last executing test programs:

46.985635185s ago: executing program 0 (id=159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x8040)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)

46.686108109s ago: executing program 0 (id=161):
r0 = socket$inet(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
close(r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x112)
fcntl$setlease(r8, 0x400, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r10, &(0x7f0000000000)=""/182, 0xb6)
getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x4000)

46.588887481s ago: executing program 0 (id=162):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000016e8a39a5eb758c067361cca14e4594a72eae3895cdd149f5e9e67668888ad094738abe83efa754c088950ef8fa123561b4bb3ad34dd9f9a0498f521cb1404ee25ac2407f0465c420feec4b79b3d5a4a96fc0defe7ec39e384fa4c153c8d507ff9624e3c81c8746f8295c043c7a0e431057d3a0e39e4"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

45.875454472s ago: executing program 0 (id=167):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=@delchain={0x44c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x44}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_fw={{0x7}, {0x3ec, 0x2, [@TCA_FW_ACT={0x1cc, 0x4, [@m_xt={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7ff}]}, {0xc, 0x6, "e33ed85fe798ed68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xa4, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x7b, 0x6, "66705f13a932943c59a66b288007ebe55e9eae5b608f79db49075788bacaf9d712a4abfd47e8e0fcba8b7a9d8e0e281be56c84367c93e83702516e778f159f0c24ac1214688db11e43f9cbb2a74d947ddfc602442423368bc1d38aa8278d67aaa41db9183569f8e735a328dcdd720cc22d7c14f344cd8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0xc4, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_MARK={0x8, 0x5, 0xd}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x54, 0x6, "46f7b0291b76577167aa3b1fec61201680fc6dc7f124274882f0bb06603f30e78935c35828076873dd99c9dbbc06f6e2d586cbe8c1b629bb5fd263e92d53b374e50a743e1789e4a5c7cd1e3d42b5e252"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_ACT={0x1f8, 0x4, [@m_bpf={0xc8, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}]}, {0x68, 0x6, "66797dee7b04acab2ca0b0647cb105dafad24efcda05210300454dac36a17985e6a3e0c4cc6bf3fb2e35c6f630e8012edb44022b3980fe19ead6739a1317d80b50aec3cfac45543fbe7431bf39e27f68c8ea45475d248125c33fec1469ccf478225adccb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x12c, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff2c, 0x10000000, 0x0, 0x174}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5f, 0x6, 0x6, 0xff, 0x8}, 0x64}}]}, {0xc5, 0x6, "b71966cb975e68acd2fadacfdbd289d4de7b6981826a3fa68aaf0c7f5715f2ee923d0a75f3ebec10078eb1205cebf0ca49f974ee5a03d2a259f6cf04aaaadc533389af5190d634096d7349d806a89d68ca50e4fbe7ad07fb48f22c5a69d5be344951f9c0fa012905c73537c7aa4418cfe465aad8642beb0356739c26406689a5c6628910bcae717dc01644b870091b30db3e3c5e9715e23e006f674f151c5edaa36ddd24f621e65387878a4a9047764d1a83d69f0b49f2a36ceffa453ed33463e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xe}, @TCA_FW_MASK={0x8, 0x5, 0xf9}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc8}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {}, {0xb, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
r0 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x39e], 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001e40)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$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")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x24)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1b, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a0040000000000000000000f27c0000e8ff00", [0x0, 0xffffffffffffffff]})
write$evdev(r1, &(0x7f0000000880)=[{{0x77359400}, 0x12, 0x10, 0x1}], 0x18)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x10, 0xd3fb7cf2797aae21)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003e80)={0xffffffffffffffff, 0x20, &(0x7f0000003e40)={&(0x7f0000003d40)=""/70, 0x46, <r8=>0x0, &(0x7f0000003dc0)=""/87, 0x57}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000003f40)={0x5, 0x24, &(0x7f0000003b00)=ANY=[@ANYBLOB="18000000010000000000000007000000f5110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008ff300008500000006000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001040000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000002300)='syzkaller\x00', 0x7fff, 0x76, &(0x7f0000003c40)=""/118, 0x41100, 0x48, '\x00', 0x0, @fallback=0x19, r7, 0x8, &(0x7f0000003cc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003d00)={0x3, 0x3, 0x3, 0x9}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000003ec0)=[r3], &(0x7f0000003f00)=[{0x5, 0x4, 0x8, 0xa}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000100f68b6e7ab68db4b128fd000000d555000000af146764f03341234a4876775e8aa33b3da3a5f3e2ba3d746e20d87222f3b53410563b89a13204d6c134322987e8682456f6f4c9b3ea87bedc90515593a8324ff9757eb722a9305bfe1f05b17211e6e95be6907722a3fde69268eabaf126ccb24a942a7d936d623791dcb072ecb10521f969907828102518f984a09ecab5f5faa0d04d7bc3951e4fa1ba8186d1225199a62c93829e3a425f33d5a6b4d79ef50211d0", @ANYRESDEC, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="b400000010001fff00"/20, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000180002801400060020010000000000000000000000000002680012800b000100697036677265000058000280060002"], 0xb4}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
recvmmsg(r10, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400})
pipe2(&(0x7f00000003c0), 0x0)

45.120099255s ago: executing program 0 (id=171):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in=@private=0xa010100, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {0x0, 0xffffffffffffffff}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

44.491371085s ago: executing program 0 (id=174):
syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000002000)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000002d40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1202053, &(0x7f0000000300), 0x0, 0x61e, &(0x7f0000000800)="$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")
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
sync()
umount2(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='powernv_throttle\x00', r2}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)

44.490752135s ago: executing program 32 (id=174):
syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000002000)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000002d40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1202053, &(0x7f0000000300), 0x0, 0x61e, &(0x7f0000000800)="$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")
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
sync()
umount2(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='powernv_throttle\x00', r2}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)

1.795399241s ago: executing program 2 (id=780):
add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r4, 0x4)
syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002af}, &(0x7f0000000140), &(0x7f0000000680))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10)
r6 = getegid()
getresuid(&(0x7f00000004c0)=<r7=>0x0, &(0x7f0000000500), &(0x7f0000000540))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, <r8=>0x0}, &(0x7f00000005c0)=0xc)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000002c00faffffff00000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80)

1.642583804s ago: executing program 4 (id=781):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x1, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffffb, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7ffffffffffd, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000540), 0x1}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

1.606107454s ago: executing program 2 (id=782):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_usbip_server_init(0x4)

1.583332754s ago: executing program 3 (id=783):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000040000000000000000000095b8000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050500002300fdbcdf2501"], 0x1c}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
io_uring_setup(0x60f7, &(0x7f0000000500)={0x0, 0x800, 0x2, 0xfffffffe, 0x3bd})
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000002c0)={0x1d, r7}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11}, 0x18)
connect$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x1, 0xf0}, 0x1}, 0x18)
sendmsg$can_j1939(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

1.522793655s ago: executing program 4 (id=785):
membarrier(0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095f2a72e0e14bc8f2baf90a22b5e457830dec0747196971cf8326525cfe0fdc587dfe5cad08f8866ba0989dffd1b908dad8961fe2fe4122be4232b4567e2e50462360084e20d4387"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000f903000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4)
setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000000f00)=0xb6b, 0x4)
r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c40)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d302c757466383d302c71756965742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c726f6469723d63703836392c757466383d302c7574010000002c636865636b3d7374726963742c636f6465706167653d3737352c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c646d61736b3d30303030303030303030303030303030303030303030342c756e5994076c6174653d302c00"/214], 0x6, 0x2b8, &(0x7f0000000640)="$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")
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r11])

1.500268695s ago: executing program 3 (id=786):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000094c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={&(0x7f0000009500)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x40080)

1.483643426s ago: executing program 3 (id=787):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$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")
creat(&(0x7f0000000040)='./file0/file1\x00', 0x20)

1.345550468s ago: executing program 3 (id=790):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002300)={0x7, {"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", 0xfffffffffffffd25}}, 0x1006)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SET_MM_MAP(0x3c, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
r5 = getuid()
setuid(r5)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0xc)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000002, &(0x7f0000003340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3f276171118ed5fb75f9dcc9aeb1b5fffffeffffffffffe85442", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.L,debug=0x0000000000000040,ignoreqv,access=', @ANYRESDEC=r5, @ANYBLOB=',fscache,cache=loose,uid>', @ANYRESDEC=r6, @ANYBLOB=',smackfsfloor=/usr/lib/telepathy/mission-control-5,silent,subj_role=.),measure,\x00'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r7, &(0x7f00000001c0)=@objname={'system_u:object_r:udev_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x4, 0x20, './file0\x00'}, 0x66)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000380)="$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")
readlink(&(0x7f0000000200)='./file2\x00', &(0x7f00000016c0)=""/4096, 0x1000)

1.343043718s ago: executing program 1 (id=791):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8b1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
unshare(0x26040200)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1d3254410335322f)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
poll(0x0, 0x0, 0x9)
r1 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r1, 0x0, 0x40000000, 0x0)

1.117997022s ago: executing program 3 (id=793):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd60122d9200083afffe8000000000000000000000000000aa000000000000000000000000710007000000000000000000"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000300)=0x1, 0xfffffffffffffe8b)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x3000000)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x8440, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x28, 0x12, 0xa01, 0x0, 0x1, {}, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x18)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1)

1.113097192s ago: executing program 1 (id=794):
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

1.049763803s ago: executing program 2 (id=795):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x1, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffffb, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7ffffffffffd, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000540), 0x1}, 0x8080)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

980.916084ms ago: executing program 1 (id=799):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xe3b9}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r1)
r2 = inotify_init1(0x800)
fcntl$setstatus(r1, 0x4, 0x2c00)
r3 = gettid()
fcntl$setown(r1, 0x8, r3)
fcntl$setsig(r2, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r2, &(0x7f00000003c0)='./control\x00', 0xa4000960)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000400), 0x0}, 0x20)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="7f10004600073f034b0b00000000000003003e00ffffffe935011134fd95dc1592af1743f7507b8728695bef5961be1e4bd55bbea154552e1846", @ANYRESDEC=r5, @ANYRES8, @ANYBLOB="492190c19e4b757709b252dca88288b4473bb10bec55fe30568ba50527b85f7c613ce09da11999ac9847edb01a283a055adeadfb118bf705e6c77346f0e966adc511518745ebaff18c04ff488b67e675a9ced935e59c9fcbe9131caba8ce3ea89e719e3cfe0cea007238c03abe9f6149df07918dd9a72562c31575db78b4c04237fe", @ANYRES64=r6], 0x7c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
rmdir(&(0x7f0000000100)='./control\x00')
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)

960.356954ms ago: executing program 2 (id=800):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='io_uring_register\x00', r2}, 0x18) (async)
r3 = syz_io_uring_setup(0x285d, &(0x7f0000000480)={0x0, 0xb418, 0x0, 0x2, 0x5}, &(0x7f00000000c0), &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, 0x0, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/111, 0x6f}, 0x7900}], 0x1, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000400000010000100010000000000110100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x17) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="002b7f366f5df85ced42000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r10, &(0x7f0000000080), 0x0}, 0x20) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/208) (async)
socket$tipc(0x1e, 0x5, 0x0)

888.642075ms ago: executing program 1 (id=802):
syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000002000)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000002d40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1202053, &(0x7f0000000300), 0x0, 0x61e, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvTLfv/H4txETxIE2MgURpaQFDjIlwNwRf/oFKCyEUSmhNLJBQEj0aLx5MPHkQ4z+hJN6MB68evBsSYgwHMUTWzO5sWba7fd+d0v18kqXzzEzn+U7Lt88zzz4zG0DXGsv+SSMORsS1JGKkblsp8o1j1f0e/nXrfPZKolz+4M8kbt1OluuPleRfh/Nv/nckkl/TiAM9q+tdWLpxeXpubvZ6Xp5YvHJtYmHpxtFLV6Yvzl6cvTr15tSpkydOnpo8tq3z622y7tuvHyeT3/1+NonT8SSPLTuvxv36t1Vz9jMbi3LVo/r12c/11DaPvVv8PVL7f/JU0riCXetCnrdZnrwYI9FT99scic/eKzQ4oK3KSdTaKKDrJC3y/+cza/1lGGhbPECn1PoBtWv7ZtfBq6Vt7pUAHVOq5X9vRNTyv1QdG4yBytjA0MPkmXGeJCK2NzJXldXxy09nP81e0WIcDmiP5Tu1Ue7G9j+p5OZoDFRKQw/TPP/3Vbcul8tp3hPI1r+/xfrHGsryHzpn+U5EvJS3/32xgfyvSvPcreX/R1usX/4DAAAAAADAzrl3JiLeaDb/L12Z/9PXZP7PcESc3oH613//L72fLyQNu/btQPXQ1R6ciXi76fzflTm+oz156X+V+QA3kwuX5maPRcT/I+JI9PZn5cmG49bPED76+YGvWtVfP/8ve2X11+YC5ke6X2q4EXdmenF6u+cNRDy4E/FyZf7voXzNs/N/svY/adL+Z/l9bYN1HHjt7rlW29bPf6Bdyt9EHG7a/j/tbif58znuNn8+x0SlPzBR6xWs9srNL35oVX9j/rfhFIEWsvZ/aO3870/qn9ezsLnjZxfpx5dK5Vbbt9r/70s+7Im6QYBPphcXr09G9CXvrl4/tbmYYa/K8+FQ5PmS5f+RV9ce/1vp/9fl4WBELG+gvoF1tuv/Q3Gy/J9Zu/0ffbb93/zC1N3RH1vVf25D7f+JSpt+JF9j/A/qrX4ex0YTtJBwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA5l0bEvkjS8ZXlNB0fjxiOiBdiKJ2bX1h8/cL8x1dnsm0Ro9Gb1j7pd6RaTmqf/z9aV55qKB+PiP0R8WXPYKU8fn5+bqbokwcAAAAAAAAAAAAAAAAAAIBdYrhyz3+5v/H+/8wfPUVHB7RdKf8q36H7lLb8neX+usL3kzsSDdBJW89/4DmWXfNvIv972xkLUIDW+f/ocbmio+EAHaT/D91ri/nv7QLYA7T/0K02OKY30O44gCJU2//BosMAAAAAAAB2xv5D935LImL5rcHKK9OXbzPZH/a2tOgAgMKYwwvdqzRfdARAUVzjA8nK0j9Nb/ZvPfs/aU9AAAAAAAAAAAAAAMAqhw+6/x+61dr3/5vbD3vZGvf/N0t+jwuAPaT1R39p+2Gvc40PrNfau/8fAAAAAAAAAAAAAHaBgRuXp+fmZq8vLD1/C+/sjjA2t7A8vSPHiXzqdQdiLt+OWHufJ+2pvTciCv99rSxk0XSqrtojOAo85WL/LAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/9FwAA//+o2hfU")
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
sync()
umount2(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='powernv_throttle\x00', r2}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c)

812.194887ms ago: executing program 2 (id=803):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000016e8a39a5eb758c067361cca14e4594a72eae3895cdd149f5e9e67668888ad094738abe83efa754c088950ef8fa123561b4bb3ad34dd9f9a0498f521cb1404ee25ac2407f0465c420feec4b79b3d5a4a96fc0defe7ec39e384fa4c153c8d507ff9624e3c81c8746f8295c043c7a0e431057d3a0e39e4"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

699.992848ms ago: executing program 2 (id=806):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x3c}}, 0x0)
futex_waitv(&(0x7f0000002040)=[{0x0, &(0x7f0000000040)=0xfffffffffffff7d7, 0x2}, {0x7, &(0x7f0000000080)=0x9000, 0x82}, {0x3, &(0x7f00000000c0)=0x10000000000009, 0x82}, {0x9, &(0x7f0000000100)=0x3}, {0x6, &(0x7f0000000180)=0x52c5, 0x2}, {0x7276, &(0x7f0000000200)=0xfffffffffffffff7, 0x2}, {0x8, &(0x7f0000000240)=0x10001, 0x2}, {0x0, &(0x7f00000002c0)=0x1, 0x2}, {0x1, &(0x7f0000000300)=0x7e, 0x82}, {0x2, &(0x7f0000000340)=0x9, 0x2}, {0xfffffffc, &(0x7f0000000380)=0x2, 0x2}, {0x1ff, &(0x7f00000003c0)=0xe669, 0x2}, {0x8000000000000001, &(0x7f0000000400)=0x7fff, 0x82}, {0x1, &(0x7f0000000440)=0x6, 0x2}, {0x9ff, &(0x7f0000000480)=0x7fffffff, 0x2}, {0x100000000, &(0x7f00000004c0)=0x3, 0x82}, {0x0, &(0x7f0000000500)=0x9, 0x2}, {0xfffffffffffffff9, &(0x7f0000000540)=0x9ae0, 0x2}, {0x1, &(0x7f0000000580)=0x800, 0x2}, {0x7, &(0x7f00000005c0)=0x5, 0xc1}, {0x9, &(0x7f0000001980)=0xb6d, 0x2}, {0x1, &(0x7f0000000640)=0x3}, {0x9, &(0x7f0000000680)=0xdbac, 0x82}, {0x6, &(0x7f00000006c0)=0x2, 0x82}, {0x7, &(0x7f0000000700)=0x6, 0x82}, {0x3ff, &(0x7f0000000740)=0x2, 0x82}, {0x7d0, &(0x7f0000000780)=0x1, 0x82}, {0x4, &(0x7f00000007c0)=0xc0, 0x2}, {0x5, &(0x7f0000000800)=0x69e0, 0x82}, {0x79e7, &(0x7f0000000840)=0x4, 0x82}, {0x9, &(0x7f0000000880)=0x5, 0x2}, {0x100000000, &(0x7f00000008c0)=0x8000000000000000, 0x2}, {0x0, &(0x7f0000000900)=0x1, 0x2}, {0x8, &(0x7f0000000940)=0x79, 0x2}, {0xf, &(0x7f0000000980)=0x4, 0x82}, {0x0, &(0x7f00000009c0), 0x2}, {0x0, &(0x7f0000000a00)=0x9, 0x82}, {0x4, &(0x7f0000000a40)=0x7, 0x82}, {0x8a04, &(0x7f0000000a80)=0x7, 0x2}, {0x9, &(0x7f0000000ac0)=0x80000000}, {0x2, &(0x7f0000000b00)=0xe7ec, 0x82}, {0x9, &(0x7f0000000b40), 0x82}, {0x8, &(0x7f0000000b80)=0x1c15e00000, 0x2}, {0x9, &(0x7f0000000bc0)=0x9, 0x82}, {0x8, &(0x7f0000000c00)=0x5, 0x2}, {0x4, &(0x7f0000000c40)=0xb7, 0x82}, {0x80000001, &(0x7f0000000c80)=0x3, 0x2}, {0x30000000000000, &(0x7f0000000cc0)=0x7ff, 0x2}, {0x7, &(0x7f0000000d00)=0xf2c, 0x82}, {0x1, &(0x7f0000000d40)=0x7, 0x2}, {0xfffffffffffff001, &(0x7f0000000d80)=0x1, 0x82}, {0x6, &(0x7f0000000dc0)=0x10000, 0x82}, {0x3, &(0x7f0000000e00)=0x7, 0x82}, {0x6, &(0x7f0000000e40), 0x2}, {0x9, &(0x7f0000000e80)=0x100000000, 0x6d125aeb268a3c4a}, {0x7ff, &(0x7f0000000ec0)=0x8}, {0x9, &(0x7f0000000f00)=0x3, 0x2}, {0x80000000, &(0x7f0000000f40)=0xffffffffffff0001, 0x82}, {0xc327, &(0x7f0000000f80)=0x6, 0x2}, {0x1f0, &(0x7f0000000fc0)=0x5, 0x82}, {0x6, &(0x7f0000001000)=0x7, 0x2}, {0x200, &(0x7f0000001040)=0x80000000}, {0xffffffffffffff09, &(0x7f0000001080)=0x3, 0x2}, {0x0, &(0x7f00000010c0)=0x10001}, {0x1, &(0x7f0000001100)=0x381, 0x82}, {0x100000004, &(0x7f0000001140)=0x1, 0x2}, {0x43f, &(0x7f0000001180)=0x7, 0x2}, {0x7, &(0x7f00000011c0)=0x1, 0x2}, {0x8, &(0x7f0000001200), 0x2}, {0x80007fc000, &(0x7f0000001240)=0x6, 0x2}, {0xffffffffffffffff, &(0x7f0000001280)=0x8, 0x2}], 0x47, 0x0, 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0xfffffffffffffff8, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r3], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r7}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r9, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x2c}}, 0x20040004)
fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6312, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x200000000200}, 0x18)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r12, r10}, 0xc)
fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1})

618.85709ms ago: executing program 4 (id=808):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000a00)="10200003", 0x4, 0x4, &(0x7f0000000940)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @random="ec7336c86934"}, 0x14)
fdatasync(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1a}]}}}]}, 0x3c}}, 0x4000000)

552.897051ms ago: executing program 4 (id=810):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x978, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_SEL={0x404, 0x5, {0xe, 0x5, 0xc, 0x46, 0x2, 0x0, 0x8001, 0x1, [{0x7ff, 0x7fffffff, 0x6, 0x1ff}, {0x7, 0x2, 0xb2fb4a2, 0x4}, {0x2, 0x4, 0x0, 0x7}, {0x6, 0x158f4f2, 0x4, 0x5}, {0xffff, 0x6, 0x5, 0x3b}, {0x2, 0x3, 0x2, 0x7fffffff}, {0xe5, 0x8, 0x3, 0x8}, {0x2440000, 0x3, 0x3, 0x2}, {0x2, 0x8, 0x4, 0x6d}, {0xdd, 0x7, 0x401}, {0x9, 0x1, 0xfffffff7, 0x6}, {0x7, 0x2, 0x1, 0x8}, {0x4, 0x4198, 0x8, 0x4f}, {0x6c, 0x1, 0xd3, 0x401}, {0x4, 0x7, 0xfffffff8, 0xffffffff}, {0x7fff, 0x2, 0x7fff, 0x1}, {0x5, 0x200, 0x6, 0x7}, {0x4, 0xffffffff, 0x7, 0x401}, {0x10, 0x401, 0x1, 0x1}, {0xd469, 0x2, 0x2}, {0x2, 0x3, 0x3, 0xc9c}, {0x8, 0xfffffffa, 0x7, 0x7}, {0x0, 0x6, 0x1, 0xa4e}, {0x81, 0x5, 0x9, 0x2}, {0x6, 0xdfe, 0x1c, 0x7}, {0xfffffffd, 0x6, 0xfffffffc, 0x6}, {0x7, 0xff, 0x37}, {0x9, 0x10, 0x2, 0x80000001}, {0x1, 0x499, 0x4, 0xc940}, {0x5, 0x1, 0x5, 0x3}, {0xf4, 0xd, 0x6, 0x2deb}, {0x9, 0x3, 0x5, 0x80000001}, {0x1, 0x4, 0x8, 0x6}, {0x7f, 0x0, 0x7, 0x6}, {0x6413, 0x0, 0x4, 0x5}, {0x3, 0x3, 0x6}, {0x4, 0x3, 0x26, 0xd4}, {0x40, 0xfdc, 0x4, 0x3}, {0x8001, 0xe063, 0x5e5, 0x800}, {0xd, 0xc, 0x2, 0x2}, {0x78, 0x9cf, 0xfffffffe, 0x2}, {0x9, 0x3, 0x3, 0x293d}, {0x9, 0xb, 0xfffffffe, 0x7}, {0x8, 0xb, 0x6, 0x7fffffff}, {0x0, 0x10001, 0x8001, 0xffffffff}, {0x1, 0x66, 0x6, 0x6}, {0x6, 0x4, 0x9, 0x2}, {0x6, 0x772, 0x5, 0x9}, {0x8, 0x8, 0x1, 0x7ff}, {0x9, 0x4, 0xa5, 0x7}, {0x400000, 0xa, 0x8}, {0x4, 0xfe, 0x7, 0x8}, {0x9, 0x2, 0x9, 0x5}, {0x4, 0x6, 0x6, 0x2}, {0x3f5, 0x8001, 0x2, 0x8}, {0x1, 0xec7, 0x7ff, 0xe}, {0x0, 0xffff9efe, 0xe, 0x1}, {0x8, 0x9, 0xfffffff8, 0x3ff}, {0x40, 0x6, 0x4, 0x80}, {0x200, 0x6, 0x738c, 0x3}, {0x7, 0x5, 0xb6, 0x1}, {0x0, 0xa7850000, 0x6, 0x45b}, {0x3, 0x2, 0x4, 0x8}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe1}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb}, @TCA_U32_DIVISOR={0x8, 0x4, 0x8f}, @TCA_U32_ACT={0x32c, 0x7, [@m_ctinfo={0x130, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xa4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8e, 0x8, 0x6, 0xfff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}]}, {0xc3, 0x6, "0118e8116c79bd2eb3e86c9badfb4d028f4337f9d2406dddd7687c9e29e3c7771cf02b1fc18c8794e1eb3edcf6911c56d214ab21fdd6d27e36d18b42adb83e325349afc8873b088130d72212420e1bee06d5d48c90f29b0a5af7ca0c70c53323a35fdfc4acd0b181d81e74739e854c5424a0376623dc8a739920411eab61049cf46faa77ec9b955e005159c23e0fe4e1fcddecaea1f81c1ea8e33bec68e7bbce3482ebc71a5ba2898dd74d44e260ade2d0f5382370bfb5f9a7faa16aea8ce3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x88, 0x11, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x20000000, 0x626, 0x8}, 0x5}}]}, {0xe, 0x6, "5c728a719e8f33b9f053"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x170, 0xd, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'mm_page_free\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9e5, 0x6, 0xa, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x4, 0xffffffffffffffff, 0xc6, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2422, 0x0, 0x80, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x100, 0x1, 0x4, 0xffffffff}}]}, {0xc5, 0x6, "6512cc069f96b597768c012706cce77aa4ecb61bb04f8ff1dcc4c9f1aac4ea4b1782908de295a1c9216cb046b8c4b9bf3e80498a6accc21f857ac2dbd04200d33ec33ae058232480f85426f68955c948cb36964fac58842d997cd40df41c29571b025985a4dda95739b00584eaf74e7b580601d875fc4b72893ffdb100d6a56b6feed8c93e5be4af61ef574915a15488c6933c47ca638899d16413e461b51e4deb085ade04e78d7951fc35f8d8be1ea0b503ecfb79bcf03d3322c41c9314eb1619"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_SEL={0x1a4, 0x5, {0x6, 0x1c, 0x6, 0xcfe4, 0x7496, 0x8, 0x3, 0x9, [{0x8, 0x78, 0x7}, {0xffffff0d, 0x1, 0xf91, 0xc}, {0x552, 0xfffffffe, 0x8001, 0x80}, {0xfff, 0x0, 0x7b6348d4, 0x4}, {0x6c6, 0x8, 0x1, 0x200}, {0x3ff, 0x1, 0x1d8b, 0x7}, {0x9, 0x9, 0xffffffff, 0x2}, {0x7, 0x3, 0x0, 0x85}, {0x584d, 0x1, 0x7, 0xbb47}, {0x9, 0x3, 0x6, 0x1ff}, {0x5, 0x4, 0x1, 0x7}, {0x7, 0x79d8, 0x6, 0x3ff}, {0x7f, 0xffffffff, 0xf39, 0xfffff961}, {0x2, 0x10, 0x9583, 0x1000}, {0x7, 0x2e2, 0x6118dac4}, {0x1, 0x1, 0x6, 0x353ed7ed}, {0x7fff, 0x150, 0x6}, {0x200, 0xd3b, 0x8000, 0x6}, {0x5, 0x2, 0xb, 0x4f}, {0x5, 0x7, 0xffffffff, 0x401}, {0xffffffff, 0x1a, 0x7, 0x9}, {0x800, 0x0, 0x10001, 0x60a}, {0xb, 0xfffffffa, 0x4, 0x1}, {0xc70, 0x6, 0x3}, {0x2c3, 0x80, 0xe, 0x1}]}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x978}, 0x1, 0x0, 0x0, 0x40008}, 0x24040084)

552.371241ms ago: executing program 4 (id=811):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5517})

509.691352ms ago: executing program 5 (id=812):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r3=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18)

475.981092ms ago: executing program 4 (id=813):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0)
sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4086, 0x0, 0xfffffffffffffeae}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd)
waitid(0x1, r2, 0x0, 0x4, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f00000010c0)="28e4b0377238c4d25429ab160f9ce95c6832b40ffc44fb48a02bbb63429c1a24b133901ed9816faeef5949828eafc4c93cdb40675674b7ddb691fd49bd33e3f6526ee1967d9774447b11c3fdda99fd098011460ded3e7ee22078b8da92d6e2b80f749e712207c0c51bae52ef8f8d44f68fc6fce970e3ddd629795922", &(0x7f0000001140)=""/249, 0x4}, 0x20)

475.632842ms ago: executing program 5 (id=814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0)

475.315972ms ago: executing program 5 (id=815):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)

460.596002ms ago: executing program 5 (id=816):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc3933006}]}, 0x2c}}, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$packet(r0, &(0x7f0000000300)="44d749e8b70d0401005bd815c394e8", 0xf, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) (async, rerun: 32)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64)
listen(r10, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000400005806fefe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e220de0104e66", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c22000907800071e0401a11e141f0500000000000001ff0000000000000056fe07f98938d7fc13127a045b9c55c8000000000000000000001312e9803cac6913fbfccc18ce5a512eaf7300"], 0x0) (async, rerun: 64)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async, rerun: 64)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000240)='syzkaller\x00', 0x100, 0x3a, &(0x7f0000000280)=""/58, 0x41100, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000001c0)='f2fs_filemap_fault\x00', r12, 0x0, 0xfffffffffffffffc}, 0x18) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x42}}, './file0\x00'})

366.868564ms ago: executing program 5 (id=817):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (fail_nth: 1)

181.130797ms ago: executing program 5 (id=818):
membarrier(0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095f2a72e0e14bc8f2baf90a22b5e457830dec0747196971cf8326525cfe0fdc587dfe5cad08f8866ba0989dffd1b908dad8961fe2fe4122be4232b4567e2e50462360084e20d4387"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000f903000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4)
setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000000f00)=0xb6b, 0x4)
r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c40)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d302c757466383d302c71756965742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c726f6469723d63703836392c757466383d302c7574010000002c636865636b3d7374726963742c636f6465706167653d3737352c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c646d61736b3d30303030303030303030303030303030303030303030342c756e5994076c6174653d302c00"/214], 0x6, 0x2b8, &(0x7f0000000640)="$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")
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r11])

136.553848ms ago: executing program 3 (id=819):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9f)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x38, r1, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1], 0x18}, 0x1, 0xf000000}, 0x40c0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008", @ANYRES32=r6], 0x4c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r6, r3, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e)
sendfile(r4, r2, 0x0, 0x10000a007)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x880, 0x9)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10)
finit_module(r10, 0x0, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10)
rmdir(0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

19.35887ms ago: executing program 1 (id=820):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r2 = dup(r1)
preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x679fd000) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) (async)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x19200000, 0x8}, 0xc) (async)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81100)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x81, 0xfb28cd78, 0x2, 0x8004, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x3, @value=r3, @void, @void, @value}, 0x50) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)=0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x3, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0)

kernel console output (not intermixed with test programs):

vhci_hcd: connection closed
[   59.773911][ T1598] vhci_hcd: stop threads
[   59.783436][ T1598] vhci_hcd: release socket
[   59.787907][ T1598] vhci_hcd: disconnect device
[   60.338072][ T4370] loop2: detected capacity change from 0 to 2048
[   60.345294][ T4370] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   60.388171][ T4330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.400536][ T4330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.414504][ T4330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.441590][ T4330] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.554202][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.561818][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.569623][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.577189][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.584822][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.592377][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.600638][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.602521][ T4375] loop2: detected capacity change from 0 to 1024
[   60.608175][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.621990][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.629674][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.637295][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.645123][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.652795][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.660428][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.669130][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.676708][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.677552][ T4379] siw: device registration error -23
[   60.684122][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684150][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684175][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684199][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684224][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684327][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684352][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684427][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684452][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684478][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.684503][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.774410][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.781992][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.789901][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.798252][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.806966][ T3361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   60.869985][ T3361] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   61.031618][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.282'.
[   61.040746][ T4396] netlink: 196 bytes leftover after parsing attributes in process `syz.5.282'.
[   61.060543][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.282'.
[   61.070016][ T4396] netlink: 196 bytes leftover after parsing attributes in process `syz.5.282'.
[   61.116122][ T4398] loop5: detected capacity change from 0 to 2048
[   61.134322][ T4398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.215675][ T4388] Invalid ELF header magic: != ELF
[   61.377662][ T4404] lo speed is unknown, defaulting to 1000
[   61.506694][ T4407] loop3: detected capacity change from 0 to 128
[   61.522786][ T4409] loop2: detected capacity change from 0 to 2048
[   61.538924][ T4409] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   61.719826][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.719826][   T54] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[   61.734600][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.734600][   T54] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[   61.752942][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.752942][   T54] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[   61.770025][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.770025][   T54] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[   61.799141][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.799141][   T54] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[   61.813526][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.813526][   T54] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[   61.827587][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.827587][   T54] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[   61.843862][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.843862][   T54] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[   61.857731][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.857731][   T54] loop3: rw=1, sector=281, nr_sectors = 8 limit=128
[   61.871654][   T54] kworker/u8:4: attempt to access beyond end of device
[   61.871654][   T54] loop3: rw=1, sector=297, nr_sectors = 8 limit=128
[   61.908002][ T4417] loop2: detected capacity change from 0 to 1024
[   61.949786][ T4416] loop9: detected capacity change from 0 to 7
[   61.962254][ T4416] Buffer I/O error on dev loop9, logical block 0, async page read
[   61.991652][ T4416] Buffer I/O error on dev loop9, logical block 0, async page read
[   62.000923][ T4416]  loop9: unable to read partition table
[   62.008464][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.043171][ T4416] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   62.043171][ T4416] 
U�������) failed (rc=-5)
[   62.518864][ T4437] loop1: detected capacity change from 0 to 2048
[   62.537348][ T4437] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   62.578677][ T4439] netlink: 'syz.3.297': attribute type 1 has an invalid length.
[   62.608796][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'.
[   62.723804][ T4455] loop1: detected capacity change from 0 to 1024
[   62.923256][ T4444] Invalid ELF header magic: != ELF
[   63.095702][ T4468] loop4: detected capacity change from 0 to 512
[   63.306844][ T4474] loop2: detected capacity change from 0 to 2048
[   63.330209][ T4474] ext4: Unknown parameter 'euid'
[   63.430656][ T4468] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.439825][ T4468] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   63.460474][ T4468] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   63.473122][ T4468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   63.481723][ T4468] System zones: 0-2, 18-18, 34-34
[   63.487918][ T4468] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   63.505791][ T4468] EXT4-fs (loop4): 1 truncate cleaned up
[   63.512440][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.550605][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.632987][ T4478] Invalid ELF header magic: != ELF
[   63.676136][ T4484] netlink: 'syz.4.311': attribute type 1 has an invalid length.
[   63.720091][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'.
[   63.730880][ T4482] Invalid ELF header magic: != ELF
[   63.743532][ T4490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16)
[   63.750176][ T4490] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   63.757779][ T4490] vhci_hcd vhci_hcd.0: Device attached
[   63.771396][ T4491] vhci_hcd: connection closed
[   63.771715][ T1598] vhci_hcd: stop threads
[   63.781101][ T1598] vhci_hcd: release socket
[   63.785923][ T1598] vhci_hcd: disconnect device
[   64.002898][ T4513] loop9: detected capacity change from 0 to 7
[   64.018183][ T4513] Buffer I/O error on dev loop9, logical block 0, async page read
[   64.038127][ T4513] Buffer I/O error on dev loop9, logical block 0, async page read
[   64.046059][ T4513]  loop9: unable to read partition table
[   64.053155][ T4513] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   64.053155][ T4513] 
U�������) failed (rc=-5)
[   64.081476][ T4503] Invalid ELF header magic: != ELF
[   64.133858][ T4521] loop1: detected capacity change from 0 to 512
[   64.152285][ T4521] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.325: Invalid inode bitmap blk 4 in block_group 0
[   64.168293][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.192742][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.240588][   T29] kauditd_printk_skb: 371 callbacks suppressed
[   64.240605][   T29] audit: type=1326 audit(1745311497.417:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.271024][ T4533] loop1: detected capacity change from 0 to 8192
[   64.271263][   T29] audit: type=1326 audit(1745311497.447:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.300832][   T29] audit: type=1326 audit(1745311497.447:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.312349][ T4538] netlink: 'syz.5.328': attribute type 1 has an invalid length.
[   64.324498][   T29] audit: type=1326 audit(1745311497.447:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.324545][   T29] audit: type=1326 audit(1745311497.447:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.324575][   T29] audit: type=1326 audit(1745311497.447:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.404211][   T29] audit: type=1326 audit(1745311497.477:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.404314][   T29] audit: type=1326 audit(1745311497.477:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.404347][   T29] audit: type=1326 audit(1745311497.477:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.452304][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'.
[   64.475639][   T29] audit: type=1326 audit(1745311497.477:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f585709e169 code=0x7ffc0000
[   64.555852][ T4548] FAULT_INJECTION: forcing a failure.
[   64.555852][ T4548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.569283][ T4548] CPU: 1 UID: 0 PID: 4548 Comm: syz.1.330 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   64.569315][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   64.569326][ T4548] Call Trace:
[   64.569333][ T4548]  <TASK>
[   64.569340][ T4548]  dump_stack_lvl+0xf6/0x150
[   64.569367][ T4548]  dump_stack+0x15/0x1a
[   64.569387][ T4548]  should_fail_ex+0x261/0x270
[   64.569465][ T4548]  should_fail+0xb/0x10
[   64.569490][ T4548]  should_fail_usercopy+0x1a/0x20
[   64.569585][ T4548]  _copy_to_user+0x20/0xa0
[   64.569620][ T4548]  copy_siginfo_to_user+0x24/0xb0
[   64.569710][ T4548]  x64_setup_rt_frame+0x2bf/0x5a0
[   64.569830][ T4548]  arch_do_signal_or_restart+0x279/0x480
[   64.569874][ T4548]  syscall_exit_to_user_mode+0x62/0x120
[   64.569903][ T4548]  do_syscall_64+0xd6/0x1a0
[   64.569934][ T4548]  ? clear_bhb_loop+0x25/0x80
[   64.570021][ T4548]  ? clear_bhb_loop+0x25/0x80
[   64.570047][ T4548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.570112][ T4548] RIP: 0033:0x7f7a713fe167
[   64.570160][ T4548] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[   64.570181][ T4548] RSP: 002b:00007f7a6fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[   64.570203][ T4548] RAX: 0000000000000113 RBX: 00007f7a71625fa0 RCX: 00007f7a713fe169
[   64.570217][ T4548] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003
[   64.570265][ T4548] RBP: 00007f7a6fa67090 R08: 0000000000000007 R09: 0000000000000009
[   64.570279][ T4548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.570289][ T4548] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   64.570306][ T4548]  </TASK>
[   64.825524][ T4542] loop3: detected capacity change from 0 to 2048
[   64.843470][ T4542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.020678][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.049273][ T4570] �: renamed from bond_slave_0 (while UP)
[   65.483232][ T4579] FAULT_INJECTION: forcing a failure.
[   65.483232][ T4579] name failslab, interval 1, probability 0, space 0, times 0
[   65.496122][ T4579] CPU: 0 UID: 0 PID: 4579 Comm: syz.3.340 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   65.496154][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   65.496169][ T4579] Call Trace:
[   65.496177][ T4579]  <TASK>
[   65.496187][ T4579]  dump_stack_lvl+0xf6/0x150
[   65.496212][ T4579]  dump_stack+0x15/0x1a
[   65.496227][ T4579]  should_fail_ex+0x261/0x270
[   65.496261][ T4579]  should_failslab+0x8f/0xb0
[   65.496285][ T4579]  kmem_cache_alloc_noprof+0x59/0x340
[   65.496311][ T4579]  ? skb_clone+0x154/0x1f0
[   65.496351][ T4579]  skb_clone+0x154/0x1f0
[   65.496380][ T4579]  __netlink_deliver_tap+0x2bd/0x4f0
[   65.496412][ T4579]  netlink_sendskb+0x12c/0x150
[   65.496452][ T4579]  netlink_unicast+0x296/0x6c0
[   65.496529][ T4579]  netlink_ack+0x4b9/0x4f0
[   65.496549][ T4579]  netlink_rcv_skb+0x19f/0x230
[   65.496566][ T4579]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   65.496601][ T4579]  rtnetlink_rcv+0x1c/0x30
[   65.496624][ T4579]  netlink_unicast+0x605/0x6c0
[   65.496677][ T4579]  netlink_sendmsg+0x609/0x720
[   65.496700][ T4579]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.496723][ T4579]  __sock_sendmsg+0x140/0x180
[   65.496755][ T4579]  ____sys_sendmsg+0x350/0x4e0
[   65.496785][ T4579]  __sys_sendmmsg+0x22a/0x4b0
[   65.496874][ T4579]  __x64_sys_sendmmsg+0x57/0x70
[   65.496959][ T4579]  x64_sys_call+0x2b53/0x2e10
[   65.496992][ T4579]  do_syscall_64+0xc9/0x1a0
[   65.497022][ T4579]  ? clear_bhb_loop+0x25/0x80
[   65.497047][ T4579]  ? clear_bhb_loop+0x25/0x80
[   65.497073][ T4579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.497168][ T4579] RIP: 0033:0x7f9597e0e169
[   65.497182][ T4579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.497200][ T4579] RSP: 002b:00007f9596477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   65.497217][ T4579] RAX: ffffffffffffffda RBX: 00007f9598035fa0 RCX: 00007f9597e0e169
[   65.497280][ T4579] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006
[   65.497292][ T4579] RBP: 00007f9596477090 R08: 0000000000000000 R09: 0000000000000000
[   65.497303][ T4579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.497314][ T4579] R13: 0000000000000000 R14: 00007f9598035fa0 R15: 00007fff6e8448d8
[   65.497391][ T4579]  </TASK>
[   65.742123][ T4582] ucma_write: process 98 (syz.5.338) changed security contexts after opening file descriptor, this is not allowed.
[   65.778978][ T4580] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15)
[   65.785922][ T4580] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.793860][ T4580] vhci_hcd vhci_hcd.0: Device attached
[   65.802727][ T4584] vhci_hcd: connection closed
[   65.803410][ T3458] vhci_hcd: stop threads
[   65.813381][ T3458] vhci_hcd: release socket
[   65.818075][ T3458] vhci_hcd: disconnect device
[   66.023709][ T4600] siw: device registration error -23
[   66.241072][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[   66.839014][ T4601] siw: device registration error -23
[   66.891385][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[   66.939428][ T4609] loop3: detected capacity change from 0 to 512
[   66.973025][ T4609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.987021][ T4609] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.015768][ T4615] loop1: detected capacity change from 0 to 512
[   67.042166][ T4615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.042307][ T4615] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.110017][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.139477][ T4624] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   67.169456][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   67.264638][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.875790][ T4659] loop4: detected capacity change from 0 to 2048
[   67.888759][ T4661] netlink: 'syz.5.365': attribute type 1 has an invalid length.
[   67.898050][ T4659] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   67.906129][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'.
[   67.974466][ T4664] siw: device registration error -23
[   68.115203][ T4668] FAULT_INJECTION: forcing a failure.
[   68.115203][ T4668] name failslab, interval 1, probability 0, space 0, times 0
[   68.127950][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: syz.5.366 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   68.127979][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   68.127991][ T4668] Call Trace:
[   68.128076][ T4668]  <TASK>
[   68.128084][ T4668]  dump_stack_lvl+0xf6/0x150
[   68.128107][ T4668]  dump_stack+0x15/0x1a
[   68.128124][ T4668]  should_fail_ex+0x261/0x270
[   68.128149][ T4668]  should_failslab+0x8f/0xb0
[   68.128169][ T4668]  kmem_cache_alloc_noprof+0x59/0x340
[   68.128196][ T4668]  ? skb_clone+0x154/0x1f0
[   68.128254][ T4668]  skb_clone+0x154/0x1f0
[   68.128281][ T4668]  __netlink_deliver_tap+0x2bd/0x4f0
[   68.128317][ T4668]  netlink_unicast+0x69e/0x6c0
[   68.128354][ T4668]  netlink_sendmsg+0x609/0x720
[   68.128375][ T4668]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.128469][ T4668]  __sock_sendmsg+0x140/0x180
[   68.128502][ T4668]  ____sys_sendmsg+0x350/0x4e0
[   68.128554][ T4668]  __sys_sendmsg+0x1a0/0x240
[   68.128634][ T4668]  __x64_sys_sendmsg+0x46/0x50
[   68.128660][ T4668]  x64_sys_call+0x26f3/0x2e10
[   68.128680][ T4668]  do_syscall_64+0xc9/0x1a0
[   68.128703][ T4668]  ? clear_bhb_loop+0x25/0x80
[   68.128725][ T4668]  ? clear_bhb_loop+0x25/0x80
[   68.128790][ T4668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.128815][ T4668] RIP: 0033:0x7f585709e169
[   68.128832][ T4668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.128929][ T4668] RSP: 002b:00007f5855707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.128946][ T4668] RAX: ffffffffffffffda RBX: 00007f58572c5fa0 RCX: 00007f585709e169
[   68.128957][ T4668] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 0000000000000003
[   68.128967][ T4668] RBP: 00007f5855707090 R08: 0000000000000000 R09: 0000000000000000
[   68.128980][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.128994][ T4668] R13: 0000000000000000 R14: 00007f58572c5fa0 R15: 00007ffea22ccfd8
[   68.129014][ T4668]  </TASK>
[   68.345206][ T4636] Invalid ELF header magic: != ELF
[   68.352127][ T4669] loop4: detected capacity change from 0 to 1024
[   68.387715][ T4671] loop5: detected capacity change from 0 to 512
[   68.394905][ T4671] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.404043][ T4671] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   68.425121][ T4671] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[   68.438879][ T4671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   68.449872][ T4671] System zones: 0-2, 18-18, 34-34
[   68.457470][ T4671] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   68.474221][ T4671] EXT4-fs (loop5): 1 truncate cleaned up
[   68.480543][ T4671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.515297][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.533227][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.371'.
[   68.542252][ T4680] FAULT_INJECTION: forcing a failure.
[   68.542252][ T4680] name failslab, interval 1, probability 0, space 0, times 0
[   68.555201][ T4680] CPU: 0 UID: 0 PID: 4680 Comm: syz.5.371 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   68.555227][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   68.555239][ T4680] Call Trace:
[   68.555245][ T4680]  <TASK>
[   68.555255][ T4680]  dump_stack_lvl+0xf6/0x150
[   68.555283][ T4680]  dump_stack+0x15/0x1a
[   68.555300][ T4680]  should_fail_ex+0x261/0x270
[   68.555378][ T4680]  should_failslab+0x8f/0xb0
[   68.555402][ T4680]  __kmalloc_cache_noprof+0x55/0x320
[   68.555499][ T4680]  ? _request_firmware+0x1a4/0xa60
[   68.555528][ T4680]  _request_firmware+0x1a4/0xa60
[   68.555553][ T4680]  ? should_fail_ex+0xd7/0x270
[   68.555582][ T4680]  ? __rtnl_unlock+0x99/0xb0
[   68.555680][ T4680]  ? netdev_run_todo+0x79c/0x800
[   68.555709][ T4680]  request_firmware+0x36/0x50
[   68.555732][ T4680]  reg_reload_regdb+0x5c/0x240
[   68.555759][ T4680]  nl80211_reload_regdb+0xe/0x20
[   68.555818][ T4680]  genl_rcv_msg+0x69b/0x6f0
[   68.555850][ T4680]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   68.555879][ T4680]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[   68.555908][ T4680]  ? __pfx_nl80211_post_doit+0x10/0x10
[   68.555946][ T4680]  ? __dev_queue_xmit+0xb76/0x20b0
[   68.555974][ T4680]  netlink_rcv_skb+0x12f/0x230
[   68.555996][ T4680]  ? __pfx_genl_rcv_msg+0x10/0x10
[   68.556074][ T4680]  genl_rcv+0x28/0x40
[   68.556097][ T4680]  netlink_unicast+0x605/0x6c0
[   68.556135][ T4680]  netlink_sendmsg+0x609/0x720
[   68.556259][ T4680]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.556293][ T4680]  __sock_sendmsg+0x140/0x180
[   68.556336][ T4680]  ____sys_sendmsg+0x350/0x4e0
[   68.556371][ T4680]  __sys_sendmsg+0x1a0/0x240
[   68.556454][ T4680]  __x64_sys_sendmsg+0x46/0x50
[   68.556482][ T4680]  x64_sys_call+0x26f3/0x2e10
[   68.556573][ T4680]  do_syscall_64+0xc9/0x1a0
[   68.556684][ T4680]  ? clear_bhb_loop+0x25/0x80
[   68.556704][ T4680]  ? clear_bhb_loop+0x25/0x80
[   68.556723][ T4680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.556787][ T4680] RIP: 0033:0x7f585709e169
[   68.556801][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.556817][ T4680] RSP: 002b:00007f5855707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.556832][ T4680] RAX: ffffffffffffffda RBX: 00007f58572c5fa0 RCX: 00007f585709e169
[   68.556843][ T4680] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003
[   68.556853][ T4680] RBP: 00007f5855707090 R08: 0000000000000000 R09: 0000000000000000
[   68.556907][ T4680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.556917][ T4680] R13: 0000000000000000 R14: 00007f58572c5fa0 R15: 00007ffea22ccfd8
[   68.557010][ T4680]  </TASK>
[   68.557020][ T4680] platform regulatory.0: _request_firmware_prepare: kmalloc(struct firmware) failed
[   68.592317][ T4678] loop2: detected capacity change from 0 to 512
[   68.644803][ T4682] pim6reg1: entered promiscuous mode
[   68.663531][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.665793][ T4682] pim6reg1: entered allmulticast mode
[   68.673280][ T4678] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.769255][ T4687] pim6reg1: entered promiscuous mode
[   68.848466][ T4685] loop5: detected capacity change from 0 to 256
[   68.854218][ T4687] pim6reg1: entered allmulticast mode
[   68.893361][ T4691] loop4: detected capacity change from 0 to 256
[   68.897892][ T4685] program syz.5.372 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.904165][ T4691] program syz.4.373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.910101][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.982655][ T4697] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   68.997901][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[   69.049255][ T4703] loop2: detected capacity change from 0 to 512
[   69.063929][ T4703] EXT4-fs (loop2): orphan cleanup on readonly fs
[   69.072963][ T4703] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.379: bad orphan inode 15
[   69.084575][ T4703] ext4_test_bit(bit=14, block=5) = 0
[   69.090703][ T4703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   69.119311][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.142870][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[   69.231251][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[   69.259500][ T4717] netlink: 76 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.377921][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'.
[   69.387257][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'.
[   69.432439][   T29] kauditd_printk_skb: 275 callbacks suppressed
[   69.432456][   T29] audit: type=1326 audit(1745311502.607:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.469461][ T4731] netlink: 'syz.3.388': attribute type 1 has an invalid length.
[   69.477877][   T29] audit: type=1326 audit(1745311502.637:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.501453][   T29] audit: type=1326 audit(1745311502.637:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.525666][   T29] audit: type=1326 audit(1745311502.637:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.526858][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'.
[   69.549410][   T29] audit: type=1326 audit(1745311502.637:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.582889][   T29] audit: type=1326 audit(1745311502.637:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.606445][   T29] audit: type=1326 audit(1745311502.637:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.630226][   T29] audit: type=1326 audit(1745311502.637:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.653850][   T29] audit: type=1326 audit(1745311502.637:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.677200][   T29] audit: type=1326 audit(1745311502.637:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9597e0e169 code=0x7ffc0000
[   69.803165][ T4744] loop9: detected capacity change from 0 to 7
[   69.815482][ T4744] Buffer I/O error on dev loop9, logical block 0, async page read
[   69.832979][ T4744] Buffer I/O error on dev loop9, logical block 0, async page read
[   69.840997][ T4744]  loop9: unable to read partition table
[   69.846824][ T4744] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   69.846824][ T4744] 
U�������) failed (rc=-5)
[   69.904301][ T4754] FAULT_INJECTION: forcing a failure.
[   69.904301][ T4754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.917583][ T4754] CPU: 1 UID: 0 PID: 4754 Comm: syz.2.398 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   69.917611][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.917664][ T4754] Call Trace:
[   69.917671][ T4754]  <TASK>
[   69.917679][ T4754]  dump_stack_lvl+0xf6/0x150
[   69.917703][ T4754]  dump_stack+0x15/0x1a
[   69.917796][ T4754]  should_fail_ex+0x261/0x270
[   69.917891][ T4754]  should_fail+0xb/0x10
[   69.917916][ T4754]  should_fail_usercopy+0x1a/0x20
[   69.917944][ T4754]  strncpy_from_user+0x25/0x230
[   69.917975][ T4754]  ? kstrtouint_from_user+0xbf/0x100
[   69.918041][ T4754]  path_setxattrat+0xef/0x320
[   69.918079][ T4754]  __x64_sys_lsetxattr+0x71/0x90
[   69.918102][ T4754]  x64_sys_call+0x2014/0x2e10
[   69.918129][ T4754]  do_syscall_64+0xc9/0x1a0
[   69.918207][ T4754]  ? clear_bhb_loop+0x25/0x80
[   69.918230][ T4754]  ? clear_bhb_loop+0x25/0x80
[   69.918257][ T4754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.918282][ T4754] RIP: 0033:0x7fad4ba4e169
[   69.918306][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.918327][ T4754] RSP: 002b:00007fad4a0b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[   69.918395][ T4754] RAX: ffffffffffffffda RBX: 00007fad4bc75fa0 RCX: 00007fad4ba4e169
[   69.918406][ T4754] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000
[   69.918494][ T4754] RBP: 00007fad4a0b7090 R08: 0000000000000002 R09: 0000000000000000
[   69.918508][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.918522][ T4754] R13: 0000000000000000 R14: 00007fad4bc75fa0 R15: 00007ffcd0ceb788
[   69.918542][ T4754]  </TASK>
[   70.168765][ T4757] loop5: detected capacity change from 0 to 2048
[   70.178384][ T4757] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   70.197666][ T4766] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[   70.333153][ T4778] pim6reg1: entered promiscuous mode
[   70.339752][ T4778] pim6reg1: entered allmulticast mode
[   70.426543][ T4788] siw: device registration error -23
[   70.439854][ T4785] loop5: detected capacity change from 0 to 1024
[   70.486027][ T4789] loop4: detected capacity change from 0 to 256
[   70.521849][ T4789] program syz.4.406 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.813468][ T4803] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   70.845214][ T4805] pimreg: entered allmulticast mode
[   70.859540][ T4807] loop1: detected capacity change from 0 to 512
[   70.868145][ T4807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.882331][ T4807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.896540][ T4807] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.919149][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.059131][ T4825] FAULT_INJECTION: forcing a failure.
[   71.059131][ T4825] name failslab, interval 1, probability 0, space 0, times 0
[   71.072112][ T4825] CPU: 0 UID: 0 PID: 4825 Comm: syz.1.422 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   71.072147][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   71.072163][ T4825] Call Trace:
[   71.072171][ T4825]  <TASK>
[   71.072181][ T4825]  dump_stack_lvl+0xf6/0x150
[   71.072210][ T4825]  dump_stack+0x15/0x1a
[   71.072300][ T4825]  should_fail_ex+0x261/0x270
[   71.072328][ T4825]  should_failslab+0x8f/0xb0
[   71.072350][ T4825]  kmem_cache_alloc_noprof+0x59/0x340
[   71.072377][ T4825]  ? skb_clone+0x154/0x1f0
[   71.072495][ T4825]  skb_clone+0x154/0x1f0
[   71.072602][ T4825]  __netlink_deliver_tap+0x2bd/0x4f0
[   71.072626][ T4825]  netlink_sendskb+0x12c/0x150
[   71.072660][ T4825]  netlink_unicast+0x296/0x6c0
[   71.072702][ T4825]  netlink_ack+0x4b9/0x4f0
[   71.072784][ T4825]  netlink_rcv_skb+0x19f/0x230
[   71.072806][ T4825]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   71.072843][ T4825]  rtnetlink_rcv+0x1c/0x30
[   71.072874][ T4825]  netlink_unicast+0x605/0x6c0
[   71.072929][ T4825]  netlink_sendmsg+0x609/0x720
[   71.073023][ T4825]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.073083][ T4825]  __sock_sendmsg+0x140/0x180
[   71.073188][ T4825]  ____sys_sendmsg+0x350/0x4e0
[   71.073217][ T4825]  __sys_sendmmsg+0x22a/0x4b0
[   71.073339][ T4825]  __x64_sys_sendmmsg+0x57/0x70
[   71.073369][ T4825]  x64_sys_call+0x2b53/0x2e10
[   71.073457][ T4825]  do_syscall_64+0xc9/0x1a0
[   71.073488][ T4825]  ? clear_bhb_loop+0x25/0x80
[   71.073510][ T4825]  ? clear_bhb_loop+0x25/0x80
[   71.073669][ T4825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.073701][ T4825] RIP: 0033:0x7f7a713fe169
[   71.073716][ T4825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.073733][ T4825] RSP: 002b:00007f7a6fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   71.073754][ T4825] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fe169
[   71.073841][ T4825] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006
[   71.073909][ T4825] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   71.073923][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.074004][ T4825] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   71.074022][ T4825]  </TASK>
[   71.330387][ T4827] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   71.349131][ T4831] loop5: detected capacity change from 0 to 164
[   71.413573][ T4838] loop2: detected capacity change from 0 to 2048
[   71.421879][ T4838] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   71.465115][ T4836] loop4: detected capacity change from 0 to 8192
[   71.505631][ T4846] loop5: detected capacity change from 0 to 512
[   71.514870][ T4845] loop2: detected capacity change from 0 to 1024
[   71.536935][ T4846] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   71.547488][ T4846] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   71.562079][ T4846] EXT4-fs (loop5): 1 truncate cleaned up
[   71.570406][ T4846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.608933][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.661414][ T4857] FAULT_INJECTION: forcing a failure.
[   71.661414][ T4857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   71.674842][ T4857] CPU: 1 UID: 0 PID: 4857 Comm: syz.1.435 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   71.674895][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   71.674975][ T4857] Call Trace:
[   71.674982][ T4857]  <TASK>
[   71.674990][ T4857]  dump_stack_lvl+0xf6/0x150
[   71.675018][ T4857]  dump_stack+0x15/0x1a
[   71.675038][ T4857]  should_fail_ex+0x261/0x270
[   71.675063][ T4857]  should_fail+0xb/0x10
[   71.675082][ T4857]  should_fail_usercopy+0x1a/0x20
[   71.675127][ T4857]  _copy_to_user+0x20/0xa0
[   71.675169][ T4857]  simple_read_from_buffer+0xb2/0x130
[   71.675283][ T4857]  proc_fail_nth_read+0x103/0x140
[   71.675326][ T4857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   71.675357][ T4857]  vfs_read+0x1b2/0x710
[   71.675372][ T4857]  ? __rcu_read_unlock+0x4e/0x70
[   71.675406][ T4857]  ? __fget_files+0x186/0x1c0
[   71.675433][ T4857]  ksys_read+0xeb/0x1b0
[   71.675456][ T4857]  __x64_sys_read+0x42/0x50
[   71.675477][ T4857]  x64_sys_call+0x2a3b/0x2e10
[   71.675503][ T4857]  do_syscall_64+0xc9/0x1a0
[   71.675610][ T4857]  ? clear_bhb_loop+0x25/0x80
[   71.675631][ T4857]  ? clear_bhb_loop+0x25/0x80
[   71.675652][ T4857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.675675][ T4857] RIP: 0033:0x7f7a713fcb7c
[   71.675690][ T4857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   71.675745][ T4857] RSP: 002b:00007f7a6fa67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   71.675851][ T4857] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fcb7c
[   71.675867][ T4857] RDX: 000000000000000f RSI: 00007f7a6fa670a0 RDI: 0000000000000004
[   71.675880][ T4857] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   71.675894][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.675908][ T4857] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   71.675929][ T4857]  </TASK>
[   71.994560][ T4876] siw: device registration error -23
[   72.147227][ T4874] pim6reg1: entered promiscuous mode
[   72.153092][ T4874] pim6reg1: entered allmulticast mode
[   72.219045][ T4877] loop5: detected capacity change from 0 to 256
[   72.228840][ T4877] program syz.5.439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.563995][ T4886] siw: device registration error -23
[   72.577046][ T4881] loop2: detected capacity change from 0 to 8192
[   72.629151][ T4888] loop2: detected capacity change from 0 to 512
[   72.653626][ T4888] EXT4-fs (loop2): 1 orphan inode deleted
[   72.660177][ T4888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.675382][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[   72.689478][ T4888] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.722397][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.745330][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.753074][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.760810][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.769002][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.777609][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.786459][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.794031][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.802352][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.809956][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.817489][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.825542][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.833338][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.841378][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.849405][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.856932][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.864893][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.872518][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.880886][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.888398][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.895850][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.903266][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.910695][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.918143][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.925668][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.925700][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.925730][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.925757][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.955523][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.955557][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.955588][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.955613][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.955658][ T3441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   72.993317][ T3441] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   73.075545][ T4909] loop3: detected capacity change from 0 to 512
[   73.082327][ T4909] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.091597][ T4909] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   73.102550][ T4909] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.449: attempt to clear invalid blocks 2 len 1
[   73.129253][ T4914] netlink: 'syz.5.451': attribute type 1 has an invalid length.
[   73.141415][ T4917] loop2: detected capacity change from 0 to 512
[   73.148395][ T4909] EXT4-fs (loop3): Remounting filesystem read-only
[   73.161403][ T4917] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   73.174658][ T4917] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   73.179200][ T4909] EXT4-fs (loop3): 1 truncate cleaned up
[   73.192553][ T4909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.216438][ T4917] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   73.225797][ T4917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   73.235770][ T4917] System zones: 0-2, 18-18, 34-34
[   73.247475][ T4917] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   73.263515][ T4917] EXT4-fs (loop2): 1 truncate cleaned up
[   73.275565][ T4917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.316376][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.436461][ T4923] Invalid ELF header magic: != ELF
[   73.571354][ T4932] siw: device registration error -23
[   73.623954][ T4935] siw: device registration error -23
[   73.836847][ T4944] pim6reg1: entered promiscuous mode
[   73.843047][ T4944] pim6reg1: entered allmulticast mode
[   73.927068][ T4945] loop4: detected capacity change from 0 to 256
[   73.940582][ T4945] program syz.4.461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.952423][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.546960][   T29] kauditd_printk_skb: 366 callbacks suppressed
[   74.546978][   T29] audit: type=1326 audit(1745311507.717:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   74.893663][ T4964] siw: device registration error -23
[   75.293860][   T29] audit: type=1326 audit(1745311508.187:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   75.293948][   T29] audit: type=1326 audit(1745311508.187:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   75.293976][   T29] audit: type=1326 audit(1745311508.187:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   75.294059][   T29] audit: type=1326 audit(1745311508.187:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   75.294091][   T29] audit: type=1326 audit(1745311508.187:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a713fe169 code=0x7ffc0000
[   75.294131][   T29] audit: type=1326 audit(1745311508.187:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a713fe1a3 code=0x7ffc0000
[   75.294160][   T29] audit: type=1326 audit(1745311508.197:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a713fcc1f code=0x7ffc0000
[   75.294189][   T29] audit: type=1326 audit(1745311508.207:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7a713fe1f7 code=0x7ffc0000
[   75.294290][   T29] audit: type=1326 audit(1745311508.207:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a713fcad0 code=0x7ffc0000
[   75.296392][ T4972] loop9: detected capacity change from 0 to 7
[   75.296544][ T4972] Buffer I/O error on dev loop9, logical block 0, async page read
[   75.296590][ T4972] Buffer I/O error on dev loop9, logical block 0, async page read
[   75.296660][ T4972]  loop9: unable to read partition table
[   75.296679][ T4972] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   75.296679][ T4972] 
U�������) failed (rc=-5)
[   75.442516][ T4983] FAULT_INJECTION: forcing a failure.
[   75.442516][ T4983] name failslab, interval 1, probability 0, space 0, times 0
[   75.442548][ T4983] CPU: 1 UID: 0 PID: 4983 Comm: syz.1.475 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   75.442626][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   75.442641][ T4983] Call Trace:
[   75.442647][ T4983]  <TASK>
[   75.442653][ T4983]  dump_stack_lvl+0xf6/0x150
[   75.442675][ T4983]  dump_stack+0x15/0x1a
[   75.442690][ T4983]  should_fail_ex+0x261/0x270
[   75.442715][ T4983]  should_failslab+0x8f/0xb0
[   75.442785][ T4983]  kmem_cache_alloc_node_noprof+0x5c/0x340
[   75.442821][ T4983]  ? __alloc_skb+0x10d/0x320
[   75.442846][ T4983]  __alloc_skb+0x10d/0x320
[   75.442888][ T4983]  netlink_alloc_large_skb+0xad/0xe0
[   75.442927][ T4983]  netlink_sendmsg+0x3da/0x720
[   75.442956][ T4983]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.442982][ T4983]  __sock_sendmsg+0x140/0x180
[   75.443089][ T4983]  ____sys_sendmsg+0x350/0x4e0
[   75.443122][ T4983]  __sys_sendmsg+0x1a0/0x240
[   75.443213][ T4983]  __x64_sys_sendmsg+0x46/0x50
[   75.443242][ T4983]  x64_sys_call+0x26f3/0x2e10
[   75.443268][ T4983]  do_syscall_64+0xc9/0x1a0
[   75.443295][ T4983]  ? clear_bhb_loop+0x25/0x80
[   75.443324][ T4983]  ? clear_bhb_loop+0x25/0x80
[   75.443405][ T4983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.443429][ T4983] RIP: 0033:0x7f7a713fe169
[   75.443446][ T4983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.443467][ T4983] RSP: 002b:00007f7a6fa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   75.443489][ T4983] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fe169
[   75.443504][ T4983] RDX: 000000002400c810 RSI: 0000200000000140 RDI: 0000000000000005
[   75.443516][ T4983] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   75.443609][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.443623][ T4983] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   75.443646][ T4983]  </TASK>
[   75.508959][ T4981] __nla_validate_parse: 6 callbacks suppressed
[   75.508977][ T4981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'.
[   75.664301][ T4990] lo speed is unknown, defaulting to 1000
[   76.040753][ T5004] Cannot find add_set index 0 as target
[   76.072640][ T5009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[   76.079192][ T5009] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   76.086810][ T5009] vhci_hcd vhci_hcd.0: Device attached
[   76.093191][ T5010] vhci_hcd: connection closed
[   76.093717][   T31] vhci_hcd: stop threads
[   76.103030][   T31] vhci_hcd: release socket
[   76.107469][   T31] vhci_hcd: disconnect device
[   76.123347][ T5013] loop5: detected capacity change from 0 to 128
[   76.130465][ T5013] vfat: Unknown parameter '	00000000000000000008��Pmt���a��'
[   76.393240][ T5020] Invalid ELF header magic: != ELF
[   76.414760][ T5030] loop9: detected capacity change from 0 to 7
[   76.421242][ T5030] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.429322][ T5030] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.437206][ T5030]  loop9: unable to read partition table
[   76.443174][ T5030] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   76.443174][ T5030] 
U�������) failed (rc=-5)
[   76.483663][ T5032] loop9: detected capacity change from 0 to 7
[   76.490251][ T5032] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.499491][ T5032] Buffer I/O error on dev loop9, logical block 0, async page read
[   76.507480][ T5032]  loop9: unable to read partition table
[   76.514631][ T5032] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   76.514631][ T5032] 
U�������) failed (rc=-5)
[   76.568873][ T5038] hub 9-0:1.0: USB hub found
[   76.573645][ T5038] hub 9-0:1.0: 8 ports detected
[   76.661304][ T5046] loop5: detected capacity change from 0 to 128
[   76.718239][ T5049] 9pnet_fd: Insufficient options for proto=fd
[   76.727224][ T5049] netlink: 'syz.3.502': attribute type 3 has an invalid length.
[   76.745291][ T5046] bio_check_eod: 102 callbacks suppressed
[   76.745304][ T5046] syz.5.501: attempt to access beyond end of device
[   76.745304][ T5046] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[   76.764739][ T5046] syz.5.501: attempt to access beyond end of device
[   76.764739][ T5046] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   76.778839][ T5046] syz.5.501: attempt to access beyond end of device
[   76.778839][ T5046] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   76.793223][ T5046] syz.5.501: attempt to access beyond end of device
[   76.793223][ T5046] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[   76.807771][ T5046] syz.5.501: attempt to access beyond end of device
[   76.807771][ T5046] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[   76.823184][ T5048] siw: device registration error -23
[   76.835311][ T5046] syz.5.501: attempt to access beyond end of device
[   76.835311][ T5046] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[   76.856049][ T5052] tipc: New replicast peer: 255.255.255.255
[   76.862813][ T5052] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.871401][ T5046] syz.5.501: attempt to access beyond end of device
[   76.871401][ T5046] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[   76.887193][ T5046] syz.5.501: attempt to access beyond end of device
[   76.887193][ T5046] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[   76.901185][ T5046] syz.5.501: attempt to access beyond end of device
[   76.901185][ T5046] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128
[   76.914747][ T5046] syz.5.501: attempt to access beyond end of device
[   76.914747][ T5046] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128
[   77.507753][ T5070] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   77.514295][ T5070] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   77.522466][ T5070] vhci_hcd vhci_hcd.0: Device attached
[   77.528420][ T5071] vhci_hcd: connection closed
[   77.528649][ T1294] vhci_hcd: stop threads
[   77.537837][ T1294] vhci_hcd: release socket
[   77.542308][ T1294] vhci_hcd: disconnect device
[   78.061886][ T5087] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   78.073084][ T5086] IPVS: stopping master sync thread 5087 ...
[   78.079296][ T5086] FAULT_INJECTION: forcing a failure.
[   78.079296][ T5086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.086369][ T5084] bridge_slave_0: left allmulticast mode
[   78.092633][ T5086] CPU: 0 UID: 0 PID: 5086 Comm: syz.2.515 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   78.092667][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   78.092684][ T5086] Call Trace:
[   78.092693][ T5086]  <TASK>
[   78.092704][ T5086]  dump_stack_lvl+0xf6/0x150
[   78.092735][ T5086]  dump_stack+0x15/0x1a
[   78.092758][ T5086]  should_fail_ex+0x261/0x270
[   78.092826][ T5086]  should_fail+0xb/0x10
[   78.092851][ T5086]  should_fail_usercopy+0x1a/0x20
[   78.092883][ T5086]  _copy_to_user+0x20/0xa0
[   78.092920][ T5086]  simple_read_from_buffer+0xb2/0x130
[   78.093039][ T5086]  proc_fail_nth_read+0x103/0x140
[   78.093091][ T5086]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   78.093194][ T5086]  vfs_read+0x1b2/0x710
[   78.093214][ T5086]  ? __rcu_read_unlock+0x4e/0x70
[   78.093240][ T5086]  ? __fget_files+0x186/0x1c0
[   78.093269][ T5086]  ksys_read+0xeb/0x1b0
[   78.093292][ T5086]  __x64_sys_read+0x42/0x50
[   78.093314][ T5086]  x64_sys_call+0x2a3b/0x2e10
[   78.093342][ T5086]  do_syscall_64+0xc9/0x1a0
[   78.093409][ T5086]  ? clear_bhb_loop+0x25/0x80
[   78.093435][ T5086]  ? clear_bhb_loop+0x25/0x80
[   78.093463][ T5086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.093488][ T5086] RIP: 0033:0x7fad4ba4cb7c
[   78.093549][ T5086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   78.093572][ T5086] RSP: 002b:00007fad4a0b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   78.093596][ T5086] RAX: ffffffffffffffda RBX: 00007fad4bc75fa0 RCX: 00007fad4ba4cb7c
[   78.093611][ T5086] RDX: 000000000000000f RSI: 00007fad4a0b70a0 RDI: 0000000000000006
[   78.093626][ T5086] RBP: 00007fad4a0b7090 R08: 0000000000000000 R09: 0000000000000000
[   78.093641][ T5086] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[   78.093656][ T5086] R13: 0000000000000000 R14: 00007fad4bc75fa0 R15: 00007ffcd0ceb788
[   78.093679][ T5086]  </TASK>
[   78.298775][ T5084] bridge_slave_0: left promiscuous mode
[   78.304474][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.314938][ T5084] bridge_slave_1: left allmulticast mode
[   78.320926][ T5084] bridge_slave_1: left promiscuous mode
[   78.326791][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.336165][ T5084] bond0: (slave bond_slave_0): Releasing backup interface
[   78.347167][ T5084] bond0: (slave bond_slave_1): Releasing backup interface
[   78.365277][ T5084] team0: Port device team_slave_0 removed
[   78.381642][ T5084] team0: Port device team_slave_1 removed
[   78.388756][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.396443][ T5084] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.405689][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.413307][ T5084] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.434928][ T5090] loop2: detected capacity change from 0 to 512
[   78.441709][ T5090] EXT4-fs: Ignoring removed nobh option
[   78.458067][ T5090] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   78.466685][ T5090] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.516: invalid indirect mapped block 2683928664 (level 1)
[   78.482316][ T5090] EXT4-fs (loop2): 1 truncate cleaned up
[   78.488568][ T5090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.502662][ T5090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.518969][ T5099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.562421][ T5099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.622457][ T5099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.674535][ T5103] loop5: detected capacity change from 0 to 2048
[   78.684218][ T5099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.692509][ T5103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.758983][ T5099] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.787141][ T5099] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.823720][ T5099] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.836219][ T5099] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.219559][ T5122] netlink: 'syz.2.525': attribute type 1 has an invalid length.
[   79.247259][ T5122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.525'.
[   79.297014][ T5125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   79.303782][ T5125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   79.311383][ T5125] vhci_hcd vhci_hcd.0: Device attached
[   79.321009][ T5126] vhci_hcd: connection closed
[   79.321324][ T1294] vhci_hcd: stop threads
[   79.330353][ T1294] vhci_hcd: release socket
[   79.334768][ T1294] vhci_hcd: disconnect device
[   79.410053][ T5129] SELinux: security_context_str_to_sid () failed with errno=-22
[   79.506028][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.570776][ T5136] FAULT_INJECTION: forcing a failure.
[   79.570776][ T5136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.584620][ T5136] CPU: 1 UID: 0 PID: 5136 Comm: syz.5.530 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   79.584653][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   79.584667][ T5136] Call Trace:
[   79.584675][ T5136]  <TASK>
[   79.584684][ T5136]  dump_stack_lvl+0xf6/0x150
[   79.584711][ T5136]  dump_stack+0x15/0x1a
[   79.584729][ T5136]  should_fail_ex+0x261/0x270
[   79.584758][ T5136]  should_fail+0xb/0x10
[   79.584780][ T5136]  should_fail_usercopy+0x1a/0x20
[   79.584880][ T5136]  _copy_from_user+0x1c/0xa0
[   79.584911][ T5136]  memdup_user+0x6b/0xd0
[   79.584943][ T5136]  strndup_user+0x68/0xa0
[   79.585036][ T5136]  bpf_uprobe_multi_link_attach+0x1db/0x890
[   79.585068][ T5136]  ? kstrtouint_from_user+0xbf/0x100
[   79.585093][ T5136]  ? __fget_files+0x186/0x1c0
[   79.585117][ T5136]  link_create+0x64b/0x680
[   79.585149][ T5136]  ? selinux_bpf+0xab/0xc0
[   79.585256][ T5136]  __sys_bpf+0x4fe/0x800
[   79.585351][ T5136]  __x64_sys_bpf+0x43/0x50
[   79.585394][ T5136]  x64_sys_call+0x23da/0x2e10
[   79.585417][ T5136]  do_syscall_64+0xc9/0x1a0
[   79.585515][ T5136]  ? clear_bhb_loop+0x25/0x80
[   79.585538][ T5136]  ? clear_bhb_loop+0x25/0x80
[   79.585637][ T5136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.585659][ T5136] RIP: 0033:0x7f585709e169
[   79.585675][ T5136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.585694][ T5136] RSP: 002b:00007f5855707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   79.585715][ T5136] RAX: ffffffffffffffda RBX: 00007f58572c5fa0 RCX: 00007f585709e169
[   79.585795][ T5136] RDX: 000000000000003c RSI: 00002000000005c0 RDI: 000000000000001c
[   79.585807][ T5136] RBP: 00007f5855707090 R08: 0000000000000000 R09: 0000000000000000
[   79.585820][ T5136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.585832][ T5136] R13: 0000000000000000 R14: 00007f58572c5fa0 R15: 00007ffea22ccfd8
[   79.585909][ T5136]  </TASK>
[   79.790693][ T5138] FAULT_INJECTION: forcing a failure.
[   79.790693][ T5138] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.803830][ T5138] CPU: 1 UID: 0 PID: 5138 Comm: syz.1.531 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   79.803861][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   79.803874][ T5138] Call Trace:
[   79.803882][ T5138]  <TASK>
[   79.803891][ T5138]  dump_stack_lvl+0xf6/0x150
[   79.803975][ T5138]  dump_stack+0x15/0x1a
[   79.803993][ T5138]  should_fail_ex+0x261/0x270
[   79.804019][ T5138]  should_fail+0xb/0x10
[   79.804055][ T5138]  should_fail_usercopy+0x1a/0x20
[   79.804082][ T5138]  _copy_to_user+0x20/0xa0
[   79.804113][ T5138]  simple_read_from_buffer+0xb2/0x130
[   79.804148][ T5138]  proc_fail_nth_read+0x103/0x140
[   79.804230][ T5138]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   79.804293][ T5138]  vfs_read+0x1b2/0x710
[   79.804332][ T5138]  ? __rcu_read_unlock+0x4e/0x70
[   79.804354][ T5138]  ? __fget_files+0x186/0x1c0
[   79.804378][ T5138]  ksys_read+0xeb/0x1b0
[   79.804398][ T5138]  __x64_sys_read+0x42/0x50
[   79.804417][ T5138]  x64_sys_call+0x2a3b/0x2e10
[   79.804440][ T5138]  do_syscall_64+0xc9/0x1a0
[   79.804496][ T5138]  ? clear_bhb_loop+0x25/0x80
[   79.804518][ T5138]  ? clear_bhb_loop+0x25/0x80
[   79.804540][ T5138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.804598][ T5138] RIP: 0033:0x7f7a713fcb7c
[   79.804614][ T5138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   79.804634][ T5138] RSP: 002b:00007f7a6fa67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   79.804654][ T5138] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fcb7c
[   79.804667][ T5138] RDX: 000000000000000f RSI: 00007f7a6fa670a0 RDI: 0000000000000007
[   79.804680][ T5138] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   79.804765][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.804777][ T5138] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   79.804797][ T5138]  </TASK>
[   80.101978][ T5156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.246774][ T5170] siw: device registration error -23
[   80.289866][ T5156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.448852][ T5180] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   80.455495][ T5180] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   80.463014][ T5180] vhci_hcd vhci_hcd.0: Device attached
[   80.524707][ T5156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.568318][ T5181] vhci_hcd: connection closed
[   80.568555][   T31] vhci_hcd: stop threads
[   80.577665][   T31] vhci_hcd: release socket
[   80.582105][   T31] vhci_hcd: disconnect device
[   80.635594][ T5156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.706662][ T5156] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.719210][ T5156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.731458][ T5156] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.743323][ T5156] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.961333][   T29] kauditd_printk_skb: 432 callbacks suppressed
[   80.961351][   T29] audit: type=1400 audit(1745311514.137:3608): avc:  denied  { read } for  pid=5195 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.031814][ T5206] FAULT_INJECTION: forcing a failure.
[   81.031814][ T5206] name failslab, interval 1, probability 0, space 0, times 0
[   81.045208][ T5206] CPU: 1 UID: 0 PID: 5206 Comm: syz.5.556 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   81.045291][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   81.045308][ T5206] Call Trace:
[   81.045316][ T5206]  <TASK>
[   81.045325][ T5206]  dump_stack_lvl+0xf6/0x150
[   81.045372][ T5206]  dump_stack+0x15/0x1a
[   81.045386][ T5206]  should_fail_ex+0x261/0x270
[   81.045407][ T5206]  should_failslab+0x8f/0xb0
[   81.045526][ T5206]  kmem_cache_alloc_node_noprof+0x5c/0x340
[   81.045554][ T5206]  ? __alloc_skb+0x10d/0x320
[   81.045573][ T5206]  __alloc_skb+0x10d/0x320
[   81.045590][ T5206]  netlink_alloc_large_skb+0xad/0xe0
[   81.045620][ T5206]  netlink_sendmsg+0x3da/0x720
[   81.045694][ T5206]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.045712][ T5206]  __sock_sendmsg+0x140/0x180
[   81.045739][ T5206]  ____sys_sendmsg+0x350/0x4e0
[   81.045764][ T5206]  __sys_sendmsg+0x1a0/0x240
[   81.045825][ T5206]  __x64_sys_sendmsg+0x46/0x50
[   81.045846][ T5206]  x64_sys_call+0x26f3/0x2e10
[   81.045872][ T5206]  do_syscall_64+0xc9/0x1a0
[   81.045899][ T5206]  ? clear_bhb_loop+0x25/0x80
[   81.045959][ T5206]  ? clear_bhb_loop+0x25/0x80
[   81.045978][ T5206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.045996][ T5206] RIP: 0033:0x7f585709e169
[   81.046009][ T5206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.046030][ T5206] RSP: 002b:00007f5855707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.046046][ T5206] RAX: ffffffffffffffda RBX: 00007f58572c5fa0 RCX: 00007f585709e169
[   81.046057][ T5206] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[   81.046078][ T5206] RBP: 00007f5855707090 R08: 0000000000000000 R09: 0000000000000000
[   81.046090][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.046100][ T5206] R13: 0000000000000000 R14: 00007f58572c5fa0 R15: 00007ffea22ccfd8
[   81.046117][ T5206]  </TASK>
[   81.265075][   T29] audit: type=1400 audit(1745311514.437:3609): avc:  denied  { write } for  pid=5207 comm="syz.1.557" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.286357][   T29] audit: type=1400 audit(1745311514.437:3610): avc:  denied  { open } for  pid=5207 comm="syz.1.557" path="/96/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.317123][ T5210] loop5: detected capacity change from 0 to 1024
[   81.324954][ T5210] EXT4-fs: Ignoring removed oldalloc option
[   81.331094][ T5210] EXT4-fs: Ignoring removed orlov option
[   81.337299][ T5210] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[   81.363248][ T5210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.367389][ T5214] loop4: detected capacity change from 0 to 512
[   81.377251][ T5210] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   81.394269][ T5210] tipc: Can't bind to reserved service type 0
[   81.406830][ T5214] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   81.416944][ T5214] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   81.425854][   T29] audit: type=1400 audit(1745311514.567:3611): avc:  denied  { relabelto } for  pid=5209 comm="syz.5.558" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   81.452671][   T29] audit: type=1400 audit(1745311514.577:3612): avc:  denied  { write } for  pid=5209 comm="syz.5.558" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   81.478341][   T29] audit: type=1400 audit(1745311514.577:3613): avc:  denied  { add_name } for  pid=5209 comm="syz.5.558" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   81.506762][ T5214] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   81.516311][ T5214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   81.525785][ T5214] System zones: 0-2, 18-18, 34-34
[   81.531887][ T5214] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   81.548362][ T5214] EXT4-fs (loop4): 1 truncate cleaned up
[   81.554590][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.555773][ T5219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.615225][ T5219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.627490][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.673071][ T5219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.730015][ T5229] FAULT_INJECTION: forcing a failure.
[   81.730015][ T5229] name failslab, interval 1, probability 0, space 0, times 0
[   81.742838][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.4.563 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   81.742877][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   81.742892][ T5229] Call Trace:
[   81.742940][ T5229]  <TASK>
[   81.742948][ T5229]  dump_stack_lvl+0xf6/0x150
[   81.742973][ T5229]  dump_stack+0x15/0x1a
[   81.742993][ T5229]  should_fail_ex+0x261/0x270
[   81.743105][ T5229]  should_failslab+0x8f/0xb0
[   81.743133][ T5229]  kmem_cache_alloc_noprof+0x59/0x340
[   81.743160][ T5229]  ? alloc_empty_file+0x78/0x200
[   81.743200][ T5229]  alloc_empty_file+0x78/0x200
[   81.743226][ T5229]  path_openat+0x6f/0x2000
[   81.743253][ T5229]  ? _parse_integer_limit+0x167/0x180
[   81.743356][ T5229]  ? _parse_integer+0x27/0x30
[   81.743376][ T5229]  ? kstrtoull+0x115/0x140
[   81.743400][ T5229]  ? kstrtouint+0x7b/0xc0
[   81.743423][ T5229]  ? kstrtouint_from_user+0xbf/0x100
[   81.743453][ T5229]  do_filp_open+0x115/0x240
[   81.743495][ T5229]  do_sys_openat2+0xaa/0x110
[   81.743531][ T5229]  __x64_sys_creat+0x6a/0x90
[   81.743591][ T5229]  x64_sys_call+0x10b4/0x2e10
[   81.743616][ T5229]  do_syscall_64+0xc9/0x1a0
[   81.743640][ T5229]  ? clear_bhb_loop+0x25/0x80
[   81.743659][ T5229]  ? clear_bhb_loop+0x25/0x80
[   81.743757][ T5229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.743783][ T5229] RIP: 0033:0x7fadc973e169
[   81.743801][ T5229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.743826][ T5229] RSP: 002b:00007fadc7da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   81.743848][ T5229] RAX: ffffffffffffffda RBX: 00007fadc9965fa0 RCX: 00007fadc973e169
[   81.743863][ T5229] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000200000000380
[   81.743877][ T5229] RBP: 00007fadc7da7090 R08: 0000000000000000 R09: 0000000000000000
[   81.743891][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.743905][ T5229] R13: 0000000000000000 R14: 00007fadc9965fa0 R15: 00007ffdc2b16508
[   81.743924][ T5229]  </TASK>
[   81.747503][ T5219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.995361][ T5233] vlan0: entered allmulticast mode
[   82.000595][ T5233] bridge_slave_0: entered allmulticast mode
[   82.016901][ T5235] netlink: 72 bytes leftover after parsing attributes in process `syz.4.564'.
[   82.028140][   T29] audit: type=1400 audit(1745311515.197:3614): avc:  denied  { getattr } for  pid=5234 comm="syz.4.564" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   82.068330][   T29] audit: type=1326 audit(1745311515.237:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5236 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc973e169 code=0x7ffc0000
[   82.076935][ T5237] netlink: 'syz.4.567': attribute type 1 has an invalid length.
[   82.093463][   T29] audit: type=1326 audit(1745311515.237:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5236 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc973e169 code=0x7ffc0000
[   82.122100][ T5237] netlink: 44 bytes leftover after parsing attributes in process `syz.4.567'.
[   82.122890][   T29] audit: type=1326 audit(1745311515.237:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5236 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc973e169 code=0x7ffc0000
[   82.164588][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.169857][ T5219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.190191][ T5219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.203538][ T5219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.214811][ T5240] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[   82.216048][ T5219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.221460][ T5240] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   82.221580][ T5240] vhci_hcd vhci_hcd.0: Device attached
[   82.246150][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.569'.
[   82.255278][ T5244] bridge_slave_1: left allmulticast mode
[   82.260993][ T5244] bridge_slave_1: left promiscuous mode
[   82.266888][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.295965][ T5241] vhci_hcd: connection closed
[   82.296180][ T5244] bridge_slave_0: left allmulticast mode
[   82.307902][ T5244] bridge_slave_0: left promiscuous mode
[   82.308282][   T31] vhci_hcd: stop threads
[   82.313961][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.318083][   T31] vhci_hcd: release socket
[   82.329949][   T31] vhci_hcd: disconnect device
[   82.334857][ T5251] loop2: detected capacity change from 0 to 2048
[   82.343328][ T5251] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   82.416439][ T5255] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   82.437217][ T5255] loop3: detected capacity change from 0 to 512
[   82.582854][ T5255] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.573: bad orphan inode 15
[   82.620670][ T5255] ext4_test_bit(bit=14, block=18) = 1
[   82.627089][ T5255] is_bad_inode(inode)=0
[   82.631384][ T5255] NEXT_ORPHAN(inode)=1023
[   82.635820][ T5255] max_ino=32
[   82.639064][ T5255] i_nlink=0
[   82.652792][ T5255] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.573: corrupted xattr block 19: invalid header
[   82.693034][ T5261] loop2: detected capacity change from 0 to 1024
[   82.724015][ T5265] bridge0: entered promiscuous mode
[   82.734005][ T5265] bridge0: port 1(macvlan3) entered blocking state
[   82.740722][ T5265] bridge0: port 1(macvlan3) entered disabled state
[   82.768410][ T5255] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[   82.791810][ T5269] loop9: detected capacity change from 0 to 7
[   82.796736][ T5255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   82.798463][ T5269] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.818987][ T5265] macvlan3: entered allmulticast mode
[   82.824445][ T5265] bridge0: entered allmulticast mode
[   82.826066][ T5255] ext4 filesystem being mounted at /109/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   82.870430][ T5269] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.878338][ T5269]  loop9: unable to read partition table
[   82.905278][ T5269] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   82.905278][ T5269] 
U�������) failed (rc=-5)
[   82.961001][ T5265] macvlan3: left allmulticast mode
[   82.966210][ T5265] bridge0: left allmulticast mode
[   82.984488][ T5265] bridge0: left promiscuous mode
[   82.995631][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   83.108124][ T5287] loop3: detected capacity change from 0 to 1024
[   83.125268][ T5287] EXT4-fs: Ignoring removed nobh option
[   83.154587][ T5287] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.186856][ T5287] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   83.264530][ T5287] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.585: couldn't read orphan inode 11 (err -117)
[   83.286402][ T5301] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[   83.290789][ T5287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.293338][ T5301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   83.314113][ T5301] vhci_hcd vhci_hcd.0: Device attached
[   83.328685][ T5287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.342924][ T5302] vhci_hcd: connection closed
[   83.343232][   T31] vhci_hcd: stop threads
[   83.352478][   T31] vhci_hcd: release socket
[   83.356970][   T31] vhci_hcd: disconnect device
[   83.448534][ T5310] FAULT_INJECTION: forcing a failure.
[   83.448534][ T5310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.461973][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.2.592 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   83.461999][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   83.462012][ T5310] Call Trace:
[   83.462020][ T5310]  <TASK>
[   83.462028][ T5310]  dump_stack_lvl+0xf6/0x150
[   83.462135][ T5310]  dump_stack+0x15/0x1a
[   83.462151][ T5310]  should_fail_ex+0x261/0x270
[   83.462176][ T5310]  should_fail+0xb/0x10
[   83.462222][ T5310]  should_fail_usercopy+0x1a/0x20
[   83.462278][ T5310]  _copy_from_user+0x1c/0xa0
[   83.462410][ T5310]  copy_msghdr_from_user+0x54/0x2b0
[   83.462506][ T5310]  ? __fget_files+0x186/0x1c0
[   83.462536][ T5310]  __sys_sendmsg+0x141/0x240
[   83.462576][ T5310]  __x64_sys_sendmsg+0x46/0x50
[   83.462598][ T5310]  x64_sys_call+0x26f3/0x2e10
[   83.462621][ T5310]  do_syscall_64+0xc9/0x1a0
[   83.462647][ T5310]  ? clear_bhb_loop+0x25/0x80
[   83.462673][ T5310]  ? clear_bhb_loop+0x25/0x80
[   83.462696][ T5310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.462716][ T5310] RIP: 0033:0x7fad4ba4e169
[   83.462730][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.462821][ T5310] RSP: 002b:00007fad4a0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.462843][ T5310] RAX: ffffffffffffffda RBX: 00007fad4bc75fa0 RCX: 00007fad4ba4e169
[   83.462857][ T5310] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003
[   83.462868][ T5310] RBP: 00007fad4a0b7090 R08: 0000000000000000 R09: 0000000000000000
[   83.462881][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.462896][ T5310] R13: 0000000000000000 R14: 00007fad4bc75fa0 R15: 00007ffcd0ceb788
[   83.462981][ T5310]  </TASK>
[   83.777821][ T5314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.594'.
[   83.849826][ T5314] Invalid ELF header magic: != ELF
[   83.867062][ T5317] siw: device registration error -23
[   84.367753][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.605'.
[   84.381830][ T5344] loop5: detected capacity change from 0 to 512
[   84.391652][ T5344] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   84.411645][ T5344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   84.430936][ T5344] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.605: corrupted in-inode xattr: e_value size too large
[   84.449211][ T5344] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.605: couldn't read orphan inode 15 (err -117)
[   84.470035][ T5344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.488183][ T5346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.606'.
[   84.520342][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.659415][ T5346] Invalid ELF header magic: != ELF
[   84.677882][ T5367] ip6gretap1: entered allmulticast mode
[   84.771755][ T5385] siw: device registration error -23
[   84.798124][ T5388] loop4: detected capacity change from 0 to 128
[   84.809654][ T5388] EXT4-fs: Ignoring removed nobh option
[   84.818237][ T5388] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.838063][ T5378] 9pnet_fd: Insufficient options for proto=fd
[   84.848711][ T5388] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.936937][ T5392] loop3: detected capacity change from 0 to 2048
[   84.953251][ T5392] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   85.224151][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.315908][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'.
[   85.325016][ T5412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.627'.
[   85.344091][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'.
[   85.380543][ T5412] Invalid ELF header magic: != ELF
[   85.424509][ T5429] FAULT_INJECTION: forcing a failure.
[   85.424509][ T5429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.437777][ T5429] CPU: 0 UID: 0 PID: 5429 Comm: syz.1.633 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   85.437808][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   85.437823][ T5429] Call Trace:
[   85.437832][ T5429]  <TASK>
[   85.437841][ T5429]  dump_stack_lvl+0xf6/0x150
[   85.437886][ T5429]  dump_stack+0x15/0x1a
[   85.437901][ T5429]  should_fail_ex+0x261/0x270
[   85.437924][ T5429]  should_fail+0xb/0x10
[   85.437977][ T5429]  should_fail_usercopy+0x1a/0x20
[   85.438001][ T5429]  _copy_from_iter+0xd8/0xd10
[   85.438026][ T5429]  ? kmalloc_reserve+0x16e/0x190
[   85.438049][ T5429]  ? __build_skb_around+0x199/0x1f0
[   85.438103][ T5429]  ? __alloc_skb+0x227/0x320
[   85.438197][ T5429]  ? __virt_addr_valid+0x1ed/0x250
[   85.438214][ T5429]  ? __check_object_size+0x367/0x510
[   85.438244][ T5429]  netlink_sendmsg+0x492/0x720
[   85.438271][ T5429]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.438355][ T5429]  __sock_sendmsg+0x140/0x180
[   85.438393][ T5429]  ____sys_sendmsg+0x350/0x4e0
[   85.438425][ T5429]  __sys_sendmsg+0x1a0/0x240
[   85.438515][ T5429]  __x64_sys_sendmsg+0x46/0x50
[   85.438550][ T5429]  x64_sys_call+0x26f3/0x2e10
[   85.438576][ T5429]  do_syscall_64+0xc9/0x1a0
[   85.438606][ T5429]  ? clear_bhb_loop+0x25/0x80
[   85.438626][ T5429]  ? clear_bhb_loop+0x25/0x80
[   85.438663][ T5429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.438689][ T5429] RIP: 0033:0x7f7a713fe169
[   85.438714][ T5429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.438782][ T5429] RSP: 002b:00007f7a6fa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.438800][ T5429] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fe169
[   85.438815][ T5429] RDX: 0000000004000040 RSI: 00002000000016c0 RDI: 0000000000000006
[   85.438830][ T5429] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   85.438907][ T5429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.438918][ T5429] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   85.438998][ T5429]  </TASK>
[   85.672441][ T5434] smc: net device bond0 erased user defined pnetid SYZ2
[   85.758962][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x1
[   85.767231][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.775195][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.783664][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.791907][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.801750][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.809851][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.818063][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x2
[   85.825953][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.833738][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.841760][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.849622][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.857431][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.865269][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.873320][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.881328][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.889251][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.897223][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.905215][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.913141][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.921158][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.929003][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.936943][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.944791][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.952736][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.960526][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.968267][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.976087][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.983844][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.991653][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   85.999769][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.007697][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.015922][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.025592][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.034776][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.044004][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.053597][    T9] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0
[   86.062749][    T9] hid-generic 0000:0000:20000000.0009: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[   86.364667][ T5463] siw: device registration error -23
[   86.915660][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'.
[   86.945817][ T5460] Invalid ELF header magic: != ELF
[   86.995748][ T5471] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.026872][   T29] kauditd_printk_skb: 128 callbacks suppressed
[   87.026890][   T29] audit: type=1400 audit(1745311520.197:3746): avc:  denied  { create } for  pid=5472 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   87.104213][ T5480] loop9: detected capacity change from 0 to 7
[   87.113828][ T5471] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.124502][ T5480] Buffer I/O error on dev loop9, logical block 0, async page read
[   87.133038][ T5482] 8021q: VLANs not supported on ip6tnl0
[   87.133191][ T5480] Buffer I/O error on dev loop9, logical block 0, async page read
[   87.147063][ T5480]  loop9: unable to read partition table
[   87.153191][ T5480] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   87.153191][ T5480] 
U�������) failed (rc=-5)
[   87.171266][ T5482] netlink: 'syz.3.653': attribute type 10 has an invalid length.
[   87.180082][ T5471] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.193389][ T5482] bridge0: port 3(batadv0) entered disabled state
[   87.200591][ T5482] batadv0: left allmulticast mode
[   87.205764][ T5482] batadv0: left promiscuous mode
[   87.211297][ T5482] bridge0: port 3(batadv0) entered disabled state
[   87.219643][ T5482] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[   87.234374][ T5482] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[   87.253028][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.262482][ T5482] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   87.302196][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.304386][ T5471] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.312786][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.346184][ T5494] __nla_validate_parse: 1 callbacks suppressed
[   87.346273][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'.
[   87.378033][ T5471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.391050][ T5471] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.410548][ T3458] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   87.425331][ T3458] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   87.440877][ T5471] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.464456][ T5471] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.501458][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'.
[   87.510439][ T5500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'.
[   87.570019][ T5516] loop3: detected capacity change from 0 to 512
[   87.577309][ T5500] Invalid ELF header magic: != ELF
[   87.582753][   T29] audit: type=1400 audit(1745311520.757:3747): avc:  denied  { associate } for  pid=5515 comm="syz.3.665" name=E91F7189591E9233614B scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   87.584757][ T5516] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.665: bad orphan inode 15
[   87.689344][ T5516] ext4_test_bit(bit=14, block=18) = 1
[   87.694818][ T5516] is_bad_inode(inode)=0
[   87.699012][ T5516] NEXT_ORPHAN(inode)=1023
[   87.699024][ T5516] max_ino=32
[   87.699032][ T5516] i_nlink=0
[   87.699607][ T5516] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.665: corrupted xattr block 19: invalid header
[   87.724146][ T5516] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[   87.733938][ T5516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   87.750582][ T5516] ext4 filesystem being mounted at /130/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   87.800274][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   87.840654][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'.
[   87.908643][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[   87.927371][ T5543] netlink: '+}[@': attribute type 4 has an invalid length.
[   87.940684][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   87.955998][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   87.992508][ T5552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   87.999254][ T5552] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   88.007039][ T5552] vhci_hcd vhci_hcd.0: Device attached
[   88.049855][ T5553] vhci_hcd: connection closed
[   88.050079][   T54] vhci_hcd: stop threads
[   88.057493][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.681'.
[   88.059321][   T54] vhci_hcd: release socket
[   88.072882][   T54] vhci_hcd: disconnect device
[   88.077751][   T29] audit: type=1326 audit(1745311521.247:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.101740][   T29] audit: type=1326 audit(1745311521.247:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.115474][ T5560] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   88.126139][   T29] audit: type=1326 audit(1745311521.247:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.159602][   T29] audit: type=1326 audit(1745311521.247:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.173223][ T5562] loop5: detected capacity change from 0 to 256
[   88.183557][   T29] audit: type=1326 audit(1745311521.247:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.244702][ T5562] netlink: 232 bytes leftover after parsing attributes in process `syz.5.683'.
[   88.248946][   T29] audit: type=1326 audit(1745311521.277:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   88.277050][   T29] audit: type=1400 audit(1745311521.397:3754): avc:  denied  { getopt } for  pid=5563 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.296883][   T29] audit: type=1326 audit(1745311521.457:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc973e169 code=0x7ffc0000
[   88.323783][ T5572] loop2: detected capacity change from 0 to 512
[   88.361721][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.387340][ T5572] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.480766][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   88.495117][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   88.541165][ T5586] pim6reg1: entered promiscuous mode
[   88.546502][ T5586] pim6reg1: entered allmulticast mode
[   88.607702][ T5595] loop4: detected capacity change from 0 to 256
[   88.617852][ T5595] program syz.4.690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.011632][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   89.025740][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   89.098253][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.206698][ T5631] siw: device registration error -23
[   89.233680][ T5633] loop5: detected capacity change from 0 to 2048
[   89.242363][ T5633] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   89.254131][ T5635] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   89.506147][ T5641] loop2: detected capacity change from 0 to 512
[   89.513278][ T5641] ext4: Unknown parameter '/proc/sys/fs/binfmt_misc/register'
[   89.525730][ T5641] binfmt_misc: register: failed to install interpreter file ./file2
[   89.616194][ T5644] loop5: detected capacity change from 0 to 1024
[   89.660243][ T5666] loop4: detected capacity change from 0 to 512
[   89.675105][ T5666] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.715: bad orphan inode 15
[   89.689007][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'.
[   89.731056][ T5666] ext4_test_bit(bit=14, block=18) = 1
[   89.736698][ T5666] is_bad_inode(inode)=0
[   89.740907][ T5666] NEXT_ORPHAN(inode)=1023
[   89.745779][ T5666] max_ino=32
[   89.749013][ T5666] i_nlink=0
[   89.798406][ T5666] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.715: corrupted xattr block 19: invalid header
[   89.862932][ T5666] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117)
[   89.892910][ T5666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   89.909836][ T5666] ext4 filesystem being mounted at /149/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   89.938167][ T5685] FAULT_INJECTION: forcing a failure.
[   89.938167][ T5685] name failslab, interval 1, probability 0, space 0, times 0
[   89.951016][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.1.722 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   89.951120][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   89.951136][ T5685] Call Trace:
[   89.951144][ T5685]  <TASK>
[   89.951153][ T5685]  dump_stack_lvl+0xf6/0x150
[   89.951175][ T5685]  dump_stack+0x15/0x1a
[   89.951191][ T5685]  should_fail_ex+0x261/0x270
[   89.951229][ T5685]  should_failslab+0x8f/0xb0
[   89.951285][ T5685]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[   89.951321][ T5685]  ? sidtab_sid2str_get+0xb8/0x140
[   89.951400][ T5685]  ? vsnprintf+0x84d/0x8a0
[   89.951438][ T5685]  kmemdup_noprof+0x2b/0x70
[   89.951474][ T5685]  sidtab_sid2str_get+0xb8/0x140
[   89.951565][ T5685]  security_sid_to_context_core+0x1eb/0x2f0
[   89.951600][ T5685]  security_sid_to_context+0x27/0x30
[   89.951638][ T5685]  selinux_lsmprop_to_secctx+0x6c/0xf0
[   89.951662][ T5685]  security_lsmprop_to_secctx+0x40/0x80
[   89.951770][ T5685]  audit_log_task_context+0x7a/0x180
[   89.951867][ T5685]  audit_log_task+0xfb/0x250
[   89.951945][ T5685]  ? kstrtouint+0x7b/0xc0
[   89.952043][ T5685]  audit_seccomp+0x62/0x100
[   89.952066][ T5685]  __seccomp_filter+0x694/0x10e0
[   89.952090][ T5685]  ? vfs_write+0x669/0x950
[   89.952119][ T5685]  __secure_computing+0x7e/0x150
[   89.952139][ T5685]  syscall_trace_enter+0xcf/0x1f0
[   89.952165][ T5685]  ? fpregs_assert_state_consistent+0x83/0xa0
[   89.952207][ T5685]  do_syscall_64+0xaa/0x1a0
[   89.952364][ T5685]  ? clear_bhb_loop+0x25/0x80
[   89.952391][ T5685]  ? clear_bhb_loop+0x25/0x80
[   89.952417][ T5685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.952438][ T5685] RIP: 0033:0x7f7a713fe169
[   89.952453][ T5685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.952475][ T5685] RSP: 002b:00007f7a6fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[   89.952534][ T5685] RAX: ffffffffffffffda RBX: 00007f7a71625fa0 RCX: 00007f7a713fe169
[   89.952549][ T5685] RDX: 000000000000ee01 RSI: 000000000000ee01 RDI: 000000000000ee00
[   89.952563][ T5685] RBP: 00007f7a6fa67090 R08: 0000000000000000 R09: 0000000000000000
[   89.952578][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.952592][ T5685] R13: 0000000000000000 R14: 00007f7a71625fa0 R15: 00007ffc2f9b38e8
[   89.952615][ T5685]  </TASK>
[   89.953336][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   90.257729][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'.
[   90.301808][ T5706] FAULT_INJECTION: forcing a failure.
[   90.301808][ T5706] name failslab, interval 1, probability 0, space 0, times 0
[   90.316636][ T5706] CPU: 1 UID: 0 PID: 5706 Comm: syz.4.723 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   90.316667][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   90.316682][ T5706] Call Trace:
[   90.316693][ T5706]  <TASK>
[   90.316702][ T5706]  dump_stack_lvl+0xf6/0x150
[   90.316726][ T5706]  dump_stack+0x15/0x1a
[   90.316744][ T5706]  should_fail_ex+0x261/0x270
[   90.316770][ T5706]  should_failslab+0x8f/0xb0
[   90.316795][ T5706]  __kvmalloc_node_noprof+0x12c/0x520
[   90.316897][ T5706]  ? vmemdup_user+0x26/0xd0
[   90.316935][ T5706]  vmemdup_user+0x26/0xd0
[   90.316968][ T5706]  path_setxattrat+0x1cd/0x320
[   90.317064][ T5706]  __x64_sys_fsetxattr+0x6d/0x80
[   90.317092][ T5706]  x64_sys_call+0x2bad/0x2e10
[   90.317119][ T5706]  do_syscall_64+0xc9/0x1a0
[   90.317150][ T5706]  ? clear_bhb_loop+0x25/0x80
[   90.317171][ T5706]  ? clear_bhb_loop+0x25/0x80
[   90.317240][ T5706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.317267][ T5706] RIP: 0033:0x7fadc973e169
[   90.317284][ T5706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.317306][ T5706] RSP: 002b:00007fadc7da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[   90.317329][ T5706] RAX: ffffffffffffffda RBX: 00007fadc9965fa0 RCX: 00007fadc973e169
[   90.317385][ T5706] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000004
[   90.317397][ T5706] RBP: 00007fadc7da7090 R08: 0000000000000003 R09: 0000000000000000
[   90.317411][ T5706] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001
[   90.317435][ T5706] R13: 0000000000000000 R14: 00007fadc9965fa0 R15: 00007ffdc2b16508
[   90.317457][ T5706]  </TASK>
[   90.627978][ T5721] loop4: detected capacity change from 0 to 8192
[   90.765056][ T5727] loop2: detected capacity change from 0 to 2048
[   90.772577][ T5727] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   90.855406][ T5733] siw: device registration error -23
[   90.874646][ T5731] loop2: detected capacity change from 0 to 1024
[   90.913166][ T5735] loop4: detected capacity change from 0 to 512
[   90.952225][ T5735] EXT4-fs (loop4): orphan cleanup on readonly fs
[   90.958642][ T5735] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   91.184434][ T5735] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   91.212240][ T5741] 9pnet_fd: Insufficient options for proto=fd
[   91.231029][ T5735] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.740: attempt to clear invalid blocks 2 len 1
[   91.315268][ T5735] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.740: invalid indirect mapped block 1819239214 (level 0)
[   91.344128][ T5746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.743'.
[   91.364556][ T5735] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.740: invalid indirect mapped block 1819239214 (level 1)
[   91.405449][ T5735] EXT4-fs (loop4): 1 truncate cleaned up
[   91.418473][ T5735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.461565][ T5735] EXT4-fs (loop4): shut down requested (2)
[   91.479193][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.689216][ T5757] loop4: detected capacity change from 0 to 512
[   91.697007][ T5757] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.704744][ T5757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   91.717496][ T5757] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   91.732713][ T5757] EXT4-fs (loop4): 1 truncate cleaned up
[   91.739183][ T5757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.770546][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.816116][ T5768] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[   91.822777][ T5768] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   91.830605][ T5768] vhci_hcd vhci_hcd.0: Device attached
[   91.846795][ T5769] vhci_hcd: connection closed
[   91.847728][   T31] vhci_hcd: stop threads
[   91.856864][   T31] vhci_hcd: release socket
[   91.861328][   T31] vhci_hcd: disconnect device
[   91.947081][ T5766] Invalid ELF header magic: != ELF
[   91.957720][ T5776] loop5: detected capacity change from 0 to 256
[   91.965179][ T5776] program syz.5.752 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.008362][ T5778] loop2: detected capacity change from 0 to 512
[   92.015890][ T5778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.027621][ T5778] EXT4-fs (loop2): 1 truncate cleaned up
[   92.033794][ T5778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.046760][   T29] kauditd_printk_skb: 104 callbacks suppressed
[   92.046776][   T29] audit: type=1326 audit(1745311525.227:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4ba4cad0 code=0x7ffc0000
[   92.076890][   T29] audit: type=1326 audit(1745311525.227:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fad4ba4ceb7 code=0x7ffc0000
[   92.100798][   T29] audit: type=1326 audit(1745311525.227:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4ba4cad0 code=0x7ffc0000
[   92.124391][   T29] audit: type=1326 audit(1745311525.227:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   92.148391][   T29] audit: type=1326 audit(1745311525.227:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   92.172102][   T29] audit: type=1326 audit(1745311525.227:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   92.195821][   T29] audit: type=1326 audit(1745311525.227:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   92.219404][   T29] audit: type=1326 audit(1745311525.227:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4ba4e169 code=0x7ffc0000
[   92.242856][   T29] audit: type=1326 audit(1745311525.227:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4ba4cad0 code=0x7ffc0000
[   92.266855][   T29] audit: type=1326 audit(1745311525.227:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fad4ba4f997 code=0x7ffc0000
[   92.292543][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.316431][ T5781] loop2: detected capacity change from 0 to 512
[   92.336946][ T5781] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.754: bad orphan inode 15
[   92.348779][ T5781] ext4_test_bit(bit=14, block=18) = 1
[   92.354234][ T5781] is_bad_inode(inode)=0
[   92.358411][ T5781] NEXT_ORPHAN(inode)=1023
[   92.362806][ T5781] max_ino=32
[   92.366070][ T5781] i_nlink=0
[   92.371000][ T5781] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.754: corrupted xattr block 19: invalid header
[   92.385347][ T5781] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117)
[   92.395923][ T5781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   92.408802][ T5781] ext4 filesystem being mounted at /160/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   92.458526][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   92.474286][ T5783] netlink: '+}[@': attribute type 4 has an invalid length.
[   92.505099][ T5783] netlink: '+}[@': attribute type 4 has an invalid length.
[   92.548528][ T5799] pim6reg1: entered promiscuous mode
[   92.553998][ T5799] pim6reg1: entered allmulticast mode
[   92.618850][ T5801] loop4: detected capacity change from 0 to 256
[   92.628201][ T5801] program syz.4.762 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.679762][ T1294] net_ratelimit: 12 callbacks suppressed
[   92.679854][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   92.700161][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   92.735851][ T5812] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[   92.742418][ T5812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   92.750115][ T5812] vhci_hcd vhci_hcd.0: Device attached
[   92.757122][ T5813] vhci_hcd: connection closed
[   92.757363][ T1294] vhci_hcd: stop threads
[   92.766700][ T1294] vhci_hcd: release socket
[   92.771221][ T1294] vhci_hcd: disconnect device
[   93.221638][   T37] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   93.235675][   T37] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   93.393839][ T5833] loop5: detected capacity change from 0 to 2048
[   93.400577][ T5833] EXT4-fs: Ignoring removed i_version option
[   93.407021][ T5833] EXT4-fs: Mount option(s) incompatible with ext2
[   93.442614][ T5837] loop5: detected capacity change from 0 to 2048
[   93.449958][ T5837] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   93.577107][ T5843] loop5: detected capacity change from 0 to 1024
[   93.797585][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   93.811945][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   93.838850][ T5855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   93.845491][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   93.853076][ T5855] vhci_hcd vhci_hcd.0: Device attached
[   93.867984][ T5859] __nla_validate_parse: 3 callbacks suppressed
[   93.868004][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'.
[   93.870631][ T5856] vhci_hcd: connection closed
[   93.884001][ T3458] vhci_hcd: stop threads
[   93.893421][ T3458] vhci_hcd: release socket
[   93.897865][ T3458] vhci_hcd: disconnect device
[   93.926853][ T5866] pim6reg1: entered promiscuous mode
[   93.932244][ T5866] pim6reg1: entered allmulticast mode
[   93.969704][ T5872] loop3: detected capacity change from 0 to 512
[   93.978528][ T5872] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.787: bad orphan inode 15
[   93.990061][ T5872] ext4_test_bit(bit=14, block=18) = 1
[   93.995841][ T5872] is_bad_inode(inode)=0
[   94.000490][ T5872] NEXT_ORPHAN(inode)=1023
[   94.001580][ T5876] loop4: detected capacity change from 0 to 256
[   94.005095][ T5872] max_ino=32
[   94.005112][ T5872] i_nlink=0
[   94.005576][ T5872] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.787: corrupted xattr block 19: invalid header
[   94.014049][ T5876] program syz.4.785 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.015803][ T5872] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[   94.053665][ T5872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   94.067456][ T5872] ext4 filesystem being mounted at /151/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   94.094299][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   94.135064][ T5883] loop3: detected capacity change from 0 to 512
[   94.142797][ T5883] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   94.151248][ T5883] EXT4-fs (loop3): orphan cleanup on readonly fs
[   94.157948][ T5883] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   94.173518][ T5883] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   94.180926][ T5883] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.790: bg 0: block 40: padding at end of block bitmap is not set
[   94.195597][ T5883] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   94.204917][ T5883] EXT4-fs (loop3): 1 truncate cleaned up
[   94.211354][ T5883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   94.225286][ T5883] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.790: corrupted xattr block 31: invalid header
[   94.239178][ T5883] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=16
[   94.248447][ T5883] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.790: corrupted xattr block 31: invalid header
[   94.261742][ T5883] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=16
[   94.271406][ T5883] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.790: bad symlink.
[   94.311324][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.341218][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   94.355343][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   94.513692][ T5911] loop5: detected capacity change from 0 to 512
[   94.522153][ T5911] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.801: bad orphan inode 15
[   94.522371][ T5911] ext4_test_bit(bit=14, block=18) = 1
[   94.522385][ T5911] is_bad_inode(inode)=0
[   94.522419][ T5911] NEXT_ORPHAN(inode)=1023
[   94.522427][ T5911] max_ino=32
[   94.522434][ T5911] i_nlink=0
[   94.522606][ T5911] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.801: corrupted xattr block 19: invalid header
[   94.582473][ T5911] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117)
[   94.582896][ T5911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   94.592301][ T5911] ext4 filesystem being mounted at /131/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   94.645498][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   94.765503][ T5932] loop5: detected capacity change from 0 to 164
[   94.773382][ T5932] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   94.782890][ T5932] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   94.792669][ T5932] Symlink component flag not implemented
[   94.798389][ T5932] Symlink component flag not implemented
[   94.805606][ T5932] Symlink component flag not implemented (7)
[   94.811899][ T5932] Symlink component flag not implemented (116)
[   94.830059][ T5934] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[   94.870356][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   95.001146][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'.
[   95.030255][ T5957] FAULT_INJECTION: forcing a failure.
[   95.030255][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.043622][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.5.817 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   95.043655][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   95.043671][ T5957] Call Trace:
[   95.043678][ T5957]  <TASK>
[   95.043745][ T5957]  dump_stack_lvl+0xf6/0x150
[   95.043798][ T5957]  dump_stack+0x15/0x1a
[   95.043818][ T5957]  should_fail_ex+0x261/0x270
[   95.043853][ T5957]  should_fail+0xb/0x10
[   95.043872][ T5957]  should_fail_usercopy+0x1a/0x20
[   95.043896][ T5957]  _copy_from_user+0x1c/0xa0
[   95.043967][ T5957]  do_arpt_set_ctl+0x208/0x9b0
[   95.043990][ T5957]  ? _raw_spin_unlock_bh+0x36/0x40
[   95.044097][ T5957]  ? tcp_release_cb+0x108/0x390
[   95.044134][ T5957]  ? _raw_spin_unlock_bh+0x36/0x40
[   95.044182][ T5957]  ? release_sock+0x117/0x150
[   95.044308][ T5957]  nf_setsockopt+0x195/0x1b0
[   95.044337][ T5957]  ip_setsockopt+0xea/0x100
[   95.044383][ T5957]  tcp_setsockopt+0x93/0xb0
[   95.044417][ T5957]  sock_common_setsockopt+0x64/0x80
[   95.044455][ T5957]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   95.044569][ T5957]  smc_setsockopt+0x184/0x7b0
[   95.044601][ T5957]  ? __pfx_smc_setsockopt+0x10/0x10
[   95.044630][ T5957]  __sys_setsockopt+0x187/0x200
[   95.044652][ T5957]  __x64_sys_setsockopt+0x66/0x80
[   95.044678][ T5957]  x64_sys_call+0x2a09/0x2e10
[   95.044760][ T5957]  do_syscall_64+0xc9/0x1a0
[   95.044790][ T5957]  ? clear_bhb_loop+0x25/0x80
[   95.044815][ T5957]  ? clear_bhb_loop+0x25/0x80
[   95.044849][ T5957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.044874][ T5957] RIP: 0033:0x7f585709e169
[   95.044890][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.044914][ T5957] RSP: 002b:00007f5855707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.044931][ T5957] RAX: ffffffffffffffda RBX: 00007f58572c5fa0 RCX: 00007f585709e169
[   95.044942][ T5957] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[   95.044955][ T5957] RBP: 00007f5855707090 R08: 00000000000003f8 R09: 0000000000000000
[   95.044969][ T5957] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001
[   95.044983][ T5957] R13: 0000000000000000 R14: 00007f58572c5fa0 R15: 00007ffea22ccfd8
[   95.045007][ T5957]  </TASK>
[   95.258817][ T5959] pim6reg1: entered promiscuous mode
[   95.282813][ T5959] pim6reg1: entered allmulticast mode
[   95.344665][ T5962] loop5: detected capacity change from 0 to 256
[   95.352156][ T5962] program syz.5.818 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.409211][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'.
[   95.448665][ T5968] ==================================================================
[   95.456805][ T5968] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[   95.463634][ T5968] 
[   95.466002][ T5968] write to 0xffff8881190ba100 of 8 bytes by task 5966 on cpu 0:
[   95.473838][ T5968]  mas_wmb_replace+0x224/0x1510
[   95.478918][ T5968]  mas_wr_store_entry+0x158c/0x2460
[   95.484280][ T5968]  mas_store_prealloc+0x6d5/0x960
[   95.489455][ T5968]  vma_iter_store_new+0x1d3/0x210
[   95.494605][ T5968]  vma_complete+0x12b/0x570
[   95.499143][ T5968]  __split_vma+0x5b6/0x630
[   95.503584][ T5968]  vma_modify+0x1a2/0x200
[   95.507933][ T5968]  vma_modify_flags+0x10a/0x140
[   95.512799][ T5968]  mprotect_fixup+0x30f/0x5d0
[   95.517675][ T5968]  do_mprotect_pkey+0x6ce/0x9a0
[   95.522783][ T5968]  __x64_sys_mprotect+0x48/0x60
[   95.527663][ T5968]  x64_sys_call+0x272f/0x2e10
[   95.532534][ T5968]  do_syscall_64+0xc9/0x1a0
[   95.537093][ T5968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.543006][ T5968] 
[   95.545349][ T5968] read to 0xffff8881190ba100 of 8 bytes by task 5968 on cpu 1:
[   95.553070][ T5968]  mas_walk+0x123/0x320
[   95.557243][ T5968]  lock_vma_under_rcu+0xa7/0x340
[   95.562285][ T5968]  exc_page_fault+0x150/0x6a0
[   95.567059][ T5968]  asm_exc_page_fault+0x26/0x30
[   95.571943][ T5968] 
[   95.574442][ T5968] value changed: 0xffff888106de5841 -> 0xffff8881190ba100
[   95.581551][ T5968] 
[   95.584062][ T5968] Reported by Kernel Concurrency Sanitizer on:
[   95.590404][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz.1.821 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) 
[   95.603677][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   95.615531][ T5968] ==================================================================
[   95.651774][ T5961] Invalid ELF header magic: != ELF
[   97.960476][ T1294] net_ratelimit: 11 callbacks suppressed
[   97.960508][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   97.980345][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   98.500399][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   98.515046][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   99.030378][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   99.045742][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[   99.560640][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[   99.574726][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  100.090527][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  100.105308][   T54] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  103.180472][   T37] net_ratelimit: 10 callbacks suppressed
[  103.180486][   T37] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  103.200387][   T37] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  103.721375][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  103.735540][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  104.251148][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  104.265289][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  104.780652][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  104.796839][ T1294] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  105.320417][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01
[  105.334987][ T3458] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01