last executing test programs:

2.617772378s ago: executing program 4 (id=155):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
getresuid(0x0, 0x0, 0x0)

2.589897431s ago: executing program 4 (id=156):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
listen(r2, 0x5)
r3 = socket(0x28, 0x5, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r4 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write$binfmt_elf32(r4, &(0x7f00000008c0)=ANY=[], 0x258)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811)

2.565165224s ago: executing program 4 (id=157):
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r4, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x100000}}, 0x40)
mq_open(0x0, 0x40, 0x1d4, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.420743338s ago: executing program 0 (id=159):
socket$key(0xf, 0x3, 0x2)
setresuid(0xee01, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xb, 0x7, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x40080)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x24003, 0x177)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, &(0x7f00000004c0)="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", 0xffffffffffffff71, 0x400bfeb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1.655887985s ago: executing program 4 (id=170):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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")
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, <r5=>0xffffffffffffffff}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)={0x442040, 0x18, 0x3f}, 0x18)
move_mount(r8, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r9, 0x0, 0x200)
ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000f40)={0x3, &(0x7f0000000380)=[{0x1, 0x5, 0x4, 0x2}, {0x4, 0x8c, 0x2, 0xfff}, {0x3, 0x1, 0x0, 0x2}]})
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000280)=0x4)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x17}, 0x2f, 0x0, 0x3, 0x480, 0x1, 0x0, r10})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='mm_page_alloc\x00', r7}, 0x18)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r13, r13, 0x0, 0x6)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r15}, 0x18)
ustat(0x2, 0x0)

1.529548307s ago: executing program 0 (id=171):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r1, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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")
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, <r2=>0xffffffffffffffff}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)={0x442040, 0x18, 0x3f}, 0x18)
move_mount(r4, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r5, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x200)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48)
ustat(0x2, 0x0)

1.474092593s ago: executing program 4 (id=173):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000004040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0xb, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)
r3 = eventfd2(0x0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

1.421218828s ago: executing program 0 (id=175):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000090012001811000000682a631ebb044dc2deef5227ec7f73c5f7360e9727bfd5c352a1121fb6f5dbe06d2f11e161191b5b6d27f797c4416b9eb0351b8244fe8f56f87987e994da14ce0dd1aee98d00818a764cb891f519284468e2ab972ffc53cd739880fede40e6745592f7b92ab86a6e62d1f307", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
sendmsg(r3, &(0x7f0000000cc0)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x2, 0x4, {0xa, 0x4e23, 0x5, @private2, 0x9}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000007c0)="db18e780e23c3a147c7d392f23476bc6a0285bd406338e1e0d35ab9f5dc49adfd4f8b55d9765f804f34563673b4f9102267468e5a99fa968f0ac48f3185c8ce1dd3ea8e674e154c249fb049288b554be935f6b298130a6013ec8821c2e5b4edd8c0df44bead39ef8190de983d2ef2297fbb940eb2a8f492480291808d212cfd4fe6ce139c2910fe4b75f8665c55de8a2578e4cefbab6320c93b16e49ee9693bc911e5259f72e905c950373b17a95846bf9c4bdac2f03c6b41738e7", 0xbb}, {&(0x7f0000000880)="6283d54d00f4fc73d5be539eeccf295e7ee42ca324ad37fe9868d5a661e27c95ed8c2c805b6be9070eaa5c571a45392b5c92b3c1af0509697487180178610973027c8d3aefb4b97d1cc0e439afb043d1c6e1c4f6356be2d38c1d8c6ebac9a75225182b407a64222132e5add5afd7d98a9f4b47298555010e6caf", 0x7a}, {&(0x7f0000000900)="63a880eeb0229827200f71028c112044bf11a54d893877c40e62b4e0841d533dba9433d74e416aabbc39daad74a2739713b7bfeca17ba6fdd37f758c9ed80d62d60b3cb26dba40c77229a2d2d82aee0b8940cd68e76e62916a4fcb316421abf2d54d3486dd", 0x65}, {&(0x7f0000000280)="191374e35fbff4", 0x7}, {&(0x7f0000000a00)="49752ecac7b067f30385f86a18641534dd9db93fdc4a4ac34d02ec9a1086486b999f6adedb90f98f48608c939e2d09b97ecc61cf0b678d2e093be37044e7aa3454869d75c4e9ad9055ac059e113f9103c0c8a12eac053d4b412e3a4a8fc77a0db31e2fd729a4b99f2f98ab562fe9c939740b5d30cf56f5807ab4e58c6a2dc2b6e483ea89", 0x84}, {&(0x7f0000000ac0)="a42100cb25ab0e797405c3d1a7c2cbf714abdc8a01106c1451fbc8b52a4caa7c7c50d02240e37605e2b56029a220f7a74b9dc95c025683600200fa78769c3fb2f0c8f8bba94e13f5d7529ec09930039438787980e33c759e269d3ed9e223257112d30ac28573e123e6ccaf45261748054ba48d7a60", 0x75}, {&(0x7f0000000b40)="8ba2f2193cbdcb884aba7622274111eb1dd326023cbe139b3b91fc9e05539c3604577498737fc875da0c728216b318585a3b6e9ed6bf14538a9f2c17eb1a04f366a22123ef1cfb22446015ce95df8ed640c71018bcc81ee1db21b1420812c2ba26872cc166eb58344112f54672311b4ff57036f37cd81ea12d74", 0x7a}, {&(0x7f0000000bc0)="43fe1228b8583800557d8df418e3898cee4caa58a371af6be566637db3cc5d223ff047a4d097769356c7d5608832f48b79717587547855ef1a0064fa9810b45cef93b9d6a9972420d7", 0x49}], 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="eb26abba2b28aacd9ddfd2ae62f03384e7790462f72e1995bf55c9aa0a74a2a839929311c730d5ac682aa773b7c42fd8"], 0x10}, 0x8000840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0x10, 0x0)
write$cgroup_pressure(r6, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f)
sendmmsg$unix(r8, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0)
dup2(r3, r2)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x14, &(0x7f0000000e00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00003000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000000000c8af33c3cd5155"], 0xb8}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1)
close_range(r1, 0xffffffffffffffff, 0x0)

1.333661357s ago: executing program 2 (id=178):
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2}}}}}}, 0x0)

1.313303689s ago: executing program 2 (id=179):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=<r0=>0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x844)
r2 = open(0x0, 0x143bc2, 0x1c0)
r3 = socket$netlink(0x10, 0x3, 0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000340))
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ffeb0000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvfrom(r6, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100082820ac059c0240000102030109022d0001018120060904020301000f09210c0f01012256020905810300040000860905a2fff476328cc40203e4ab048b"], &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}]})
fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x20c8a1, 0x20, 0x200008, 0xcf})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4})
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.189674511s ago: executing program 0 (id=181):
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x100000}}, 0x40)
mq_open(0x0, 0x40, 0x1d4, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

954.186265ms ago: executing program 1 (id=186):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
close_range(r0, 0xffffffffffffffff, 0x0)

952.322615ms ago: executing program 1 (id=187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)

863.564174ms ago: executing program 1 (id=188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

704.55602ms ago: executing program 2 (id=190):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")

623.947238ms ago: executing program 3 (id=191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)

597.043151ms ago: executing program 4 (id=192):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000004003113d6003a058d786284620ed4434cc4736022a441da973d62b8a832cb86048ef23c4bc11ac744ea6061bfcaacf080d381cef39d98ae3fe57768e05d1048590e1a377df68d4b8c2fc9071d84942177fdde805", @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
sendto$inet6(r5, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
close(r2)

562.046654ms ago: executing program 3 (id=193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8000000000000001}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="9062997a4a43a45ac3716333bebb954a73769f619272aa2be4891bf88c9b068615518b77d6728fd0668b5e59c1142fda6e8b3f30e4782944ed8484796987724872345d6c8c69123eb5b947f8445417344083ca05ef6fb0ee2130d28b46040a19460555d22f2edd02763c204a96971a1d573672ca5ac60f0e7103e495f4e41e01f49a661df5e7309cd2c101f361767850c31017f3f4be62e3478ee546040600ed04074145dc7a6272d3f27deed022b87c4e272e584cc365f8", @ANYRES64, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)

538.328927ms ago: executing program 2 (id=194):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf42, 0x8}, {0x1, 0x0, 0x0, 0xb843}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x3, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000004c9002002000000003000100"/59])
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
syz_open_dev$usbfs(0x0, 0x5, 0x2000)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000cc0), 0x800, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'})
perf_event_open(&(0x7f0000000500)={0x2, 0xb1, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x741f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x403fc}, {&(0x7f00000001c0)=""/227, 0xe3}, &(0x7f0000000480)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x17, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x5}, &(0x7f0000000080)=0x10, 0x0, 0x5, 0x8000, 0x3, 0x1, 0x8, 0xfffffffffffffffd}}], 0xa0, 0x20040000}, 0x0)

518.815368ms ago: executing program 0 (id=195):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_getlink={0x3c, 0x12, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x10024}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8094}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
listen(r1, 0xe7)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000009000000850000008700000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

362.479354ms ago: executing program 2 (id=196):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000002000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x2, 0x4, 0x4002, 0x5, r8, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)
r9 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10)
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)

332.875967ms ago: executing program 1 (id=197):
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2}}}}}}, 0x0)

315.334359ms ago: executing program 3 (id=198):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x310, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x280, 0x2e8, 0x2e8, 0x280, 0x2c0, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth0_to_team\x00', 'bridge_slave_1\x00', {}, {}, 0x87, 0x0, 0x0, 0x17}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {'`\n'}}, @common=@inet=@socket2={{0x28}, 0x3}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x81, 0x0, 0x17, 0x6, 0xffffffff, 0xc, 0x8, 0x6e]}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@srh={{0x30}, {0x89, 0x9, 0x5, 0x4, 0x8, 0x802, 0x6a3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
close_range(r0, r1, 0x0)

294.700881ms ago: executing program 1 (id=199):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r1, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=")
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, <r2=>0xffffffffffffffff}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)={0x442040, 0x18, 0x3f}, 0x18)
move_mount(r4, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r5, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x200)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000f40)={0x0, 0x0})
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48)
ustat(0x2, 0x0)

218.929649ms ago: executing program 3 (id=200):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r1, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r2}, 0x20)
recvmmsg(r2, &(0x7f000000ab40), 0x22c, 0x2201, 0x0)
futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x8, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea9a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4)
r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
syz_emit_ethernet(0x66, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff6f7621d7cc9486dd60fec00000303a00fe880000000000000000000000000001fff9ffffff000000000000000000000102009078000000006098a35000020000fc020000000000000000000000000001fc010000000000000000000000000000d9fddd7a6fb685c211334d1f1919336f45ef537c5a1286f1a9f2b3842ae4c9d31d14b7062cdcf7c0086b1d8de6d4d0d6f3ba71552fdc839bc8de4bfc9e5ac037493ba4734a97f1fe6530eab03e76c09afd2371d7a2e2438bfd71227c24fe1a137d9f19d92a6ff4487f8df30d20020bc15795f7f3098df2be2f453e37a9f5ab687b858e9c162526b91c92f94d02d166e527618dffa78f0b36315c5702a0183c294e135dc7bb"], 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x101}, 0x18)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000100)={0x0, 0x2, [0x7, 0x7fffffffffffffff, 0x45, 0x10001, 0x10, 0x9]})

216.553099ms ago: executing program 2 (id=201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/35, 0x23)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r3, 0x89ee, &(0x7f00000005c0)="8e00dfa8482514aa46605dee20f2fb7501e4eaa0995fff2cf33ec40c282deb44e156669f189a3404e9c30f7c0adc526df80b5e713e18c56c2a20b4d8bb0ebb55f3da78f2700fddb023deaac17afeeed1a76371ec58725e4fc308df1dd4d40eb2e5b2d8fca2bbc0c1ea6ef0484a00e84a3a68db1b98bd90ef107d5ce220ca984c9995fa271877822962100275f77559ca6357e9")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/139, &(0x7f0000000040)=0x8b)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x200600, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000003c0)={0xfffffffc, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_free\x00', r6}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000303000/0x4000)=nil, 0x4000, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xba01}, 0x810)

192.741921ms ago: executing program 1 (id=202):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000004040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0xb, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)
r3 = eventfd2(0x0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

99.006111ms ago: executing program 3 (id=203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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")

81.060022ms ago: executing program 0 (id=204):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/101)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
gettid()
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB='<4\x00\x00\x00'], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
get_mempolicy(0x0, &(0x7f00000000c0), 0xcc, &(0x7f0000ffb000/0x2000)=nil, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @remote, @empty}, &(0x7f00000005c0)=0xc)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84)

0s ago: executing program 3 (id=205):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts.
[   22.568165][   T29] audit: type=1400 audit(1763012236.791:62): avc:  denied  { mounton } for  pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.591112][   T29] audit: type=1400 audit(1763012236.811:63): avc:  denied  { mount } for  pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.591814][ T3299] cgroup: Unknown subsys name 'net'
[   22.618753][   T29] audit: type=1400 audit(1763012236.841:64): avc:  denied  { unmount } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.758549][ T3299] cgroup: Unknown subsys name 'cpuset'
[   22.764652][ T3299] cgroup: Unknown subsys name 'rlimit'
[   22.894536][   T29] audit: type=1400 audit(1763012237.111:65): avc:  denied  { setattr } for  pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.917779][   T29] audit: type=1400 audit(1763012237.111:66): avc:  denied  { create } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.938229][   T29] audit: type=1400 audit(1763012237.111:67): avc:  denied  { write } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.958592][   T29] audit: type=1400 audit(1763012237.111:68): avc:  denied  { read } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.978834][   T29] audit: type=1400 audit(1763012237.121:69): avc:  denied  { mounton } for  pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.003617][   T29] audit: type=1400 audit(1763012237.121:70): avc:  denied  { mount } for  pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.010199][ T3304] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   23.035573][   T29] audit: type=1400 audit(1763012237.251:71): avc:  denied  { relabelto } for  pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.086220][ T3299] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.281586][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   24.321054][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   24.334440][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   24.378486][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   24.409376][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.416443][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.423615][ T3311] bridge_slave_0: entered allmulticast mode
[   24.430107][ T3311] bridge_slave_0: entered promiscuous mode
[   24.454705][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.461781][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.468982][ T3311] bridge_slave_1: entered allmulticast mode
[   24.475413][ T3311] bridge_slave_1: entered promiscuous mode
[   24.496484][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.503569][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.510844][ T3314] bridge_slave_0: entered allmulticast mode
[   24.517198][ T3314] bridge_slave_0: entered promiscuous mode
[   24.539654][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.546703][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.553823][ T3318] bridge_slave_0: entered allmulticast mode
[   24.560024][ T3318] bridge_slave_0: entered promiscuous mode
[   24.566389][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.573515][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.580607][ T3314] bridge_slave_1: entered allmulticast mode
[   24.586944][ T3314] bridge_slave_1: entered promiscuous mode
[   24.596181][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.608409][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.617526][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.624585][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.631764][ T3318] bridge_slave_1: entered allmulticast mode
[   24.638215][ T3318] bridge_slave_1: entered promiscuous mode
[   24.667789][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   24.690155][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.701612][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.708778][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.715955][ T3313] bridge_slave_0: entered allmulticast mode
[   24.722333][ T3313] bridge_slave_0: entered promiscuous mode
[   24.729271][ T3311] team0: Port device team_slave_0 added
[   24.734964][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.742086][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.749276][ T3313] bridge_slave_1: entered allmulticast mode
[   24.755463][ T3313] bridge_slave_1: entered promiscuous mode
[   24.762500][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.781262][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.796119][ T3311] team0: Port device team_slave_1 added
[   24.802747][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.842470][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.858098][ T3314] team0: Port device team_slave_0 added
[   24.864010][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.870989][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.896875][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.908244][ T3318] team0: Port device team_slave_0 added
[   24.914044][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.920984][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.946867][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.958451][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.970062][ T3314] team0: Port device team_slave_1 added
[   24.980898][ T3318] team0: Port device team_slave_1 added
[   24.992874][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.000081][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.007265][ T3321] bridge_slave_0: entered allmulticast mode
[   25.013715][ T3321] bridge_slave_0: entered promiscuous mode
[   25.035721][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.042806][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.049947][ T3321] bridge_slave_1: entered allmulticast mode
[   25.056447][ T3321] bridge_slave_1: entered promiscuous mode
[   25.076552][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.083522][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.109442][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.124458][ T3313] team0: Port device team_slave_0 added
[   25.130409][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.137339][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.163254][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.179019][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.185944][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.211872][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.228137][ T3313] team0: Port device team_slave_1 added
[   25.234180][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.241173][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.267168][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.289199][ T3311] hsr_slave_0: entered promiscuous mode
[   25.295363][ T3311] hsr_slave_1: entered promiscuous mode
[   25.302244][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.326030][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.333069][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.359028][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.371567][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.386084][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.393124][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.419014][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.455860][ T3321] team0: Port device team_slave_0 added
[   25.462435][ T3321] team0: Port device team_slave_1 added
[   25.478634][ T3318] hsr_slave_0: entered promiscuous mode
[   25.484581][ T3318] hsr_slave_1: entered promiscuous mode
[   25.490440][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   25.496151][ T3318] Cannot create hsr debugfs directory
[   25.512213][ T3314] hsr_slave_0: entered promiscuous mode
[   25.518375][ T3314] hsr_slave_1: entered promiscuous mode
[   25.524129][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   25.529885][ T3314] Cannot create hsr debugfs directory
[   25.542075][ T3313] hsr_slave_0: entered promiscuous mode
[   25.547938][ T3313] hsr_slave_1: entered promiscuous mode
[   25.553821][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   25.559575][ T3313] Cannot create hsr debugfs directory
[   25.572096][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.579132][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.605140][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.629718][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.636699][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.662623][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.741045][ T3321] hsr_slave_0: entered promiscuous mode
[   25.747065][ T3321] hsr_slave_1: entered promiscuous mode
[   25.752912][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   25.758657][ T3321] Cannot create hsr debugfs directory
[   25.879703][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   25.888363][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   25.899031][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   25.907831][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   25.929894][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   25.940231][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   25.949885][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   25.958521][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   25.996615][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   26.005343][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   26.016372][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   26.031022][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   26.042875][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.073476][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   26.082092][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   26.091918][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   26.102415][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   26.111711][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   26.125869][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.132968][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.143597][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.150667][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.175341][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   26.185361][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.198272][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   26.221788][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   26.236197][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.246648][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   26.261282][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.271242][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   26.285230][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   26.297907][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.304955][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.313721][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.320775][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.360013][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   26.378500][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.388780][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.395840][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.406390][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.413437][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.444068][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.454542][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   26.467475][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.483484][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   26.493140][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.500334][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.517040][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.524129][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.541987][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.573576][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.600086][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.619637][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.630035][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   26.654256][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   26.669290][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.676370][ T1785] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.708418][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.715480][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.729745][ T3318] veth0_vlan: entered promiscuous mode
[   26.750281][ T3318] veth1_vlan: entered promiscuous mode
[   26.760053][ T3311] veth0_vlan: entered promiscuous mode
[   26.778999][ T3314] veth0_vlan: entered promiscuous mode
[   26.794792][ T3314] veth1_vlan: entered promiscuous mode
[   26.803369][ T3311] veth1_vlan: entered promiscuous mode
[   26.820833][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.829489][ T3318] veth0_macvtap: entered promiscuous mode
[   26.840029][ T3318] veth1_macvtap: entered promiscuous mode
[   26.872415][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.883693][ T3311] veth0_macvtap: entered promiscuous mode
[   26.895304][ T3311] veth1_macvtap: entered promiscuous mode
[   26.903055][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.914255][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.928592][ T3314] veth0_macvtap: entered promiscuous mode
[   26.936180][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.944464][ T3314] veth1_macvtap: entered promiscuous mode
[   26.952934][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.965573][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.998929][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.008197][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.046812][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.062797][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.070295][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.079708][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.097613][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.137530][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.159890][ T3482] loop0: detected capacity change from 0 to 1024
[   27.163172][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.166537][ T3482] EXT4-fs: Ignoring removed orlov option
[   27.184639][ T3321] veth0_vlan: entered promiscuous mode
[   27.197730][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.202215][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.219579][   T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.235249][ T3313] veth0_vlan: entered promiscuous mode
[   27.248978][ T3321] veth1_vlan: entered promiscuous mode
[   27.255071][   T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.268919][ T3313] veth1_vlan: entered promiscuous mode
[   27.283643][ T3321] veth0_macvtap: entered promiscuous mode
[   27.299351][ T3313] veth0_macvtap: entered promiscuous mode
[   27.306864][ T3321] veth1_macvtap: entered promiscuous mode
[   27.314157][ T3313] veth1_macvtap: entered promiscuous mode
[   27.323530][ T3491] loop1: detected capacity change from 0 to 1024
[   27.327318][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.330186][ T3491] EXT4-fs: Ignoring removed orlov option
[   27.338305][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.354298][   T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.364669][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.365308][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.374460][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.393009][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.403205][   T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.405062][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.405156][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.405191][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.405221][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.411240][   T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.411413][   T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.411456][   T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.411525][   T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.554847][ T3496] loop0: detected capacity change from 0 to 2048
[   27.566232][ T3501] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   27.586168][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   27.625906][ T3503] loop4: detected capacity change from 0 to 2048
[   27.718476][ T3503] EXT4-fs: Ignoring removed mblk_io_submit option
[   27.724942][ T3503] EXT4-fs: Ignoring removed i_version option
[   27.737156][ T3510] FAULT_INJECTION: forcing a failure.
[   27.737156][ T3510] name failslab, interval 1, probability 0, space 0, times 1
[   27.750039][ T3510] CPU: 1 UID: 0 PID: 3510 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   27.750105][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   27.750119][ T3510] Call Trace:
[   27.750126][ T3510]  <TASK>
[   27.750134][ T3510]  __dump_stack+0x1d/0x30
[   27.750159][ T3510]  dump_stack_lvl+0xe8/0x140
[   27.750221][ T3510]  dump_stack+0x15/0x1b
[   27.750240][ T3510]  should_fail_ex+0x265/0x280
[   27.750263][ T3510]  should_failslab+0x8c/0xb0
[   27.750298][ T3510]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   27.750396][ T3510]  ? __alloc_skb+0x101/0x320
[   27.750558][ T3510]  __alloc_skb+0x101/0x320
[   27.750590][ T3510]  netlink_alloc_large_skb+0xbf/0xf0
[   27.750660][ T3510]  netlink_sendmsg+0x3cf/0x6b0
[   27.750686][ T3510]  ? __pfx_netlink_sendmsg+0x10/0x10
[   27.750761][ T3510]  __sock_sendmsg+0x145/0x180
[   27.750919][ T3510]  ____sys_sendmsg+0x31e/0x4e0
[   27.750962][ T3510]  ___sys_sendmsg+0x17b/0x1d0
[   27.751002][ T3510]  __x64_sys_sendmsg+0xd4/0x160
[   27.751025][ T3510]  x64_sys_call+0x191e/0x3000
[   27.751109][ T3510]  do_syscall_64+0xd2/0x200
[   27.751132][ T3510]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   27.751163][ T3510]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   27.751271][ T3510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   27.751292][ T3510] RIP: 0033:0x7fb89aa5f6c9
[   27.751309][ T3510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   27.751331][ T3510] RSP: 002b:00007fb8994c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   27.751422][ T3510] RAX: ffffffffffffffda RBX: 00007fb89acb5fa0 RCX: 00007fb89aa5f6c9
[   27.751434][ T3510] RDX: 00000000000000c0 RSI: 00002000000037c0 RDI: 0000000000000006
[   27.751446][ T3510] RBP: 00007fb8994c7090 R08: 0000000000000000 R09: 0000000000000000
[   27.751458][ T3510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   27.751471][ T3510] R13: 00007fb89acb6038 R14: 00007fb89acb5fa0 R15: 00007ffe9c63e178
[   27.751492][ T3510]  </TASK>
[   27.958982][ T3511] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   27.977180][ T3507] loop3: detected capacity change from 0 to 2048
[   27.996954][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   27.996970][   T29] audit: type=1400 audit(1763012242.181:111): avc:  denied  { create } for  pid=3494 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   28.022386][   T29] audit: type=1400 audit(1763012242.181:112): avc:  denied  { create } for  pid=3494 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   28.042703][   T29] audit: type=1400 audit(1763012242.181:113): avc:  denied  { write } for  pid=3494 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   28.062980][   T29] audit: type=1400 audit(1763012242.191:114): avc:  denied  { map } for  pid=3494 comm="syz.0.7" path="/1/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.087949][ T3507] EXT4-fs: Ignoring removed mblk_io_submit option
[   28.094526][ T3507] EXT4-fs: Ignoring removed i_version option
[   28.159662][ T3514] Zero length message leads to an empty skb
[   28.245714][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.299878][ T3503] FAULT_INJECTION: forcing a failure.
[   28.299878][ T3503] name failslab, interval 1, probability 0, space 0, times 0
[   28.312527][ T3503] CPU: 1 UID: 0 PID: 3503 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   28.312558][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   28.312570][ T3503] Call Trace:
[   28.312577][ T3503]  <TASK>
[   28.312622][ T3503]  __dump_stack+0x1d/0x30
[   28.312645][ T3503]  dump_stack_lvl+0xe8/0x140
[   28.312711][ T3503]  dump_stack+0x15/0x1b
[   28.312728][ T3503]  should_fail_ex+0x265/0x280
[   28.312747][ T3503]  ? __iomap_dio_rw+0x14b/0x1240
[   28.312839][ T3503]  should_failslab+0x8c/0xb0
[   28.312871][ T3503]  __kmalloc_cache_noprof+0x4c/0x4a0
[   28.312937][ T3503]  __iomap_dio_rw+0x14b/0x1240
[   28.312996][ T3503]  ? ext4_mark_iloc_dirty+0xd3f/0xda0
[   28.313033][ T3503]  ? ext4_journal_check_start+0x11a/0x1b0
[   28.313060][ T3503]  iomap_dio_rw+0x40/0x90
[   28.313163][ T3503]  ext4_file_write_iter+0xb3a/0xf60
[   28.313194][ T3503]  do_iter_readv_writev+0x4a1/0x540
[   28.313232][ T3503]  vfs_writev+0x2df/0x8b0
[   28.313290][ T3503]  __se_sys_pwritev2+0xfc/0x1c0
[   28.313322][ T3503]  __x64_sys_pwritev2+0x67/0x80
[   28.313426][ T3503]  x64_sys_call+0x2c59/0x3000
[   28.313451][ T3503]  do_syscall_64+0xd2/0x200
[   28.313473][ T3503]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   28.313519][ T3503]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   28.313558][ T3503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   28.313629][ T3503] RIP: 0033:0x7fe71459f6c9
[   28.313701][ T3503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.313719][ T3503] RSP: 002b:00007fe713007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   28.313737][ T3503] RAX: ffffffffffffffda RBX: 00007fe7147f5fa0 RCX: 00007fe71459f6c9
[   28.313815][ T3503] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[   28.313830][ T3503] RBP: 00007fe713007090 R08: 0000000000000000 R09: 0000000000000000
[   28.313886][ T3503] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001
[   28.313901][ T3503] R13: 00007fe7147f6038 R14: 00007fe7147f5fa0 R15: 00007ffd48e6ad28
[   28.313927][ T3503]  </TASK>
[   28.528419][   T29] audit: type=1400 audit(1763012242.421:115): avc:  denied  { open } for  pid=3513 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.547417][   T29] audit: type=1400 audit(1763012242.421:116): avc:  denied  { kernel } for  pid=3513 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.566541][   T29] audit: type=1400 audit(1763012242.421:117): avc:  denied  { cpu } for  pid=3513 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.585327][   T29] audit: type=1400 audit(1763012242.421:118): avc:  denied  { read } for  pid=3513 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.599674][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.604329][   T29] audit: type=1400 audit(1763012242.421:119): avc:  denied  { write } for  pid=3513 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.654008][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.677372][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.678391][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.695677][   T29] audit: type=1400 audit(1763012242.901:120): avc:  denied  { create } for  pid=3520 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   28.743206][ T3523] loop1: detected capacity change from 0 to 1024
[   28.749846][ T3523] EXT4-fs: Ignoring removed orlov option
[   28.778467][ T3523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.808721][ T3526] $Hÿ: renamed from bond0 (while UP)
[   28.833489][ T3526] $Hÿ: entered promiscuous mode
[   28.838564][ T3526] bond_slave_0: entered promiscuous mode
[   28.844369][ T3526] bond_slave_1: entered promiscuous mode
[   28.883225][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.911820][ T3534] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   28.941212][ T3533] loop2: detected capacity change from 0 to 1024
[   28.972014][ T3533] =======================================================
[   28.972014][ T3533] WARNING: The mand mount option has been deprecated and
[   28.972014][ T3533]          and is ignored by this kernel. Remove the mand
[   28.972014][ T3533]          option from the mount to silence this warning.
[   28.972014][ T3533] =======================================================
[   29.062339][ T3539] loop0: detected capacity change from 0 to 1024
[   29.064575][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.085169][ T3539] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   29.099406][ T3536] loop3: detected capacity change from 0 to 8192
[   29.115815][ T3539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   29.126828][ T3539] EXT4-fs (loop0): failed to initialize system zone (-117)
[   29.140407][ T3539] EXT4-fs (loop0): mount failed
[   29.142347][ T3533] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.16: Allocating blocks 449-513 which overlap fs metadata
[   29.172801][ T3532] EXT4-fs (loop2): pa ffff88810553a070: logic 48, phys. 177, len 21
[   29.181000][ T3532] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   29.183484][ T3539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3539 comm=syz.0.17
[   29.280525][ T3533] syz.2.16 (3533) used greatest stack depth: 10152 bytes left
[   29.293279][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.338241][ T3552] loop0: detected capacity change from 0 to 1024
[   29.421840][ T3552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   29.436985][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.464525][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.489819][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.491618][ T3556] infiniband syz!: set active
[   29.502399][ T3556] infiniband syz!: added team_slave_0
[   29.502942][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.540555][ T3552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.18: bg 0: block 88: padding at end of block bitmap is not set
[   29.609623][ T3556] RDS/IB: syz!: added
[   29.622457][ T3556] smc: adding ib device syz! with port count 1
[   29.709674][ T3577] loop1: detected capacity change from 0 to 1024
[   29.716269][ T3577] EXT4-fs: Ignoring removed orlov option
[   29.716345][ T3556] smc:    ib device syz! port 1 has no pnetid
[   29.734504][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.746290][ T3580] loop3: detected capacity change from 0 to 1024
[   29.782698][ T3580] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   29.948281][ T3580] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   29.967530][ T3566] loop2: detected capacity change from 0 to 32768
[   29.988573][ T3580] EXT4-fs (loop3): failed to initialize system zone (-117)
[   30.018656][ T3305]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[   30.024029][ T3305] loop2: p1 start 460800 is beyond EOD, truncated
[   30.030673][ T3305] loop2: p2 size 83886080 extends beyond EOD, truncated
[   30.037873][ T3580] EXT4-fs (loop3): mount failed
[   30.052208][ T3577] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   30.068756][ T3305] loop2: p5 start 460800 is beyond EOD, truncated
[   30.075213][ T3305] loop2: p6 size 83886080 extends beyond EOD, truncated
[   30.096580][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.126186][ T3584] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   30.133294][ T3566]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[   30.134951][ T3584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.139126][ T3566] loop2: p1 start 460800 is beyond EOD, truncated
[   30.153360][ T3586] loop1: detected capacity change from 0 to 1024
[   30.153696][ T3586] EXT4-fs: Ignoring removed orlov option
[   30.159717][ T3566] loop2: p2 size 83886080 extends beyond EOD, truncated
[   30.174715][ T3586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.189060][ T3566] loop2: p5 start 460800 is beyond EOD, truncated
[   30.195501][ T3566] loop2: p6 size 83886080 extends beyond EOD, truncated
[   30.222090][ T3584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.336771][ T3595] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   30.380551][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   30.393838][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   30.394227][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   30.405445][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   30.435176][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   30.435428][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   30.456308][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   30.468353][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   30.483554][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   30.494628][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   30.540381][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'.
[   30.559785][ T3597] team0: Port device team_slave_1 removed
[   30.591898][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.622371][ T3601] loop0: detected capacity change from 0 to 1024
[   30.629131][ T3601] EXT4-fs: Ignoring removed orlov option
[   30.642875][ T3601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.693920][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.724733][ T3604] netlink: 'syz.1.29': attribute type 21 has an invalid length.
[   30.732604][ T3604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29'.
[   30.774873][ T3608] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   30.784998][ T3607] loop1: detected capacity change from 0 to 1024
[   30.799731][ T3607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.843473][ T3607] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.30: Allocating blocks 449-513 which overlap fs metadata
[   30.880687][ T3606] EXT4-fs (loop1): pa ffff88810553a0e0: logic 48, phys. 177, len 21
[   30.888722][ T3606] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   30.906391][ T3614] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.922219][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'.
[   30.932816][ T3614] netlink: 80 bytes leftover after parsing attributes in process `syz.3.32'.
[   30.978818][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.981723][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.029832][ T3621] loop3: detected capacity change from 0 to 1024
[   31.046800][ T3617] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   31.058247][ T3621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   31.064796][ T3629] mmap: syz.1.35 (3629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.067680][ T3617] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   31.079952][ T3627] loop0: detected capacity change from 0 to 1024
[   31.087014][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.104722][ T3300] printk: udevd: 2 output lines suppressed due to ratelimiting
[   31.112635][ T3627] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   31.122776][ T3621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.36: bg 0: block 88: padding at end of block bitmap is not set
[   31.141942][ T3627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   31.150827][ T3627] EXT4-fs (loop0): failed to initialize system zone (-117)
[   31.159185][ T3627] EXT4-fs (loop0): mount failed
[   31.221927][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   31.257281][ T3640] team0: Port device team_slave_1 removed
[   31.441465][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   31.449080][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0
[   31.467195][ T3649] loop2: detected capacity change from 0 to 512
[   31.479963][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   31.487374][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1
[   31.505351][ T3649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.529685][ T3649] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.546841][ T3659] capability: warning: `syz.0.46' uses deprecated v2 capabilities in a way that may be insecure
[   31.570404][ T3658] loop4: detected capacity change from 0 to 1024
[   31.612428][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'.
[   31.623331][ T3658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   31.632022][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.657059][ T3658] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.47: bg 0: block 88: padding at end of block bitmap is not set
[   31.685881][ T3667] loop1: detected capacity change from 0 to 512
[   31.692590][ T3667] EXT4-fs: Ignoring removed nobh option
[   31.698638][ T3667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.719987][ T3667] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.48: corrupted inode contents
[   31.732130][ T3667] EXT4-fs (loop1): Remounting filesystem read-only
[   31.739215][ T3667] EXT4-fs (loop1): 1 truncate cleaned up
[   31.745640][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.758441][ T3667] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.789793][ T3667] syz.1.48 (3667) used greatest stack depth: 9696 bytes left
[   31.831791][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.841208][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.850977][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.871617][ T3674] loop2: detected capacity change from 0 to 512
[   31.878876][ T3674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   31.888849][ T3674] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.49: invalid block
[   31.902520][ T3674] EXT4-fs (loop2): Remounting filesystem read-only
[   31.923729][ T3679] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   31.931480][ T3679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'.
[   31.942713][ T3674] EXT4-fs (loop2): 2 truncates cleaned up
[   31.949123][ T3678] netlink: 'syz.3.50': attribute type 1 has an invalid length.
[   31.957128][ T3674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.991113][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'.
[   32.042823][ T3682] siw: device registration error -23
[   32.073525][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.095393][ T3689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   32.245727][ T3701] loop1: detected capacity change from 0 to 1024
[   32.264086][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[   32.284694][ T3703] team0: Port device team_slave_1 removed
[   32.301099][ T3701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   32.309626][ T3701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.323130][ T3701] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.59: bg 0: block 88: padding at end of block bitmap is not set
[   32.347479][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.440080][ T3718] FAULT_INJECTION: forcing a failure.
[   32.440080][ T3718] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   32.453222][ T3718] CPU: 1 UID: 0 PID: 3718 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.453280][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   32.453295][ T3718] Call Trace:
[   32.453302][ T3718]  <TASK>
[   32.453312][ T3718]  __dump_stack+0x1d/0x30
[   32.453338][ T3718]  dump_stack_lvl+0xe8/0x140
[   32.453363][ T3718]  dump_stack+0x15/0x1b
[   32.453417][ T3718]  should_fail_ex+0x265/0x280
[   32.453441][ T3718]  should_fail+0xb/0x20
[   32.453460][ T3718]  should_fail_usercopy+0x1a/0x20
[   32.453486][ T3718]  _copy_to_user+0x20/0xa0
[   32.453568][ T3718]  simple_read_from_buffer+0xb5/0x130
[   32.453599][ T3718]  proc_fail_nth_read+0x10e/0x150
[   32.453637][ T3718]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   32.453672][ T3718]  vfs_read+0x1a8/0x770
[   32.453775][ T3718]  ? __rcu_read_unlock+0x4f/0x70
[   32.453841][ T3718]  ? __fget_files+0x184/0x1c0
[   32.453913][ T3718]  ksys_read+0xda/0x1a0
[   32.453943][ T3718]  __x64_sys_read+0x40/0x50
[   32.453972][ T3718]  x64_sys_call+0x27c0/0x3000
[   32.453998][ T3718]  do_syscall_64+0xd2/0x200
[   32.454070][ T3718]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   32.454103][ T3718]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   32.454137][ T3718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.454159][ T3718] RIP: 0033:0x7f1668b9e0dc
[   32.454176][ T3718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   32.454248][ T3718] RSP: 002b:00007f16675ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   32.454279][ T3718] RAX: ffffffffffffffda RBX: 00007f1668df5fa0 RCX: 00007f1668b9e0dc
[   32.454292][ T3718] RDX: 000000000000000f RSI: 00007f16675ff0a0 RDI: 0000000000000004
[   32.454306][ T3718] RBP: 00007f16675ff090 R08: 0000000000000000 R09: 0000000000000000
[   32.454318][ T3718] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001
[   32.454329][ T3718] R13: 00007f1668df6038 R14: 00007f1668df5fa0 R15: 00007ffc77005d88
[   32.454349][ T3718]  </TASK>
[   32.675475][ T3711] loop4: detected capacity change from 0 to 512
[   32.826599][ T3725] siw: device registration error -23
[   32.843874][ T3731] FAULT_INJECTION: forcing a failure.
[   32.843874][ T3731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   32.857008][ T3731] CPU: 1 UID: 0 PID: 3731 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.857038][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   32.857051][ T3731] Call Trace:
[   32.857057][ T3731]  <TASK>
[   32.857065][ T3731]  __dump_stack+0x1d/0x30
[   32.857101][ T3731]  dump_stack_lvl+0xe8/0x140
[   32.857123][ T3731]  dump_stack+0x15/0x1b
[   32.857144][ T3731]  should_fail_ex+0x265/0x280
[   32.857166][ T3731]  should_fail+0xb/0x20
[   32.857184][ T3731]  should_fail_usercopy+0x1a/0x20
[   32.857208][ T3731]  _copy_from_user+0x1c/0xb0
[   32.857237][ T3731]  sock_do_ioctl+0xe6/0x220
[   32.857322][ T3731]  sock_ioctl+0x41b/0x610
[   32.857351][ T3731]  ? __pfx_sock_ioctl+0x10/0x10
[   32.857376][ T3731]  __se_sys_ioctl+0xce/0x140
[   32.857401][ T3731]  __x64_sys_ioctl+0x43/0x50
[   32.857426][ T3731]  x64_sys_call+0x1816/0x3000
[   32.857484][ T3731]  do_syscall_64+0xd2/0x200
[   32.857510][ T3731]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   32.857545][ T3731]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   32.857606][ T3731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.857630][ T3731] RIP: 0033:0x7fe71459f6c9
[   32.857645][ T3731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.857706][ T3731] RSP: 002b:00007fe713007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   32.857728][ T3731] RAX: ffffffffffffffda RBX: 00007fe7147f5fa0 RCX: 00007fe71459f6c9
[   32.857774][ T3731] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008
[   32.857787][ T3731] RBP: 00007fe713007090 R08: 0000000000000000 R09: 0000000000000000
[   32.857800][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.857814][ T3731] R13: 00007fe7147f6038 R14: 00007fe7147f5fa0 R15: 00007ffd48e6ad28
[   32.857835][ T3731]  </TASK>
[   32.901216][ T3735] FAULT_INJECTION: forcing a failure.
[   32.901216][ T3735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.055605][ T3735] CPU: 0 UID: 0 PID: 3735 Comm: syz.3.72 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.055625][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.055714][ T3735] Call Trace:
[   33.055718][ T3735]  <TASK>
[   33.055724][ T3735]  __dump_stack+0x1d/0x30
[   33.055740][ T3735]  dump_stack_lvl+0xe8/0x140
[   33.055752][ T3735]  dump_stack+0x15/0x1b
[   33.055777][ T3735]  should_fail_ex+0x265/0x280
[   33.055789][ T3735]  should_fail+0xb/0x20
[   33.055799][ T3735]  should_fail_usercopy+0x1a/0x20
[   33.055812][ T3735]  _copy_from_user+0x1c/0xb0
[   33.055872][ T3735]  sock_do_ioctl+0xe6/0x220
[   33.055889][ T3735]  sock_ioctl+0x41b/0x610
[   33.055903][ T3735]  ? __pfx_sock_ioctl+0x10/0x10
[   33.055916][ T3735]  __se_sys_ioctl+0xce/0x140
[   33.055940][ T3735]  __x64_sys_ioctl+0x43/0x50
[   33.055952][ T3735]  x64_sys_call+0x1816/0x3000
[   33.056039][ T3735]  do_syscall_64+0xd2/0x200
[   33.056052][ T3735]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.056069][ T3735]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.056202][ T3735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.056215][ T3735] RIP: 0033:0x7f1668b9f6c9
[   33.056225][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.056236][ T3735] RSP: 002b:00007f16675ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   33.056248][ T3735] RAX: ffffffffffffffda RBX: 00007f1668df5fa0 RCX: 00007f1668b9f6c9
[   33.056256][ T3735] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006
[   33.056330][ T3735] RBP: 00007f16675ff090 R08: 0000000000000000 R09: 0000000000000000
[   33.056337][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.056376][ T3735] R13: 00007f1668df6038 R14: 00007f1668df5fa0 R15: 00007ffc77005d88
[   33.056388][ T3735]  </TASK>
[   33.285265][   T29] kauditd_printk_skb: 379 callbacks suppressed
[   33.285310][   T29] audit: type=1400 audit(1763012247.501:498): avc:  denied  { name_bind } for  pid=3737 comm="syz.4.75" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   33.343793][   T29] audit: type=1400 audit(1763012247.501:499): avc:  denied  { node_bind } for  pid=3737 comm="syz.4.75" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   33.344950][ T3742] loop2: detected capacity change from 0 to 512
[   33.366056][   T29] audit: type=1400 audit(1763012247.501:500): avc:  denied  { open } for  pid=3741 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.366085][   T29] audit: type=1400 audit(1763012247.501:501): avc:  denied  { kernel } for  pid=3741 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.366123][   T29] audit: type=1400 audit(1763012247.541:502): avc:  denied  { create } for  pid=3741 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.366182][   T29] audit: type=1400 audit(1763012247.541:503): avc:  denied  { ioctl } for  pid=3741 comm="syz.2.76" path="socket:[5375]" dev="sockfs" ino=5375 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.448675][ T3742] EXT4-fs: Ignoring removed nobh option
[   33.454735][   T29] audit: type=1400 audit(1763012247.551:504): avc:  denied  { read } for  pid=3741 comm="syz.2.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.482378][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.492204][   T29] audit: type=1400 audit(1763012247.591:505): avc:  denied  { create } for  pid=3737 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   33.511682][   T29] audit: type=1400 audit(1763012247.591:506): avc:  denied  { bind } for  pid=3737 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   33.530863][   T29] audit: type=1400 audit(1763012247.591:507): avc:  denied  { listen } for  pid=3737 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   33.591295][ T3742] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.76: corrupted inode contents
[   33.612271][ T3760] loop1: detected capacity change from 0 to 512
[   33.619105][ T3742] EXT4-fs (loop2): Remounting filesystem read-only
[   33.629148][ T3740] loop0: detected capacity change from 0 to 512
[   33.633345][ T3760] ext4: Unknown parameter 'nouser_xattr'
[   33.636421][ T3742] EXT4-fs (loop2): 1 truncate cleaned up
[   33.648611][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.699894][ T3740] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   33.708797][ T3742] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.734501][ T3740] EXT4-fs (loop0): orphan cleanup on readonly fs
[   33.751167][ T3763] wg2: entered promiscuous mode
[   33.751232][ T3754] siw: device registration error -23
[   33.756060][ T3763] wg2: entered allmulticast mode
[   33.764353][ T3760] FAULT_INJECTION: forcing a failure.
[   33.764353][ T3760] name failslab, interval 1, probability 0, space 0, times 0
[   33.778894][ T3760] CPU: 0 UID: 0 PID: 3760 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.778922][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.778935][ T3760] Call Trace:
[   33.778941][ T3760]  <TASK>
[   33.778948][ T3760]  __dump_stack+0x1d/0x30
[   33.778971][ T3760]  dump_stack_lvl+0xe8/0x140
[   33.779023][ T3760]  dump_stack+0x15/0x1b
[   33.779041][ T3760]  should_fail_ex+0x265/0x280
[   33.779061][ T3760]  ? __se_sys_memfd_create+0x1cc/0x590
[   33.779088][ T3760]  should_failslab+0x8c/0xb0
[   33.779171][ T3760]  __kmalloc_cache_noprof+0x4c/0x4a0
[   33.779263][ T3760]  ? fput+0x8f/0xc0
[   33.779281][ T3760]  __se_sys_memfd_create+0x1cc/0x590
[   33.779307][ T3760]  __x64_sys_memfd_create+0x31/0x40
[   33.779350][ T3760]  x64_sys_call+0x2ac2/0x3000
[   33.779379][ T3760]  do_syscall_64+0xd2/0x200
[   33.779423][ T3760]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.779453][ T3760]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.779567][ T3760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.779589][ T3760] RIP: 0033:0x7fada1b2f6c9
[   33.779604][ T3760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.779623][ T3760] RSP: 002b:00007fada058ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   33.779715][ T3760] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007fada1b2f6c9
[   33.779728][ T3760] RDX: 00007fada058eef0 RSI: 0000000000000000 RDI: 00007fada1bb2960
[   33.779741][ T3760] RBP: 0000200000000380 R08: 00007fada058ebb7 R09: 00007fada058ee40
[   33.779753][ T3760] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080
[   33.779766][ T3760] R13: 00007fada058eef0 R14: 00007fada058eeb0 R15: 0000200000000340
[   33.779784][ T3760]  </TASK>
[   33.780145][ T3740] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, 
[   33.840836][ T3767] FAULT_INJECTION: forcing a failure.
[   33.840836][ T3767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.843407][ T3740] inode 11: 
[   33.848686][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.848713][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.848726][ T3767] Call Trace:
[   33.848733][ T3767]  <TASK>
[   33.848741][ T3767]  __dump_stack+0x1d/0x30
[   33.848842][ T3767]  dump_stack_lvl+0xe8/0x140
[   33.848865][ T3767]  dump_stack+0x15/0x1b
[   33.848884][ T3767]  should_fail_ex+0x265/0x280
[   33.848981][ T3767]  should_fail+0xb/0x20
[   33.849053][ T3767]  should_fail_usercopy+0x1a/0x20
[   33.849075][ T3767]  _copy_from_user+0x1c/0xb0
[   33.849132][ T3767]  sock_do_ioctl+0xe6/0x220
[   33.849162][ T3767]  sock_ioctl+0x41b/0x610
[   33.849188][ T3767]  ? __pfx_sock_ioctl+0x10/0x10
[   33.849211][ T3767]  __se_sys_ioctl+0xce/0x140
[   33.849304][ T3767]  __x64_sys_ioctl+0x43/0x50
[   33.849393][ T3767]  x64_sys_call+0x1816/0x3000
[   33.849419][ T3767]  do_syscall_64+0xd2/0x200
[   33.849442][ T3767]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.849475][ T3767]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.849580][ T3767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.849605][ T3767] RIP: 0033:0x7f1668b9f6c9
[   33.849699][ T3767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.849718][ T3767] RSP: 002b:00007f16675ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   33.849739][ T3767] RAX: ffffffffffffffda RBX: 00007f1668df5fa0 RCX: 00007f1668b9f6c9
[   33.849813][ T3767] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006
[   33.849827][ T3767] RBP: 00007f16675ff090 R08: 0000000000000000 R09: 0000000000000000
[   33.849840][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.849853][ T3767] R13: 00007f1668df6038 R14: 00007f1668df5fa0 R15: 00007ffc77005d88
[   33.849873][ T3767]  </TASK>
[   34.162299][ T3740] block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   34.174717][ T3740] EXT4-fs (loop0): Remounting filesystem read-only
[   34.181381][ T3740] EXT4-fs (loop0): 1 truncate cleaned up
[   34.188657][ T3740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   34.229503][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.230116][ T3782] loop4: detected capacity change from 0 to 1024
[   34.249677][ T3784] FAULT_INJECTION: forcing a failure.
[   34.249677][ T3784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.262851][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.262880][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   34.262894][ T3784] Call Trace:
[   34.262900][ T3784]  <TASK>
[   34.262908][ T3784]  __dump_stack+0x1d/0x30
[   34.262943][ T3784]  dump_stack_lvl+0xe8/0x140
[   34.263038][ T3784]  dump_stack+0x15/0x1b
[   34.263055][ T3784]  should_fail_ex+0x265/0x280
[   34.263085][ T3784]  should_fail+0xb/0x20
[   34.263103][ T3784]  should_fail_usercopy+0x1a/0x20
[   34.263128][ T3784]  _copy_from_user+0x1c/0xb0
[   34.263160][ T3784]  copy_from_bpfptr+0x5c/0x90
[   34.263181][ T3784]  bpf_prog_load+0x73b/0x1100
[   34.263261][ T3784]  ? security_bpf+0x2b/0x90
[   34.263289][ T3784]  __sys_bpf+0x469/0x7c0
[   34.263315][ T3784]  __x64_sys_bpf+0x41/0x50
[   34.263400][ T3784]  x64_sys_call+0x2aee/0x3000
[   34.263496][ T3784]  do_syscall_64+0xd2/0x200
[   34.263596][ T3784]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.263630][ T3784]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   34.263668][ T3784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.263750][ T3784] RIP: 0033:0x7fada1b2f6c9
[   34.263766][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.263785][ T3784] RSP: 002b:00007fada058f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   34.263807][ T3784] RAX: ffffffffffffffda RBX: 00007fada1d85fa0 RCX: 00007fada1b2f6c9
[   34.263894][ T3784] RDX: 00000000000000a0 RSI: 0000200000000680 RDI: 0000000000000005
[   34.263906][ T3784] RBP: 00007fada058f090 R08: 0000000000000000 R09: 0000000000000000
[   34.263919][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.263932][ T3784] R13: 00007fada1d86038 R14: 00007fada1d85fa0 R15: 00007fff416aced8
[   34.263951][ T3784]  </TASK>
[   34.462222][ T3782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   34.470993][ T3782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.484729][ T3782] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.88: bg 0: block 88: padding at end of block bitmap is not set
[   34.503874][ T3794] loop2: detected capacity change from 0 to 128
[   34.510727][ T3794] EXT4-fs: Ignoring removed nobh option
[   34.521347][ T3794] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.536235][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.544397][ T3794] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.590100][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.595263][ T3804] loop0: detected capacity change from 0 to 1024
[   34.626221][ T3804] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   34.646665][ T3804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   34.654936][ T3804] EXT4-fs (loop0): failed to initialize system zone (-117)
[   34.654965][ T3802] loop1: detected capacity change from 0 to 512
[   34.655408][ T3802] EXT4-fs: Ignoring removed nobh option
[   34.662269][ T3804] EXT4-fs (loop0): mount failed
[   34.682325][ T3811] loop2: detected capacity change from 0 to 128
[   34.691533][ T3811] EXT4-fs: Ignoring removed nobh option
[   34.716268][ T3811] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.730762][ T3811] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.767243][ T3821] loop0: detected capacity change from 0 to 1024
[   34.774039][ T3821] EXT4-fs: Ignoring removed orlov option
[   34.781652][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.798129][ T3802] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.95: corrupted inode contents
[   34.815569][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.819515][ T3802] EXT4-fs (loop1): Remounting filesystem read-only
[   34.858902][ T3802] EXT4-fs (loop1): 1 truncate cleaned up
[   34.891380][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.919660][ T3802] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.930523][ T3830] loop2: detected capacity change from 0 to 764
[   34.941693][ T3830] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   34.959049][ T3832] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   35.031401][ T3839] team0: Port device team_slave_1 removed
[   35.158753][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.163315][ T3847] $Hÿ: renamed from bond0 (while UP)
[   35.177746][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.180256][ T3847] $Hÿ: entered promiscuous mode
[   35.191765][ T3847] bond_slave_0: entered promiscuous mode
[   35.197589][ T3847] bond_slave_1: entered promiscuous mode
[   35.232577][ T3854] loop4: detected capacity change from 0 to 1024
[   35.234768][ T3855] loop1: detected capacity change from 0 to 1024
[   35.249332][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.266660][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.278927][ T3854] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.109: Allocating blocks 449-513 which overlap fs metadata
[   35.300626][ T3852] EXT4-fs (loop4): pa ffff88810553a1c0: logic 48, phys. 177, len 21
[   35.308718][ T3852] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   35.329214][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.368064][ T3855] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.107: Allocating blocks 449-513 which overlap fs metadata
[   35.395946][ T3862] loop4: detected capacity change from 0 to 512
[   35.404789][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.405592][ T3862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   35.414600][ T3853] EXT4-fs (loop1): pa ffff88810553a1c0: logic 48, phys. 177, len 21
[   35.431847][ T3853] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   35.472431][ T3862] EXT4-fs (loop4): 1 truncate cleaned up
[   35.478755][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.494014][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.503479][ T3866] loop2: detected capacity change from 0 to 512
[   35.515008][ T3866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.605905][ T3866] EXT4-fs (loop2): 1 truncate cleaned up
[   35.612218][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.634710][ T3873] __nla_validate_parse: 14 callbacks suppressed
[   35.634724][ T3873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'.
[   35.649918][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'.
[   35.659266][ T3874] lo speed is unknown, defaulting to 1000
[   35.665056][ T3874] lo speed is unknown, defaulting to 1000
[   35.673187][ T3874] lo speed is unknown, defaulting to 1000
[   35.681398][ T3874] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   35.716241][ T3877] rdma_op ffff88811b809980 conn xmit_rdma 0000000000000000
[   35.731368][ T3874] lo speed is unknown, defaulting to 1000
[   35.747779][ T3874] lo speed is unknown, defaulting to 1000
[   35.754280][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   35.756477][ T3874] lo speed is unknown, defaulting to 1000
[   35.794334][ T3880] team0: Port device team_slave_1 removed
[   35.822642][ T3874] lo speed is unknown, defaulting to 1000
[   35.832695][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.844782][ T3874] lo speed is unknown, defaulting to 1000
[   35.856827][ T3875] smc: removing ib device syz!
[   35.895239][ T3888] FAULT_INJECTION: forcing a failure.
[   35.895239][ T3888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.908399][ T3888] CPU: 0 UID: 0 PID: 3888 Comm: syz.4.117 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.908457][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   35.908471][ T3888] Call Trace:
[   35.908478][ T3888]  <TASK>
[   35.908486][ T3888]  __dump_stack+0x1d/0x30
[   35.908513][ T3888]  dump_stack_lvl+0xe8/0x140
[   35.908538][ T3888]  dump_stack+0x15/0x1b
[   35.908560][ T3888]  should_fail_ex+0x265/0x280
[   35.908621][ T3888]  should_fail+0xb/0x20
[   35.908641][ T3888]  should_fail_usercopy+0x1a/0x20
[   35.908666][ T3888]  _copy_from_user+0x1c/0xb0
[   35.908736][ T3888]  do_sock_getsockopt+0xf1/0x240
[   35.908773][ T3888]  __x64_sys_getsockopt+0x11e/0x1a0
[   35.908844][ T3888]  x64_sys_call+0x2bca/0x3000
[   35.908873][ T3888]  do_syscall_64+0xd2/0x200
[   35.908898][ T3888]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   35.908933][ T3888]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   35.909056][ T3888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.909128][ T3888] RIP: 0033:0x7fe71459f6c9
[   35.909146][ T3888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.909168][ T3888] RSP: 002b:00007fe713007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   35.909187][ T3888] RAX: ffffffffffffffda RBX: 00007fe7147f5fa0 RCX: 00007fe71459f6c9
[   35.909205][ T3888] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[   35.909219][ T3888] RBP: 00007fe713007090 R08: 0000200000000040 R09: 0000000000000000
[   35.909235][ T3888] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.909294][ T3888] R13: 00007fe7147f6038 R14: 00007fe7147f5fa0 R15: 00007ffd48e6ad28
[   35.909315][ T3888]  </TASK>
[   36.012126][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.036051][ T3894] $Hÿ: renamed from bond0 (while UP)
[   36.110275][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'.
[   36.124087][ T3894] $Hÿ: entered promiscuous mode
[   36.129221][ T3894] bond_slave_0: entered promiscuous mode
[   36.134949][ T3894] bond_slave_1: entered promiscuous mode
[   36.145471][ T3897] loop4: detected capacity change from 0 to 1024
[   36.164516][ T3903] loop2: detected capacity change from 0 to 1024
[   36.171937][ T3897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.197930][ T3903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   36.201345][ T3896] lo speed is unknown, defaulting to 1000
[   36.206473][ T3903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.238346][ T3897] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.123: Allocating blocks 449-513 which overlap fs metadata
[   36.254578][ T3908] loop1: detected capacity change from 0 to 1024
[   36.262234][ T3903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.122: bg 0: block 88: padding at end of block bitmap is not set
[   36.280906][ T3897] sd 0:0:1:0: device reset
[   36.282902][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.309828][ T3908] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.126: Allocating blocks 449-513 which overlap fs metadata
[   36.323788][ T3895] EXT4-fs (loop4): pa ffff88810553a2a0: logic 48, phys. 177, len 21
[   36.325471][ T3907] EXT4-fs (loop1): pa ffff888106f4c230: logic 48, phys. 177, len 21
[   36.331802][ T3895] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   36.339818][ T3907] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   36.375289][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.403235][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.434722][ T3917] loop4: detected capacity change from 0 to 128
[   36.460166][ T3921] FAULT_INJECTION: forcing a failure.
[   36.460166][ T3921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   36.473254][ T3921] CPU: 0 UID: 0 PID: 3921 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.473290][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   36.473302][ T3921] Call Trace:
[   36.473308][ T3921]  <TASK>
[   36.473315][ T3921]  __dump_stack+0x1d/0x30
[   36.473338][ T3921]  dump_stack_lvl+0xe8/0x140
[   36.473358][ T3921]  dump_stack+0x15/0x1b
[   36.473375][ T3921]  should_fail_ex+0x265/0x280
[   36.473472][ T3921]  should_fail+0xb/0x20
[   36.473488][ T3921]  should_fail_usercopy+0x1a/0x20
[   36.473509][ T3921]  _copy_from_user+0x1c/0xb0
[   36.473535][ T3921]  ___sys_sendmsg+0xc1/0x1d0
[   36.473617][ T3921]  __x64_sys_sendmsg+0xd4/0x160
[   36.473680][ T3921]  x64_sys_call+0x191e/0x3000
[   36.473703][ T3921]  do_syscall_64+0xd2/0x200
[   36.473724][ T3921]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   36.473753][ T3921]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   36.473835][ T3921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.473862][ T3921] RIP: 0033:0x7fada1b2f6c9
[   36.473897][ T3921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.473915][ T3921] RSP: 002b:00007fada058f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.473977][ T3921] RAX: ffffffffffffffda RBX: 00007fada1d85fa0 RCX: 00007fada1b2f6c9
[   36.473990][ T3921] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003
[   36.474003][ T3921] RBP: 00007fada058f090 R08: 0000000000000000 R09: 0000000000000000
[   36.474016][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.474028][ T3921] R13: 00007fada1d86038 R14: 00007fada1d85fa0 R15: 00007fff416aced8
[   36.474045][ T3921]  </TASK>
[   36.647120][ T3917] EXT4-fs: Ignoring removed nobh option
[   36.674972][ T3917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.692558][ T3925] loop1: detected capacity change from 0 to 1024
[   36.699294][ T3917] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   36.711368][ T3925] ext4: Unknown parameter 'pcr'
[   36.731876][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.751153][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   36.762877][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'.
[   36.791413][ T3936] loop4: detected capacity change from 0 to 512
[   36.797860][ T3933] netlink: 80 bytes leftover after parsing attributes in process `syz.0.133'.
[   36.817327][ T3936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.835019][ T3936] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.848209][ T3936] EXT4-fs (loop4): 1 truncate cleaned up
[   36.854255][ T3936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.922207][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.938537][ T3946] loop3: detected capacity change from 0 to 1024
[   36.961602][ T3950] loop4: detected capacity change from 0 to 512
[   36.969299][ T3950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.983012][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.000013][ T3950] EXT4-fs (loop4): 1 truncate cleaned up
[   37.006210][ T3950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.017627][ T3946] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.137: Allocating blocks 449-513 which overlap fs metadata
[   37.036234][ T3945] EXT4-fs (loop3): pa ffff88810553a230: logic 48, phys. 177, len 21
[   37.044278][ T3945] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   37.066454][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.092184][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.103635][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.167251][ T3968] loop4: detected capacity change from 0 to 512
[   37.174670][ T3968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   37.186943][ T3968] EXT4-fs (loop4): 1 truncate cleaned up
[   37.193184][ T3968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.232997][ T3978] FAULT_INJECTION: forcing a failure.
[   37.232997][ T3978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   37.246094][ T3978] CPU: 0 UID: 0 PID: 3978 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   37.246121][ T3978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   37.246131][ T3978] Call Trace:
[   37.246135][ T3978]  <TASK>
[   37.246182][ T3978]  __dump_stack+0x1d/0x30
[   37.246205][ T3978]  dump_stack_lvl+0xe8/0x140
[   37.246217][ T3978]  dump_stack+0x15/0x1b
[   37.246228][ T3978]  should_fail_ex+0x265/0x280
[   37.246311][ T3978]  should_fail+0xb/0x20
[   37.246341][ T3978]  should_fail_usercopy+0x1a/0x20
[   37.246363][ T3978]  _copy_from_user+0x1c/0xb0
[   37.246391][ T3978]  snd_seq_ioctl+0x125/0x300
[   37.246425][ T3978]  ? __pfx_snd_seq_ioctl+0x10/0x10
[   37.246449][ T3978]  __se_sys_ioctl+0xce/0x140
[   37.246540][ T3978]  __x64_sys_ioctl+0x43/0x50
[   37.246562][ T3978]  x64_sys_call+0x1816/0x3000
[   37.246589][ T3978]  do_syscall_64+0xd2/0x200
[   37.246658][ T3978]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   37.246693][ T3978]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   37.246731][ T3978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.246745][ T3978] RIP: 0033:0x7fb89aa5f6c9
[   37.246785][ T3978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.246857][ T3978] RSP: 002b:00007fb8994c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   37.246869][ T3978] RAX: ffffffffffffffda RBX: 00007fb89acb5fa0 RCX: 00007fb89aa5f6c9
[   37.246877][ T3978] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003
[   37.246895][ T3978] RBP: 00007fb8994c7090 R08: 0000000000000000 R09: 0000000000000000
[   37.246902][ T3978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.246909][ T3978] R13: 00007fb89acb6038 R14: 00007fb89acb5fa0 R15: 00007ffe9c63e178
[   37.246977][ T3978]  </TASK>
[   37.247914][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.495530][ T3982] infiniband syz!: set active
[   37.500386][ T3982] infiniband syz!: added team_slave_0
[   37.514665][ T3982] RDS/IB: syz!: added
[   37.518760][ T3982] smc: adding ib device syz! with port count 1
[   37.525144][ T3982] smc:    ib device syz! port 1 has no pnetid
[   37.529733][ T3992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.541505][ T3992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.619421][ T4000] loop1: detected capacity change from 0 to 512
[   37.642222][ T4001] $Hÿ: left promiscuous mode
[   37.645614][ T4000] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.158: inode has both inline data and extents flags
[   37.647021][ T4001] bond_slave_0: left promiscuous mode
[   37.660994][ T4000] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.158: couldn't read orphan inode 15 (err -117)
[   37.665626][ T4001] bond_slave_1: left promiscuous mode
[   37.678599][ T4000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.695762][ T4001] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[   37.712370][ T4001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   37.758316][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.816823][ T4007] netlink: 80 bytes leftover after parsing attributes in process `syz.1.160'.
[   37.853391][ T4012] SELinux:  Context system_u:object is not valid (left unmapped).
[   37.920435][ T4012] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125
[   37.962809][ T4016] loop1: detected capacity change from 0 to 164
[   37.969843][ T4016] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   37.978970][ T4016] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   37.987221][ T4016] Symlink component flag not implemented
[   37.992871][ T4016] Symlink component flag not implemented
[   37.998997][ T4016] Symlink component flag not implemented (7)
[   38.004972][ T4016] Symlink component flag not implemented (116)
[   38.014067][ T4016] netlink: 8 bytes leftover after parsing attributes in process `'.
[   38.022758][ T4016] netlink: 8 bytes leftover after parsing attributes in process `'.
[   38.102467][ T4028] loop1: detected capacity change from 0 to 512
[   38.109892][ T4028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   38.121387][ T4028] EXT4-fs (loop1): 1 truncate cleaned up
[   38.127481][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.159680][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.288073][   T29] kauditd_printk_skb: 1484 callbacks suppressed
[   38.288085][   T29] audit: type=1326 audit(1763012252.511:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.317704][   T29] audit: type=1326 audit(1763012252.511:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.341114][   T29] audit: type=1326 audit(1763012252.511:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.354151][ T4034] loop2: detected capacity change from 0 to 1024
[   38.364595][   T29] audit: type=1326 audit(1763012252.511:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.372318][ T4034] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   38.394287][   T29] audit: type=1326 audit(1763012252.511:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fada1b26567 code=0x7ffc0000
[   38.394322][   T29] audit: type=1326 audit(1763012252.511:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fada1acb779 code=0x7ffc0000
[   38.405537][ T4034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   38.427135][   T29] audit: type=1326 audit(1763012252.511:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fada1b2f6c9 code=0x7ffc0000
[   38.450724][ T4034] EXT4-fs (loop2): failed to initialize system zone (-117)
[   38.458465][   T29] audit: type=1326 audit(1763012252.511:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.512180][   T29] audit: type=1326 audit(1763012252.511:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.514819][ T4034] EXT4-fs (loop2): mount failed
[   38.535876][   T29] audit: type=1326 audit(1763012252.511:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4030 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fada1b61f85 code=0x7ffc0000
[   38.550859][ T4037] loop4: detected capacity change from 0 to 1024
[   38.571944][ T4037] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   38.580674][ T4034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4034 comm=syz.2.169
[   38.582954][ T4037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   38.602113][ T4037] EXT4-fs (loop4): failed to initialize system zone (-117)
[   38.609378][ T4037] EXT4-fs (loop4): mount failed
[   38.637848][ T4037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4037 comm=syz.4.170
[   38.660926][ T4042] SELinux:  Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped).
[   38.681061][ T4040] loop0: detected capacity change from 0 to 1024
[   38.688694][ T4040] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   38.699921][ T4040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   38.708502][ T4040] EXT4-fs (loop0): failed to initialize system zone (-117)
[   38.715850][ T4040] EXT4-fs (loop0): mount failed
[   38.726861][ T4047] loop2: detected capacity change from 0 to 1024
[   38.734916][ T4047] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   38.746123][ T4047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   38.754482][ T4047] EXT4-fs (loop2): failed to initialize system zone (-117)
[   38.762183][ T4047] EXT4-fs (loop2): mount failed
[   38.803670][ T4053] loop3: detected capacity change from 0 to 512
[   38.811029][ T4053] EXT4-fs: Ignoring removed nobh option
[   38.820068][ T4053] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.176: corrupted inode contents
[   38.835317][ T4053] EXT4-fs (loop3): Remounting filesystem read-only
[   38.843077][ T4053] EXT4-fs (loop3): 1 truncate cleaned up
[   38.849379][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.862425][ T4053] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.879760][ T4062] syz!: rxe_newlink: already configured on team_slave_0
[   38.887851][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.896605][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.897128][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.928815][ T4067] syz_tun: entered allmulticast mode
[   38.954782][ T4066] syz_tun: left allmulticast mode
[   38.994849][ T4069] $Hÿ: left promiscuous mode
[   38.999816][ T4069] bond_slave_0: left promiscuous mode
[   39.005395][ T4069] bond_slave_1: left promiscuous mode
[   39.012553][ T4069] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[   39.019403][ T4071] loop3: detected capacity change from 0 to 1024
[   39.025965][ T4069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.042626][ T4071] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.059883][ T4071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   39.077356][ T4071] EXT4-fs (loop3): failed to initialize system zone (-117)
[   39.087595][ T4071] EXT4-fs (loop3): mount failed
[   39.115138][ T4071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4071 comm=syz.3.182
[   39.127689][ T4077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   39.134923][ T4077] IPv6: NLM_F_CREATE should be set when creating new route
[   39.150104][ T4077] FAULT_INJECTION: forcing a failure.
[   39.150104][ T4077] name failslab, interval 1, probability 0, space 0, times 0
[   39.162897][ T4077] CPU: 0 UID: 0 PID: 4077 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.162929][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   39.162943][ T4077] Call Trace:
[   39.162949][ T4077]  <TASK>
[   39.162958][ T4077]  __dump_stack+0x1d/0x30
[   39.162992][ T4077]  dump_stack_lvl+0xe8/0x140
[   39.163012][ T4077]  dump_stack+0x15/0x1b
[   39.163030][ T4077]  should_fail_ex+0x265/0x280
[   39.163053][ T4077]  should_failslab+0x8c/0xb0
[   39.163088][ T4077]  kmem_cache_alloc_noprof+0x50/0x480
[   39.163185][ T4077]  ? getname_flags+0x80/0x3b0
[   39.163279][ T4077]  getname_flags+0x80/0x3b0
[   39.163313][ T4077]  user_path_at+0x28/0x130
[   39.163333][ T4077]  __se_sys_chroot+0x45/0x230
[   39.163397][ T4077]  __x64_sys_chroot+0x1f/0x30
[   39.163433][ T4077]  x64_sys_call+0x214f/0x3000
[   39.163456][ T4077]  do_syscall_64+0xd2/0x200
[   39.163477][ T4077]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.163540][ T4077]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   39.163574][ T4077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.163659][ T4077] RIP: 0033:0x7fada1b2f6c9
[   39.163674][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.163692][ T4077] RSP: 002b:00007fada058f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1
[   39.163732][ T4077] RAX: ffffffffffffffda RBX: 00007fada1d85fa0 RCX: 00007fada1b2f6c9
[   39.163745][ T4077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[   39.163757][ T4077] RBP: 00007fada058f090 R08: 0000000000000000 R09: 0000000000000000
[   39.163769][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.163783][ T4077] R13: 00007fada1d86038 R14: 00007fada1d85fa0 R15: 00007fff416aced8
[   39.163801][ T4077]  </TASK>
[   39.174746][ T4079] loop3: detected capacity change from 0 to 1024
[   39.217005][ T4083] loop1: detected capacity change from 0 to 1024
[   39.226193][ T4079] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.226892][ T4083] EXT4-fs: Ignoring removed orlov option
[   39.233063][ T4079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   39.238356][ T4083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.240750][ T4079] EXT4-fs (loop3): failed to initialize system zone (-117)
[   39.404025][ T4079] EXT4-fs (loop3): mount failed
[   39.405546][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.433004][ T4087] loop1: detected capacity change from 0 to 1024
[   39.449278][ T4087] EXT4-fs: Ignoring removed orlov option
[   39.458900][ T4087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.472807][ T4092] loop2: detected capacity change from 0 to 512
[   39.479742][ T4092] EXT4-fs: Ignoring removed nobh option
[   39.497767][ T4094] loop3: detected capacity change from 0 to 1024
[   39.504418][ T4094] EXT4-fs: Ignoring removed orlov option
[   39.511499][ T4092] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.190: corrupted inode contents
[   39.512256][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.536785][ T4092] EXT4-fs (loop2): Remounting filesystem read-only
[   39.564931][ T4092] EXT4-fs (loop2): 1 truncate cleaned up
[   39.570985][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.583584][ T4092] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.601145][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.621457][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.634304][ T4101] loop3: detected capacity change from 0 to 1024
[   39.644150][ T4103] $Hÿ: entered promiscuous mode
[   39.649291][ T4103] bond_slave_0: entered promiscuous mode
[   39.654221][ T4105] loop2: detected capacity change from 0 to 512
[   39.655033][ T4103] bond_slave_1: entered promiscuous mode
[   39.669274][ T4105] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.194: inode has both inline data and extents flags
[   39.683363][ T4105] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.194: couldn't read orphan inode 15 (err -117)
[   39.693058][ T4103] lo speed is unknown, defaulting to 1000
[   39.701361][ T4105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.701380][ T4101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.713519][ T4101] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.193: Allocating blocks 449-513 which overlap fs metadata
[   39.753512][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.788828][ T4100] EXT4-fs (loop3): pa ffff88810553a310: logic 48, phys. 177, len 21
[   39.797025][ T4100] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[   39.798467][ T4112] Illegal XDP return value 4294967274 on prog  (id 148) dev N/A, expect packet loss!
[   39.817587][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.846363][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.878695][ T4118] loop1: detected capacity change from 0 to 1024
[   39.886213][ T4118] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.899227][ T4120] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   39.910285][ T4118] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[   39.921688][ T4118] EXT4-fs (loop1): failed to initialize system zone (-117)
[   39.933632][ T4118] EXT4-fs (loop1): mount failed
[   39.984836][ T4124] loop2: detected capacity change from 0 to 1024
[   39.998652][ T4125] siw: device registration error -23
[   39.999336][ T4124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   40.012678][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.035288][ T4124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.201: bg 0: block 88: padding at end of block bitmap is not set
[   40.079065][ T4131] loop3: detected capacity change from 0 to 512
[   40.089616][ T4131] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.203: Failed to acquire dquot type 1
[   40.103123][ T4131] EXT4-fs (loop3): 1 truncate cleaned up
[   40.109262][ T4131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.121988][ T4131] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.153681][ T4133] loop0: detected capacity change from 0 to 512
[   40.159319][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.171997][ T4133] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   40.182927][ T3313] ==================================================================
[   40.191002][ T3313] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[   40.198556][ T3313] 
[   40.200867][ T3313] read-write to 0xffff888237c25ee8 of 1 bytes by task 4136 on cpu 0:
[   40.208918][ T3313]  folio_add_lru+0xa5/0x1f0
[   40.213412][ T3313]  folio_add_lru_vma+0x49/0x70
[   40.218161][ T3313]  handle_mm_fault+0x27e2/0x2be0
[   40.223090][ T3313]  __get_user_pages+0x102a/0x1ed0
[   40.228103][ T3313]  __mm_populate+0x243/0x3a0
[   40.232684][ T3313]  vm_mmap_pgoff+0x232/0x2e0
[   40.237268][ T3313]  ksys_mmap_pgoff+0xc2/0x310
[   40.241933][ T3313]  x64_sys_call+0x14a3/0x3000
[   40.246600][ T3313]  do_syscall_64+0xd2/0x200
[   40.251089][ T3313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.256969][ T3313] 
[   40.259276][ T3313] read to 0xffff888237c25ee8 of 1 bytes by task 3313 on cpu 1:
[   40.266799][ T3313]  __lru_add_drain_all+0x17e/0x450
[   40.271899][ T3313]  lru_add_drain_all+0x10/0x20
[   40.276648][ T3313]  invalidate_bdev+0x47/0x70
[   40.281223][ T3313]  ext4_put_super+0x624/0x7d0
[   40.285890][ T3313]  generic_shutdown_super+0xe6/0x210
[   40.291160][ T3313]  kill_block_super+0x2a/0x70
[   40.295827][ T3313]  ext4_kill_sb+0x42/0x80
[   40.300141][ T3313]  deactivate_locked_super+0x75/0x1c0
[   40.305524][ T3313]  deactivate_super+0x97/0xa0
[   40.310192][ T3313]  cleanup_mnt+0x269/0x2e0
[   40.314603][ T3313]  __cleanup_mnt+0x19/0x20
[   40.319011][ T3313]  task_work_run+0x131/0x1a0
[   40.323594][ T3313]  exit_to_user_mode_loop+0xed/0x110
[   40.328874][ T3313]  do_syscall_64+0x1d6/0x200
[   40.333454][ T3313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.339335][ T3313] 
[   40.341639][ T3313] value changed: 0x0d -> 0x10
[   40.346293][ T3313] 
[   40.348597][ T3313] Reported by Kernel Concurrency Sanitizer on:
[   40.354729][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.364606][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   40.374644][ T3313] ==================================================================
[   40.401546][ T4140] loop3: detected capacity change from 0 to 512
[   40.408694][ T4140] EXT4-fs: Ignoring removed nobh option
[   40.410675][ T4133] EXT4-fs (loop0): 1 truncate cleaned up
[   40.423486][ T4133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.457542][ T4140] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.205: corrupted inode contents
[   40.481797][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.491349][ T4140] EXT4-fs (loop3): Remounting filesystem read-only
[   40.500472][ T4140] EXT4-fs (loop3): 1 truncate cleaned up
[   40.506601][ T4140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.521882][ T4140] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.542465][ T4140] syz.3.205 (4140) used greatest stack depth: 9576 bytes left
[   40.550654][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.664101][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.