), 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00')
close(r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
io_setup(0x9, &(0x7f0000000040))
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000004000000fb0002000000000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

663.404224ms ago: executing program 3 (id=1773):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

663.297944ms ago: executing program 3 (id=1774):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)

662.704984ms ago: executing program 3 (id=1775):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0, 0xffff}, 0x90)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0080de00000000000000009dd0000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRES8=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="82e7a5eabc386441508158c45aa16982349542b31d7c36fc3d9a3cab422ce0bd13b3f2e18cd5685888a4097cfd3105de668722a9477155960c6858e350d83f0946695bfd54d136e2307319516fd4f71f81ffc964edd99d1cc3fcf9074918895f96b889065a42c9756f305678f58f9853bed8ae2699951f58a6d1264de61562e365350d940fb95609be6cf6d13f75f0c9f1a01bc8a5838fde153e19b423d205108cada44240245b1d11f34a7eb18bd9c2ebb56ce00281"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0xf3a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
epoll_create1(0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@phonet={0x23, 0xc9, 0x23, 0x9}, {&(0x7f00000001c0)=""/68, 0x44}, &(0x7f0000000000), 0x10}, 0xa0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000240)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
tee(r5, r8, 0xaf5, 0x0)

562.809652ms ago: executing program 4 (id=1776):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

562.269223ms ago: executing program 4 (id=1777):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb4, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000740)='kfree\x00', r2, 0x0, 0x2}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
r3 = open$dir(&(0x7f0000000000)='./bus\x00', 0x200400, 0x4)
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2002c041}, 0x0)
write$binfmt_elf32(r4, 0x0, 0x69)
mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)

440.907153ms ago: executing program 4 (id=1778):
openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x440800, 0x120)
mkdir(0x0, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x800)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f00000001c0)=[{r0, 0x1444}], 0x1, &(0x7f0000000240)={r1, r2+10000000}, &(0x7f00000002c0), 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r4=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d00000001900674c0000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c001c00", @ANYRES32, @ANYBLOB="04"], 0xd0}}, 0x0)
setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x100, 0x7b}, {0x81, 0x659}], r4}, 0x18, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000080))

294.547945ms ago: executing program 2 (id=1779):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kfree\x00'}, 0x18)
getrusage(0x8690944186de668b, 0x0)

243.380359ms ago: executing program 2 (id=1780):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_getevents(0x0, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

181.195275ms ago: executing program 2 (id=1781):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = getpid()
prlimit64(r0, 0xb, &(0x7f0000000440)={0x84}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = eventfd(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='cpu&00\t||')
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$eventfd(r1, &(0x7f00000001c0), 0x8)

15.926379ms ago: executing program 1 (id=1782):
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r0, @ANYBLOB="00001c001d000000000000002300000000000040", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000dbc1f7ab00000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006cb74fd66c3eaa8000000000000000000000000000000000000ffffffff00"/192])
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0000000008003950723030302e7d"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000ef5abbda7274af98f2c7f6d00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050009000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001880)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r0, @ANYRESDEC=r7, @ANYRESDEC=r2, @ANYRES64=<r9=>r3], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r6, &(0x7f0000001900)=ANY=[@ANYRESOCT=r9], 0x7c8)
readv(r4, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r10 = socket$tipc(0x1e, 0x1, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

0s ago: executing program 1 (id=1783):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905000000"])

0s ago: executing program 1 (id=1784):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$eJzs3UFvI1cdAPD/eOPE2abNtvQACGhoixa0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pN8BiUqc4MgH4NwTdy4IblzKAalABGoqcTCa8Th1s3biNokdxb+fNJp5743n/17W8579vPYLYGItRMRhRExHxNsRMZ/nJ/kWb3S29LyPjx6vHR89Xkui3X7rX0lWnuZFz2NST+XXLEXET34Q8fPkybjN/YOt1VqtuttJzi626juLzf2D+5v11Y3qRnW7UllZXll67cGrlUtr6wv16fzo6x/+6fA7v0yrNZfn9Lbjs5LoU/2hdR5bPImTmoqIH13gmtfJrbw90+OuCF9IISKei4gXs/t/Pm5l/5oAwE3Wbs9He743DQDcdIVsDiwplPO5gLkoFMrlzhze83G7UGs0W/ceNfa21ztzZXeiWHi0Wasu5XOFd6KYpOnl7PjTdOVU+kFEPBsRv5qZzdLltUZtfZwvfABggj11avz/70xn/AcAbrjSuCsAAIyc8R8AJk/v+F8YYz0AgNHx/h8AJo/xHwAmj/EfACaP8R8AJsqP33wz3drH+e9fr7+zv7fVeOf+erW5Va7vrZXXGrs75Y1GYyP7zZ76ederNRo7y6/E3rt3vrvTbC029w8e1ht7262H2e96P6wWR9IqAOAsz77wwV+TiDh8fTbbomctB2M13Gy+7gOT69a4KwCMjdW+YHJd4D2+6QG4Ic5b47YUEbOnM9vtdvvqqgRcsbtf+Vzz/wujrR1wlXrm//0vYJgw5v9hcpn/h8nVbifDrvkfw54IAFxvPsQHBnz+/1y+/33+4cDP1k+f8f5V1goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+76v+V8LfC5KBTK5YinI+JOFJNHm7XqUkQ8ExF/mSnOpOnlMdcZALiowj+SfP2vu/Mvz50unU4+mcn2EfGL37z163dXW63dP6f5/z7Jb72f51fGUX8A4DzdcTrb97yR//jo8Vp3G2V9Pvp+RJQ68Y+PpuP4JP5UTGX7UhQj4vZ/kjzdkfTMXVzE4XsR8eV+7U9iLpsD6ax8ejp+GvvpkcYvfCZ+ISvr7NO/xZcuoS4waT5I+583+t1/hVjI9v3v/1LWQ11c3v+ll1o7zvrAT+N3+79bA/q/hWFjvPLHH3aOZp8sey/iq1MR3djHPf1PN34y2z/+y0PG/9vXvvHioLL2byPuRv/4vbEWW/Wdxeb+wf3N+upGdaO6XamsLK8svfbg1cpiNke9OHg0+Ofr954ZVJa2//aA+KVu+wf8/b81ZPt/97+3f/rNM+J/+6V+8Qvx/Bnxiy8NGTwiVm//oTSoLI2/PqD9U2fET/PuDRn/w78fPLFsOAAwPs39g63VWq26e0kHH+XXPfPk7guJywrq4BofTF/o4cX8qZLnnPvUGuPB90YVazqGPnkmtlbb7S8Ua1CPcRmzbsB1cHLTR8Qn464MAAAAAAAAAAAAAADQ1yi+sTTuNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBz/T8AAP//q3jHtg==") (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20020008) (async, rerun: 64)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 64)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async)
fallocate(r2, 0x0, 0x0, 0x1000f4) (async)
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0) (async)
syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0xec4, 0x0, 0x0, 0x0, 0x0) (async)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={<r7=>0xffffffffffffffff}, 0x106}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) (async)
mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x0)

kernel console output (not intermixed with test programs):

 entered promiscuous mode
[   82.780479][ T5975] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.782920][ T5972] bond2: entered allmulticast mode
[   82.783247][ T5972] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.850028][ T5980] tipc: Started in network mode
[   82.855443][ T5980] tipc: Node identity a6779e9e94eb, cluster identity 4711
[   82.863499][ T5980] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[   82.870964][ T5980] ªªªªªª: renamed from syzkaller0
[   82.891179][ T5980] tipc: Disabling bearer <eth:syzkaller0>
[   82.900921][ T5980] IPVS: Error joining to the multicast group
[   83.560809][ T3520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.670421][ T6009] loop3: detected capacity change from 0 to 256
[   83.679731][ T6009] tmpfs: Bad value for 'mpol'
[   84.301530][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.311190][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.320330][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.329086][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.486235][ T6024] loop4: detected capacity change from 0 to 512
[   84.492208][ T6019] batman_adv: batadv0: Adding interface: dummy0
[   84.498964][ T6019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.526272][ T6019] batman_adv: batadv0: Interface activated: dummy0
[   84.535720][ T6027] loop3: detected capacity change from 0 to 512
[   84.546523][ T6019] netlink: 'syz.0.824': attribute type 3 has an invalid length.
[   84.560588][ T6024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.581369][ T6024] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.593521][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.609684][ T6027] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.624547][ T6024] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.825: Failed to acquire dquot type 0
[   84.624808][ T6027] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.826: Failed to acquire dquot type 0
[   84.974771][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.048917][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'.
[   85.250668][ T6079] loop3: detected capacity change from 0 to 4096
[   85.261183][ T6079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.261757][ T6081] loop2: detected capacity change from 0 to 256
[   85.290171][ T6081] tmpfs: Bad value for 'mpol'
[   85.321417][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.346129][ T6083] loop4: detected capacity change from 0 to 512
[   85.365709][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.391283][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.407883][ T6083] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.421220][ T6083] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.839: Failed to acquire dquot type 0
[   85.554711][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'.
[   85.563911][ T6097] netlink: 76 bytes leftover after parsing attributes in process `syz.3.841'.
[   85.609968][ T6097] loop3: detected capacity change from 0 to 8192
[   85.616598][ T6097] vfat: Unknown parameter '‡±¿í§¾XfÙ…Cê'
[   85.690639][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.811442][ T6114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.844'.
[   85.925840][   T29] kauditd_printk_skb: 257 callbacks suppressed
[   85.925859][   T29] audit: type=1326 audit(1729456862.536:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   85.956433][   T29] audit: type=1326 audit(1729456862.536:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   85.979984][   T29] audit: type=1326 audit(1729456862.546:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.003726][   T29] audit: type=1326 audit(1729456862.546:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.027273][   T29] audit: type=1326 audit(1729456862.546:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.051401][   T29] audit: type=1326 audit(1729456862.566:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.084177][   T29] audit: type=1326 audit(1729456862.566:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.108001][   T29] audit: type=1326 audit(1729456862.566:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.131470][   T29] audit: type=1326 audit(1729456862.566:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.154831][   T29] audit: type=1326 audit(1729456862.566:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   86.184908][ T6127] +}[@[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.184962][ T6129] netlink: 'syz.2.850': attribute type 13 has an invalid length.
[   86.185029][ T6127] +}[@[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.204037][ T6127] +}[@[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.224351][ T6127] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   86.440331][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.856'.
[   86.593324][ T6149] loop2: detected capacity change from 0 to 256
[   86.606036][ T6149] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   86.614707][ T6149] FAT-fs (loop2): Filesystem has been set read-only
[   86.645811][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'.
[   86.701562][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'.
[   86.760242][ T6158] vhci_hcd: invalid port number 157
[   86.765530][ T6158] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   86.908629][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'.
[   87.911460][ T6194] batadv0: entered promiscuous mode
[   87.917101][ T6194] batadv0: left promiscuous mode
[   88.229258][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'.
[   88.354232][ T6220] +}[@[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.354346][ T6220] +}[@[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.365592][ T6220] +}[@[6220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.380481][ T6220] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   88.423224][ T6224] FAULT_INJECTION: forcing a failure.
[   88.423224][ T6224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.436340][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.0.887 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[   88.447218][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   88.457423][ T6224] Call Trace:
[   88.460707][ T6224]  <TASK>
[   88.463648][ T6224]  dump_stack_lvl+0xf2/0x150
[   88.468281][ T6224]  dump_stack+0x15/0x20
[   88.472491][ T6224]  should_fail_ex+0x223/0x230
[   88.477193][ T6224]  should_fail+0xb/0x10
[   88.481401][ T6224]  should_fail_usercopy+0x1a/0x20
[   88.486449][ T6224]  _copy_to_user+0x1e/0xa0
[   88.490923][ T6224]  simple_read_from_buffer+0xa0/0x110
[   88.497130][ T6224]  proc_fail_nth_read+0xf9/0x140
[   88.502193][ T6224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   88.507762][ T6224]  vfs_read+0x195/0x720
[   88.512041][ T6224]  ? kmem_cache_free+0x1e8/0x2d0
[   88.517266][ T6224]  ? __rcu_read_unlock+0x4e/0x70
[   88.522277][ T6224]  ? __fget_files+0x1d4/0x210
[   88.526988][ T6224]  ksys_read+0xeb/0x1b0
[   88.531184][ T6224]  __x64_sys_read+0x42/0x50
[   88.535722][ T6224]  x64_sys_call+0x27d3/0x2d60
[   88.540443][ T6224]  do_syscall_64+0xc9/0x1c0
[   88.545037][ T6224]  ? clear_bhb_loop+0x55/0xb0
[   88.549764][ T6224]  ? clear_bhb_loop+0x55/0xb0
[   88.554557][ T6224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.560473][ T6224] RIP: 0033:0x7fbd00e6ca3c
[   88.564969][ T6224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   88.585110][ T6224] RSP: 002b:00007fbcffae1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   88.593637][ T6224] RAX: ffffffffffffffda RBX: 00007fbd01025f80 RCX: 00007fbd00e6ca3c
[   88.601701][ T6224] RDX: 000000000000000f RSI: 00007fbcffae10a0 RDI: 000000000000000b
[   88.609706][ T6224] RBP: 00007fbcffae1090 R08: 0000000000000000 R09: 0000000000000000
[   88.617742][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.625760][ T6224] R13: 0000000000000000 R14: 00007fbd01025f80 R15: 00007fff39bb5e68
[   88.633748][ T6224]  </TASK>
[   88.645646][ T6214] batman_adv: batadv0: Adding interface: dummy0
[   88.652164][ T6214] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.682297][ T6214] batman_adv: batadv0: Interface activated: dummy0
[   88.751617][ T6233] loop3: detected capacity change from 0 to 512
[   88.772687][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.789755][ T6233] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.809816][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.891'.
[   88.821440][ T6233] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.890: Failed to acquire dquot type 0
[   88.997767][ T6244] batman_adv: batadv0: Adding interface: dummy0
[   89.004133][ T6244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.029923][ T6244] batman_adv: batadv0: Interface activated: dummy0
[   89.104890][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.131575][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.902'.
[   89.207223][ T6305] +}[@[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.213767][ T6305] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   89.332577][ T6318] loop4: detected capacity change from 0 to 256
[   89.411160][ T6318] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   89.419904][ T6318] FAT-fs (loop4): Filesystem has been set read-only
[   89.725114][ T6340] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[   89.897116][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[   89.906030][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[   89.923559][ T6354] bond1: entered promiscuous mode
[   89.928644][ T6354] bond1: entered allmulticast mode
[   89.935288][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.014164][ T6355] batman_adv: batadv0: Adding interface: dummy0
[   90.020456][ T6355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.046135][ T6355] batman_adv: batadv0: Interface activated: dummy0
[   90.105001][ T6369] +}[@[6369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.105186][ T6369] +}[@[6369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.118144][ T6369] +}[@[6369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.131668][ T6371] +}[@[6371] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.144131][ T6371] +}[@[6371] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.155873][ T6371] +}[@[6371] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.170406][ T6371] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   90.191570][ T6369] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   90.826336][ T6382] loop3: detected capacity change from 0 to 256
[   90.843799][ T6382] tmpfs: Bad value for 'mpol'
[   90.851674][ T6386] FAULT_INJECTION: forcing a failure.
[   90.851674][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.864887][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.0.922 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[   90.875613][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   90.885688][ T6386] Call Trace:
[   90.888997][ T6386]  <TASK>
[   90.891947][ T6386]  dump_stack_lvl+0xf2/0x150
[   90.896576][ T6386]  dump_stack+0x15/0x20
[   90.900802][ T6386]  should_fail_ex+0x223/0x230
[   90.905640][ T6386]  should_fail+0xb/0x10
[   90.909846][ T6386]  should_fail_usercopy+0x1a/0x20
[   90.914947][ T6386]  _copy_from_user+0x1e/0xd0
[   90.919718][ T6386]  copy_msghdr_from_user+0x54/0x2a0
[   90.925012][ T6386]  __sys_sendmsg+0x171/0x270
[   90.929739][ T6386]  __x64_sys_sendmsg+0x46/0x50
[   90.934567][ T6386]  x64_sys_call+0x2689/0x2d60
[   90.939251][ T6386]  do_syscall_64+0xc9/0x1c0
[   90.943847][ T6386]  ? clear_bhb_loop+0x55/0xb0
[   90.948551][ T6386]  ? clear_bhb_loop+0x55/0xb0
[   90.953326][ T6386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.959263][ T6386] RIP: 0033:0x7fbd00e6dff9
[   90.963756][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.983373][ T6386] RSP: 002b:00007fbcffae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.991896][ T6386] RAX: ffffffffffffffda RBX: 00007fbd01025f80 RCX: 00007fbd00e6dff9
[   90.999874][ T6386] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[   91.007861][ T6386] RBP: 00007fbcffae1090 R08: 0000000000000000 R09: 0000000000000000
[   91.015890][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.023868][ T6386] R13: 0000000000000000 R14: 00007fbd01025f80 R15: 00007fff39bb5e68
[   91.031866][ T6386]  </TASK>
[   91.085040][   T29] kauditd_printk_skb: 249 callbacks suppressed
[   91.085058][   T29] audit: type=1400 audit(1729456867.696:4322): avc:  denied  { create } for  pid=6393 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.542313][   T29] audit: type=1326 audit(1729456868.156:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   91.566093][   T29] audit: type=1326 audit(1729456868.156:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   91.589884][   T29] audit: type=1326 audit(1729456868.156:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   91.613681][   T29] audit: type=1326 audit(1729456868.156:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   91.637552][   T29] audit: type=1326 audit(1729456868.156:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   91.667955][ T6409] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   91.681200][   T29] audit: type=1400 audit(1729456868.296:4328): avc:  denied  { ioctl } for  pid=6411 comm="syz.3.931" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   91.799451][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[   91.820510][ T6425] bond2: entered promiscuous mode
[   91.825655][ T6425] bond2: entered allmulticast mode
[   91.832005][ T6425] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.839639][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.847084][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.887059][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.894862][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.902333][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.909761][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.917293][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.924749][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.932290][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.939731][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.947147][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.954687][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.962136][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.969598][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.977022][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.984508][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.992043][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.000148][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.007627][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.015263][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.022914][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.030516][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.037946][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.045574][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.053339][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.061033][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.068628][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.076087][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.083694][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.091170][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.098959][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.107703][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.115418][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.123032][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.130570][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.137976][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.145437][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.153018][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.160450][ T3344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.169546][ T3344] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   92.189387][ T6442] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0
[   92.277487][ T6453] loop2: detected capacity change from 0 to 256
[   92.300610][   T29] audit: type=1326 audit(1729456868.916:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b46704fa7 code=0x7ffc0000
[   92.324015][   T29] audit: type=1326 audit(1729456868.916:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b466a9959 code=0x7ffc0000
[   92.381059][ T6453] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   92.389703][ T6453] FAT-fs (loop2): Filesystem has been set read-only
[   92.392766][   T29] audit: type=1326 audit(1729456868.916:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b46704fa7 code=0x7ffc0000
[   92.547267][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'.
[   92.577427][ T6459] bond1: entered promiscuous mode
[   92.582654][ T6459] bond1: entered allmulticast mode
[   92.588499][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.753990][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'.
[   92.763051][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'.
[   92.785258][ T6468] bond2: entered promiscuous mode
[   92.790402][ T6468] bond2: entered allmulticast mode
[   92.795955][ T6468] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.962721][ T6479] loop4: detected capacity change from 0 to 512
[   92.983193][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.004331][ T6479] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.016082][ T6479] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.960: Failed to acquire dquot type 0
[   93.133360][ T6480] chnl_net:caif_netlink_parms(): no params data found
[   93.217961][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.225153][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.234900][ T6480] bridge_slave_0: entered allmulticast mode
[   93.243128][ T6480] bridge_slave_0: entered promiscuous mode
[   93.252390][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.259612][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.267267][ T6480] bridge_slave_1: entered allmulticast mode
[   93.276245][ T6480] bridge_slave_1: entered promiscuous mode
[   93.284683][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.304720][ T6480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.320971][ T6480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.359191][ T6514] netlink: 160 bytes leftover after parsing attributes in process `syz.3.966'.
[   93.369123][ T6514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.966'.
[   93.378658][ T6514] unsupported nlmsg_type 40
[   93.381957][ T6516] wireguard0: entered promiscuous mode
[   93.388837][ T6516] wireguard0: entered allmulticast mode
[   93.404526][ T6518] loop4: detected capacity change from 0 to 256
[   93.409991][ T6480] team0: Port device team_slave_0 added
[   93.422776][ T6480] team0: Port device team_slave_1 added
[   93.435410][ T6518] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   93.444071][ T6518] FAT-fs (loop4): Filesystem has been set read-only
[   93.469487][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.476669][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.502758][ T6480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.516475][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.523550][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.549884][ T6480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.578903][ T6480] hsr_slave_0: entered promiscuous mode
[   93.585024][ T6480] hsr_slave_1: entered promiscuous mode
[   93.591061][ T6480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.598653][ T6480] Cannot create hsr debugfs directory
[   93.698752][ T6527] loop3: detected capacity change from 0 to 2048
[   93.840400][ T6527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.945389][ T6480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.003592][ T6480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.023569][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[   94.032507][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'.
[   94.046532][ T6537] bond1: entered promiscuous mode
[   94.051694][ T6537] bond1: entered allmulticast mode
[   94.057594][ T6537] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.072499][ T6480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.133068][ T6480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.207794][ T6480] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.216621][ T6480] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.228374][ T6480] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.241732][ T6480] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.250458][ T6551] loop2: detected capacity change from 0 to 512
[   94.283705][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.301977][ T6551] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.315647][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.328886][ T6480] 8021q: adding VLAN 0 to HW filter on device team0
[   94.341166][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.348354][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.368510][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.375648][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.387976][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.455853][ T6480] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.543918][ T6480] veth0_vlan: entered promiscuous mode
[   94.554979][ T6480] veth1_vlan: entered promiscuous mode
[   94.576578][ T6480] veth0_macvtap: entered promiscuous mode
[   94.584846][ T6480] veth1_macvtap: entered promiscuous mode
[   94.597455][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.608502][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.618557][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.629548][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.640035][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.651664][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.661859][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.672438][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.682602][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.693575][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.704220][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.715565][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.726770][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.739467][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.752056][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.762255][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.773479][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.783635][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.798206][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.809275][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.821451][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.833325][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.846250][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.858123][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.872443][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.887788][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.899820][ T6480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.911050][ T6480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.924004][ T6480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.933054][ T6480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.002875][ T6593] loop4: detected capacity change from 0 to 1024
[   95.021057][ T6593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.049446][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.075087][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.082908][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.090524][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.098001][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.105446][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.114087][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.121662][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.129208][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.136660][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.145011][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.152997][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.161545][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.169093][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.177036][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.184500][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.192129][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.199574][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.206978][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.214430][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.222010][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.229439][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.236958][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.244408][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.251863][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.259281][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.266729][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.274161][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.281612][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.289028][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.296521][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.303986][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.304635][ T6607] netlink: 160 bytes leftover after parsing attributes in process `syz.1.993'.
[   95.311404][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.311432][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.311456][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.328174][ T6607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.993'.
[   95.328838][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.364218][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.372055][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.376963][ T6609] loop2: detected capacity change from 0 to 256
[   95.379454][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.393336][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.400798][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.408200][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.415643][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.423208][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   95.431927][ T3343] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   95.569374][ T6615] batman_adv: batadv0: Adding interface: dummy0
[   95.575869][ T6615] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.601234][ T6615] batman_adv: batadv0: Interface activated: dummy0
[   95.757163][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.764705][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.772993][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.781026][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.788944][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.797268][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.804712][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.812234][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.819676][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.827101][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.834601][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.842135][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.849675][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.857246][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.864671][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.870126][ T6632] vhci_hcd: invalid port number 157
[   95.872142][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.877291][ T6632] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   95.884918][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.901075][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.908620][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.916729][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.924375][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.932648][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.940323][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.948388][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.956572][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.964792][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.973139][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.980677][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.988118][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   95.996734][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.004191][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.011753][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.019478][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.027030][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.035232][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.043607][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.051719][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.059387][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.066849][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.074292][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.081874][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.089444][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.097359][ T1003] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   96.105462][   T29] kauditd_printk_skb: 243 callbacks suppressed
[   96.105478][   T29] audit: type=1326 audit(1729456872.686:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.135429][   T29] audit: type=1326 audit(1729456872.686:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.159473][   T29] audit: type=1326 audit(1729456872.686:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.183217][   T29] audit: type=1326 audit(1729456872.686:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.207117][   T29] audit: type=1326 audit(1729456872.686:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.230640][   T29] audit: type=1326 audit(1729456872.686:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.254633][   T29] audit: type=1326 audit(1729456872.686:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.278771][   T29] audit: type=1326 audit(1729456872.686:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.287848][ T6645] loop2: detected capacity change from 0 to 256
[   96.302781][   T29] audit: type=1326 audit(1729456872.686:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.302819][   T29] audit: type=1326 audit(1729456872.686:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[   96.325395][ T6645] tmpfs: Bad value for 'mpol'
[   96.337329][ T1003] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   96.531137][ T6660] vhci_hcd: invalid port number 157
[   96.536500][ T6660] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   96.567034][ T6665] bpf_get_probe_write_proto: 7 callbacks suppressed
[   96.567049][ T6665] syz.1.1018[6665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   96.595867][ T6665] syz.1.1018[6665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   96.607701][ T6665] syz.1.1018[6665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   96.838820][ T6671] bond3: entered promiscuous mode
[   96.855864][ T6671] bond3: entered allmulticast mode
[   96.861520][ T6671] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.872764][ T6671] bond3 (unregistering): Released all slaves
[   96.885148][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.894322][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.360263][ T6690] vhci_hcd: invalid port number 157
[   97.365493][ T6690] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   97.391687][ T6692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1029'.
[   97.515118][ T6698] tmpfs: Bad value for 'mpol'
[   98.365560][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.373103][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.380559][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.387999][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.395599][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.403054][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.414555][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.421983][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.429372][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.436801][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.444499][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.451961][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.459360][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.466779][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.474276][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.484132][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.491636][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.499099][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.506531][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.513957][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.521454][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.528846][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.536263][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.543733][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.551763][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.559171][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.566608][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.574087][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.581530][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.589026][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.596520][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.603978][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.611432][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.618825][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.626235][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.633651][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.641078][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.648481][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.655996][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.663505][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.670940][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.678344][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.685806][ T3343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   98.694188][ T3343] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   98.709550][ T6719] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1040'.
[   98.720551][ T6717] vhci_hcd: invalid port number 157
[   98.726414][ T6717] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   98.749359][ T6723] syz.4.1043[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.749428][ T6723] syz.4.1043[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.761172][ T6723] syz.4.1043[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   98.823328][ T6734] loop2: detected capacity change from 0 to 256
[   98.850577][ T6734] tmpfs: Bad value for 'mpol'
[   99.596168][ T6747] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1053'.
[   99.660072][ T6749] vhci_hcd: invalid port number 157
[   99.665334][ T6749] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   99.779999][ T6768] syz.4.1063[6768] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.780125][ T6768] syz.4.1063[6768] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.792158][ T6768] syz.4.1063[6768] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.843095][ T6771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1065'.
[   99.844032][ T6772] tmpfs: Bad value for 'mpol'
[   99.890257][ T6774] bond3: entered promiscuous mode
[   99.895383][ T6774] bond3: entered allmulticast mode
[   99.900933][ T6774] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.101923][ T6780] vhci_hcd: invalid port number 157
[  100.107179][ T6780] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  100.563704][ T6794] syz.2.1075[6794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.628804][ T6800] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1077'.
[  101.335404][ T6830] loop2: detected capacity change from 0 to 256
[  101.346685][ T6830] tmpfs: Bad value for 'mpol'
[  101.578508][ T6832] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1089'.
[  101.677114][ T6837] tmpfs: Bad value for 'mpol'
[  101.848261][   T29] kauditd_printk_skb: 367 callbacks suppressed
[  101.848276][   T29] audit: type=1326 audit(1729456878.456:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.877988][   T29] audit: type=1326 audit(1729456878.456:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.901459][   T29] audit: type=1326 audit(1729456878.456:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.924916][   T29] audit: type=1326 audit(1729456878.456:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.948409][   T29] audit: type=1326 audit(1729456878.456:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.971803][   T29] audit: type=1326 audit(1729456878.456:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  101.995250][   T29] audit: type=1326 audit(1729456878.456:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  102.018673][   T29] audit: type=1326 audit(1729456878.456:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  102.042158][   T29] audit: type=1326 audit(1729456878.456:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  102.065654][   T29] audit: type=1326 audit(1729456878.456:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1114cdff9 code=0x7ffc0000
[  102.465601][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'.
[  102.670683][ T6860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1100'.
[  102.693297][ T6862] bpf_get_probe_write_proto: 5 callbacks suppressed
[  102.693312][ T6862] syz.0.1101[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.700382][ T6862] syz.0.1101[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.712032][ T6862] syz.0.1101[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.083292][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'.
[  103.131643][ T6885] loop2: detected capacity change from 0 to 1024
[  103.156125][ T6885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.180961][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.283297][ T6893] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1111'.
[  103.750075][ T6914] chnl_net:caif_netlink_parms(): no params data found
[  103.784922][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.792068][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.799239][ T6914] bridge_slave_0: entered allmulticast mode
[  103.805972][ T6914] bridge_slave_0: entered promiscuous mode
[  103.813012][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.820131][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.827501][ T6914] bridge_slave_1: entered allmulticast mode
[  103.834059][ T6914] bridge_slave_1: entered promiscuous mode
[  103.855993][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.868644][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.891227][ T6914] team0: Port device team_slave_0 added
[  103.897885][ T6914] team0: Port device team_slave_1 added
[  103.914724][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.921930][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.947971][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.959677][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.966701][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.992794][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.019916][ T6914] hsr_slave_0: entered promiscuous mode
[  104.026397][ T6914] hsr_slave_1: entered promiscuous mode
[  104.032546][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.040207][ T6914] Cannot create hsr debugfs directory
[  104.130208][ T6914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.204313][ T6914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.222190][ T6948] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1123'.
[  104.282940][ T6914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.307766][ T6962] loop2: detected capacity change from 0 to 1024
[  104.325041][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.351542][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.365576][ T6914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.428920][ T6914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.444855][ T6914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.453401][ T6914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.462398][ T6914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.470105][ T6977] vhci_hcd: invalid port number 157
[  104.475344][ T6977] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  104.494230][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.501442][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.508806][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.515952][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.555733][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.564594][ T6987] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1135'.
[  104.579722][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.588639][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.605629][ T6914] 8021q: adding VLAN 0 to HW filter on device team0
[  104.617843][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.625050][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.636666][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.643820][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.718209][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.790712][ T6914] veth0_vlan: entered promiscuous mode
[  104.799820][ T6914] veth1_vlan: entered promiscuous mode
[  104.816856][ T6914] veth0_macvtap: entered promiscuous mode
[  104.824429][ T6914] veth1_macvtap: entered promiscuous mode
[  104.835419][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.845953][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.855901][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.866390][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.876242][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.886855][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.896808][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.907307][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.917235][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.927732][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.937784][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.948463][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.958351][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.969369][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.980639][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.992419][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.003025][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.012891][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.023396][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.033288][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.043787][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.053721][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.064179][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.074131][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.084616][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.094572][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.105092][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.115182][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.125796][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.143159][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.158974][ T6914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.167882][ T6914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.176777][ T6914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.185524][ T6914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.264459][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'.
[  105.361640][ T7019] vhci_hcd: invalid port number 157
[  105.366902][ T7019] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  105.419171][ T7024] loop2: detected capacity change from 0 to 512
[  105.445397][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.458691][ T7024] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.479900][ T7024] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1145: Failed to acquire dquot type 0
[  105.599878][ T7053] vhci_hcd: invalid port number 157
[  105.605146][ T7053] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  105.793464][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.874335][ T7074] loop2: detected capacity change from 0 to 256
[  105.890853][ T7074] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  105.899590][ T7074] FAT-fs (loop2): Filesystem has been set read-only
[  106.391082][ T7086] vhci_hcd: invalid port number 157
[  106.391960][ T7088] loop4: detected capacity change from 0 to 1024
[  106.396378][ T7086] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  106.432561][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.482749][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.851892][ T7125] vhci_hcd: invalid port number 157
[  106.857198][ T7125] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  107.114051][ T7136] loop2: detected capacity change from 0 to 1024
[  107.131998][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.155392][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.440539][ T7145] loop4: detected capacity change from 0 to 256
[  107.589168][   T29] kauditd_printk_skb: 260 callbacks suppressed
[  107.589187][   T29] audit: type=1400 audit(1729456884.196:5218): avc:  denied  { write } for  pid=7156 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  107.618014][ T7155] vhci_hcd: invalid port number 157
[  107.623670][ T7155] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  107.652495][ T7161] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1192' sets config #0
[  107.682351][   T29] audit: type=1326 audit(1729456884.296:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.708857][   T29] audit: type=1326 audit(1729456884.316:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.732354][   T29] audit: type=1326 audit(1729456884.316:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.755780][   T29] audit: type=1326 audit(1729456884.316:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.779291][   T29] audit: type=1326 audit(1729456884.316:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.802997][   T29] audit: type=1326 audit(1729456884.316:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.826346][   T29] audit: type=1326 audit(1729456884.316:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.850106][   T29] audit: type=1326 audit(1729456884.316:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  107.873650][   T29] audit: type=1326 audit(1729456884.316:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00e6dff9 code=0x7ffc0000
[  108.166413][ T7188] loop2: detected capacity change from 0 to 256
[  108.180094][ T7188] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  108.188698][ T7188] FAT-fs (loop2): Filesystem has been set read-only
[  108.290485][ T7191] loop4: detected capacity change from 0 to 256
[  108.299133][ T7191] tmpfs: Bad value for 'mpol'
[  108.998384][ T7213] syz.2.1210[7213] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.998828][ T7213] syz.2.1210[7213] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.011109][ T7213] syz.2.1210[7213] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.112278][ T7219] loop4: detected capacity change from 0 to 1024
[  109.155672][ T7219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.182521][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.218118][ T7228] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1215' sets config #0
[  109.921579][ T7249] pim6reg1: entered promiscuous mode
[  109.926947][ T7249] pim6reg1: entered allmulticast mode
[  110.045282][ T7258] loop2: detected capacity change from 0 to 1024
[  110.080089][ T7258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.118749][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.217067][ T7274] loop2: detected capacity change from 0 to 1024
[  110.243799][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.267072][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.290558][ T7279] loop2: detected capacity change from 0 to 512
[  110.297787][ T7279] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  110.312977][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.334067][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.535471][ T7292] syz.2.1240[7292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.535660][ T7292] syz.2.1240[7292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.547518][ T7292] syz.2.1240[7292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.901374][ T7316] loop2: detected capacity change from 0 to 512
[  110.954422][ T7316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.971312][ T7316] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.990832][ T7316] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1249: Failed to acquire dquot type 0
[  111.006773][ T7323] syz.0.1250[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.006881][ T7323] syz.0.1250[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.019143][ T7323] syz.0.1250[7323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.059439][ T7329] loop4: detected capacity change from 0 to 1024
[  111.083570][ T7335] syz.0.1254[7335] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.085962][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.126186][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.196726][ T7348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1259'.
[  111.297513][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.367151][ T7356] loop2: detected capacity change from 0 to 1024
[  111.402630][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.435015][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.516069][ T7364] vhci_hcd: invalid port number 157
[  111.521384][ T7364] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  111.586763][ T7373] FAULT_INJECTION: forcing a failure.
[  111.586763][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.599900][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.2.1268 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  111.610603][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  111.613459][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1270'.
[  111.620664][ T7373] Call Trace:
[  111.620675][ T7373]  <TASK>
[  111.620685][ T7373]  dump_stack_lvl+0xf2/0x150
[  111.620718][ T7373]  dump_stack+0x15/0x20
[  111.620741][ T7373]  should_fail_ex+0x223/0x230
[  111.649460][ T7373]  should_fail+0xb/0x10
[  111.653670][ T7373]  should_fail_usercopy+0x1a/0x20
[  111.656219][ T7378] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1271' sets config #0
[  111.659025][ T7373]  _copy_from_user+0x1e/0xd0
[  111.659058][ T7373]  __se_sys_io_uring_setup+0xf3/0x1e0
[  111.678117][ T7373]  __x64_sys_io_uring_setup+0x31/0x40
[  111.683524][ T7373]  x64_sys_call+0x1f7e/0x2d60
[  111.688247][ T7373]  do_syscall_64+0xc9/0x1c0
[  111.692847][ T7373]  ? clear_bhb_loop+0x55/0xb0
[  111.697577][ T7373]  ? clear_bhb_loop+0x55/0xb0
[  111.702319][ T7373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.708244][ T7373] RIP: 0033:0x7fe618f6dff9
[  111.712686][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.733240][ T7373] RSP: 002b:00007fe617be1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  111.741744][ T7373] RAX: ffffffffffffffda RBX: 00007fe619125f80 RCX: 00007fe618f6dff9
[  111.749840][ T7373] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000001694
[  111.757841][ T7373] RBP: 00007fe617be1090 R08: 0000000000000000 R09: 0000000000000000
[  111.765892][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.773898][ T7373] R13: 0000000000000000 R14: 00007fe619125f80 R15: 00007fff63311ea8
[  111.781884][ T7373]  </TASK>
[  111.925460][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'.
[  111.941328][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1281'.
[  111.952970][ T7400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.969919][ T7406] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1282' sets config #0
[  112.016403][   T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0)
[  112.604233][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1293'.
[  112.629026][ T7432] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1294' sets config #0
[  112.706353][ T7438] loop2: detected capacity change from 0 to 1024
[  112.723449][ T7438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.750384][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.808382][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  112.808400][   T29] audit: type=1326 audit(1729456889.416:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.856956][   T29] audit: type=1326 audit(1729456889.426:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.880534][   T29] audit: type=1326 audit(1729456889.426:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.904018][   T29] audit: type=1326 audit(1729456889.426:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.927556][   T29] audit: type=1326 audit(1729456889.426:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.942992][ T7458] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1305' sets config #0
[  112.950977][   T29] audit: type=1326 audit(1729456889.426:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.983516][   T29] audit: type=1326 audit(1729456889.426:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  112.994234][ T7460] loop2: detected capacity change from 0 to 1024
[  113.006901][   T29] audit: type=1326 audit(1729456889.456:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  113.006970][   T29] audit: type=1326 audit(1729456889.456:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  113.060172][   T29] audit: type=1326 audit(1729456889.456:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  113.083755][ T7460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.106479][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.126666][ T7466] mmap: syz.4.1309 (7466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  113.199049][ T7472] loop2: detected capacity change from 0 to 512
[  113.232482][ T7472] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  113.266941][ T7472] EXT4-fs (loop2): invalid journal inode
[  113.277185][ T7472] EXT4-fs (loop2): can't get journal size
[  113.284920][ T7472] EXT4-fs (loop2): 1 truncate cleaned up
[  113.294342][ T7472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.331764][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'.
[  113.357250][ T7478] loop4: detected capacity change from 0 to 512
[  113.412060][ T7478] EXT4-fs (loop4): failed to initialize system zone (-117)
[  113.431600][ T7478] EXT4-fs (loop4): mount failed
[  113.531952][ T7492] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1317' sets config #0
[  113.643016][ T7507] loop4: detected capacity change from 0 to 256
[  113.669126][ T7507] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  113.677875][ T7507] FAT-fs (loop4): Filesystem has been set read-only
[  113.906065][ T7533] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1332' sets config #0
[  114.124415][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.315859][ T7555] loop2: detected capacity change from 0 to 1024
[  114.333335][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.356838][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.376879][ T7559] bpf_get_probe_write_proto: 26 callbacks suppressed
[  114.376898][ T7559] syz.2.1342[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.384139][ T7559] syz.2.1342[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.395656][ T7559] syz.2.1342[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.428115][ T7561] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1343' sets config #0
[  114.465643][ T7563] FAULT_INJECTION: forcing a failure.
[  114.465643][ T7563] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.478788][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.2.1346 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  114.489726][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  114.499948][ T7563] Call Trace:
[  114.503229][ T7563]  <TASK>
[  114.506164][ T7563]  dump_stack_lvl+0xf2/0x150
[  114.510774][ T7563]  dump_stack+0x15/0x20
[  114.514942][ T7563]  should_fail_ex+0x223/0x230
[  114.519660][ T7563]  should_fail+0xb/0x10
[  114.523935][ T7563]  should_fail_usercopy+0x1a/0x20
[  114.528984][ T7563]  _copy_from_user+0x1e/0xd0
[  114.533655][ T7563]  tipc_setsockopt+0x27b/0x660
[  114.538441][ T7563]  ? __pfx_tipc_setsockopt+0x10/0x10
[  114.543818][ T7563]  __sys_setsockopt+0x1cc/0x240
[  114.548697][ T7563]  __x64_sys_setsockopt+0x66/0x80
[  114.554100][ T7563]  x64_sys_call+0x278d/0x2d60
[  114.558867][ T7563]  do_syscall_64+0xc9/0x1c0
[  114.563376][ T7563]  ? clear_bhb_loop+0x55/0xb0
[  114.568138][ T7563]  ? clear_bhb_loop+0x55/0xb0
[  114.572836][ T7563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.578751][ T7563] RIP: 0033:0x7fe618f6dff9
[  114.583204][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.602872][ T7563] RSP: 002b:00007fe617be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  114.611382][ T7563] RAX: ffffffffffffffda RBX: 00007fe619125f80 RCX: 00007fe618f6dff9
[  114.619358][ T7563] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007
[  114.627410][ T7563] RBP: 00007fe617be1090 R08: 0000000000000010 R09: 0000000000000000
[  114.635447][ T7563] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[  114.643589][ T7563] R13: 0000000000000000 R14: 00007fe619125f80 R15: 00007fff63311ea8
[  114.651571][ T7563]  </TASK>
[  114.812436][ T7584] syz.3.1353[7584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.812537][ T7584] syz.3.1353[7584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.834114][ T7584] syz.3.1353[7584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.871408][ T7586] loop2: detected capacity change from 0 to 256
[  114.948340][ T7586] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  114.956941][ T7586] FAT-fs (loop2): Filesystem has been set read-only
[  115.629401][ T7615] syz.0.1365[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.629453][ T7615] syz.0.1365[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.641062][ T7615] syz.0.1365[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.690413][ T7617] vhci_hcd: invalid port number 157
[  115.707048][ T7617] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  115.768218][ T7623] loop2: detected capacity change from 0 to 1024
[  115.805682][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.900396][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.952401][ T7647] loop4: detected capacity change from 0 to 256
[  116.016346][ T7647] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  116.024944][ T7647] FAT-fs (loop4): Filesystem has been set read-only
[  116.058745][ T7652] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  116.600152][ T7686] netlink: 'syz.1.1394': attribute type 10 has an invalid length.
[  116.614289][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.621553][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.634912][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.642062][ T7686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.649348][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.656437][ T7686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.666840][ T7686] team0: Port device bridge0 added
[  116.754771][ T7696] loop4: detected capacity change from 0 to 512
[  116.767313][ T7698] FAULT_INJECTION: forcing a failure.
[  116.767313][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.780648][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.3.1399 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  116.791382][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  116.793334][ T7696] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  116.801433][ T7698] Call Trace:
[  116.801444][ T7698]  <TASK>
[  116.801453][ T7698]  dump_stack_lvl+0xf2/0x150
[  116.801521][ T7698]  dump_stack+0x15/0x20
[  116.824595][ T7698]  should_fail_ex+0x223/0x230
[  116.825179][ T7696] EXT4-fs (loop4): invalid journal inode
[  116.829355][ T7698]  should_fail+0xb/0x10
[  116.835259][ T7696] EXT4-fs (loop4): can't get journal size
[  116.839138][ T7698]  should_fail_usercopy+0x1a/0x20
[  116.849988][ T7698]  _copy_to_user+0x1e/0xa0
[  116.854429][ T7698]  simple_read_from_buffer+0xa0/0x110
[  116.859835][ T7698]  proc_fail_nth_read+0xf9/0x140
[  116.864851][ T7698]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  116.870429][ T7698]  vfs_read+0x195/0x720
[  116.874628][ T7698]  ? kmem_cache_free+0x1e8/0x2d0
[  116.879598][ T7698]  ? __rcu_read_unlock+0x4e/0x70
[  116.884585][ T7698]  ? __fget_files+0x1d4/0x210
[  116.889171][ T7708] erspan0: entered promiscuous mode
[  116.889293][ T7698]  ksys_read+0xeb/0x1b0
[  116.898656][ T7698]  __x64_sys_read+0x42/0x50
[  116.901433][ T7708] vlan2: entered promiscuous mode
[  116.903219][ T7698]  x64_sys_call+0x27d3/0x2d60
[  116.912938][ T7698]  do_syscall_64+0xc9/0x1c0
[  116.917461][ T7698]  ? clear_bhb_loop+0x55/0xb0
[  116.922208][ T7698]  ? clear_bhb_loop+0x55/0xb0
[  116.922583][ T7696] EXT4-fs (loop4): 1 truncate cleaned up
[  116.926912][ T7698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.933916][ T7696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.938420][ T7698] RIP: 0033:0x7f635db0ca3c
[  116.938445][ T7698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  116.974617][ T7698] RSP: 002b:00007f635c781030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.983041][ T7698] RAX: ffffffffffffffda RBX: 00007f635dcc5f80 RCX: 00007f635db0ca3c
[  116.991042][ T7698] RDX: 000000000000000f RSI: 00007f635c7810a0 RDI: 0000000000000008
[  116.999020][ T7698] RBP: 00007f635c781090 R08: 0000000000000000 R09: 0000000000000000
[  117.006999][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.015015][ T7698] R13: 0000000000000000 R14: 00007f635dcc5f80 R15: 00007ffd527d65b8
[  117.023007][ T7698]  </TASK>
[  117.032629][ T7708] erspan0: left promiscuous mode
[  117.044563][ T7709] erspan0: entered promiscuous mode
[  117.050754][ T7709] vlan2: entered promiscuous mode
[  117.057828][ T7709] erspan0: left promiscuous mode
[  117.729278][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.808660][ T7767] loop2: detected capacity change from 0 to 256
[  117.816131][   T29] kauditd_printk_skb: 312 callbacks suppressed
[  117.816150][   T29] audit: type=1326 audit(1729456894.426:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe618f6cc8a code=0x7ffc0000
[  117.846765][   T29] audit: type=1326 audit(1729456894.426:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe618f6cc8a code=0x7ffc0000
[  117.860185][ T7767] FAT-fs (loop2): codepage cp874 not found
[  117.870053][   T29] audit: type=1326 audit(1729456894.426:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe618f6c897 code=0x7ffc0000
[  117.900641][   T29] audit: type=1326 audit(1729456894.426:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe618f6f79a code=0x7ffc0000
[  117.925036][   T29] audit: type=1326 audit(1729456894.486:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe618f6c990 code=0x7ffc0000
[  117.948541][   T29] audit: type=1326 audit(1729456894.486:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe618f6dbfb code=0x7ffc0000
[  117.971889][   T29] audit: type=1326 audit(1729456894.486:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe618f6cc8a code=0x7ffc0000
[  117.995351][   T29] audit: type=1326 audit(1729456894.486:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  118.018927][   T29] audit: type=1326 audit(1729456894.486:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  118.042532][   T29] audit: type=1326 audit(1729456894.516:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  118.130553][ T7778] FAULT_INJECTION: forcing a failure.
[  118.130553][ T7778] name failslab, interval 1, probability 0, space 0, times 0
[  118.143256][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.2.1431 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  118.154024][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  118.164291][ T7778] Call Trace:
[  118.167573][ T7778]  <TASK>
[  118.170510][ T7778]  dump_stack_lvl+0xf2/0x150
[  118.175265][ T7778]  dump_stack+0x15/0x20
[  118.179428][ T7778]  should_fail_ex+0x223/0x230
[  118.184282][ T7778]  ? alloc_pipe_info+0x1cb/0x360
[  118.189303][ T7778]  should_failslab+0x8f/0xb0
[  118.193954][ T7778]  __kmalloc_noprof+0xa5/0x370
[  118.198759][ T7778]  alloc_pipe_info+0x1cb/0x360
[  118.203575][ T7778]  splice_direct_to_actor+0x60f/0x670
[  118.208964][ T7778]  ? __pfx_direct_splice_actor+0x10/0x10
[  118.214710][ T7778]  ? selinux_file_permission+0x327/0x360
[  118.220358][ T7778]  do_splice_direct+0xd7/0x150
[  118.225170][ T7778]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  118.231260][ T7778]  do_sendfile+0x39b/0x970
[  118.235693][ T7778]  __x64_sys_sendfile64+0x110/0x150
[  118.240904][ T7778]  x64_sys_call+0xed5/0x2d60
[  118.245515][ T7778]  do_syscall_64+0xc9/0x1c0
[  118.250155][ T7778]  ? clear_bhb_loop+0x55/0xb0
[  118.254911][ T7778]  ? clear_bhb_loop+0x55/0xb0
[  118.259638][ T7778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.265571][ T7778] RIP: 0033:0x7fe618f6dff9
[  118.270027][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.289685][ T7778] RSP: 002b:00007fe617be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  118.298103][ T7778] RAX: ffffffffffffffda RBX: 00007fe619125f80 RCX: 00007fe618f6dff9
[  118.306110][ T7778] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  118.314126][ T7778] RBP: 00007fe617be1090 R08: 0000000000000000 R09: 0000000000000000
[  118.322101][ T7778] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  118.330186][ T7778] R13: 0000000000000000 R14: 00007fe619125f80 R15: 00007fff63311ea8
[  118.338195][ T7778]  </TASK>
[  118.720462][ T7823] loop2: detected capacity change from 0 to 512
[  118.733881][ T7823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.747117][ T7823] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.883903][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.911517][ T7834] loop4: detected capacity change from 0 to 128
[  118.930933][ T7834] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.943374][ T7834] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.975378][ T3520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.333914][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1466'.
[  119.381127][ T7861] vhci_hcd: invalid port number 157
[  119.386403][ T7861] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  119.952063][ T7909] FAULT_INJECTION: forcing a failure.
[  119.952063][ T7909] name failslab, interval 1, probability 0, space 0, times 0
[  119.964781][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.2.1488 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  119.975512][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  119.985589][ T7909] Call Trace:
[  119.988937][ T7909]  <TASK>
[  119.991877][ T7909]  dump_stack_lvl+0xf2/0x150
[  119.996512][ T7909]  dump_stack+0x15/0x20
[  120.000722][ T7909]  should_fail_ex+0x223/0x230
[  120.005420][ T7909]  ? __alloc_skb+0x10b/0x310
[  120.010091][ T7909]  should_failslab+0x8f/0xb0
[  120.014696][ T7909]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  120.020559][ T7909]  __alloc_skb+0x10b/0x310
[  120.024997][ T7909]  netlink_alloc_large_skb+0xad/0xe0
[  120.030300][ T7909]  netlink_sendmsg+0x3b4/0x6e0
[  120.035144][ T7909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.040435][ T7909]  __sock_sendmsg+0x140/0x180
[  120.045170][ T7909]  ____sys_sendmsg+0x312/0x410
[  120.049963][ T7909]  __sys_sendmsg+0x1d9/0x270
[  120.054587][ T7909]  __x64_sys_sendmsg+0x46/0x50
[  120.059437][ T7909]  x64_sys_call+0x2689/0x2d60
[  120.064183][ T7909]  do_syscall_64+0xc9/0x1c0
[  120.068711][ T7909]  ? clear_bhb_loop+0x55/0xb0
[  120.073426][ T7909]  ? clear_bhb_loop+0x55/0xb0
[  120.078198][ T7909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.084115][ T7909] RIP: 0033:0x7fe618f6dff9
[  120.088535][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.108522][ T7909] RSP: 002b:00007fe617be1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.116943][ T7909] RAX: ffffffffffffffda RBX: 00007fe619125f80 RCX: 00007fe618f6dff9
[  120.124997][ T7909] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[  120.132973][ T7909] RBP: 00007fe617be1090 R08: 0000000000000000 R09: 0000000000000000
[  120.141169][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.149188][ T7909] R13: 0000000000000000 R14: 00007fe619125f80 R15: 00007fff63311ea8
[  120.157173][ T7909]  </TASK>
[  120.280007][ T7926] loop4: detected capacity change from 0 to 512
[  120.301479][ T7926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.341023][ T7926] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.353558][ T7926] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1494: Failed to acquire dquot type 0
[  120.408549][ T7950] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1503'.
[  120.594811][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'.
[  120.651389][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.761744][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.793586][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.516630][ T7998] loop4: detected capacity change from 0 to 256
[  121.531606][ T7998] tmpfs: Bad value for 'mpol'
[  121.609302][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.619243][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.705159][ T8015] netlink: 'syz.1.1526': attribute type 10 has an invalid length.
[  121.713727][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.720950][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.594476][ T8064] tmpfs: Bad value for 'mpol'
[  122.703977][ T8075] netlink: 'syz.1.1553': attribute type 10 has an invalid length.
[  122.953807][   T29] kauditd_printk_skb: 493 callbacks suppressed
[  122.953825][   T29] audit: type=1326 audit(1729456899.566:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  122.983980][   T29] audit: type=1326 audit(1729456899.566:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.007623][   T29] audit: type=1326 audit(1729456899.576:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.031046][   T29] audit: type=1326 audit(1729456899.576:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.054523][   T29] audit: type=1326 audit(1729456899.576:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.077943][   T29] audit: type=1326 audit(1729456899.576:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.101424][   T29] audit: type=1326 audit(1729456899.576:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.124879][   T29] audit: type=1326 audit(1729456899.576:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.148301][   T29] audit: type=1326 audit(1729456899.576:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.171718][   T29] audit: type=1326 audit(1729456899.576:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a2c8dff9 code=0x7ffc0000
[  123.264296][ T8108] netlink: 'syz.0.1568': attribute type 10 has an invalid length.
[  123.272560][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.279768][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.292442][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.299562][ T8108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.306959][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.314183][ T8108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.323689][ T8108] team0: Port device bridge0 added
[  123.527652][ T8125] loop2: detected capacity change from 0 to 512
[  123.546251][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.566756][ T8121] batman_adv: batadv0: Interface deactivated: dummy0
[  123.573589][ T8121] batman_adv: batadv0: Removing interface: dummy0
[  123.580270][ T8125] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.593056][ T8125] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1575: Failed to acquire dquot type 0
[  123.836681][ T8156] tmpfs: Bad value for 'mpol'
[  123.991992][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.193251][ T8174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.209137][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1590'.
[  124.460407][ T8189] vhci_hcd: invalid port number 157
[  124.465703][ T8189] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  124.851859][ T8217] vhci_hcd: invalid port number 157
[  124.857167][ T8217] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  124.956293][ T8224] loop4: detected capacity change from 0 to 256
[  124.971424][ T8224] tmpfs: Bad value for 'mpol'
[  125.073931][ T8234] syz.2.1614[8234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.074073][ T8234] syz.2.1614[8234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.085606][ T8234] syz.2.1614[8234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.103294][ T8234] loop2: detected capacity change from 0 to 512
[  125.124148][ T8234] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  125.143080][ T8234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  125.153625][ T8234] System zones: 1-12
[  125.157738][ T8234] EXT4-fs (loop2): orphan cleanup on readonly fs
[  125.164263][ T8234] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1614: Inode bitmap for bg 0 marked uninitialized
[  125.179316][ T8234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  125.206487][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.402139][ T8246] vhci_hcd: invalid port number 157
[  125.407408][ T8246] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  125.592188][ T8257] FAULT_INJECTION: forcing a failure.
[  125.592188][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.605423][ T8257] CPU: 1 UID: 0 PID: 8257 Comm: syz.0.1624 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  125.616129][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  125.626197][ T8257] Call Trace:
[  125.629485][ T8257]  <TASK>
[  125.632443][ T8257]  dump_stack_lvl+0xf2/0x150
[  125.637076][ T8257]  dump_stack+0x15/0x20
[  125.641251][ T8257]  should_fail_ex+0x223/0x230
[  125.646021][ T8257]  should_fail+0xb/0x10
[  125.650248][ T8257]  should_fail_usercopy+0x1a/0x20
[  125.655289][ T8257]  _copy_to_user+0x1e/0xa0
[  125.659711][ T8257]  simple_read_from_buffer+0xa0/0x110
[  125.665184][ T8257]  proc_fail_nth_read+0xf9/0x140
[  125.670219][ T8257]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  125.675775][ T8257]  vfs_read+0x195/0x720
[  125.679967][ T8257]  ? kmem_cache_free+0x1e8/0x2d0
[  125.684917][ T8257]  ? __rcu_read_unlock+0x4e/0x70
[  125.689930][ T8257]  ? __fget_files+0x1d4/0x210
[  125.694692][ T8257]  ksys_read+0xeb/0x1b0
[  125.698950][ T8257]  __x64_sys_read+0x42/0x50
[  125.703481][ T8257]  x64_sys_call+0x27d3/0x2d60
[  125.708190][ T8257]  do_syscall_64+0xc9/0x1c0
[  125.712773][ T8257]  ? clear_bhb_loop+0x55/0xb0
[  125.717521][ T8257]  ? clear_bhb_loop+0x55/0xb0
[  125.722266][ T8257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.728210][ T8257] RIP: 0033:0x7fbd00e6ca3c
[  125.732700][ T8257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  125.752331][ T8257] RSP: 002b:00007fbcffae1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  125.760804][ T8257] RAX: ffffffffffffffda RBX: 00007fbd01025f80 RCX: 00007fbd00e6ca3c
[  125.768794][ T8257] RDX: 000000000000000f RSI: 00007fbcffae10a0 RDI: 0000000000000006
[  125.776782][ T8257] RBP: 00007fbcffae1090 R08: 0000000000000000 R09: 0000000000000000
[  125.784764][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.792773][ T8257] R13: 0000000000000000 R14: 00007fbd01025f80 R15: 00007fff39bb5e68
[  125.801398][ T8257]  </TASK>
[  126.380965][ T8277] vhci_hcd: invalid port number 157
[  126.386334][ T8277] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  126.780007][ T8313] vhci_hcd: invalid port number 157
[  126.785268][ T8313] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  127.040115][ T8341] vhci_hcd: invalid port number 157
[  127.045428][ T8341] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  127.611780][ T8384] loop4: detected capacity change from 0 to 128
[  127.702169][ T8397] syz.4.1678[8397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.702310][ T8397] syz.4.1678[8397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.724164][ T8397] syz.4.1678[8397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.802502][ T8397] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  127.841442][ T8397] infiniband ÿÿÿÿ: RDMA CMA: cma_listen_on_dev, error -98
[  127.960063][ T8412] FAULT_INJECTION: forcing a failure.
[  127.960063][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.973200][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.0.1684 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  127.983983][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  127.994090][ T8412] Call Trace:
[  127.997373][ T8412]  <TASK>
[  128.000325][ T8412]  dump_stack_lvl+0xf2/0x150
[  128.005010][ T8412]  dump_stack+0x15/0x20
[  128.009217][ T8412]  should_fail_ex+0x223/0x230
[  128.013917][ T8412]  should_fail+0xb/0x10
[  128.018159][ T8412]  should_fail_usercopy+0x1a/0x20
[  128.023208][ T8412]  _copy_from_user+0x1e/0xd0
[  128.027861][ T8412]  do_fcntl+0x56b/0xd70
[  128.032116][ T8412]  __se_sys_fcntl+0xbf/0x1b0
[  128.036775][ T8412]  __x64_sys_fcntl+0x43/0x50
[  128.041377][ T8412]  x64_sys_call+0x209e/0x2d60
[  128.046070][ T8412]  do_syscall_64+0xc9/0x1c0
[  128.050655][ T8412]  ? clear_bhb_loop+0x55/0xb0
[  128.055457][ T8412]  ? clear_bhb_loop+0x55/0xb0
[  128.060158][ T8412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.066078][ T8412] RIP: 0033:0x7fbd00e6dff9
[  128.070542][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.090194][ T8412] RSP: 002b:00007fbcffae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  128.098664][ T8412] RAX: ffffffffffffffda RBX: 00007fbd01025f80 RCX: 00007fbd00e6dff9
[  128.106712][ T8412] RDX: 0000000020000400 RSI: 0000000000000024 RDI: 0000000000000004
[  128.114699][ T8412] RBP: 00007fbcffae1090 R08: 0000000000000000 R09: 0000000000000000
[  128.122676][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.130655][ T8412] R13: 0000000000000000 R14: 00007fbd01025f80 R15: 00007fff39bb5e68
[  128.138784][ T8412]  </TASK>
[  128.198361][   T29] kauditd_printk_skb: 397 callbacks suppressed
[  128.198380][   T29] audit: type=1326 audit(1729456904.806:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.202127][ T8422] loop4: detected capacity change from 0 to 128
[  128.206566][   T29] audit: type=1326 audit(1729456904.806:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.257708][   T29] audit: type=1326 audit(1729456904.816:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.281221][   T29] audit: type=1326 audit(1729456904.816:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.304776][   T29] audit: type=1326 audit(1729456904.816:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.328270][   T29] audit: type=1326 audit(1729456904.816:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.351786][   T29] audit: type=1326 audit(1729456904.816:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.375242][   T29] audit: type=1326 audit(1729456904.816:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.398771][   T29] audit: type=1326 audit(1729456904.816:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.422440][   T29] audit: type=1326 audit(1729456904.816:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  128.737897][ T8458] loop4: detected capacity change from 0 to 256
[  128.803965][ T8458] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  128.813388][ T8458] FAT-fs (loop4): Filesystem has been set read-only
[  129.480402][ T8496] vhci_hcd: invalid port number 157
[  129.485659][ T8496] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[  129.709732][ T8519] tmpfs: Bad value for 'mpol'
[  129.866265][ T8523] loop2: detected capacity change from 0 to 512
[  129.873205][ T8523] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  129.882149][ T8523] EXT4-fs (loop2): invalid journal inode
[  129.887970][ T8523] EXT4-fs (loop2): can't get journal size
[  129.894820][ T8523] EXT4-fs (loop2): 1 truncate cleaned up
[  129.900899][ T8523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.097322][ T8533] FAULT_INJECTION: forcing a failure.
[  130.097322][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.110630][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.4.1729 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  130.121345][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  130.131431][ T8533] Call Trace:
[  130.134759][ T8533]  <TASK>
[  130.137706][ T8533]  dump_stack_lvl+0xf2/0x150
[  130.142317][ T8533]  dump_stack+0x15/0x20
[  130.146490][ T8533]  should_fail_ex+0x223/0x230
[  130.151191][ T8533]  should_fail+0xb/0x10
[  130.155403][ T8533]  should_fail_usercopy+0x1a/0x20
[  130.160476][ T8533]  _copy_from_user+0x1e/0xd0
[  130.165075][ T8533]  copy_msghdr_from_user+0x54/0x2a0
[  130.170309][ T8533]  __sys_sendmmsg+0x21a/0x500
[  130.175183][ T8533]  __x64_sys_sendmmsg+0x57/0x70
[  130.180079][ T8533]  x64_sys_call+0xa49/0x2d60
[  130.184841][ T8533]  do_syscall_64+0xc9/0x1c0
[  130.189441][ T8533]  ? clear_bhb_loop+0x55/0xb0
[  130.194206][ T8533]  ? clear_bhb_loop+0x55/0xb0
[  130.198947][ T8533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.204857][ T8533] RIP: 0033:0x7f43a2c8dff9
[  130.209340][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.228980][ T8533] RSP: 002b:00007f43a1907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  130.237395][ T8533] RAX: ffffffffffffffda RBX: 00007f43a2e45f80 RCX: 00007f43a2c8dff9
[  130.245500][ T8533] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003
[  130.253469][ T8533] RBP: 00007f43a1907090 R08: 0000000000000000 R09: 0000000000000000
[  130.261438][ T8533] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001
[  130.269496][ T8533] R13: 0000000000000000 R14: 00007f43a2e45f80 R15: 00007ffffccafb08
[  130.277497][ T8533]  </TASK>
[  130.521582][ T8547] syz.1.1736[8547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.521752][ T8547] syz.1.1736[8547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.533869][ T8547] syz.1.1736[8547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.620318][ T8549] loop0: detected capacity change from 2048 to 0
[  130.665205][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.672720][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.684280][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.691886][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.699791][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.707812][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.715340][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.722898][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.730421][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.737826][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.745492][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.753001][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.760440][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.767944][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.775449][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.782957][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.790404][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.797917][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.805441][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.812901][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.820388][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.827905][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.835525][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.842976][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.850421][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.857927][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.865371][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.872809][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.880250][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.887711][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.895233][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.902698][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.910147][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.917554][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.925071][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.932580][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.940067][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.947609][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.955061][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.971131][   T24] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  131.023837][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.138565][ T8563] syz.0.1741[8563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.138668][ T8563] syz.0.1741[8563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.161922][ T8563] syz.0.1741[8563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.208585][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.227391][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.228034][ T8569] loop4: detected capacity change from 0 to 256
[  131.238213][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.248543][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.256120][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.263572][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.271065][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.278476][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.285955][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.288624][ T8569] tmpfs: Bad value for 'mpol'
[  131.293425][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.307602][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.315909][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.323344][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.330876][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.339157][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.346706][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.354177][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.361629][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.369043][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.376491][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.383992][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.391830][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.399693][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.408307][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.415826][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.423525][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.431094][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.439025][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.446990][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.454895][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.462365][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.469872][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.477278][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.484872][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.492383][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.499872][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.507484][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.514907][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.522347][ T3344] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  131.531918][ T3344] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  131.581835][ T8575] loop2: detected capacity change from 0 to 256
[  131.703954][ T4479] kmmpd-loop0: attempt to access beyond end of device
[  131.703954][ T4479] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0
[  131.718417][ T4479] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  131.729325][ T4479] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block
[  131.743022][ T4479] kmmpd-loop0: attempt to access beyond end of device
[  131.743022][ T4479] loop0: rw=133121, sector=0, nr_sectors = 4 limit=0
[  131.756437][ T4479] Buffer I/O error on dev loop0, logical block 0, lost sync page write
[  131.768677][ T4479] EXT4-fs (loop0): I/O error while writing superblock
[  132.219290][ T8602] loop4: detected capacity change from 0 to 128
[  132.228669][ T8602] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.241520][ T8602] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.268805][ T3520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.328271][ T8612] loop4: detected capacity change from 0 to 512
[  132.335819][ T8612] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  132.345128][ T8612] EXT4-fs (loop4): invalid journal inode
[  132.350950][ T8612] EXT4-fs (loop4): can't get journal size
[  132.357628][ T8612] EXT4-fs (loop4): 1 truncate cleaned up
[  132.364417][ T8612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.476478][ T8619] loop2: detected capacity change from 0 to 256
[  132.493232][ T8619] tmpfs: Bad value for 'mpol'
[  132.527340][ T3520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.787392][ T8635] loop4: detected capacity change from 0 to 128
[  132.805693][ T8635] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.819077][ T8635] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.838791][ T3520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.002790][ T8652] 9pnet_fd: Insufficient options for proto=fd
[  133.017703][ T8652] loop4: detected capacity change from 0 to 2048
[  133.050254][ T8652]  loop4: p1 < > p4
[  133.054960][ T8652] loop4: p4 size 8388608 extends beyond EOD, truncated
[  133.271456][   T29] kauditd_printk_skb: 80 callbacks suppressed
[  133.271472][   T29] audit: type=1326 audit(1729456909.886:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.302013][   T29] audit: type=1326 audit(1729456909.886:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.325620][   T29] audit: type=1326 audit(1729456909.886:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.349100][   T29] audit: type=1326 audit(1729456909.886:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.372544][   T29] audit: type=1326 audit(1729456909.886:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.396138][   T29] audit: type=1326 audit(1729456909.886:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.419793][   T29] audit: type=1326 audit(1729456909.886:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.443237][   T29] audit: type=1326 audit(1729456909.886:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.466951][   T29] audit: type=1326 audit(1729456909.916:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618f6dff9 code=0x7ffc0000
[  133.603504][ T8668] ==================================================================
[  133.611680][ T8668] BUG: KCSAN: data-race in call_rcu / mtree_range_walk
[  133.618569][ T8668] 
[  133.620899][ T8668] write to 0xffff888115ad2110 of 8 bytes by task 8667 on cpu 0:
[  133.628533][ T8668]  call_rcu+0x3b/0x430
[  133.632616][ T8668]  mas_wmb_replace+0xfaf/0x14d0
[  133.637482][ T8668]  mas_wr_store_entry+0x163c/0x2d00
[  133.642716][ T8668]  mas_store_prealloc+0x6bf/0x960
[  133.647751][ T8668]  vma_iter_store+0x168/0x190
[  133.652477][ T8668]  mmap_region+0x1286/0x1710
[  133.657094][ T8668]  do_mmap+0x718/0xb60
[  133.661172][ T8668]  vm_mmap_pgoff+0x133/0x290
[  133.665779][ T8668]  ksys_mmap_pgoff+0xd0/0x330
[  133.670468][ T8668]  x64_sys_call+0x1884/0x2d60
[  133.675158][ T8668]  do_syscall_64+0xc9/0x1c0
[  133.679668][ T8668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.685584][ T8668] 
[  133.687914][ T8668] read to 0xffff888115ad2110 of 8 bytes by task 8668 on cpu 1:
[  133.695633][ T8668]  mtree_range_walk+0x2a3/0x460
[  133.700495][ T8668]  mas_walk+0x16e/0x320
[  133.704667][ T8668]  lock_vma_under_rcu+0x95/0x260
[  133.709629][ T8668]  exc_page_fault+0x150/0x650
[  133.714329][ T8668]  asm_exc_page_fault+0x26/0x30
[  133.719205][ T8668] 
[  133.721620][ T8668] value changed: 0x00007fa107d05fff -> 0xffffffff852a6690
[  133.728747][ T8668] 
[  133.731078][ T8668] Reported by Kernel Concurrency Sanitizer on:
[  133.737236][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: syz.1.1784 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  133.747920][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  133.757993][ T8668] ==================================================================
[  136.729604][ T4479] kmmpd-loop0: attempt to access beyond end of device
[  136.729604][ T4479] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0
[  136.743095][ T4479] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  141.769951][ T4479] kmmpd-loop0: attempt to access beyond end of device
[  141.769951][ T4479] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0
[  141.783435][ T4479] Buffer I/O error on dev loop0, logical block 64, lost sync page write