last executing test programs:

1m3.841244373s ago: executing program 0 (id=324):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000380)={0x60, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffe, 0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000100000000000000000000080ffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket(0x21, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005dddeba2000000000000e1b600000000000000000400000000008000000000cd77219ac8ce067f60c6f10d7656c5c810f816000082e899925e83a18a5496e51815ad7d5b9208986b328d941abe0a808e79d7a3b72398ebc9024e49bb61cbc928fd233880c3028571af9911f6ce00ca46c9809cee8e83a8b02af592635e703c72c7e6c3bd39a5d6e7ed4f99d6b8e9f0c4fd0c734fa15961"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='fib6_table_lookup\x00'}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000e42c989b5212d425b811f8ea00167a751db0d92ec6afb699c5f5cb5b67262e3d31ab4afb1fe07d17e91902d893d83e37f33e2345bd38f313cb5338eba8b708362d43e0fe57a733906f106bc73eb94aa2"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r7}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))

1m3.801229003s ago: executing program 0 (id=326):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
r5 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x1)
pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000013c0)='\x00!', 0x2}], 0x1, 0x0, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000600)={0x22100, 0x8, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x38, r10, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x80, r10, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x33}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xea}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff76ab}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8100, &(0x7f0000000000)=ANY=[], 0x0, 0x25a, &(0x7f0000000400)="$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")
sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&')

1m3.652891803s ago: executing program 0 (id=331):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
ioprio_set$uid(0x3, 0x0, 0x0)

1m3.652260583s ago: executing program 0 (id=332):
mkdir(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000280)={[{@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}, {@data_err_abort}, {@sysvgroups}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x8, 0x8000, 0x9, 0xa816, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x67, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18)
write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8)
mount$nfs4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[])

1m2.959565001s ago: executing program 0 (id=344):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0xd}, 0x1c)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r8, 0x11, 0x6}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r8, 0x25, 0x9, @void}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)}, 0x68)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

1m2.273055449s ago: executing program 0 (id=350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)

1m2.249226629s ago: executing program 32 (id=350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)

30.961848809s ago: executing program 1 (id=821):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c87}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

30.917268599s ago: executing program 1 (id=822):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x4f, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x28, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04", 0x1, 0x0, 0x13}, 0x50)

30.853260229s ago: executing program 1 (id=824):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffbfffd}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5})

30.705781889s ago: executing program 1 (id=828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==")
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x58)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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")
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89001)
renameat2(r5, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000006c0)={{0x1, 0x0, 0x5, 0x1, 0x4}})
socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', <r6=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002380)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
close(r2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f00009ee000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f0000002340), 0x8)
gettid()
ptrace(0x10, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

30.279933648s ago: executing program 1 (id=833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)

29.945122537s ago: executing program 1 (id=837):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x2c, @local, 0x4e22, 0x0, 'dh\x00', 0x20, 0x10001, 0x69}, 0x2c)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000014, 0x0, 0x0, 0x0, 0xd, 0x19, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000e0ffffffffffffff00", "90be8b1c551265406c7f309a03d8a0f49d00", [0x6, 0x7f]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

29.944776826s ago: executing program 33 (id=837):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x2c, @local, 0x4e22, 0x0, 'dh\x00', 0x20, 0x10001, 0x69}, 0x2c)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000014, 0x0, 0x0, 0x0, 0xd, 0x19, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000e0ffffffffffffff00", "90be8b1c551265406c7f309a03d8a0f49d00", [0x6, 0x7f]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

3.90421743s ago: executing program 3 (id=1297):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0), 0x0, 0x800075, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x34, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0), <r1=>0x0, 0x800075, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x34, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001d450000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001d450000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
epoll_create1(0x0) (async)
r3 = epoll_create1(0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0x20000000}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0x20000000})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000f2cff4)={0x775409470d9a1685, 0x200000000000000})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1f, &(0x7f0000000bc0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x280}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbe}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)

2.513305086s ago: executing program 2 (id=1321):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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")
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
symlink(0x0, &(0x7f0000000240)='./file0/file0\x00') (fail_nth: 5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'erspan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0)

2.366212506s ago: executing program 3 (id=1323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x580981, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = io_uring_setup(0x1ba, &(0x7f00000000c0)={0x0, 0x52c1})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x800}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
write$binfmt_script(r4, &(0x7f0000000100), 0x61)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000c80)=""/167, 0xa7}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0xf8, 0xf8, 0x1d0, 0x2c8, 0x428, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00', {}, {}, 0x0, 0xad}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x4}, 0xc90, 0x3}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@ipv6={@empty, @private1, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0xc, 0x2e, 0xb, 0x5, @mcast2, @private2, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff, 0xffffffff, 0xff, 0xffffff00], [0xff, 0xff, 0x0, 0xff], [0x0, 0x0, 0xffffffff], 0x802}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@ipv6={@private0, @mcast2, [], [], 'tunl0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x601, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x8000)
sendto$packet(r7, 0x0, 0x6c20, 0x4c035, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open$dir(0x0, 0x4002, 0x40)

2.365804386s ago: executing program 2 (id=1324):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0xd}, 0x1c)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r8, 0x11, 0x6}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r8, 0x25, 0x9, @void}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)}, 0x68)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

2.169891736s ago: executing program 2 (id=1327):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
sysinfo(&(0x7f0000000580)=""/84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000200002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r7}, 0x18)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000380)=r9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

2.129621065s ago: executing program 2 (id=1329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c)
r3 = syz_io_uring_setup(0x7d98, &(0x7f0000000680)={0x0, 0x846e, 0x10100, 0x0, 0x21a}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.549212754s ago: executing program 4 (id=1341):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa")
kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000}], 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000840)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000880)="606ecdd3128fa236dda544181fec050633bfe45564f23b9a9dedf86c7294157b43c4888a87c608c6c16407cfdc12ab2868e3adbe6ac59f10f04798231af16cc55dd0437bc3ddecae7355133e02af3f2d3fc5f9c0ffcff33f76d3d9d85d5d51bf01445a8a94b655d64e08696d79be39cdfb59b25c48b22ca5643ae9ce32e2a090c53545c35c625fc7be36b5838a1a5da235", 0x91}], 0x1}, 0x4001)

1.548115324s ago: executing program 4 (id=1343):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c)
r3 = syz_io_uring_setup(0x7d98, &(0x7f0000000680)={0x0, 0x846e, 0x10100, 0x0, 0x21a}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.542803694s ago: executing program 6 (id=1344):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
sysinfo(&(0x7f0000000580)=""/84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000200002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r7}, 0x18)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000380)=r9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

1.512574884s ago: executing program 6 (id=1345):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast2, 0x7}, 0x1c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
unshare(0x60600)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r4=>0x0})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18802, 0x43037}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x4)

1.448814593s ago: executing program 3 (id=1346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

1.448208803s ago: executing program 3 (id=1347):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)

1.418383934s ago: executing program 6 (id=1348):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c87}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.375905474s ago: executing program 6 (id=1350):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0xd}, 0x1c)
r2 = creat(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r9, 0x11, 0x6}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r9, 0x25, 0x9, @void}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)}, 0x68)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

1.167295673s ago: executing program 2 (id=1353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000f80)={0xe6c, "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"})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f358d4a, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r5=>0x0, @rand_addr, @multicast2}, &(0x7f0000000100)=0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fd"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6, 0x0, 0x3}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.050621513s ago: executing program 2 (id=1354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000700aaaaaaaaaabb01800000000000000003aabb0180c20000000180c20000001793433558f492c5e0ad91a02072e89546f49d59a32a1f485f4f075737d8a1346955b6dd1365bcf9d460db7888fd9189f0791821bc09abb47e60f51ccd63d85a28fa72f3a4806d6b332ed5f77451f11989b5e6cf2ee7b1"])
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x100, 0x801, 0x0, &(0x7f0000000040), 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xb})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0\x00\x00\x00\x00\x00\x00\x00\x00000000000,\x00'])
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'ovf\x00'}, 0x2c)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc)

890.800502ms ago: executing program 6 (id=1357):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="537ff142bf7218b1eb185c2458e3dcbd297c8a33e71aff285d014fdea29c6491e3e4f23e68186511621573723fd8a85d30cd18befa0c58b9eadcfd416baf78f5fcaef80189490e5bfaeb47c55a4e02e9f74cd19fad6d7c55f9fafcdfc7a27bc4d2ca29d8a655b44bb8143efa31d1e14e93f5ef40171330e51e90e89dba19b02e978135dd839adc0eafdaa6c5d91406d1b578c60f3a0faa20fa0c000cf6e140b72603541d4fe7371f7f9fbdda6bd6b487b2747711b2fcfe666fd3421423752d7d8cd67ae1af0d806f330fdb6188827db40413ef2a64628686d3150981a8a1b9a6d7af9a9171f672837ecee3", @ANYRESHEX=r0, @ANYBLOB="f71febe7e9c31c69d06a3235f2c7341aac13587706339931ae13b731d9cb56679557abed3ba45ccd5ca18cb1b29e22318c487b393721958f9836b30a64e251a6e52d02c4969b324a497fe5c11173dc4c50a2643bfacd7e127275b2e3e26f897e9f9ac713cb0394e2ee2239eb7cbc3f7a4e384c73914a00736399e3b950008dfb", @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES64, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4, 0x0, 0x200}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
pipe2(0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
unshare(0x8000000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)

695.196912ms ago: executing program 4 (id=1360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r2)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r10 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x40})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r11 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000540)='(pu&00\t||')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

594.700052ms ago: executing program 3 (id=1363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0xb)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_io_uring_setup(0xa94, &(0x7f0000000280), 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000040add21a1fdbdab5e6000000"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="000000000000000002000000090000007b8af8ff00000000bfa20000000000000702e400f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528)

482.019031ms ago: executing program 3 (id=1364):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1})
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x4080010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

320.237511ms ago: executing program 4 (id=1366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

319.381141ms ago: executing program 4 (id=1367):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0xd}, 0x1c)
r2 = creat(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U9rHGUcB/DfM9mkf9KaVAStPRgo2IKaNGlFEcEW682DfwqeBGOSltJtG5oItlZsob4DfQGCNy/isYgU9eLVm+ALkGKRNhdvkdnMpNt2N82fTadmPh/YZJ55MjzPZPnuM/vszGwAtTWS/8gi9kbEbIoYaqtrRFE5svR3d25fnlq4fXkqxeLi+/+kSMW68u9T8Xuw2Hh7RPz+c4on+x5sd+7ipTOTzebMhaI8Nn92dmzu4qWXTp+dPDVzaubcxPgr4y8fOTxx5FBP9nN3RPw6erxx7eSb+76f+nbPFz9+dz3F0dhV1LfvR6+MxMjy/6Rd/n99tdeNVaSv2J/2pzg1KuwQa1I+f/0R8XQMRV/cffKG4st3K+0csKkWU8QiUFNJ/qGmyuOA/P1v+aj2iAR4VG4dW5oAuJOW5vYWlvPfWJobjO2tuYGdCynap3VSRPRiZi5vY/b5NJQ/YpPm4YDOrlyNiGc6jf+plc3h1ix+nv/snvxnEfFO8Ttf/9462x+5ryz/8OhsJP8fteX/43W2L/8AAAAAAADQOzeORcSLnT7/y5bP/4kO5/8MRsTRHrT/8M//sps9aAbo4NaxiNcjojz3b6Et/4XhvqK0u3U+QH86ebo5cyginoiIg9G/LS+Pr9DGyL7f+rvWtZ3/lz/y9stzAYt+3Gxsu3eb6cn5yY3sM7Dk1tWIZxud8p+Wx//UYfzPXw9mV9nG4vE3fulW9/D8A5tl8ZuIAx3H/7t3rkgr359jrHU8MFYeFTzosw+v/9CtffmH6uTj/86V8z+c2u/XM7f2Nj7/+88N5L/z8f9AOtG65cxAse7Tyfn5C+MRA+ntB9dPrL3PsBWVeSjzkuf/4P7O7/9XOv7fERFXVtnmiZ/eutatzvgP1cnzP72m8X/tC/s/+Prfbu2vbvw/0hrTDxZrzP/BylYb0Kr7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7IqUjS4vZ9noaMRgRDwVO7Pm+bn5F06e/+TcdF7X+v7/rPym36Glciq//3+4rTxxX/lwROyJiK/6drTKo1Pnm9NV7zwAAAAAAAAAAAAAAAAAAAA8Jga7XP+f+6uv6t4Bm65RdQeAysg/1Jf8Q33JP9SX/EN9yT/Ul/xDfck/1Jf8Q33JPwAAAAAAbCl7nrvxR4qIK6/taD1yA0Vdf6U9AzZbVnUHgMq4xQ/Ul1N/oL5S1R0AKvew14Ht694SAAAAAAAAAAAAAOiVA3td/w915fp/qK/u1/+7MwBsda7/h/ryHh9w/T8AAAAAAAAAAAAAPP7mLl46M9lszlxY78K2jW1uwUJ9FiL1IHGPaKHqVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD0XwAAAP//dt72Ng==")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r9, 0x11, 0x6}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r9, 0x25, 0x9, @void}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)}, 0x68)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

268.252561ms ago: executing program 5 (id=1369):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffbfffd}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5})

247.754761ms ago: executing program 5 (id=1370):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="1e8bf586", 0x4}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b7fac1414aaac1414bb01000000001100000000000000000000000100000033000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001ac1414bb000000001100000000000000000000000100000001000000000000006c000000000000000000000007000000862e00000000070e091caf3b321f6da2c754726305120b657250bac82c097ae3a8a1ae65f27c06082bdf14a6ea2c0101861a00000000000428750702f10e5a52f1ceffb53562ef5a3b4500070b81ac1414220000000044045d5f9402000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000010000000100000000ac00000000000000000000000700000044443bd1e000000200000009e000000200000403ffffffff000000070000000000000000ac14142e00000000ac14141100000001640101000000081ce000000200000009442c2153ffffffff000000067f00000100000004ac1414aa00000009ac1e010100000009ac1414aa80000001890bffe00000010a01010201890731ac1414bb4418ab8000201000ffffff24ffffffff000000070000000700000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414088000000000000000"], 0x1d0}}], 0x1, 0x40810)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

235.845691ms ago: executing program 4 (id=1371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000700aaaaaaaaaabb01800000000000000003aabb0180c20000000180c20000001793433558f492c5e0ad91a02072e89546f49d59a32a1f485f4f075737d8a1346955b6dd1365bcf9d460db7888fd9189f0791821bc09abb47e60f51ccd63d85a28fa72f3a4806d6b332ed5f77451f11989b5e6cf2ee7b1"])
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x100, 0x801, 0x0, &(0x7f0000000040), 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000940))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xb})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0\x00\x00\x00\x00\x00\x00\x00\x00000000000,\x00'])
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'ovf\x00'}, 0x2c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc)

186.4226ms ago: executing program 5 (id=1372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, 0x0, 0xc4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x2000, 0x0)

186.150141ms ago: executing program 5 (id=1373):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}, 0x0)

117.24092ms ago: executing program 5 (id=1374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'system.', '\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004deffffffffffffff0000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r4], 0x48}}, 0x0)

19.67801ms ago: executing program 5 (id=1375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'system.', '\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004deffffffffffffff0000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBvnTh9URJKefQFgYKoeCRN+qAHLkUgcQAJCQ5FnEyaVqVug5og0aqCwiEcUSXuiCMSfwEXygUBJySucEdIEcqFwslo7d3UOLYTJ05c4t9PWnXGO+7Mt7sTj2d2HUDfGo2IAxFxT0T8GhHDEZE0Fhit/XN78frU34vXp5KoVN74M6mW+2vx+lReNH/frlqmMtCm3vm3I0rl8vSVLD8+d+m98dmr1567cKl0fvr89OXJU6eOHzs0dHLyRFfi3J22df+HMwf3vfLWzdemztx858evkyzuaIijW0arR625J7tdWY/trksngz1sCB1J+2h6uorV/j8cA7Fjad9wvPxJTxsHbKhKpVDZ1nr3jQqwhaWjeaAf5R/06ffffNukocddYeF0LM1j3M622p7BKGRlihtY/2hEnLnxzxfpFhs0DwEAUO/W6Yh4ttn4rxAP1pW7N1sbGomI+yJiT0TcHxF7I+KBiGrZhyLi4Q7rb1whWT7+qQyvKbBVSsd/L2RrW/8d/+WjvxgZyHK7q/EXk3MXytNHs2NyJIrb0vxEmzq+e+mXz1rtqx//pVtafz4WzNrxx2DDBN3ZUrG0npjrLXxcWwBYHn8S+TJOOj7eFxH7O/y/8+8YF57+6mCrMivH30YX1pkqX0Y8VTv/N6Ih/lzScn1y4vmTkyfGt0d5+uh4flUs99PP86+3qn9d8XfBwq1K7Gx6/S/FP5Jsj5i9eu1idb12tvM65n/7tOV3mrVd/3OloeTNanooe+2D0tzclYmIoeTV5a9P3nlvns/Lp9f/kcPN+/+euHMkDkREehEfiohHIuLRrO2PRcTjEXG4Tfw/vPjEu53H32ZWvovS+M+udP6j/vx3nhi4+P03ncefS8//8WrqSPZKev5Ximu1DVzPsQMAAID/i0L1HvikMLaULhTGxmr38O+NnYXyzOzcM+dm3r98tnav/EgUC/lM13DdfOhENjec5ycb8seyeePPB3ZU82NTM+VO5xOB7trVov+nfm/3AA+wNXheC/qX/g/9S/+H/qX/Q//S/6F/Nev/H/WgHcDmW+Hzf8dmtQPYfMb/0L/0f+hf+j/0pZbPxhfW9ci/RI8S3w6t77caVp+Iwl0S8pZJFKPprsFV/5jFGhJJRGxruqvXf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6498AAAD//9di55E=")
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r4], 0x48}}, 0x0)

0s ago: executing program 6 (id=1376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r2)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r10 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x40})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r11 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000540)='(pu&00\t||')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

6468] EXT4-fs (loop3): 1 truncate cleaned up
[   89.781184][ T6465] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.848: bg 0: block 35: padding at end of block bitmap is not set
[   89.795680][ T6465] EXT4-fs (loop5): Remounting filesystem read-only
[   89.802256][ T6465] EXT4-fs (loop5): 1 truncate cleaned up
[   89.808488][ T6465] SELinux: (dev loop5, type ext4) getxattr errno 5
[   89.840686][ T6472] loop2: detected capacity change from 0 to 2048
[   89.847715][ T6472] EXT4-fs: Ignoring removed orlov option
[   89.878861][ T3415] team0 (unregistering): Port device team_slave_1 removed
[   89.889959][ T3415] team0 (unregistering): Port device team_slave_0 removed
[   89.943424][ T6478] loop2: detected capacity change from 0 to 2048
[   89.950070][ T6478] EXT4-fs: Ignoring removed oldalloc option
[   89.957128][ T6478] EXT4-fs (loop2): stripe (257) is not aligned with cluster size (16), stripe is disabled
[   89.984416][ T6417] chnl_net:caif_netlink_parms(): no params data found
[   90.160004][ T6499] FAULT_INJECTION: forcing a failure.
[   90.160004][ T6499] name failslab, interval 1, probability 0, space 0, times 0
[   90.172828][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.5.853 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   90.172905][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   90.172921][ T6499] Call Trace:
[   90.172929][ T6499]  <TASK>
[   90.172938][ T6499]  dump_stack_lvl+0xf2/0x150
[   90.172973][ T6499]  dump_stack+0x15/0x1a
[   90.173054][ T6499]  should_fail_ex+0x24a/0x260
[   90.173090][ T6499]  should_failslab+0x8f/0xb0
[   90.173120][ T6499]  __kmalloc_noprof+0xab/0x3f0
[   90.173144][ T6499]  ? ethnl_default_notify+0xbc/0x4d0
[   90.173229][ T6499]  ? tun_set_link_ksettings+0x29/0x40
[   90.173256][ T6499]  ethnl_default_notify+0xbc/0x4d0
[   90.173303][ T6499]  ethtool_notify+0xbb/0x1b0
[   90.173340][ T6499]  ethnl_default_set_doit+0x45a/0x5f0
[   90.173418][ T6499]  genl_rcv_msg+0x620/0x6d0
[   90.173443][ T6499]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[   90.173478][ T6499]  ? __dev_queue_xmit+0xb6e/0x2090
[   90.173568][ T6499]  netlink_rcv_skb+0x12c/0x230
[   90.173597][ T6499]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.173680][ T6499]  genl_rcv+0x28/0x40
[   90.173701][ T6499]  netlink_unicast+0x599/0x670
[   90.173730][ T6499]  netlink_sendmsg+0x5cc/0x6e0
[   90.173770][ T6499]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.173922][ T6499]  __sock_sendmsg+0x140/0x180
[   90.173954][ T6499]  ____sys_sendmsg+0x326/0x4b0
[   90.174053][ T6499]  __sys_sendmsg+0x19d/0x230
[   90.174116][ T6499]  __x64_sys_sendmsg+0x46/0x50
[   90.174147][ T6499]  x64_sys_call+0x2734/0x2dc0
[   90.174249][ T6499]  do_syscall_64+0xc9/0x1c0
[   90.174317][ T6499]  ? clear_bhb_loop+0x55/0xb0
[   90.174345][ T6499]  ? clear_bhb_loop+0x55/0xb0
[   90.174375][ T6499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.174406][ T6499] RIP: 0033:0x7f989df7d169
[   90.174426][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.174448][ T6499] RSP: 002b:00007f989c5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.174471][ T6499] RAX: ffffffffffffffda RBX: 00007f989e196080 RCX: 00007f989df7d169
[   90.174486][ T6499] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000005
[   90.174501][ T6499] RBP: 00007f989c5c0090 R08: 0000000000000000 R09: 0000000000000000
[   90.174543][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.174622][ T6499] R13: 0000000000000000 R14: 00007f989e196080 R15: 00007ffd6bf771f8
[   90.174644][ T6499]  </TASK>
[   90.180943][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.320154][ T6507] loop4: detected capacity change from 0 to 1024
[   90.320281][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.346700][ T6507] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.855: Failed to acquire dquot type 0
[   90.349496][ T6417] bridge_slave_0: entered allmulticast mode
[   90.463047][ T6417] bridge_slave_0: entered promiscuous mode
[   90.471346][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.478526][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.483314][ T6507] EXT4-fs (loop4): 1 truncate cleaned up
[   90.500824][ T6417] bridge_slave_1: entered allmulticast mode
[   90.507489][ T6417] bridge_slave_1: entered promiscuous mode
[   90.565442][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.575856][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.616007][ T6417] team0: Port device team_slave_0 added
[   90.624240][ T6417] team0: Port device team_slave_1 added
[   90.651083][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.658133][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.684150][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.714979][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.722000][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.747932][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.800987][ T3415] IPVS: stop unused estimator thread 0...
[   90.840223][ T6523] loop2: detected capacity change from 0 to 1024
[   90.900687][ T6523] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.902551][ T6417] hsr_slave_0: entered promiscuous mode
[   90.921916][ T6417] hsr_slave_1: entered promiscuous mode
[   90.930599][ T6523] EXT4-fs error (device loop2): ext4_empty_dir:3135: inode #12: block 80: comm syz.2.859: bad entry in directory: inode out of bounds - offset=24, inode=32768, rec_len=16, size=1024 fake=0
[   90.949534][ T6531] loop5: detected capacity change from 0 to 2048
[   90.962013][ T6531] EXT4-fs: Ignoring removed oldalloc option
[   90.980755][ T6531] EXT4-fs (loop5): stripe (257) is not aligned with cluster size (16), stripe is disabled
[   91.006622][ T6523] bond_slave_1: entered promiscuous mode
[   91.018532][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[   91.048882][ T6523] bond0: (slave bond_slave_1): Releasing backup interface
[   91.057996][ T6523] bond_slave_1 (unregistering): left promiscuous mode
[   91.227399][ T6417] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   91.255241][ T6417] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   91.281377][ T6417] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   91.296580][ T6555] loop5: detected capacity change from 0 to 2048
[   91.300006][ T6417] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   91.335542][ T6555] EXT4-fs: Ignoring removed orlov option
[   91.379189][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.863'.
[   91.409478][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.425967][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[   91.444841][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.452058][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.475056][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.482234][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.506595][ T6417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.517349][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.598827][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.671770][ T6590] loop3: detected capacity change from 0 to 1024
[   91.696763][ T6596] macvlan1: entered promiscuous mode
[   91.710340][ T6590] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.867: Failed to acquire dquot type 0
[   91.715677][ T6596] ipvlan0: entered promiscuous mode
[   91.742580][ T6596] ipvlan0: left promiscuous mode
[   91.747825][ T6596] macvlan1: left promiscuous mode
[   91.761171][ T6590] EXT4-fs (loop3): 1 truncate cleaned up
[   91.789519][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'.
[   91.845903][ T6572] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   91.862125][ T6572] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   91.874726][ T6572] EXT4-fs (loop5): This should not happen!! Data will be lost
[   91.874726][ T6572] 
[   91.884480][ T6572] EXT4-fs (loop5): Total free blocks count 0
[   91.890792][ T6572] EXT4-fs (loop5): Free/Dirty block details
[   91.896837][ T6572] EXT4-fs (loop5): free_blocks=2415919104
[   91.902635][ T6572] EXT4-fs (loop5): dirty_blocks=8192
[   91.908020][ T6572] EXT4-fs (loop5): Block reservation details
[   91.914084][ T6572] EXT4-fs (loop5): i_reserved_data_blocks=512
[   91.931629][ T6611] macvlan1: entered promiscuous mode
[   91.940227][ T6611] ipvlan0: entered promiscuous mode
[   91.946224][ T6611] ipvlan0: left promiscuous mode
[   91.957506][ T6611] macvlan1: left promiscuous mode
[   91.961185][ T6572] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   91.975527][ T6572] EXT4-fs (loop5): This should not happen!! Data will be lost
[   91.975527][ T6572] 
[   91.996148][ T6417] veth0_vlan: entered promiscuous mode
[   92.024546][ T6417] veth1_vlan: entered promiscuous mode
[   92.062356][ T6417] veth0_macvtap: entered promiscuous mode
[   92.073961][ T6417] veth1_macvtap: entered promiscuous mode
[   92.129533][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.140051][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.149948][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.160453][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.170333][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.180819][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.190725][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.201289][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.226199][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.246851][ T6639] netem: change failed
[   92.273708][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.284303][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.294220][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.304815][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.314845][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.325617][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.335721][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.346325][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.363849][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.384896][ T6646] loop4: detected capacity change from 0 to 1024
[   92.397535][ T6417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.406665][ T6417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.415480][ T6417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.424227][ T6417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.441081][ T6646] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.879: Failed to acquire dquot type 0
[   92.480386][ T6646] EXT4-fs (loop4): 1 truncate cleaned up
[   92.530576][ T6663] loop6: detected capacity change from 0 to 1024
[   92.571739][ T6666] IPv6: Can't replace route, no match found
[   92.629096][ T6677] loop6: detected capacity change from 0 to 128
[   92.674487][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'.
[   92.849093][ T6700] netlink: 'syz.6.885': attribute type 4 has an invalid length.
[   92.865645][ T6698] loop4: detected capacity change from 0 to 2048
[   92.929833][ T6705] macvlan1: entered promiscuous mode
[   92.937432][ T6703] loop3: detected capacity change from 0 to 2048
[   92.953454][ T6705] ipvlan0: entered promiscuous mode
[   92.964174][ T6703] EXT4-fs: Ignoring removed orlov option
[   92.969610][ T6705] ipvlan0: left promiscuous mode
[   93.052428][ T6705] macvlan1: left promiscuous mode
[   93.199414][ T6721] loop2: detected capacity change from 0 to 2048
[   93.252767][ T6721]  loop2: p1 < > p4
[   93.258083][ T6723] loop3: detected capacity change from 0 to 1024
[   93.265391][ T6721] loop2: p4 size 8388608 extends beyond EOD, truncated
[   93.279410][ T6725] nfs4: Bad value for 'source'
[   93.295151][ T6723] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.892: Failed to acquire dquot type 0
[   93.298613][ T3000]  loop2: p1 < > p4
[   93.316769][ T3000] loop2: p4 size 8388608 extends beyond EOD, truncated
[   93.324560][ T6723] EXT4-fs (loop3): 1 truncate cleaned up
[   93.506672][ T6734] veth0_to_bond: entered promiscuous mode
[   93.529760][ T6733] veth0_to_bond: left promiscuous mode
[   93.557886][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   93.596347][ T6740] loop2: detected capacity change from 0 to 2048
[   93.622906][ T6740] EXT4-fs: Ignoring removed orlov option
[   93.711989][ T6752] program syz.6.903 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.751958][ T6752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   93.822052][ T6752] loop6: detected capacity change from 0 to 1024
[   93.830725][ T6752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   93.848042][ T6752] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.871098][ T6752] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   93.880836][ T6752] EXT4-fs (loop6): orphan cleanup on readonly fs
[   93.882500][ T6754] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   93.914783][ T6752] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.903: Invalid inode table block 0 in block_group 0
[   93.925501][ T6754] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   93.939908][ T6754] EXT4-fs (loop2): This should not happen!! Data will be lost
[   93.939908][ T6754] 
[   93.949630][ T6754] EXT4-fs (loop2): Total free blocks count 0
[   93.955759][ T6754] EXT4-fs (loop2): Free/Dirty block details
[   93.961675][ T6754] EXT4-fs (loop2): free_blocks=2415919104
[   93.967463][ T6754] EXT4-fs (loop2): dirty_blocks=8192
[   93.972942][ T6754] EXT4-fs (loop2): Block reservation details
[   93.979035][ T6754] EXT4-fs (loop2): i_reserved_data_blocks=512
[   93.988256][ T6752] EXT4-fs (loop6): Remounting filesystem read-only
[   93.997706][ T6752] EXT4-fs (loop6): 1 truncate cleaned up
[   94.001483][ T6754] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   94.016214][ T6754] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.016214][ T6754] 
[   94.027652][ T6752] SELinux: (dev loop6, type ext4) getxattr errno 5
[   94.220511][ T6762] loop2: detected capacity change from 0 to 2048
[   94.237019][ T6762] EXT4-fs: Ignoring removed orlov option
[   94.425566][   T29] kauditd_printk_skb: 1535 callbacks suppressed
[   94.425582][   T29] audit: type=1326 audit(1740643157.268:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6742 comm="syz.3.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[   94.522725][ T6769] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   94.588268][ T6780] veth0_to_bond: entered promiscuous mode
[   94.589390][   T29] audit: type=1326 audit(1740643157.428:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.594756][ T6779] veth0_to_bond: left promiscuous mode
[   94.617497][   T29] audit: type=1326 audit(1740643157.428:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.617530][   T29] audit: type=1326 audit(1740643157.428:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.617558][   T29] audit: type=1326 audit(1740643157.428:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.625606][ T6769] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   94.646500][   T29] audit: type=1326 audit(1740643157.428:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.669808][ T6769] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.669808][ T6769] 
[   94.693237][   T29] audit: type=1326 audit(1740643157.428:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.705664][ T6769] EXT4-fs (loop2): Total free blocks count 0
[   94.728954][   T29] audit: type=1326 audit(1740643157.428:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.738642][ T6769] EXT4-fs (loop2): Free/Dirty block details
[   94.738657][ T6769] EXT4-fs (loop2): free_blocks=2415919104
[   94.738670][ T6769] EXT4-fs (loop2): dirty_blocks=8192
[   94.761947][   T29] audit: type=1326 audit(1740643157.428:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.767931][ T6769] EXT4-fs (loop2): Block reservation details
[   94.791325][   T29] audit: type=1326 audit(1740643157.428:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[   94.797308][ T6769] EXT4-fs (loop2): i_reserved_data_blocks=512
[   94.868977][ T6784] FAULT_INJECTION: forcing a failure.
[   94.868977][ T6784] name failslab, interval 1, probability 0, space 0, times 0
[   94.881712][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.5.912 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   94.881768][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   94.881785][ T6784] Call Trace:
[   94.881837][ T6784]  <TASK>
[   94.881847][ T6784]  dump_stack_lvl+0xf2/0x150
[   94.881882][ T6784]  dump_stack+0x15/0x1a
[   94.881942][ T6784]  should_fail_ex+0x24a/0x260
[   94.881981][ T6784]  should_failslab+0x8f/0xb0
[   94.882021][ T6784]  kmem_cache_alloc_node_noprof+0x59/0x320
[   94.882090][ T6784]  ? __alloc_skb+0x10b/0x310
[   94.882118][ T6784]  __alloc_skb+0x10b/0x310
[   94.882144][ T6784]  alloc_uevent_skb+0x5b/0x120
[   94.882207][ T6784]  kobject_uevent_net_broadcast+0x242/0x420
[   94.882243][ T6784]  kobject_uevent_env+0x415/0x550
[   94.882281][ T6784]  kobject_uevent+0x1c/0x30
[   94.882309][ T6784]  device_del+0x6fa/0x780
[   94.882336][ T6784]  ? __try_to_del_timer_sync+0x147/0x160
[   94.882447][ T6784]  device_unregister+0x15/0x40
[   94.882474][ T6784]  wakeup_source_sysfs_remove+0x25/0x30
[   94.882499][ T6784]  wakeup_source_unregister+0xee/0x110
[   94.882564][ T6784]  __ep_remove+0x309/0x450
[   94.882603][ T6784]  ep_clear_and_put+0x158/0x2d0
[   94.882696][ T6784]  ep_eventpoll_release+0x2c/0x40
[   94.882732][ T6784]  ? __pfx_ep_eventpoll_release+0x10/0x10
[   94.882774][ T6784]  __fput+0x2ac/0x640
[   94.882804][ T6784]  ____fput+0x1c/0x30
[   94.882828][ T6784]  task_work_run+0x13a/0x1a0
[   94.882875][ T6784]  syscall_exit_to_user_mode+0xa8/0x120
[   94.882904][ T6784]  do_syscall_64+0xd6/0x1c0
[   94.882984][ T6784]  ? clear_bhb_loop+0x55/0xb0
[   94.883034][ T6784]  ? clear_bhb_loop+0x55/0xb0
[   94.883070][ T6784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.883106][ T6784] RIP: 0033:0x7f989df7d169
[   94.883127][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.883209][ T6784] RSP: 002b:00007f989c5e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119
[   94.883228][ T6784] RAX: 0000000000000001 RBX: 00007f989e195fa0 RCX: 00007f989df7d169
[   94.883242][ T6784] RDX: 0000000000000001 RSI: 00004000008c9fc4 RDI: 0000000000000008
[   94.883309][ T6784] RBP: 00007f989c5e1090 R08: 0000000000000000 R09: 0000000000000000
[   94.883324][ T6784] R10: fffffffffffffff7 R11: 0000000000000246 R12: 0000000000000001
[   94.883340][ T6784] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[   94.883364][ T6784]  </TASK>
[   94.910680][ T6769] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   95.065817][ T6797] loop6: detected capacity change from 0 to 128
[   95.076293][ T6769] EXT4-fs (loop2): This should not happen!! Data will be lost
[   95.076293][ T6769] 
[   95.196557][ T6799] loop5: detected capacity change from 0 to 512
[   95.224643][ T6799] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.918: bg 0: block 35: padding at end of block bitmap is not set
[   95.239615][ T6803] macvlan1: entered promiscuous mode
[   95.247123][ T6801] loop3: detected capacity change from 0 to 2048
[   95.260708][ T6803] ipvlan0: entered promiscuous mode
[   95.261464][ T6801] EXT4-fs: Ignoring removed orlov option
[   95.272668][ T6803] ipvlan0: left promiscuous mode
[   95.278216][ T6803] macvlan1: left promiscuous mode
[   95.285749][ T6799] EXT4-fs (loop5): Remounting filesystem read-only
[   95.292700][ T6799] EXT4-fs (loop5): 1 truncate cleaned up
[   95.304438][ T6799] SELinux: (dev loop5, type ext4) getxattr errno 5
[   95.341073][ T6810] macvlan1: entered promiscuous mode
[   95.348921][ T6810] ipvlan0: entered promiscuous mode
[   95.355092][ T6810] ipvlan0: left promiscuous mode
[   95.360351][ T6810] macvlan1: left promiscuous mode
[   95.427098][ T6816] macvlan1: entered promiscuous mode
[   95.433470][ T6816] ipvlan0: entered promiscuous mode
[   95.439465][ T6816] ipvlan0: left promiscuous mode
[   95.449716][ T6816] macvlan1: left promiscuous mode
[   95.460065][ T6818] veth0_to_bond: entered promiscuous mode
[   95.467876][ T6817] veth0_to_bond: left promiscuous mode
[   95.549530][ T6823] loop2: detected capacity change from 0 to 1024
[   95.565888][ T6819] loop3: detected capacity change from 0 to 512
[   95.569420][ T6823] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.927: Failed to acquire dquot type 0
[   95.594588][ T6819] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.607984][ T6819] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.923: corrupted inode contents
[   95.619950][ T6819] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.923: mark_inode_dirty error
[   95.623957][ T6823] EXT4-fs (loop2): 1 truncate cleaned up
[   95.646717][ T6819] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.923: corrupted inode contents
[   95.659031][ T6819] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.923: mark_inode_dirty error
[   95.723899][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[   95.816970][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'.
[   95.858849][ T6842] loop5: detected capacity change from 0 to 1024
[   95.889532][ T6842] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.930: Failed to acquire dquot type 0
[   95.941765][ T6849] FAULT_INJECTION: forcing a failure.
[   95.941765][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.954928][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.6.932 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   95.954956][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   95.955006][ T6849] Call Trace:
[   95.955024][ T6849]  <TASK>
[   95.955033][ T6849]  dump_stack_lvl+0xf2/0x150
[   95.955113][ T6849]  dump_stack+0x15/0x1a
[   95.955140][ T6849]  should_fail_ex+0x24a/0x260
[   95.955177][ T6849]  should_fail+0xb/0x10
[   95.955209][ T6849]  should_fail_usercopy+0x1a/0x20
[   95.955256][ T6849]  _copy_from_user+0x1c/0xa0
[   95.955297][ T6849]  copy_msghdr_from_user+0x54/0x2a0
[   95.955332][ T6849]  ? __fget_files+0x17c/0x1c0
[   95.955381][ T6849]  __sys_sendmsg+0x13e/0x230
[   95.955466][ T6849]  __x64_sys_sendmsg+0x46/0x50
[   95.955489][ T6849]  x64_sys_call+0x2734/0x2dc0
[   95.955516][ T6849]  do_syscall_64+0xc9/0x1c0
[   95.955629][ T6849]  ? clear_bhb_loop+0x55/0xb0
[   95.955659][ T6849]  ? clear_bhb_loop+0x55/0xb0
[   95.955692][ T6849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.955723][ T6849] RIP: 0033:0x7f2f305dd169
[   95.955738][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.955814][ T6849] RSP: 002b:00007f2f2ec47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.955837][ T6849] RAX: ffffffffffffffda RBX: 00007f2f307f5fa0 RCX: 00007f2f305dd169
[   95.955852][ T6849] RDX: 0000000000000000 RSI: 0000400000000680 RDI: 0000000000000007
[   95.955867][ T6849] RBP: 00007f2f2ec47090 R08: 0000000000000000 R09: 0000000000000000
[   95.955881][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.955895][ T6849] R13: 0000000000000000 R14: 00007f2f307f5fa0 R15: 00007fff86cc1408
[   95.955987][ T6849]  </TASK>
[   95.960145][ T6842] EXT4-fs (loop5): 1 truncate cleaned up
[   95.971000][ T6848] loop2: detected capacity change from 0 to 2048
[   96.052126][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'.
[   96.053419][ T6848] EXT4-fs: Ignoring removed orlov option
[   96.328048][ T6872] netlink: 'syz.2.937': attribute type 4 has an invalid length.
[   96.369729][ T6876] loop2: detected capacity change from 0 to 512
[   96.370794][ T6877] macvlan1: entered promiscuous mode
[   96.384586][ T6877] ipvlan0: entered promiscuous mode
[   96.390780][ T6877] ipvlan0: left promiscuous mode
[   96.390993][ T6876] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.942: bg 0: block 35: padding at end of block bitmap is not set
[   96.411893][ T6876] EXT4-fs (loop2): Remounting filesystem read-only
[   96.411912][ T6877] macvlan1: left promiscuous mode
[   96.418692][ T6876] EXT4-fs (loop2): 1 truncate cleaned up
[   96.430639][ T6876] SELinux: (dev loop2, type ext4) getxattr errno 5
[   96.496402][ T6880] macvlan1: entered promiscuous mode
[   96.514326][ T6880] ipvlan0: entered promiscuous mode
[   96.520111][ T6880] ipvlan0: left promiscuous mode
[   96.542406][ T6880] macvlan1: left promiscuous mode
[   96.639604][ T6891] loop2: detected capacity change from 0 to 2048
[   96.652108][ T6891] EXT4-fs: Ignoring removed orlov option
[   96.776251][ T6906] loop4: detected capacity change from 0 to 512
[   96.785078][ T6906] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.955: bg 0: block 35: padding at end of block bitmap is not set
[   96.805094][ T6906] EXT4-fs (loop4): Remounting filesystem read-only
[   96.811791][ T6906] EXT4-fs (loop4): 1 truncate cleaned up
[   96.817938][ T6906] SELinux: (dev loop4, type ext4) getxattr errno 5
[   96.826009][ T6907] lo speed is unknown, defaulting to 1000
[   96.862544][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'.
[   96.871523][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'.
[   96.914798][ T6916] macvlan1: entered promiscuous mode
[   96.921102][ T6916] ipvlan0: entered promiscuous mode
[   96.928614][ T6916] ipvlan0: left promiscuous mode
[   96.933787][ T6916] macvlan1: left promiscuous mode
[   96.973043][ T6907] dummy0 speed is unknown, defaulting to 1000
[   96.994737][ T6919] FAULT_INJECTION: forcing a failure.
[   96.994737][ T6919] name failslab, interval 1, probability 0, space 0, times 0
[   97.007459][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.6.959 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   97.007490][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   97.007504][ T6919] Call Trace:
[   97.007512][ T6919]  <TASK>
[   97.007519][ T6919]  dump_stack_lvl+0xf2/0x150
[   97.007597][ T6919]  dump_stack+0x15/0x1a
[   97.007618][ T6919]  should_fail_ex+0x24a/0x260
[   97.007701][ T6919]  should_failslab+0x8f/0xb0
[   97.007738][ T6919]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   97.007762][ T6919]  ? create_local_trace_uprobe+0x103/0x2d0
[   97.007788][ T6919]  kstrdup+0x3d/0xd0
[   97.007871][ T6919]  create_local_trace_uprobe+0x103/0x2d0
[   97.007904][ T6919]  perf_uprobe_init+0xc2/0x140
[   97.007943][ T6919]  perf_uprobe_event_init+0xe2/0x140
[   97.007972][ T6919]  perf_try_init_event+0xcb/0x4f0
[   97.008036][ T6919]  ? perf_event_alloc+0xac6/0x12d0
[   97.008061][ T6919]  perf_event_alloc+0xad1/0x12d0
[   97.008090][ T6919]  __se_sys_perf_event_open+0x7f2/0x2230
[   97.008119][ T6919]  ? vfs_write+0x644/0x920
[   97.008188][ T6919]  ? putname+0xcf/0xf0
[   97.008279][ T6919]  __x64_sys_perf_event_open+0x67/0x80
[   97.008300][ T6919]  x64_sys_call+0x1deb/0x2dc0
[   97.008394][ T6919]  do_syscall_64+0xc9/0x1c0
[   97.008431][ T6919]  ? clear_bhb_loop+0x55/0xb0
[   97.008464][ T6919]  ? clear_bhb_loop+0x55/0xb0
[   97.008497][ T6919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.008559][ T6919] RIP: 0033:0x7f2f305dd169
[   97.008573][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.008661][ T6919] RSP: 002b:00007f2f2ec47038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   97.008684][ T6919] RAX: ffffffffffffffda RBX: 00007f2f307f5fa0 RCX: 00007f2f305dd169
[   97.008698][ T6919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000
[   97.008713][ T6919] RBP: 00007f2f2ec47090 R08: 0000000000000000 R09: 0000000000000000
[   97.008726][ T6919] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002
[   97.008738][ T6919] R13: 0000000000000000 R14: 00007f2f307f5fa0 R15: 00007fff86cc1408
[   97.008756][ T6919]  </TASK>
[   97.256386][ T6924] loop2: detected capacity change from 0 to 2048
[   97.267413][ T6924] EXT4-fs: Ignoring removed oldalloc option
[   97.275117][ T6924] EXT4-fs (loop2): stripe (257) is not aligned with cluster size (16), stripe is disabled
[   97.347894][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.364721][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.374727][ T6937] loop6: detected capacity change from 0 to 128
[   97.400118][ T6937] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   97.404560][ T6939] loop3: detected capacity change from 0 to 2048
[   97.416478][ T6939] EXT4-fs: Ignoring removed oldalloc option
[   97.423108][ T6939] EXT4-fs (loop3): stripe (257) is not aligned with cluster size (16), stripe is disabled
[   97.492087][ T6944] loop2: detected capacity change from 0 to 1024
[   97.506535][ T6944] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.967: Failed to acquire dquot type 0
[   97.521770][ T6944] EXT4-fs (loop2): 1 truncate cleaned up
[   97.641873][ T6960] loop3: detected capacity change from 0 to 128
[   97.655643][ T6960] FAULT_INJECTION: forcing a failure.
[   97.655643][ T6960] name failslab, interval 1, probability 0, space 0, times 0
[   97.668350][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.3.974 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   97.668377][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   97.668390][ T6960] Call Trace:
[   97.668396][ T6960]  <TASK>
[   97.668404][ T6960]  dump_stack_lvl+0xf2/0x150
[   97.668449][ T6960]  dump_stack+0x15/0x1a
[   97.668470][ T6960]  should_fail_ex+0x24a/0x260
[   97.668501][ T6960]  should_failslab+0x8f/0xb0
[   97.668530][ T6960]  kmem_cache_alloc_noprof+0x52/0x320
[   97.668552][ T6960]  ? getname_flags+0x81/0x3b0
[   97.668593][ T6960]  getname_flags+0x81/0x3b0
[   97.668639][ T6960]  getname+0x17/0x20
[   97.668672][ T6960]  do_sys_openat2+0x67/0x120
[   97.668692][ T6960]  __x64_sys_openat+0xf3/0x120
[   97.668713][ T6960]  x64_sys_call+0x2b30/0x2dc0
[   97.668780][ T6960]  do_syscall_64+0xc9/0x1c0
[   97.668811][ T6960]  ? clear_bhb_loop+0x55/0xb0
[   97.668891][ T6960]  ? clear_bhb_loop+0x55/0xb0
[   97.669046][ T6960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.669139][ T6960] RIP: 0033:0x7f2aca1ed169
[   97.669155][ T6960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.669173][ T6960] RSP: 002b:00007f2ac8857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   97.669191][ T6960] RAX: ffffffffffffffda RBX: 00007f2aca405fa0 RCX: 00007f2aca1ed169
[   97.669203][ T6960] RDX: 0000000000002940 RSI: 0000400000000080 RDI: ffffffffffffff9c
[   97.669222][ T6960] RBP: 00007f2ac8857090 R08: 0000000000000000 R09: 0000000000000000
[   97.669234][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.669307][ T6960] R13: 0000000000000000 R14: 00007f2aca405fa0 R15: 00007ffcf8446228
[   97.669325][ T6960]  </TASK>
[   97.674713][ T6962] IPv6: Can't replace route, no match found
[   97.901518][ T6968] loop3: detected capacity change from 0 to 1024
[   97.916814][ T6970] loop2: detected capacity change from 0 to 1024
[   97.949947][ T6968] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.978: Failed to acquire dquot type 0
[   97.974412][ T6968] EXT4-fs (loop3): 1 truncate cleaned up
[   97.980485][ T6968] EXT4-fs mount: 130 callbacks suppressed
[   97.980502][ T6968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.004593][ T6970] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.979: Failed to acquire dquot type 0
[   98.016577][ T6970] EXT4-fs (loop2): 1 truncate cleaned up
[   98.023911][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.037530][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.047994][ T6980] FAULT_INJECTION: forcing a failure.
[   98.047994][ T6980] name failslab, interval 1, probability 0, space 0, times 0
[   98.060670][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.4.983 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   98.060715][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.060731][ T6980] Call Trace:
[   98.060739][ T6980]  <TASK>
[   98.060748][ T6980]  dump_stack_lvl+0xf2/0x150
[   98.060782][ T6980]  dump_stack+0x15/0x1a
[   98.060809][ T6980]  should_fail_ex+0x24a/0x260
[   98.060879][ T6980]  should_failslab+0x8f/0xb0
[   98.060916][ T6980]  __kmalloc_noprof+0xab/0x3f0
[   98.060941][ T6980]  ? kernfs_fop_write_iter+0xe1/0x2c0
[   98.061070][ T6980]  ? selinux_file_permission+0x22a/0x360
[   98.061107][ T6980]  kernfs_fop_write_iter+0xe1/0x2c0
[   98.061141][ T6980]  vfs_write+0x77b/0x920
[   98.061168][ T6980]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   98.061251][ T6980]  ksys_write+0xe8/0x1b0
[   98.061284][ T6980]  __x64_sys_write+0x42/0x50
[   98.061316][ T6980]  x64_sys_call+0x287e/0x2dc0
[   98.061343][ T6980]  do_syscall_64+0xc9/0x1c0
[   98.061452][ T6980]  ? clear_bhb_loop+0x55/0xb0
[   98.061484][ T6980]  ? clear_bhb_loop+0x55/0xb0
[   98.061518][ T6980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.061602][ T6980] RIP: 0033:0x7fd6da4cd169
[   98.061617][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.061636][ T6980] RSP: 002b:00007fd6d8b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   98.061657][ T6980] RAX: ffffffffffffffda RBX: 00007fd6da6e5fa0 RCX: 00007fd6da4cd169
[   98.061669][ T6980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[   98.061681][ T6980] RBP: 00007fd6d8b31090 R08: 0000000000000000 R09: 0000000000000000
[   98.061697][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.061777][ T6980] R13: 0000000000000000 R14: 00007fd6da6e5fa0 R15: 00007ffe4a4ac2b8
[   98.061798][ T6980]  </TASK>
[   98.257569][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.284697][ T6417] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.294010][ T6984] loop5: detected capacity change from 0 to 2048
[   98.309808][ T6984] EXT4-fs: Ignoring removed orlov option
[   98.338034][ T6988] IPv6: Can't replace route, no match found
[   98.338989][ T6984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.372732][ T6993] IPv6: Can't replace route, no match found
[   98.470043][ T4699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.491039][ T7011] FAULT_INJECTION: forcing a failure.
[   98.491039][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.504309][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.4.997 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   98.504341][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.504356][ T7011] Call Trace:
[   98.504365][ T7011]  <TASK>
[   98.504375][ T7011]  dump_stack_lvl+0xf2/0x150
[   98.504409][ T7011]  dump_stack+0x15/0x1a
[   98.504492][ T7011]  should_fail_ex+0x24a/0x260
[   98.504528][ T7011]  should_fail+0xb/0x10
[   98.504560][ T7011]  should_fail_usercopy+0x1a/0x20
[   98.504634][ T7011]  _copy_to_user+0x20/0xa0
[   98.504653][ T7011]  simple_read_from_buffer+0xa0/0x110
[   98.504748][ T7011]  proc_fail_nth_read+0xf9/0x140
[   98.504780][ T7011]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   98.504941][ T7011]  vfs_read+0x19b/0x6f0
[   98.504969][ T7011]  ? __rcu_read_unlock+0x4e/0x70
[   98.504996][ T7011]  ? __fget_files+0x17c/0x1c0
[   98.505113][ T7011]  ksys_read+0xe8/0x1b0
[   98.505139][ T7011]  __x64_sys_read+0x42/0x50
[   98.505246][ T7011]  x64_sys_call+0x2874/0x2dc0
[   98.505295][ T7011]  do_syscall_64+0xc9/0x1c0
[   98.505348][ T7011]  ? clear_bhb_loop+0x55/0xb0
[   98.505380][ T7011]  ? clear_bhb_loop+0x55/0xb0
[   98.505408][ T7011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.505434][ T7011] RIP: 0033:0x7fd6da4cbb7c
[   98.505450][ T7011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   98.505513][ T7011] RSP: 002b:00007fd6d8b31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   98.505532][ T7011] RAX: ffffffffffffffda RBX: 00007fd6da6e5fa0 RCX: 00007fd6da4cbb7c
[   98.505544][ T7011] RDX: 000000000000000f RSI: 00007fd6d8b310a0 RDI: 0000000000000004
[   98.505555][ T7011] RBP: 00007fd6d8b31090 R08: 0000000000000000 R09: 0000000000000000
[   98.505636][ T7011] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001
[   98.505650][ T7011] R13: 0000000000000000 R14: 00007fd6da6e5fa0 R15: 00007ffe4a4ac2b8
[   98.505672][ T7011]  </TASK>
[   98.718312][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'.
[   98.801722][ T7022] netlink: 'syz.5.995': attribute type 4 has an invalid length.
[   98.845473][ T7028] IPv6: Can't replace route, no match found
[   98.913037][ T7033] loop4: detected capacity change from 0 to 2048
[   98.931020][ T7033] EXT4-fs: Ignoring removed orlov option
[   98.946842][ T7033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.974140][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.019583][ T7045] loop5: detected capacity change from 0 to 128
[   99.050487][ T7049] macvlan1: entered promiscuous mode
[   99.060851][ T7049] ipvlan0: entered promiscuous mode
[   99.071408][ T7049] ipvlan0: left promiscuous mode
[   99.078499][ T7049] macvlan1: left promiscuous mode
[   99.149388][ T7059] FAULT_INJECTION: forcing a failure.
[   99.149388][ T7059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.162551][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.2.1016 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   99.162580][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   99.162595][ T7059] Call Trace:
[   99.162604][ T7059]  <TASK>
[   99.162612][ T7059]  dump_stack_lvl+0xf2/0x150
[   99.162657][ T7059]  dump_stack+0x15/0x1a
[   99.162679][ T7059]  should_fail_ex+0x24a/0x260
[   99.162709][ T7059]  should_fail+0xb/0x10
[   99.162738][ T7059]  should_fail_usercopy+0x1a/0x20
[   99.162806][ T7059]  _copy_from_user+0x1c/0xa0
[   99.162845][ T7059]  __sys_bpf+0x14e/0x7a0
[   99.162886][ T7059]  __x64_sys_bpf+0x43/0x50
[   99.162970][ T7059]  x64_sys_call+0x2914/0x2dc0
[   99.163011][ T7059]  do_syscall_64+0xc9/0x1c0
[   99.163041][ T7059]  ? clear_bhb_loop+0x55/0xb0
[   99.163068][ T7059]  ? clear_bhb_loop+0x55/0xb0
[   99.163098][ T7059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.163140][ T7059] RIP: 0033:0x7f8fabccd169
[   99.163158][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.163180][ T7059] RSP: 002b:00007f8faa337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   99.163201][ T7059] RAX: ffffffffffffffda RBX: 00007f8fabee5fa0 RCX: 00007f8fabccd169
[   99.163215][ T7059] RDX: 0000000000000050 RSI: 0000400000000300 RDI: 0000000000000000
[   99.163228][ T7059] RBP: 00007f8faa337090 R08: 0000000000000000 R09: 0000000000000000
[   99.163242][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.163290][ T7059] R13: 0000000000000000 R14: 00007f8fabee5fa0 R15: 00007ffe0106eec8
[   99.163313][ T7059]  </TASK>
[   99.164290][ T7060] netlink: 'syz.4.1014': attribute type 4 has an invalid length.
[   99.448084][ T7073] macvlan1: entered promiscuous mode
[   99.454752][ T7073] ipvlan0: entered promiscuous mode
[   99.460648][ T7073] ipvlan0: left promiscuous mode
[   99.465946][ T7073] macvlan1: left promiscuous mode
[   99.492985][ T7076] loop4: detected capacity change from 0 to 2048
[   99.532869][ T7076]  loop4: p3 p4 < >
[   99.543220][ T3000]  loop4: p3 p4 < >
[   99.590612][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   99.616320][   T29] kauditd_printk_skb: 202 callbacks suppressed
[   99.616339][   T29] audit: type=1326 audit(1740643162.448:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.646075][   T29] audit: type=1326 audit(1740643162.448:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.669537][   T29] audit: type=1326 audit(1740643162.448:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.688281][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   99.692959][   T29] audit: type=1326 audit(1740643162.448:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.726391][   T29] audit: type=1326 audit(1740643162.448:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.749870][   T29] audit: type=1326 audit(1740643162.458:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.773314][   T29] audit: type=1326 audit(1740643162.458:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.796885][   T29] audit: type=1326 audit(1740643162.458:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.820381][   T29] audit: type=1326 audit(1740643162.458:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.843999][   T29] audit: type=1326 audit(1740643162.458:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[   99.872752][ T7081] loop3: detected capacity change from 0 to 512
[   99.879522][ T7085] FAULT_INJECTION: forcing a failure.
[   99.879522][ T7085] name failslab, interval 1, probability 0, space 0, times 0
[   99.892201][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.4.1025 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[   99.892230][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   99.892245][ T7085] Call Trace:
[   99.892257][ T7085]  <TASK>
[   99.892266][ T7085]  dump_stack_lvl+0xf2/0x150
[   99.892298][ T7085]  dump_stack+0x15/0x1a
[   99.892395][ T7085]  should_fail_ex+0x24a/0x260
[   99.892432][ T7085]  should_failslab+0x8f/0xb0
[   99.892468][ T7085]  kmem_cache_alloc_noprof+0x52/0x320
[   99.892556][ T7085]  ? dst_alloc+0xc0/0x100
[   99.892580][ T7085]  ? __pfx_ip6_dst_gc+0x10/0x10
[   99.892603][ T7085]  dst_alloc+0xc0/0x100
[   99.892679][ T7085]  ip6_rt_cache_alloc+0x20f/0x5b0
[   99.892713][ T7085]  __ip6_rt_update_pmtu+0x50d/0x680
[   99.892746][ T7085]  ? __rcu_read_unlock+0x34/0x70
[   99.892850][ T7085]  ip6_update_pmtu+0x181/0x1c0
[   99.892885][ T7085]  ip6gre_err+0x1e7/0x340
[   99.892960][ T7085]  ? __pfx_ip6gre_err+0x10/0x10
[   99.893020][ T7085]  icmpv6_notify+0x21b/0x3d0
[   99.893087][ T7085]  icmpv6_rcv+0xe54/0x1240
[   99.893107][ T7085]  ? ipv6_chk_mcast_addr+0x1f2/0x210
[   99.893132][ T7085]  ? __pfx_icmpv6_rcv+0x10/0x10
[   99.893151][ T7085]  ip6_protocol_deliver_rcu+0xb12/0x1090
[   99.893187][ T7085]  ip6_input+0xbf/0x1c0
[   99.893212][ T7085]  ? __pfx_ip6_input_finish+0x10/0x10
[   99.893240][ T7085]  ip6_mc_input+0x349/0x480
[   99.893320][ T7085]  ? __pfx_ip6_mc_input+0x10/0x10
[   99.893344][ T7085]  ip6_rcv_finish+0x320/0x330
[   99.893416][ T7085]  ipv6_rcv+0x74/0x150
[   99.893436][ T7085]  ? __pfx_ip6_rcv_finish+0x10/0x10
[   99.893516][ T7085]  __netif_receive_skb+0xa2/0x280
[   99.893551][ T7085]  netif_receive_skb+0x4a/0x320
[   99.893581][ T7085]  ? tun_rx_batched+0xba/0x410
[   99.893608][ T7085]  tun_rx_batched+0xf0/0x410
[   99.893638][ T7085]  tun_get_user+0x1f21/0x25c0
[   99.893711][ T7085]  ? avc_has_perm+0xd4/0x160
[   99.893775][ T7085]  ? ref_tracker_alloc+0x1f5/0x2f0
[   99.893808][ T7085]  tun_chr_write_iter+0x188/0x240
[   99.893837][ T7085]  vfs_write+0x77b/0x920
[   99.893870][ T7085]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   99.893979][ T7085]  ksys_write+0xe8/0x1b0
[   99.894013][ T7085]  __x64_sys_write+0x42/0x50
[   99.894045][ T7085]  x64_sys_call+0x287e/0x2dc0
[   99.894091][ T7085]  do_syscall_64+0xc9/0x1c0
[   99.894194][ T7085]  ? clear_bhb_loop+0x55/0xb0
[   99.894222][ T7085]  ? clear_bhb_loop+0x55/0xb0
[   99.894286][ T7085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.894370][ T7085] RIP: 0033:0x7fd6da4cbc1f
[   99.894385][ T7085] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   99.894402][ T7085] RSP: 002b:00007fd6d8b31000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   99.894480][ T7085] RAX: ffffffffffffffda RBX: 00007fd6da6e5fa0 RCX: 00007fd6da4cbc1f
[   99.894497][ T7085] RDX: 000000000000006e RSI: 0000400000000080 RDI: 00000000000000c8
[   99.894511][ T7085] RBP: 00007fd6d8b31090 R08: 0000000000000000 R09: 0000000000000000
[   99.894574][ T7085] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[   99.894586][ T7085] R13: 0000000000000000 R14: 00007fd6da6e5fa0 R15: 00007ffe4a4ac2b8
[   99.894604][ T7085]  </TASK>
[  100.209196][ T7081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1027: bg 0: block 35: padding at end of block bitmap is not set
[  100.225445][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1030'.
[  100.236146][ T7081] EXT4-fs (loop3): Remounting filesystem read-only
[  100.242949][ T7081] EXT4-fs (loop3): 1 truncate cleaned up
[  100.284185][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.296868][ T7081] SELinux: (dev loop3, type ext4) getxattr errno 5
[  100.303981][ T7081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.320387][ T7092] netlink: 'syz.5.1029': attribute type 4 has an invalid length.
[  100.331638][ T7094] loop6: detected capacity change from 0 to 512
[  100.345735][ T7094] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  100.362934][ T7094] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.390421][ T7094] EXT4-fs (loop6): 1 truncate cleaned up
[  100.397849][ T7094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.446946][ T7117] IPv6: Can't replace route, no match found
[  100.457821][ T7119] macvlan1: entered promiscuous mode
[  100.464674][ T7119] ipvlan0: entered promiscuous mode
[  100.470687][ T7119] ipvlan0: left promiscuous mode
[  100.476079][ T7119] macvlan1: left promiscuous mode
[  100.496478][ T7123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7123 comm=syz.4.1041
[  100.525098][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.591583][ T7133] loop2: detected capacity change from 0 to 764
[  100.600385][ T7133] Symlink component flag not implemented
[  100.606342][ T7133] Symlink component flag not implemented (116)
[  100.619986][ T7136] netlink: 'syz.5.1044': attribute type 4 has an invalid length.
[  100.689553][ T7142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7142 comm=syz.5.1049
[  100.716680][ T7144] IPv6: Can't replace route, no match found
[  100.808575][ T7152] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1051'.
[  100.828582][ T7146] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1051'.
[  100.844011][ T7151] loop5: detected capacity change from 0 to 8192
[  100.889130][ T7156] loop6: detected capacity change from 0 to 1024
[  100.910079][ T7156] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1055: Failed to acquire dquot type 0
[  100.922609][ T7156] EXT4-fs (loop6): 1 truncate cleaned up
[  100.928727][ T7156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.941666][ T7151]  loop5: p1 p2 p3 p4
[  100.944036][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1055'.
[  100.945912][ T7151] loop5: p1 start 17825536 is beyond EOD, 
[  100.954572][ T7156] bridge_slave_1: left allmulticast mode
[  100.954595][ T7156] bridge_slave_1: left promiscuous mode
[  100.960387][ T7151] truncated
[  100.960397][ T7151] loop5: p2 size 64053 extends beyond EOD, 
[  100.966195][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.971632][ T7151] truncated
[  100.991911][ T7151] loop5: p3 size 8323328 extends beyond EOD, truncated
[  100.999357][ T7156] bridge_slave_0: left allmulticast mode
[  100.999722][ T7151] loop5: p4 start 134152192 is beyond EOD, truncated
[  101.005083][ T7156] bridge_slave_0: left promiscuous mode
[  101.005201][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.024560][ T7160] loop2: detected capacity change from 0 to 1024
[  101.034928][ T3000]  loop5: p1 p2 p3 p4
[  101.035114][ T7160] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1056: Failed to acquire dquot type 0
[  101.039017][ T3000] loop5: p1 start 17825536 is beyond EOD, truncated
[  101.057278][ T3000] loop5: p2 size 64053 extends beyond EOD, truncated
[  101.064708][ T7160] EXT4-fs (loop2): 1 truncate cleaned up
[  101.071213][ T7160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.085127][ T3000] loop5: p3 size 8323328 extends beyond EOD, truncated
[  101.092956][ T3000] loop5: p4 start 134152192 is beyond EOD, truncated
[  101.106613][ T7160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.119020][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  101.131086][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  101.151657][ T7165] loop5: detected capacity change from 0 to 1024
[  101.169142][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  101.176659][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  101.191345][ T7165] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1057: Failed to acquire dquot type 0
[  101.205449][ T7165] EXT4-fs (loop5): 1 truncate cleaned up
[  101.212085][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.224492][ T7165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.238935][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'.
[  101.252498][ T4699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.277877][ T7171] loop6: detected capacity change from 0 to 764
[  101.292891][ T7171] Symlink component flag not implemented
[  101.298805][ T7171] Symlink component flag not implemented (116)
[  101.358217][ T7179] IPv6: Can't replace route, no match found
[  101.426520][ T7185] FAULT_INJECTION: forcing a failure.
[  101.426520][ T7185] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  101.439956][ T7185] CPU: 1 UID: 0 PID: 7185 Comm: syz.5.1065 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  101.439988][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  101.440002][ T7185] Call Trace:
[  101.440010][ T7185]  <TASK>
[  101.440019][ T7185]  dump_stack_lvl+0xf2/0x150
[  101.440053][ T7185]  dump_stack+0x15/0x1a
[  101.440080][ T7185]  should_fail_ex+0x24a/0x260
[  101.440179][ T7185]  should_fail_alloc_page+0xfd/0x110
[  101.440219][ T7185]  __alloc_frozen_pages_noprof+0x109/0x340
[  101.440259][ T7185]  alloc_pages_mpol+0xb4/0x260
[  101.440349][ T7185]  alloc_pages_noprof+0xe8/0x130
[  101.440378][ T7185]  get_zeroed_page_noprof+0x17/0x40
[  101.440405][ T7185]  simple_transaction_get+0x4c/0x120
[  101.440433][ T7185]  selinux_transaction_write+0x86/0x100
[  101.440533][ T7185]  ? __pfx_selinux_transaction_write+0x10/0x10
[  101.440607][ T7185]  vfs_write+0x27d/0x920
[  101.440635][ T7185]  ? putname+0xcf/0xf0
[  101.440676][ T7185]  ? __fget_files+0x17c/0x1c0
[  101.440724][ T7185]  ksys_write+0xe8/0x1b0
[  101.440767][ T7185]  __x64_sys_write+0x42/0x50
[  101.440875][ T7185]  x64_sys_call+0x287e/0x2dc0
[  101.440907][ T7185]  do_syscall_64+0xc9/0x1c0
[  101.440945][ T7185]  ? clear_bhb_loop+0x55/0xb0
[  101.440978][ T7185]  ? clear_bhb_loop+0x55/0xb0
[  101.441079][ T7185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.441113][ T7185] RIP: 0033:0x7f989df7d169
[  101.441131][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.441152][ T7185] RSP: 002b:00007f989c5e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  101.441175][ T7185] RAX: ffffffffffffffda RBX: 00007f989e195fa0 RCX: 00007f989df7d169
[  101.441188][ T7185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  101.441200][ T7185] RBP: 00007f989c5e1090 R08: 0000000000000000 R09: 0000000000000000
[  101.441211][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.441254][ T7185] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[  101.441277][ T7185]  </TASK>
[  101.456482][ T7190] loop3: detected capacity change from 0 to 2048
[  101.645791][ T7197] FAULT_INJECTION: forcing a failure.
[  101.645791][ T7197] name failslab, interval 1, probability 0, space 0, times 0
[  101.653863][ T7190] EXT4-fs: Ignoring removed oldalloc option
[  101.654573][ T7197] CPU: 1 UID: 0 PID: 7197 Comm: syz.5.1070 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  101.654609][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  101.654626][ T7197] Call Trace:
[  101.654636][ T7197]  <TASK>
[  101.654647][ T7197]  dump_stack_lvl+0xf2/0x150
[  101.654767][ T7197]  dump_stack+0x15/0x1a
[  101.654794][ T7197]  should_fail_ex+0x24a/0x260
[  101.654832][ T7197]  should_failslab+0x8f/0xb0
[  101.654919][ T7197]  __kmalloc_node_noprof+0xad/0x410
[  101.655002][ T7197]  ? __kvmalloc_node_noprof+0x72/0x170
[  101.655040][ T7197]  __kvmalloc_node_noprof+0x72/0x170
[  101.655077][ T7197]  recent_mt_check+0x3d6/0x830
[  101.655106][ T7197]  recent_mt_check_v0+0x66/0x90
[  101.655270][ T7197]  xt_check_match+0x259/0x4b0
[  101.655303][ T7197]  ? strnlen+0x28/0x50
[  101.655351][ T7197]  ? strcmp+0x21/0x50
[  101.655452][ T7197]  ? xt_find_match+0x1cc/0x200
[  101.655482][ T7197]  translate_table+0xb60/0x1080
[  101.655536][ T7197]  do_ip6t_set_ctl+0x7cc/0x8c0
[  101.655585][ T7197]  ? __rcu_read_unlock+0x4e/0x70
[  101.655620][ T7197]  nf_setsockopt+0x195/0x1b0
[  101.655662][ T7197]  ipv6_setsockopt+0x10f/0x130
[  101.655713][ T7197]  rawv6_setsockopt+0x21e/0x410
[  101.655760][ T7197]  sock_common_setsockopt+0x64/0x80
[  101.655800][ T7197]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  101.655892][ T7197]  __sys_setsockopt+0x187/0x200
[  101.655923][ T7197]  __x64_sys_setsockopt+0x66/0x80
[  101.655953][ T7197]  x64_sys_call+0x282e/0x2dc0
[  101.655987][ T7197]  do_syscall_64+0xc9/0x1c0
[  101.656143][ T7197]  ? clear_bhb_loop+0x55/0xb0
[  101.656177][ T7197]  ? clear_bhb_loop+0x55/0xb0
[  101.656267][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.656333][ T7197] RIP: 0033:0x7f989df7d169
[  101.656353][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.656375][ T7197] RSP: 002b:00007f989c5e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.656399][ T7197] RAX: ffffffffffffffda RBX: 00007f989e195fa0 RCX: 00007f989df7d169
[  101.656414][ T7197] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  101.656429][ T7197] RBP: 00007f989c5e1090 R08: 0000000000000520 R09: 0000000000000000
[  101.656514][ T7197] R10: 0000400000000600 R11: 0000000000000246 R12: 0000000000000001
[  101.656529][ T7197] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[  101.656570][ T7197]  </TASK>
[  101.913753][ T7190] EXT4-fs (loop3): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  101.939376][ T7207] IPv6: Can't replace route, no match found
[  101.949799][ T7190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.026794][ T7217] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  102.033467][ T7217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  102.040928][ T7217] vhci_hcd vhci_hcd.0: Device attached
[  102.053828][ T7218] vhci_hcd: connection closed
[  102.054043][ T3415] vhci_hcd: stop threads
[  102.063143][ T3415] vhci_hcd: release socket
[  102.067570][ T3415] vhci_hcd: disconnect device
[  102.086302][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.589641][ T7231] loop5: detected capacity change from 0 to 1024
[  102.599960][ T7231] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1081: Failed to acquire dquot type 0
[  102.612033][ T7231] EXT4-fs (loop5): 1 truncate cleaned up
[  102.618333][ T7231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.642180][ T4699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.699878][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1085'.
[  102.700474][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'.
[  102.708956][ T7240] FAULT_INJECTION: forcing a failure.
[  102.708956][ T7240] name failslab, interval 1, probability 0, space 0, times 0
[  102.730685][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.2.1085 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  102.730708][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.730718][ T7240] Call Trace:
[  102.730724][ T7240]  <TASK>
[  102.730730][ T7240]  dump_stack_lvl+0xf2/0x150
[  102.730755][ T7240]  dump_stack+0x15/0x1a
[  102.730831][ T7240]  should_fail_ex+0x24a/0x260
[  102.730870][ T7240]  should_failslab+0x8f/0xb0
[  102.730907][ T7240]  kmem_cache_alloc_noprof+0x52/0x320
[  102.730972][ T7240]  ? skb_clone+0x154/0x1f0
[  102.730995][ T7240]  skb_clone+0x154/0x1f0
[  102.731138][ T7240]  __netlink_deliver_tap+0x2bd/0x4f0
[  102.731170][ T7240]  netlink_sendskb+0x126/0x150
[  102.731259][ T7240]  netlink_unicast+0x291/0x670
[  102.731285][ T7240]  netlink_ack+0x4b7/0x4f0
[  102.731393][ T7240]  netlink_rcv_skb+0x19c/0x230
[  102.731418][ T7240]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  102.731528][ T7240]  xfrm_netlink_rcv+0x47/0x60
[  102.731556][ T7240]  netlink_unicast+0x599/0x670
[  102.731582][ T7240]  netlink_sendmsg+0x5cc/0x6e0
[  102.731690][ T7240]  ? __pfx_netlink_sendmsg+0x10/0x10
[  102.731799][ T7240]  __sock_sendmsg+0x140/0x180
[  102.731825][ T7240]  ____sys_sendmsg+0x326/0x4b0
[  102.731848][ T7240]  __sys_sendmsg+0x19d/0x230
[  102.731880][ T7240]  __x64_sys_sendmsg+0x46/0x50
[  102.731944][ T7240]  x64_sys_call+0x2734/0x2dc0
[  102.732049][ T7240]  do_syscall_64+0xc9/0x1c0
[  102.732084][ T7240]  ? clear_bhb_loop+0x55/0xb0
[  102.732173][ T7240]  ? clear_bhb_loop+0x55/0xb0
[  102.732196][ T7240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.732234][ T7240] RIP: 0033:0x7f8fabccd169
[  102.732247][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.732275][ T7240] RSP: 002b:00007f8faa337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.732297][ T7240] RAX: ffffffffffffffda RBX: 00007f8fabee5fa0 RCX: 00007f8fabccd169
[  102.732311][ T7240] RDX: 0000000000000080 RSI: 0000400000000a40 RDI: 0000000000000003
[  102.732322][ T7240] RBP: 00007f8faa337090 R08: 0000000000000000 R09: 0000000000000000
[  102.732336][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.732350][ T7240] R13: 0000000000000000 R14: 00007f8fabee5fa0 R15: 00007ffe0106eec8
[  102.732417][ T7240]  </TASK>
[  102.977669][ T7238] team0 (unregistering): Port device team_slave_0 removed
[  103.015685][ T7238] team0 (unregistering): Port device team_slave_1 removed
[  103.050654][ T7250] loop4: detected capacity change from 0 to 764
[  103.071425][ T7248] macvlan1: entered promiscuous mode
[  103.077862][ T7248] ipvlan0: entered promiscuous mode
[  103.088571][ T7250] Symlink component flag not implemented
[  103.097832][ T7248] ipvlan0: left promiscuous mode
[  103.112363][ T7248] macvlan1: left promiscuous mode
[  103.112380][ T7250] Symlink component flag not implemented (116)
[  103.141687][ T7241] lo speed is unknown, defaulting to 1000
[  103.189582][ T7252] loop4: detected capacity change from 0 to 1024
[  103.213985][ T7252] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1090: Failed to acquire dquot type 0
[  103.245141][ T7252] EXT4-fs (loop4): 1 truncate cleaned up
[  103.253301][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.391499][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'.
[  103.440653][ T7241] dummy0 speed is unknown, defaulting to 1000
[  103.551494][ T7260] macvlan1: entered promiscuous mode
[  103.558317][ T7260] ipvlan0: entered promiscuous mode
[  103.565269][ T7260] ipvlan0: left promiscuous mode
[  103.570676][ T7260] macvlan1: left promiscuous mode
[  103.591183][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.927365][ T7273] FAULT_INJECTION: forcing a failure.
[  103.927365][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.940537][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.6.1097 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  103.940566][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.940649][ T7273] Call Trace:
[  103.940656][ T7273]  <TASK>
[  103.940665][ T7273]  dump_stack_lvl+0xf2/0x150
[  103.940700][ T7273]  dump_stack+0x15/0x1a
[  103.940722][ T7273]  should_fail_ex+0x24a/0x260
[  103.940759][ T7273]  should_fail+0xb/0x10
[  103.940824][ T7273]  should_fail_usercopy+0x1a/0x20
[  103.940856][ T7273]  _copy_to_iter+0xd5/0xd00
[  103.940890][ T7273]  ? bpf_trace_run3+0x12b/0x1d0
[  103.940921][ T7273]  ? __virt_addr_valid+0x1ed/0x250
[  103.940946][ T7273]  ? __check_object_size+0x364/0x520
[  103.941037][ T7273]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  103.941099][ T7273]  __skb_datagram_iter+0xc8/0x610
[  103.941132][ T7273]  ? tipc_wait_for_rcvmsg+0x2ee/0x350
[  103.941236][ T7273]  skb_copy_datagram_iter+0x41/0x130
[  103.941325][ T7273]  tipc_recvmsg+0x4cf/0x9a0
[  103.941409][ T7273]  ? __pfx_tipc_recvmsg+0x10/0x10
[  103.941554][ T7273]  sock_recvmsg_nosec+0x107/0x140
[  103.941595][ T7273]  ____sys_recvmsg+0x271/0x280
[  103.941668][ T7273]  do_recvmmsg+0x2aa/0x6d0
[  103.941717][ T7273]  __x64_sys_recvmmsg+0xe2/0x170
[  103.941750][ T7273]  x64_sys_call+0x2a9a/0x2dc0
[  103.941783][ T7273]  do_syscall_64+0xc9/0x1c0
[  103.941859][ T7273]  ? clear_bhb_loop+0x55/0xb0
[  103.941890][ T7273]  ? clear_bhb_loop+0x55/0xb0
[  103.941952][ T7273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.941985][ T7273] RIP: 0033:0x7f2f305dd169
[  103.942004][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.942022][ T7273] RSP: 002b:00007f2f2ec26038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  103.942102][ T7273] RAX: ffffffffffffffda RBX: 00007f2f307f6080 RCX: 00007f2f305dd169
[  103.942116][ T7273] RDX: 0000000000000002 RSI: 00004000000043c0 RDI: 0000000000000006
[  103.942127][ T7273] RBP: 00007f2f2ec26090 R08: 0000000000000000 R09: 0000000000000000
[  103.942141][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.942155][ T7273] R13: 0000000000000001 R14: 00007f2f307f6080 R15: 00007fff86cc1408
[  103.942178][ T7273]  </TASK>
[  104.237601][ T7281] macvlan1: entered promiscuous mode
[  104.245018][ T7281] ipvlan0: entered promiscuous mode
[  104.251238][ T7281] ipvlan0: left promiscuous mode
[  104.256531][ T7281] macvlan1: left promiscuous mode
[  104.312220][ T7284] loop6: detected capacity change from 0 to 2048
[  104.319006][ T7284] EXT4-fs: Ignoring removed oldalloc option
[  104.327175][ T7284] EXT4-fs (loop6): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  104.353937][ T7284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.415488][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.457444][ T7290] loop6: detected capacity change from 0 to 1024
[  104.479144][ T7290] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1104: Failed to acquire dquot type 0
[  104.492731][ T7290] EXT4-fs (loop6): 1 truncate cleaned up
[  104.498947][ T7290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.526567][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.573525][ T7301] loop6: detected capacity change from 0 to 1024
[  104.597396][ T7301] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1108: Failed to acquire dquot type 0
[  104.620988][ T7301] EXT4-fs (loop6): 1 truncate cleaned up
[  104.629069][ T7301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.646642][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  104.646659][   T29] audit: type=1400 audit(1740643167.488:4818): avc:  denied  { setopt } for  pid=7308 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  104.654940][ T7309] netlink: 'syz.3.1111': attribute type 39 has an invalid length.
[  104.701390][   T29] audit: type=1326 audit(1740643167.538:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.728361][   T29] audit: type=1326 audit(1740643167.538:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.751972][   T29] audit: type=1326 audit(1740643167.538:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.759517][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1108'.
[  104.775684][   T29] audit: type=1326 audit(1740643167.538:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.809143][   T29] audit: type=1326 audit(1740643167.538:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.833595][   T29] audit: type=1326 audit(1740643167.538:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.857523][   T29] audit: type=1326 audit(1740643167.538:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.863780][ T7315] netlink: 'syz.4.1114': attribute type 4 has an invalid length.
[  104.881003][   T29] audit: type=1326 audit(1740643167.538:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.881041][   T29] audit: type=1326 audit(1740643167.538:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.4.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da4cd169 code=0x7ffc0000
[  104.961524][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.027655][ T7325] IPv6: Can't replace route, no match found
[  105.054878][ T7328] loop6: detected capacity change from 0 to 512
[  105.104140][ T7328] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1118: bg 0: block 35: padding at end of block bitmap is not set
[  105.119281][ T7333] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1121'.
[  105.138225][ T7333] FAULT_INJECTION: forcing a failure.
[  105.138225][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.150220][ T7332] tipc: Started in network mode
[  105.151411][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.5.1121 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  105.151495][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  105.151510][ T7333] Call Trace:
[  105.151518][ T7333]  <TASK>
[  105.151527][ T7333]  dump_stack_lvl+0xf2/0x150
[  105.151563][ T7333]  dump_stack+0x15/0x1a
[  105.151590][ T7333]  should_fail_ex+0x24a/0x260
[  105.151627][ T7333]  should_fail+0xb/0x10
[  105.151735][ T7333]  should_fail_usercopy+0x1a/0x20
[  105.151801][ T7333]  _copy_to_user+0x20/0xa0
[  105.151825][ T7333]  simple_read_from_buffer+0xa0/0x110
[  105.151861][ T7333]  proc_fail_nth_read+0xf9/0x140
[  105.151899][ T7333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  105.152029][ T7333]  vfs_read+0x19b/0x6f0
[  105.152059][ T7333]  ? __rcu_read_unlock+0x4e/0x70
[  105.152088][ T7333]  ? __fget_files+0x17c/0x1c0
[  105.152168][ T7333]  ksys_read+0xe8/0x1b0
[  105.152202][ T7333]  __x64_sys_read+0x42/0x50
[  105.152249][ T7333]  x64_sys_call+0x2874/0x2dc0
[  105.152287][ T7333]  do_syscall_64+0xc9/0x1c0
[  105.152389][ T7333]  ? clear_bhb_loop+0x55/0xb0
[  105.152502][ T7333]  ? clear_bhb_loop+0x55/0xb0
[  105.152565][ T7333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.152598][ T7333] RIP: 0033:0x7f989df7bb7c
[  105.152618][ T7333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  105.152642][ T7333] RSP: 002b:00007f989c5e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  105.152677][ T7333] RAX: ffffffffffffffda RBX: 00007f989e195fa0 RCX: 00007f989df7bb7c
[  105.152717][ T7333] RDX: 000000000000000f RSI: 00007f989c5e10a0 RDI: 0000000000000007
[  105.152731][ T7333] RBP: 00007f989c5e1090 R08: 0000000000000000 R09: 0000000000000000
[  105.152746][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.152761][ T7333] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[  105.152785][ T7333]  </TASK>
[  105.157665][ T7328] EXT4-fs (loop6): Remounting filesystem read-only
[  105.167071][ T7332] tipc: Node identity e2e7c82915ac, cluster identity 4711
[  105.167177][ T7332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.201833][ T7340] loop4: detected capacity change from 0 to 1024
[  105.209567][ T7328] EXT4-fs (loop6): 1 truncate cleaned up
[  105.273085][ T7340] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1125: Failed to acquire dquot type 0
[  105.283948][ T7328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.304971][ T7342] loop2: detected capacity change from 0 to 1024
[  105.322334][ T7328] SELinux: (dev loop6, type ext4) getxattr errno 5
[  105.342855][ T7340] EXT4-fs (loop4): 1 truncate cleaned up
[  105.350157][ T7342] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1126: Failed to acquire dquot type 0
[  105.351418][ T7331] tipc: Resetting bearer <eth:syzkaller0>
[  105.358267][ T7328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.367430][ T7342] EXT4-fs (loop2): 1 truncate cleaned up
[  105.392663][ T7340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.410173][ T7342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.457982][ T7347] netlink: 'syz.5.1127': attribute type 4 has an invalid length.
[  105.500614][ T7331] tipc: Disabling bearer <eth:syzkaller0>
[  105.503086][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'.
[  105.519430][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  105.567947][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.587768][ T7358] FAULT_INJECTION: forcing a failure.
[  105.587768][ T7358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.601016][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.5.1130 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  105.601092][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  105.601105][ T7358] Call Trace:
[  105.601112][ T7358]  <TASK>
[  105.601119][ T7358]  dump_stack_lvl+0xf2/0x150
[  105.601153][ T7358]  dump_stack+0x15/0x1a
[  105.601178][ T7358]  should_fail_ex+0x24a/0x260
[  105.601222][ T7358]  should_fail+0xb/0x10
[  105.601275][ T7358]  should_fail_usercopy+0x1a/0x20
[  105.601314][ T7358]  _copy_from_user+0x1c/0xa0
[  105.601381][ T7358]  move_addr_to_kernel+0x82/0x120
[  105.601421][ T7358]  __sys_connect+0x67/0x1b0
[  105.601450][ T7358]  __x64_sys_connect+0x41/0x50
[  105.601470][ T7358]  x64_sys_call+0x22a7/0x2dc0
[  105.601512][ T7358]  do_syscall_64+0xc9/0x1c0
[  105.601546][ T7358]  ? clear_bhb_loop+0x55/0xb0
[  105.601580][ T7358]  ? clear_bhb_loop+0x55/0xb0
[  105.601614][ T7358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.601647][ T7358] RIP: 0033:0x7f989df7d169
[  105.601687][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.601709][ T7358] RSP: 002b:00007f989c5e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  105.601731][ T7358] RAX: ffffffffffffffda RBX: 00007f989e195fa0 RCX: 00007f989df7d169
[  105.601746][ T7358] RDX: 000000000000001c RSI: 0000400000000180 RDI: 0000000000000006
[  105.601759][ T7358] RBP: 00007f989c5e1090 R08: 0000000000000000 R09: 0000000000000000
[  105.601773][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.601787][ T7358] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[  105.601809][ T7358]  </TASK>
[  105.777692][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.783489][ T7362] loop5: detected capacity change from 0 to 256
[  105.802148][ T7362] msdos: Bad value for 'gid'
[  105.806868][ T7362] msdos: Bad value for 'gid'
[  105.814993][ T7358] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in;
[  105.814993][ T7358]    program syz.5.1130 not setting count and/or reply_len properly
[  105.879469][ T7360] loop4: detected capacity change from 0 to 256
[  105.894389][ T7360] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in;
[  105.894389][ T7360]    program syz.4.1129 not setting count and/or reply_len properly
[  105.989379][ T7378] loop5: detected capacity change from 0 to 256
[  106.000536][ T7378] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in;
[  106.000536][ T7378]    program syz.5.1137 not setting count and/or reply_len properly
[  106.039190][ T7382] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1139'.
[  106.051961][ T7380] loop4: detected capacity change from 0 to 8192
[  106.098905][ T7386] netem: change failed
[  106.100964][ T7380] loop4: detected capacity change from 0 to 512
[  106.128452][ T7380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.141907][ T7380] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.166375][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.209926][ T7398] lo: entered promiscuous mode
[  106.218162][ T7397] lo: left promiscuous mode
[  106.248337][ T7401] netlink: 'syz.4.1144': attribute type 4 has an invalid length.
[  106.304710][ T7406] macvlan1: entered promiscuous mode
[  106.311591][ T7406] ipvlan0: entered promiscuous mode
[  106.318660][ T7406] ipvlan0: left promiscuous mode
[  106.325029][ T7406] macvlan1: left promiscuous mode
[  106.336193][ T7404] lo speed is unknown, defaulting to 1000
[  106.379943][ T7404] dummy0 speed is unknown, defaulting to 1000
[  106.402173][ T7409] IPv6: Can't replace route, no match found
[  106.456663][ T7411] macvlan1: entered promiscuous mode
[  106.465468][ T7411] ipvlan0: entered promiscuous mode
[  106.471392][ T7411] ipvlan0: left promiscuous mode
[  106.477131][ T7411] macvlan1: left promiscuous mode
[  106.679481][ T7437] macvlan1: entered promiscuous mode
[  106.689923][ T7439] loop5: detected capacity change from 0 to 128
[  106.698473][ T7440] FAULT_INJECTION: forcing a failure.
[  106.698473][ T7440] name failslab, interval 1, probability 0, space 0, times 0
[  106.711365][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.3.1162 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  106.711398][ T7437] ipvlan0: entered promiscuous mode
[  106.711426][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  106.711467][ T7440] Call Trace:
[  106.711475][ T7440]  <TASK>
[  106.711484][ T7440]  dump_stack_lvl+0xf2/0x150
[  106.711526][ T7440]  dump_stack+0x15/0x1a
[  106.711561][ T7440]  should_fail_ex+0x24a/0x260
[  106.711592][ T7440]  should_failslab+0x8f/0xb0
[  106.711688][ T7440]  kmem_cache_alloc_node_noprof+0x59/0x320
[  106.711718][ T7440]  ? __alloc_skb+0x10b/0x310
[  106.711743][ T7440]  ? _copy_from_iter+0x169/0xd00
[  106.711858][ T7440]  __alloc_skb+0x10b/0x310
[  106.711949][ T7440]  ? skb_put+0xba/0x100
[  106.711957][ T7437] ipvlan0: left promiscuous mode
[  106.711976][ T7440]  tipc_buf_acquire+0x2c/0xb0
[  106.711996][ T7440]  tipc_msg_build+0x562/0x830
[  106.712024][ T7440]  tipc_send_group_bcast+0x5b9/0x6c0
[  106.712106][ T7440]  ? __pfx_woken_wake_function+0x10/0x10
[  106.712146][ T7440]  __tipc_sendmsg+0x1a9/0x1c40
[  106.712209][ T7440]  ? avc_has_perm+0xd4/0x160
[  106.712235][ T7440]  ? __rcu_read_unlock+0x4e/0x70
[  106.712272][ T7440]  __tipc_sendstream+0xa2b/0xb20
[  106.712316][ T7440]  ? avc_has_perm+0xd4/0x160
[  106.712364][ T7440]  ? selinux_socket_sendmsg+0x185/0x1c0
[  106.712454][ T7440]  ? _raw_spin_unlock_bh+0x36/0x40
[  106.712482][ T7440]  ? lock_sock_nested+0x10f/0x140
[  106.712524][ T7440]  ? __pfx_tipc_send_packet+0x10/0x10
[  106.712575][ T7440]  tipc_send_packet+0x65/0x80
[  106.712619][ T7440]  __sock_sendmsg+0x140/0x180
[  106.712714][ T7440]  ____sys_sendmsg+0x326/0x4b0
[  106.712750][ T7440]  __sys_sendmsg+0x19d/0x230
[  106.712801][ T7440]  __x64_sys_sendmsg+0x46/0x50
[  106.712832][ T7440]  x64_sys_call+0x2734/0x2dc0
[  106.712935][ T7440]  do_syscall_64+0xc9/0x1c0
[  106.712973][ T7440]  ? clear_bhb_loop+0x55/0xb0
[  106.713008][ T7440]  ? clear_bhb_loop+0x55/0xb0
[  106.713078][ T7440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.713112][ T7440] RIP: 0033:0x7f2aca1ed169
[  106.713133][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.713220][ T7440] RSP: 002b:00007f2ac8857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.713239][ T7440] RAX: ffffffffffffffda RBX: 00007f2aca405fa0 RCX: 00007f2aca1ed169
[  106.713252][ T7440] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000003
[  106.713264][ T7440] RBP: 00007f2ac8857090 R08: 0000000000000000 R09: 0000000000000000
[  106.713310][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  106.713345][ T7440] R13: 0000000000000000 R14: 00007f2aca405fa0 R15: 00007ffcf8446228
[  106.713370][ T7440]  </TASK>
[  106.987604][ T7437] macvlan1: left promiscuous mode
[  106.995084][ T7449] IPv6: Can't replace route, no match found
[  107.025149][ T7455] loop2: detected capacity change from 0 to 164
[  107.064381][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  107.073545][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'.
[  107.118626][ T7461] IPv6: Can't replace route, no match found
[  107.125315][ T7455] xt_hashlimit: max too large, truncated to 1048576
[  107.161232][ T7459] lo speed is unknown, defaulting to 1000
[  107.190136][ T7457] loop6: detected capacity change from 0 to 8192
[  107.210239][ T7467] macvlan1: entered promiscuous mode
[  107.217559][ T7467] ipvlan0: entered promiscuous mode
[  107.231048][ T7467] ipvlan0: left promiscuous mode
[  107.240707][ T7467] macvlan1: left promiscuous mode
[  107.256548][ T7459] dummy0 speed is unknown, defaulting to 1000
[  107.327235][ T7474] loop4: detected capacity change from 0 to 764
[  107.336327][ T7474] Symlink component flag not implemented
[  107.342016][ T7474] Symlink component flag not implemented (116)
[  107.391429][ T7481] loop4: detected capacity change from 0 to 1024
[  107.401092][ T7481] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1176: Failed to acquire dquot type 0
[  107.414984][ T7481] EXT4-fs (loop4): 1 truncate cleaned up
[  107.421135][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.480750][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.557882][ T7491] macvlan1: entered promiscuous mode
[  107.564716][ T7491] ipvlan0: entered promiscuous mode
[  107.570742][ T7491] ipvlan0: left promiscuous mode
[  107.588857][ T7491] macvlan1: left promiscuous mode
[  107.606443][ T7499] loop4: detected capacity change from 0 to 2048
[  107.613563][ T7499] EXT4-fs: Ignoring removed oldalloc option
[  107.620066][ T7499] EXT4-fs (loop4): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  107.648614][ T7501] loop3: detected capacity change from 0 to 512
[  107.659951][ T7499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.679112][ T7501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1183: bg 0: block 35: padding at end of block bitmap is not set
[  107.744995][ T7508] macvlan1: entered promiscuous mode
[  107.757994][ T7508] ipvlan0: entered promiscuous mode
[  107.760645][ T7501] EXT4-fs (loop3): Remounting filesystem read-only
[  107.764166][ T7508] ipvlan0: left promiscuous mode
[  107.775717][ T7501] EXT4-fs (loop3): 1 truncate cleaned up
[  107.777850][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.782626][ T7501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.802863][ T7508] macvlan1: left promiscuous mode
[  107.803163][ T7501] SELinux: (dev loop3, type ext4) getxattr errno 5
[  107.828754][ T7501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.855173][ T7511] loop6: detected capacity change from 0 to 512
[  107.889547][ T7511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  107.926598][ T7515] lo speed is unknown, defaulting to 1000
[  107.942556][ T7518] loop5: detected capacity change from 0 to 1024
[  107.946557][ T7511] EXT4-fs (loop6): 1 truncate cleaned up
[  107.969418][ T7518] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1189: Failed to acquire dquot type 0
[  107.992865][ T7511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.007421][ T7518] EXT4-fs (loop5): 1 truncate cleaned up
[  108.021226][ T7518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.045749][ T7525] loop3: detected capacity change from 0 to 128
[  108.064627][ T4699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.073066][ T7515] dummy0 speed is unknown, defaulting to 1000
[  108.078738][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.780932][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1196'.
[  109.496404][ T7549] macvlan1: entered promiscuous mode
[  109.503162][ T7549] ipvlan0: entered promiscuous mode
[  109.509107][ T7549] ipvlan0: left promiscuous mode
[  109.523374][ T7549] macvlan1: left promiscuous mode
[  109.558326][ T7557] macvlan1: entered promiscuous mode
[  109.586991][ T7557] ipvlan0: entered promiscuous mode
[  109.610415][ T7557] ipvlan0: left promiscuous mode
[  109.655738][ T7557] macvlan1: left promiscuous mode
[  109.703236][ T7556] netem: change failed
[  109.709799][   T29] kauditd_printk_skb: 208 callbacks suppressed
[  109.709813][   T29] audit: type=1326 audit(1740643172.548:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[  109.740279][   T29] audit: type=1326 audit(1740643172.548:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f305dd169 code=0x7ffc0000
[  109.893692][   T29] audit: type=1400 audit(1740643172.728:5030): avc:  denied  { write } for  pid=7565 comm="syz.6.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  109.911901][ T7546] Set syz1 is full, maxelem 65536 reached
[  109.915057][   T29] audit: type=1400 audit(1740643172.728:5031): avc:  denied  { getopt } for  pid=7565 comm="syz.6.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  109.985383][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1208'.
[  109.991707][ T7573] lo speed is unknown, defaulting to 1000
[  110.008432][ T7576] loop6: detected capacity change from 0 to 512
[  110.024474][ T7576] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1209: bg 0: block 35: padding at end of block bitmap is not set
[  110.052058][ T7576] EXT4-fs (loop6): Remounting filesystem read-only
[  110.056732][ T7573] dummy0 speed is unknown, defaulting to 1000
[  110.076737][ T7576] EXT4-fs (loop6): 1 truncate cleaned up
[  110.125556][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.220544][ T7576] SELinux: (dev loop6, type ext4) getxattr errno 5
[  110.270560][ T7576] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.422868][   T29] audit: type=1326 audit(1740643173.148:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.446463][   T29] audit: type=1326 audit(1740643173.148:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.470012][   T29] audit: type=1326 audit(1740643173.148:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.494455][   T29] audit: type=1326 audit(1740643173.148:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.519124][   T29] audit: type=1326 audit(1740643173.148:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.543601][   T29] audit: type=1326 audit(1740643173.148:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca1ed169 code=0x7fc00000
[  110.550056][ T7586] netlink: 'syz.4.1211': attribute type 39 has an invalid length.
[  110.671964][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'.
[  110.931914][ T7596] loop4: detected capacity change from 0 to 1024
[  111.068460][ T7599] netem: change failed
[  111.182458][ T7596] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1215: Failed to acquire dquot type 0
[  111.194853][ T7596] EXT4-fs (loop4): 1 truncate cleaned up
[  111.200868][ T7596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.322829][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.323795][ T3000] udevd[3000]: worker [3474] terminated by signal 33 (Unknown signal 33)
[  111.355384][ T3000] udevd[3000]: worker [3474] failed while handling '/devices/virtual/block/loop5'
[  111.403493][ T7609] loop4: detected capacity change from 0 to 1024
[  111.423987][ T7611] netlink: 'syz.5.1220': attribute type 4 has an invalid length.
[  111.434060][ T7609] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1218: Failed to acquire dquot type 0
[  111.446772][ T7609] EXT4-fs (loop4): 1 truncate cleaned up
[  111.453060][ T7609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.458822][ T7613] IPv6: Can't replace route, no match found
[  111.494445][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'.
[  111.530422][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.541956][ T7618] netlink: 'syz.5.1222': attribute type 4 has an invalid length.
[  111.615749][ T7625] loop5: detected capacity change from 0 to 1024
[  111.621495][ T7628] loop6: detected capacity change from 0 to 2048
[  111.629343][ T7628] EXT4-fs: Ignoring removed oldalloc option
[  111.644621][ T7628] EXT4-fs (loop6): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  111.679080][ T7625] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1225: Failed to acquire dquot type 0
[  111.679321][ T7627] lo speed is unknown, defaulting to 1000
[  111.699853][ T7628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.722541][ T7625] EXT4-fs (loop5): 1 truncate cleaned up
[  111.747050][ T7627] dummy0 speed is unknown, defaulting to 1000
[  111.765466][ T7625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.918009][ T4699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.949099][ T6417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.016957][ T7640] macvlan1: entered promiscuous mode
[  112.032402][ T7640] ipvlan0: entered promiscuous mode
[  112.050555][ T7640] ipvlan0: left promiscuous mode
[  112.058858][ T7640] macvlan1: left promiscuous mode
[  112.073959][ T7643] netlink: 'syz.3.1230': attribute type 39 has an invalid length.
[  112.097140][ T7645] macvlan1: entered promiscuous mode
[  112.111870][ T7645] ipvlan0: entered promiscuous mode
[  112.118552][ T7645] ipvlan0: left promiscuous mode
[  112.128178][ T7645] macvlan1: left promiscuous mode
[  112.151101][ T7649] loop3: detected capacity change from 0 to 1024
[  112.168640][ T7649] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1233: Failed to acquire dquot type 0
[  112.179853][ T7653] netlink: 'syz.5.1232': attribute type 4 has an invalid length.
[  112.180780][ T7649] EXT4-fs (loop3): 1 truncate cleaned up
[  112.195260][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.240445][ T7655] loop6: detected capacity change from 0 to 764
[  112.264191][ T7655] Symlink component flag not implemented
[  112.270410][ T7655] Symlink component flag not implemented (116)
[  112.271735][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'.
[  112.309341][ T7666] loop5: detected capacity change from 0 to 512
[  112.318903][ T7666] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1239: bg 0: block 35: padding at end of block bitmap is not set
[  112.335879][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.339769][ T7666] EXT4-fs (loop5): Remounting filesystem read-only
[  112.352544][ T7666] EXT4-fs (loop5): 1 truncate cleaned up
[  112.358627][ T7666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.372343][ T7666] SELinux: (dev loop5, type ext4) getxattr errno 5
[  112.387622][ T7666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.447728][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1243'.
[  112.579658][ T7683] netlink: 'syz.2.1246': attribute type 4 has an invalid length.
[  112.617134][ T7692] loop6: detected capacity change from 0 to 764
[  112.640666][ T7689] loop5: detected capacity change from 0 to 256
[  112.653810][ T7692] Symlink component flag not implemented
[  112.654342][ T7695] loop3: detected capacity change from 0 to 2048
[  112.659751][ T7692] Symlink component flag not implemented (116)
[  112.694832][ T7695] EXT4-fs: Ignoring removed oldalloc option
[  112.701824][ T7695] EXT4-fs (loop3): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  112.754646][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.913896][ T7718] loop6: detected capacity change from 0 to 1024
[  112.946993][ T7718] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1257: Failed to acquire dquot type 0
[  112.973702][ T7723] bond1: entered promiscuous mode
[  112.978994][ T7723] bond1: entered allmulticast mode
[  112.984682][ T7723] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.995810][ T7723] bond1 (unregistering): Released all slaves
[  113.011050][ T7726] macvlan1: entered promiscuous mode
[  113.017625][ T7726] ipvlan0: entered promiscuous mode
[  113.023435][ T7726] ipvlan0: left promiscuous mode
[  113.024039][ T7718] EXT4-fs (loop6): 1 truncate cleaned up
[  113.034382][ T7726] macvlan1: left promiscuous mode
[  113.151126][ T7737] macvlan1: entered promiscuous mode
[  113.176928][ T7737] ipvlan0: entered promiscuous mode
[  113.183849][ T7737] ipvlan0: left promiscuous mode
[  113.189412][ T7737] macvlan1: left promiscuous mode
[  113.206331][ T7743] IPv6: Can't replace route, no match found
[  113.234224][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'.
[  113.274684][ T7741] infiniband syz1: set active
[  113.279511][ T7741] infiniband syz1: added team_slave_0
[  113.297375][ T7741] RDS/IB: syz1: added
[  113.301414][ T7741] smc: adding ib device syz1 with port count 1
[  113.307655][ T7741] smc:    ib device syz1 port 1 has pnetid 
[  113.383879][ T7760] FAULT_INJECTION: forcing a failure.
[  113.383879][ T7760] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.397027][ T7760] CPU: 1 UID: 0 PID: 7760 Comm: syz.3.1274 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  113.397149][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.397165][ T7760] Call Trace:
[  113.397174][ T7760]  <TASK>
[  113.397182][ T7760]  dump_stack_lvl+0xf2/0x150
[  113.397215][ T7760]  dump_stack+0x15/0x1a
[  113.397241][ T7760]  should_fail_ex+0x24a/0x260
[  113.397279][ T7760]  should_fail+0xb/0x10
[  113.397311][ T7760]  should_fail_usercopy+0x1a/0x20
[  113.397348][ T7760]  _copy_to_user+0x20/0xa0
[  113.397366][ T7760]  rng_dev_read+0x3e8/0x700
[  113.397400][ T7760]  vfs_readv+0x3e2/0x660
[  113.397458][ T7760]  ? __pfx_rng_dev_read+0x10/0x10
[  113.397500][ T7760]  __x64_sys_preadv+0xf4/0x1c0
[  113.397536][ T7760]  x64_sys_call+0x2680/0x2dc0
[  113.397599][ T7760]  do_syscall_64+0xc9/0x1c0
[  113.397629][ T7760]  ? clear_bhb_loop+0x55/0xb0
[  113.397658][ T7760]  ? clear_bhb_loop+0x55/0xb0
[  113.397705][ T7760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.397746][ T7760] RIP: 0033:0x7f2aca1ed169
[  113.397764][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.397787][ T7760] RSP: 002b:00007f2ac8857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  113.397809][ T7760] RAX: ffffffffffffffda RBX: 00007f2aca405fa0 RCX: 00007f2aca1ed169
[  113.397824][ T7760] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003
[  113.397839][ T7760] RBP: 00007f2ac8857090 R08: 0000000000000000 R09: 0000000000000000
[  113.397955][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  113.397969][ T7760] R13: 0000000000000000 R14: 00007f2aca405fa0 R15: 00007ffcf8446228
[  113.397990][ T7760]  </TASK>
[  113.401323][ T7764] macvlan1: entered promiscuous mode
[  113.571051][ T7772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1278'.
[  113.576197][ T7764] ipvlan0: entered promiscuous mode
[  113.598545][ T7764] ipvlan0: left promiscuous mode
[  113.605010][ T7764] macvlan1: left promiscuous mode
[  113.737007][ T7780] loop2: detected capacity change from 0 to 164
[  113.771046][ T7780] rock: directory entry would overflow storage
[  113.777296][ T7780] rock: sig=0x4f50, size=4, remaining=3
[  113.782909][ T7780] iso9660: Corrupted directory entry in block 4 of inode 1792
[  113.822079][ T7785] macvlan1: entered promiscuous mode
[  113.831336][ T7785] ipvlan0: entered promiscuous mode
[  113.847803][ T7789] loop3: detected capacity change from 0 to 512
[  113.855559][ T7785] ipvlan0: left promiscuous mode
[  113.860886][ T7785] macvlan1: left promiscuous mode
[  113.898615][ T7789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1285: bg 0: block 35: padding at end of block bitmap is not set
[  113.916329][ T7793] loop2: detected capacity change from 0 to 164
[  113.933724][ T7789] EXT4-fs (loop3): Remounting filesystem read-only
[  113.947656][ T7789] EXT4-fs (loop3): 1 truncate cleaned up
[  113.961733][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'.
[  113.962549][ T7789] SELinux: (dev loop3, type ext4) getxattr errno 5
[  114.012730][ T7800] FAULT_INJECTION: forcing a failure.
[  114.012730][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.025932][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.6.1290 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  114.025964][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  114.025978][ T7800] Call Trace:
[  114.026062][ T7800]  <TASK>
[  114.026081][ T7800]  dump_stack_lvl+0xf2/0x150
[  114.026110][ T7800]  dump_stack+0x15/0x1a
[  114.026131][ T7800]  should_fail_ex+0x24a/0x260
[  114.026160][ T7800]  should_fail+0xb/0x10
[  114.026190][ T7800]  should_fail_usercopy+0x1a/0x20
[  114.026298][ T7800]  _copy_from_user+0x1c/0xa0
[  114.026406][ T7800]  kstrtouint_from_user+0x76/0xe0
[  114.026441][ T7800]  ? 0xffffffff81000000
[  114.026458][ T7800]  ? selinux_file_permission+0x22a/0x360
[  114.026497][ T7800]  proc_fail_nth_write+0x4f/0x150
[  114.026568][ T7800]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  114.026686][ T7800]  vfs_write+0x27d/0x920
[  114.026710][ T7800]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  114.026746][ T7800]  ? __fget_files+0x17c/0x1c0
[  114.026788][ T7800]  ksys_write+0xe8/0x1b0
[  114.026899][ T7800]  __x64_sys_write+0x42/0x50
[  114.026931][ T7800]  x64_sys_call+0x287e/0x2dc0
[  114.026961][ T7800]  do_syscall_64+0xc9/0x1c0
[  114.027051][ T7800]  ? clear_bhb_loop+0x55/0xb0
[  114.027077][ T7800]  ? clear_bhb_loop+0x55/0xb0
[  114.027107][ T7800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.027141][ T7800] RIP: 0033:0x7f2f305dbc1f
[  114.027159][ T7800] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  114.027180][ T7800] RSP: 002b:00007f2f2ec47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  114.027260][ T7800] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f305dbc1f
[  114.027275][ T7800] RDX: 0000000000000001 RSI: 00007f2f2ec470a0 RDI: 0000000000000006
[  114.027287][ T7800] RBP: 00007f2f2ec47090 R08: 0000000000000000 R09: 0000000000000000
[  114.027298][ T7800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  114.027310][ T7800] R13: 0000000000000000 R14: 00007f2f307f5fa0 R15: 00007fff86cc1408
[  114.027328][ T7800]  </TASK>
[  114.313186][ T7806] netlink: 'syz.3.1291': attribute type 39 has an invalid length.
[  114.565343][ T7811] loop3: detected capacity change from 0 to 164
[  114.639887][ T7813] FAULT_INJECTION: forcing a failure.
[  114.639887][ T7813] name failslab, interval 1, probability 0, space 0, times 0
[  114.652681][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.3.1295 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  114.652764][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  114.652777][ T7813] Call Trace:
[  114.652784][ T7813]  <TASK>
[  114.652791][ T7813]  dump_stack_lvl+0xf2/0x150
[  114.652826][ T7813]  dump_stack+0x15/0x1a
[  114.652860][ T7813]  should_fail_ex+0x24a/0x260
[  114.652889][ T7813]  should_failslab+0x8f/0xb0
[  114.652918][ T7813]  __kmalloc_noprof+0xab/0x3f0
[  114.652941][ T7813]  ? nla_strdup+0x7b/0xc0
[  114.653044][ T7813]  nla_strdup+0x7b/0xc0
[  114.653075][ T7813]  nf_tables_newtable+0x3e7/0xee0
[  114.653117][ T7813]  nfnetlink_rcv+0xb3e/0x15d0
[  114.653174][ T7813]  netlink_unicast+0x599/0x670
[  114.653211][ T7813]  netlink_sendmsg+0x5cc/0x6e0
[  114.653261][ T7813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.653298][ T7813]  __sock_sendmsg+0x140/0x180
[  114.653372][ T7813]  ____sys_sendmsg+0x326/0x4b0
[  114.653404][ T7813]  __sys_sendmsg+0x19d/0x230
[  114.653441][ T7813]  __x64_sys_sendmsg+0x46/0x50
[  114.653468][ T7813]  x64_sys_call+0x2734/0x2dc0
[  114.653506][ T7813]  do_syscall_64+0xc9/0x1c0
[  114.653534][ T7813]  ? clear_bhb_loop+0x55/0xb0
[  114.653650][ T7813]  ? clear_bhb_loop+0x55/0xb0
[  114.653726][ T7813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.653759][ T7813] RIP: 0033:0x7f2aca1ed169
[  114.653777][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.653800][ T7813] RSP: 002b:00007f2ac8857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.653819][ T7813] RAX: ffffffffffffffda RBX: 00007f2aca405fa0 RCX: 00007f2aca1ed169
[  114.653896][ T7813] RDX: 0000000000000000 RSI: 000040000000c2c0 RDI: 0000000000000003
[  114.653981][ T7813] RBP: 00007f2ac8857090 R08: 0000000000000000 R09: 0000000000000000
[  114.653993][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.654006][ T7813] R13: 0000000000000000 R14: 00007f2aca405fa0 R15: 00007ffcf8446228
[  114.654029][ T7813]  </TASK>
[  114.944108][   T29] kauditd_printk_skb: 308 callbacks suppressed
[  114.944127][   T29] audit: type=1400 audit(1740643177.758:5336): avc:  denied  { name_bind } for  pid=7819 comm="syz.3.1297" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  114.983266][ T7818] 9pnet_fd: Insufficient options for proto=fd
[  115.023519][ T7824] macvlan1: entered promiscuous mode
[  115.032167][ T7824] ipvlan0: entered promiscuous mode
[  115.044470][ T7824] ipvlan0: left promiscuous mode
[  115.050788][ T7824] macvlan1: left promiscuous mode
[  115.205363][ T7831] IPv6: Can't replace route, no match found
[  115.301286][ T7835] netlink: 'syz.4.1303': attribute type 39 has an invalid length.
[  115.442429][   T29] audit: type=1326 audit(1740643178.258:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.466473][   T29] audit: type=1326 audit(1740643178.258:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.490075][   T29] audit: type=1326 audit(1740643178.258:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.2.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fabccd169 code=0x0
[  115.513487][   T29] audit: type=1326 audit(1740643178.258:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.537596][   T29] audit: type=1326 audit(1740643178.258:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.562355][   T29] audit: type=1326 audit(1740643178.258:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.585814][   T29] audit: type=1326 audit(1740643178.258:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.609858][   T29] audit: type=1326 audit(1740643178.258:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.633648][   T29] audit: type=1326 audit(1740643178.258:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7d169 code=0x7ffc0000
[  115.890376][ T7858] netlink: 'syz.6.1311': attribute type 4 has an invalid length.
[  115.953620][ T7860] macvlan1: entered promiscuous mode
[  115.963248][ T7860] ipvlan0: entered promiscuous mode
[  115.969242][ T7860] ipvlan0: left promiscuous mode
[  115.974716][ T7860] macvlan1: left promiscuous mode
[  115.984736][ T7862] IPv6: Can't replace route, no match found
[  116.025175][ T7864] loop5: detected capacity change from 0 to 1024
[  116.041144][ T7864] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1314: Failed to acquire dquot type 0
[  116.056843][ T7864] EXT4-fs (loop5): 1 truncate cleaned up
[  116.084037][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'.
[  116.132189][ T7872] loop5: detected capacity change from 0 to 164
[  116.184556][ T7874] loop5: detected capacity change from 0 to 128
[  116.223151][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1317'.
[  116.327582][ T7881] loop5: detected capacity change from 0 to 2048
[  116.337392][ T7881] EXT4-fs: Ignoring removed oldalloc option
[  116.345257][ T7881] EXT4-fs (loop5): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  116.356067][ T7883] FAULT_INJECTION: forcing a failure.
[  116.356067][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.369755][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.2.1321 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  116.369782][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  116.369878][ T7883] Call Trace:
[  116.369885][ T7883]  <TASK>
[  116.369892][ T7883]  dump_stack_lvl+0xf2/0x150
[  116.369923][ T7883]  dump_stack+0x15/0x1a
[  116.369945][ T7883]  should_fail_ex+0x24a/0x260
[  116.370034][ T7883]  should_fail+0xb/0x10
[  116.370066][ T7883]  should_fail_usercopy+0x1a/0x20
[  116.370096][ T7883]  _copy_to_user+0x20/0xa0
[  116.370115][ T7883]  simple_read_from_buffer+0xa0/0x110
[  116.370208][ T7883]  proc_fail_nth_read+0xf9/0x140
[  116.370328][ T7883]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  116.370416][ T7883]  vfs_read+0x19b/0x6f0
[  116.370456][ T7883]  ? bpf_trace_run3+0x12b/0x1d0
[  116.370500][ T7883]  ? __rcu_read_unlock+0x4e/0x70
[  116.370523][ T7883]  ? __fget_files+0x17c/0x1c0
[  116.370562][ T7883]  ksys_read+0xe8/0x1b0
[  116.370663][ T7883]  __x64_sys_read+0x42/0x50
[  116.370755][ T7883]  x64_sys_call+0x2874/0x2dc0
[  116.370783][ T7883]  do_syscall_64+0xc9/0x1c0
[  116.370817][ T7883]  ? clear_bhb_loop+0x55/0xb0
[  116.370895][ T7883]  ? clear_bhb_loop+0x55/0xb0
[  116.370928][ T7883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.370961][ T7883] RIP: 0033:0x7f8fabccbb7c
[  116.370979][ T7883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  116.371001][ T7883] RSP: 002b:00007f8faa337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.371033][ T7883] RAX: ffffffffffffffda RBX: 00007f8fabee5fa0 RCX: 00007f8fabccbb7c
[  116.371045][ T7883] RDX: 000000000000000f RSI: 00007f8faa3370a0 RDI: 0000000000000006
[  116.371057][ T7883] RBP: 00007f8faa337090 R08: 0000000000000000 R09: 0000000000000000
[  116.371068][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.371080][ T7883] R13: 0000000000000000 R14: 00007f8fabee5fa0 R15: 00007ffe0106eec8
[  116.371101][ T7883]  </TASK>
[  116.374428][ T7886] netlink: 'syz.4.1322': attribute type 4 has an invalid length.
[  116.497442][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[  116.634997][ T7901] loop4: detected capacity change from 0 to 2048
[  116.646276][ T7901] EXT4-fs: Ignoring removed oldalloc option
[  116.658550][ T7901] EXT4-fs (loop4): stripe (257) is not aligned with cluster size (16), stripe is disabled
[  116.706115][ T7909] IPv6: Can't replace route, no match found
[  116.740101][ T7911] loop5: detected capacity change from 0 to 1024
[  116.757798][ T7911] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1330: Failed to acquire dquot type 0
[  116.771221][ T7911] EXT4-fs (loop5): 1 truncate cleaned up
[  116.820405][ T7918] macvlan1: entered promiscuous mode
[  116.827013][ T7918] ipvlan0: entered promiscuous mode
[  116.832928][ T7918] ipvlan0: left promiscuous mode
[  116.838000][ T7918] macvlan1: left promiscuous mode
[  116.959792][ T7931] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  117.001707][ T7934] FAULT_INJECTION: forcing a failure.
[  117.001707][ T7934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.014831][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.4.1339 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  117.014863][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  117.014879][ T7934] Call Trace:
[  117.014888][ T7934]  <TASK>
[  117.014897][ T7934]  dump_stack_lvl+0xf2/0x150
[  117.014978][ T7934]  dump_stack+0x15/0x1a
[  117.015004][ T7934]  should_fail_ex+0x24a/0x260
[  117.015042][ T7934]  should_fail+0xb/0x10
[  117.015117][ T7934]  should_fail_usercopy+0x1a/0x20
[  117.015155][ T7934]  _copy_to_user+0x20/0xa0
[  117.015179][ T7934]  simple_read_from_buffer+0xa0/0x110
[  117.015213][ T7934]  proc_fail_nth_read+0xf9/0x140
[  117.015289][ T7934]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  117.015321][ T7934]  vfs_read+0x19b/0x6f0
[  117.015351][ T7934]  ? __rcu_read_unlock+0x4e/0x70
[  117.015442][ T7934]  ? __fget_files+0x17c/0x1c0
[  117.015484][ T7934]  ksys_read+0xe8/0x1b0
[  117.015514][ T7934]  __x64_sys_read+0x42/0x50
[  117.015540][ T7934]  x64_sys_call+0x2874/0x2dc0
[  117.015576][ T7934]  do_syscall_64+0xc9/0x1c0
[  117.015611][ T7934]  ? clear_bhb_loop+0x55/0xb0
[  117.015644][ T7934]  ? clear_bhb_loop+0x55/0xb0
[  117.015676][ T7934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.015755][ T7934] RIP: 0033:0x7fd6da4cbb7c
[  117.015774][ T7934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  117.015793][ T7934] RSP: 002b:00007fd6d8b31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  117.015811][ T7934] RAX: ffffffffffffffda RBX: 00007fd6da6e5fa0 RCX: 00007fd6da4cbb7c
[  117.015824][ T7934] RDX: 000000000000000f RSI: 00007fd6d8b310a0 RDI: 0000000000000004
[  117.015905][ T7934] RBP: 00007fd6d8b31090 R08: 0000000000000000 R09: 0000000000000000
[  117.015916][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.015938][ T7934] R13: 0000000000000000 R14: 00007fd6da6e5fa0 R15: 00007ffe4a4ac2b8
[  117.015961][ T7934]  </TASK>
[  117.228685][ T7938] loop4: detected capacity change from 0 to 164
[  117.285333][ T7946] netem: change failed
[  117.310911][ T7948] macvlan1: entered promiscuous mode
[  117.317635][ T7948] ipvlan0: entered promiscuous mode
[  117.325514][ T7948] ipvlan0: left promiscuous mode
[  117.331519][ T7948] macvlan1: left promiscuous mode
[  117.348444][ T7951] IPv6: Can't replace route, no match found
[  117.402313][ T7955] loop6: detected capacity change from 0 to 764
[  117.410008][ T7955] Symlink component flag not implemented
[  117.415810][ T7955] Symlink component flag not implemented (116)
[  117.450887][ T7957] FAULT_INJECTION: forcing a failure.
[  117.450887][ T7957] name failslab, interval 1, probability 0, space 0, times 0
[  117.463696][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.5.1349 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  117.463725][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  117.463738][ T7957] Call Trace:
[  117.463744][ T7957]  <TASK>
[  117.463752][ T7957]  dump_stack_lvl+0xf2/0x150
[  117.463796][ T7957]  dump_stack+0x15/0x1a
[  117.463818][ T7957]  should_fail_ex+0x24a/0x260
[  117.463848][ T7957]  should_failslab+0x8f/0xb0
[  117.463878][ T7957]  kmem_cache_alloc_noprof+0x52/0x320
[  117.463899][ T7957]  ? security_file_alloc+0x32/0x100
[  117.463967][ T7957]  security_file_alloc+0x32/0x100
[  117.463994][ T7957]  init_file+0x5d/0x1b0
[  117.464026][ T7957]  alloc_empty_file+0xea/0x200
[  117.464046][ T7957]  path_openat+0x6a/0x1fc0
[  117.464085][ T7957]  ? cgroup_rstat_updated+0x9f/0x570
[  117.464169][ T7957]  ? __rcu_read_unlock+0x4e/0x70
[  117.464193][ T7957]  ? xa_load+0xb9/0xe0
[  117.464222][ T7957]  ? cgroup_rstat_updated+0x9f/0x570
[  117.464312][ T7957]  ? cgroup_rstat_updated+0x9f/0x570
[  117.464463][ T7957]  ? __mod_memcg_lruvec_state+0x141/0x290
[  117.464509][ T7957]  do_filp_open+0x1f0/0x230
[  117.464542][ T7957]  io_openat2+0x280/0x3a0
[  117.464604][ T7957]  io_openat+0x1a/0x30
[  117.464632][ T7957]  io_issue_sqe+0x1a9/0xb70
[  117.464666][ T7957]  io_submit_sqes+0x680/0x1070
[  117.464780][ T7957]  __se_sys_io_uring_enter+0x1c0/0x1b00
[  117.464892][ T7957]  ? 0xffffffff81000000
[  117.464905][ T7957]  ? __rcu_read_unlock+0x4e/0x70
[  117.464927][ T7957]  ? get_pid_task+0x8e/0xc0
[  117.464954][ T7957]  ? proc_fail_nth_write+0x12a/0x150
[  117.465018][ T7957]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  117.465047][ T7957]  ? vfs_write+0x644/0x920
[  117.465074][ T7957]  ? __fget_files+0x17c/0x1c0
[  117.465180][ T7957]  ? fput+0x1c4/0x200
[  117.465199][ T7957]  ? ksys_write+0x176/0x1b0
[  117.465225][ T7957]  __x64_sys_io_uring_enter+0x78/0x90
[  117.465292][ T7957]  x64_sys_call+0xb5e/0x2dc0
[  117.465318][ T7957]  do_syscall_64+0xc9/0x1c0
[  117.465347][ T7957]  ? clear_bhb_loop+0x55/0xb0
[  117.465444][ T7957]  ? clear_bhb_loop+0x55/0xb0
[  117.465498][ T7957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.465528][ T7957] RIP: 0033:0x7f989df7d169
[  117.465543][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.465561][ T7957] RSP: 002b:00007f989c5e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  117.465580][ T7957] RAX: ffffffffffffffda RBX: 00007f989e195fa0 RCX: 00007f989df7d169
[  117.465592][ T7957] RDX: 000000000000addf RSI: 0000000000003516 RDI: 0000000000000006
[  117.465675][ T7957] RBP: 00007f989c5e1090 R08: 0000000000000000 R09: 000000000001517f
[  117.465687][ T7957] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  117.465699][ T7957] R13: 0000000000000000 R14: 00007f989e195fa0 R15: 00007ffd6bf771f8
[  117.465717][ T7957]  </TASK>
[  117.474349][ T7959] loop6: detected capacity change from 0 to 1024
[  117.676744][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1352'.
[  117.746704][ T7959] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1350: Failed to acquire dquot type 0
[  117.753039][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1352'.
[  117.753060][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1352'.
[  117.757879][ T7959] EXT4-fs (loop6): 1 truncate cleaned up
[  117.858836][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'.
[  117.860126][ T7975] loop5: detected capacity change from 0 to 164
[  117.924740][ T7977] loop5: detected capacity change from 0 to 764
[  117.933924][ T7977] Symlink component flag not implemented
[  117.939618][ T7977] Symlink component flag not implemented (116)
[  118.026188][ T7985] loop6: detected capacity change from 0 to 128
[  118.126974][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'.
[  118.244878][ T7992] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.254856][ T7994] program syz.5.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.265813][ T7994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  118.304765][ T7994] loop5: detected capacity change from 0 to 1024
[  118.311949][ T7994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  118.322179][ T7994] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  118.333733][ T7994] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  118.341825][ T7994] EXT4-fs (loop5): orphan cleanup on readonly fs
[  118.348888][ T7994] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.1362: Invalid inode table block 0 in block_group 0
[  118.361952][ T7994] EXT4-fs (loop5): Remounting filesystem read-only
[  118.368622][ T7994] EXT4-fs (loop5): 1 truncate cleaned up
[  118.374978][ T7994] SELinux: (dev loop5, type ext4) getxattr errno 5
[  118.410496][ T7999] macvlan1: entered promiscuous mode
[  118.417288][ T7999] ipvlan0: entered promiscuous mode
[  118.423462][ T7999] ipvlan0: left promiscuous mode
[  118.429021][ T7999] macvlan1: left promiscuous mode
[  118.486231][ T8003] loop4: detected capacity change from 0 to 1024
[  118.499502][ T8003] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1367: Failed to acquire dquot type 0
[  118.516190][ T8003] EXT4-fs (loop4): 1 truncate cleaned up
[  118.521400][ T8006] veth0_to_bond: entered promiscuous mode
[  118.528282][ T8005] veth0_to_bond: left promiscuous mode
[  118.665007][ T8021] loop5: detected capacity change from 0 to 512
[  118.681449][ T8021] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1374: bg 0: block 35: padding at end of block bitmap is not set
[  118.708172][ T8021] EXT4-fs (loop5): Remounting filesystem read-only
[  118.722956][ T8021] EXT4-fs (loop5): 1 truncate cleaned up
[  118.734735][ T8021] SELinux: (dev loop5, type ext4) getxattr errno 5
[  118.829551][ T8024] loop5: detected capacity change from 0 to 512
[  118.883121][ T8024] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1375: bg 0: block 35: padding at end of block bitmap is not set
[  118.904861][ T8024] EXT4-fs (loop5): Remounting filesystem read-only
[  118.924627][ T8024] EXT4-fs (loop5): 1 truncate cleaned up
[  118.933897][ T8024] SELinux: (dev loop5, type ext4) getxattr errno 5
[  118.951581][ T8024] ==================================================================
[  118.959795][ T8024] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain
[  118.967380][ T8024] 
[  118.969709][ T8024] read-write to 0xffff888237c2b4a8 of 1 bytes by task 8019 on cpu 0:
[  118.978137][ T8024]  mlock_new_folio+0x114/0x200
[  118.982948][ T8024]  folio_add_lru_vma+0x5d/0x60
[  118.987730][ T8024]  handle_mm_fault+0x24d8/0x2ac0
[  118.992719][ T8024]  __get_user_pages+0xf6a/0x2350
[  118.997681][ T8024]  __mm_populate+0x25b/0x3b0
[  119.002305][ T8024]  __se_sys_mremap+0x89f/0xf10
[  119.007175][ T8024]  __x64_sys_mremap+0x67/0x80
[  119.011890][ T8024]  x64_sys_call+0x27e8/0x2dc0
[  119.016600][ T8024]  do_syscall_64+0xc9/0x1c0
[  119.021145][ T8024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.027089][ T8024] 
[  119.029425][ T8024] read to 0xffff888237c2b4a8 of 1 bytes by task 8024 on cpu 1:
[  119.036981][ T8024]  need_mlock_drain+0x30/0x50
[  119.041684][ T8024]  __lru_add_drain_all+0x22a/0x3f0
[  119.046819][ T8024]  lru_add_drain_all+0x10/0x20
[  119.051605][ T8024]  invalidate_bdev+0x47/0x70
[  119.056236][ T8024]  ext4_put_super+0x571/0x810
[  119.060955][ T8024]  generic_shutdown_super+0xe5/0x220
[  119.066357][ T8024]  kill_block_super+0x2a/0x70
[  119.071189][ T8024]  ext4_kill_sb+0x44/0x80
[  119.075563][ T8024]  deactivate_locked_super+0x7d/0x1c0
[  119.081348][ T8024]  fc_drop_locked+0x50/0x60
[  119.085891][ T8024]  vfs_get_tree+0x160/0x1e0
[  119.090439][ T8024]  do_new_mount+0x227/0x690
[  119.094977][ T8024]  path_mount+0x49b/0xb30
[  119.099350][ T8024]  __se_sys_mount+0x27f/0x2d0
[  119.104069][ T8024]  __x64_sys_mount+0x67/0x80
[  119.108692][ T8024]  x64_sys_call+0x2c84/0x2dc0
[  119.113394][ T8024]  do_syscall_64+0xc9/0x1c0
[  119.117937][ T8024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.123872][ T8024] 
[  119.126228][ T8024] value changed: 0x19 -> 0x01
[  119.130922][ T8024] 
[  119.133258][ T8024] Reported by Kernel Concurrency Sanitizer on:
[  119.139417][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.5.1375 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
[  119.150110][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  119.160184][ T8024] ==================================================================
[  119.204318][ T8030] ip6gre1: entered allmulticast mode