last executing test programs:

2m7.81742139s ago: executing program 1 (id=2):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}]}}}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB="337dc89efc4d3fb44f2b04c980c885f553600f1ba2bcd90008dced72b3c8d847842b073af26d605b901f50bf2f7036ab5f7bbb942382cc9cec7fa54d44353d37b4bd23d1cf86e1dd3ce78d0d9fd1d7a218110dbe939b38f8a14e74d2b43997", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000d4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000540), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94)
r3 = syz_open_dev$sg(0x0, 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x1c, @rand_addr=0x64010102}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet6(r7, 0x0, 0x4048043)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x4001)

2m7.537136105s ago: executing program 1 (id=8):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0x100000f0}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r5}, 0x18)
r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
openat(r7, 0x0, 0x640, 0x2)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0)
write$binfmt_register(r8, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)

2m7.209884492s ago: executing program 1 (id=10):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7dffeffc)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xb, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0)
remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r8 = gettid()
r9 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r9, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000300))
preadv(r3, 0x0, 0x0, 0x0, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, &(0x7f0000000040))

2m5.2594122s ago: executing program 1 (id=24):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000680)=ANY=[@ANYBLOB="f80000001800010030bd7000fcdbdf25ac1414aa000000000000000000000000fe80000000000000000000000000ffffff7f0000012e0000a02c400000ae2b43448a7c7fe9102ec6000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d6ff000000fc00000000000000000000000000000002000000000000000900000000000000ffffff7f0000000000100000000000000200000000000000020000000000000005000000000000000500000000000000c1ffffffffffffff0a00000000000000040000000000000062fe000000000000030000000b0000000900000025bd7000003500000a00040f88000000000000004000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x801}, 0x2004c004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d00", @ANYRES8, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r6, 0x2f, 0x8, 0x7, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x80, 0x6, 0x6}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10)
listen(r1, 0x3)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x2, <r8=>0x0}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4)
sendto$inet(r7, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)

2m5.160021272s ago: executing program 32 (id=24):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000680)=ANY=[@ANYBLOB="f80000001800010030bd7000fcdbdf25ac1414aa000000000000000000000000fe80000000000000000000000000ffffff7f0000012e0000a02c400000ae2b43448a7c7fe9102ec6000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d6ff000000fc00000000000000000000000000000002000000000000000900000000000000ffffff7f0000000000100000000000000200000000000000020000000000000005000000000000000500000000000000c1ffffffffffffff0a00000000000000040000000000000062fe000000000000030000000b0000000900000025bd7000003500000a00040f88000000000000004000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x801}, 0x2004c004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d00", @ANYRES8, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r6, 0x2f, 0x8, 0x7, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x80, 0x6, 0x6}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10)
listen(r1, 0x3)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x2, <r8=>0x0}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4)
sendto$inet(r7, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)

1.640216768s ago: executing program 2 (id=4317):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)

1.575122459s ago: executing program 2 (id=4320):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18)
r1 = memfd_secret(0x0)
ftruncate(r1, 0x51a9497)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], &(0x7f0000000200)=""/196, 0xd3, 0xc4, 0x20000, 0x8, 0x10000, @value=r1}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000000100", @ANYRES32=r0, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000020000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000380), &(0x7f00000005c0)=r8}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x400003ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0xd, 0xa, 0x3a1}, 0xc)

1.423347322s ago: executing program 2 (id=4329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x58, r7, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x58}, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f000000010014"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)

1.236098636s ago: executing program 2 (id=4337):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000100), &(0x7f00000000c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000080), 0x8)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r6 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x62202, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x17, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x1, 0x8}]})
r9 = timerfd_create(0x8, 0x80800)
timerfd_gettime(r9, &(0x7f0000000180))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4091, 0xffb}], 0x1)

951.128722ms ago: executing program 0 (id=4346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))

912.229842ms ago: executing program 0 (id=4350):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
uname(&(0x7f0000000040)=""/100)

845.531804ms ago: executing program 0 (id=4353):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18)
r1 = memfd_secret(0x0)
ftruncate(r1, 0x51a9497)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], &(0x7f0000000200)=""/196, 0xd3, 0xc4, 0x20000, 0x8, 0x10000, @value=r1}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000000100", @ANYRES32=r0, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000020000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000380), &(0x7f00000005c0)=r8}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x400003ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0xd, 0xa, 0x3a1}, 0xc)

648.831267ms ago: executing program 0 (id=4361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x40000d4)

625.455788ms ago: executing program 3 (id=4362):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=<r3=>r2], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="04f7659ce6cddb4107baf96f66ef713c1c20e416ab7858b3c5c00f44b1ac43f362b9287fff497992cf8555a14645f7e977a30bf43a00c1d68dfedea05934babe2061f7e0eb442a9bdb9276a3a417fd18fc077dafe984b3ab65fd9d024135ef4fe84951c4505fdb59ac7dd031d739e39760989085731b469bff7b219e44c22644747d01519a656745b5a9df2a54880eaf8538c4ed4c54698aa5297c30f247d297446adbe06ddb20f163e8de428315cae4630668ccdd0c733bc9"], 0x9)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES64=r3], 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
stat(0x0, 0x0)
quotactl_fd$Q_GETINFO(r4, 0xffffffff00000a05, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb203000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050079102800000000001e500000000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800010029bd7000fddbdf251d01010015000100040000a00401000073a8ac5dec6191140400000015000200010000e008011fd30527369d6478c9fa1f00809a"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8010)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x492492492492846, 0x0)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r8, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)

619.652898ms ago: executing program 0 (id=4363):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, 0x0}, 0x10)

601.878408ms ago: executing program 0 (id=4364):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=<r3=>r2], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="04f7659ce6cddb4107baf96f66ef713c1c20e416ab7858b3c5c00f44b1ac43f362b9287fff497992cf8555a14645f7e977a30bf43a00c1d68dfedea05934babe2061f7e0eb442a9bdb9276a3a417fd18fc077dafe984b3ab65fd9d024135ef4fe84951c4505fdb59ac7dd031d739e39760989085731b469bff7b219e44c22644747d01519a656745b5a9df2a54880eaf8538c4ed4c54698aa5297c30f247d297446adbe06ddb20f163e8de428315cae4630668ccdd0c733bc9"], 0x9)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES64=r3], 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
stat(0x0, 0x0)
quotactl_fd$Q_GETINFO(r4, 0xffffffff00000a05, 0x0, &(0x7f0000000240))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050079102800000000001e500000000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800010029bd7000fddbdf251d01010015000100040000a00401000073a8ac5dec6191140400000015000200010000e008011fd30527369d6478c9fa1f00809a"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8010)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x492492492492846, 0x0)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r8, 0x0, 0x0)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)

552.730599ms ago: executing program 5 (id=4365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)
sendmsg$inet6(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7ff}, 0x1c, &(0x7f0000001080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/664, @ANYRES32, @ANYBLOB="00000000980000000000000029000000390000001d100204009032eeaa880000f6ff0000000000000000010100000000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000010010000000010000000000000000000000000001ff0100000000000000000003000000015aad540800000000000000bda7a37d912cdfc7d33425aa7e18990f00"/183], 0x338}, 0xc040)

523.77627ms ago: executing program 4 (id=4367):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=<r3=>r2], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="04f7659ce6cddb4107baf96f66ef713c1c20e416ab7858b3c5c00f44b1ac43f362b9287fff497992cf8555a14645f7e977a30bf43a00c1d68dfedea05934babe2061f7e0eb442a9bdb9276a3a417fd18fc077dafe984b3ab65fd9d024135ef4fe84951c4505fdb59ac7dd031d739e39760989085731b469bff7b219e44c22644747d01519a656745b5a9df2a54880eaf8538c4ed4c54698aa5297c30f247d297446adbe06ddb20f163e8de428315cae4630668ccdd0c733bc9"], 0x9)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES64=r3], 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
stat(0x0, 0x0)
quotactl_fd$Q_GETINFO(r4, 0xffffffff00000a05, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb203000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800010029bd7000fddbdf251d01010015000100040000a00401000073a8ac5dec6191140400000015000200010000e008011fd30527369d6478c9fa1f00809a"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8010)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x492492492492846, 0x0)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r8, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)

489.901091ms ago: executing program 3 (id=4368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x50, r7, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x50}, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)
sendmsg$inet6(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7ff}, 0x1c, &(0x7f0000001080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/664, @ANYRES32, @ANYBLOB="00000000980000000000000029000000390000001d100204009032eeaa880000f6ff0000000000000000010100000000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000010010000000010000000000000000000000000001ff0100000000000000000003000000015aad540800000000000000bda7a37d912cdfc7d33425aa7e18990f00"/183], 0x338}, 0xc040)

423.514282ms ago: executing program 5 (id=4369):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x4e20, 0x0, 0x8}}}}}, 0x0)

391.344703ms ago: executing program 5 (id=4370):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10)

347.708323ms ago: executing program 3 (id=4371):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18)
r1 = memfd_secret(0x0)
ftruncate(r1, 0x51a9497)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], &(0x7f0000000200)=""/196, 0xd3, 0xc4, 0x20000, 0x8, 0x10000, @value=r1}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000000100", @ANYRES32=r0, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000020000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000380), &(0x7f00000005c0)=r8}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x400003ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0xd, 0xa, 0x3a1}, 0xc)

347.250773ms ago: executing program 4 (id=4372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0)

337.211004ms ago: executing program 2 (id=4373):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x5ff, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1}])

309.382364ms ago: executing program 5 (id=4374):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, 0x0}, 0x10)

303.532624ms ago: executing program 4 (id=4375):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
uname(&(0x7f0000000040)=""/100)

258.779675ms ago: executing program 4 (id=4376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)

242.011216ms ago: executing program 3 (id=4377):
io_setup(0x2, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4)

240.695385ms ago: executing program 5 (id=4387):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18)
r1 = memfd_secret(0x0)
ftruncate(r1, 0x51a9497)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], &(0x7f0000000200)=""/196, 0xd3, 0xc4, 0x20000, 0x8, 0x10000, @value=r1}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000000100", @ANYRES32=r0, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000020000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000380), &(0x7f00000005c0)=r8}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7fff, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x400003ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0xd, 0xa, 0x3a1}, 0xc)

177.568317ms ago: executing program 4 (id=4378):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=<r3=>r2], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="04f7659ce6cddb4107baf96f66ef713c1c20e416ab7858b3c5c00f44b1ac43f362b9287fff497992cf8555a14645f7e977a30bf43a00c1d68dfedea05934babe2061f7e0eb442a9bdb9276a3a417fd18fc077dafe984b3ab65fd9d024135ef4fe84951c4505fdb59ac7dd031d739e39760989085731b469bff7b219e44c22644747d01519a656745b5a9df2a54880eaf8538c4ed4c54698aa5297c30f247d297446adbe06ddb20f163e8de428315cae4630668ccdd0c733bc9"], 0x9)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530494c)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES64=r3], 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
stat(0x0, 0x0)
quotactl_fd$Q_GETINFO(r4, 0xffffffff00000a05, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb203000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800010029bd7000fddbdf251d01010015000100040000a00401000073a8ac5dec6191140400000015000200010000e008011fd30527369d6478c9fa1f00809a"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8010)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x492492492492846, 0x0)
unshare(0x22020400)
ppoll(&(0x7f00000000c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r8, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)

130.087617ms ago: executing program 2 (id=4379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)
sendmsg$inet6(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7ff}, 0x1c, &(0x7f0000001080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/664, @ANYRES32, @ANYBLOB="00000000980000000000000029000000390000001d100204009032eeaa880000f6ff0000000000000000010100000000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000010010000000010000000000000000000000000001ff0100000000000000000003000000015aad540800000000000000bda7a37d912cdfc7d33425aa7e18990f00"/183], 0x338}, 0xc040)

129.802067ms ago: executing program 3 (id=4380):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18)
mlockall(0x7)
lsm_set_self_attr(0x69, 0x0, 0x0, 0x0)

117.195318ms ago: executing program 5 (id=4381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x50, r7, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x50}, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)
sendmsg$inet6(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7ff}, 0x1c, &(0x7f0000001080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="400100000000000029000000370000002c240000000000000502001007280000000008030008ff7fffffffffffff10000000000000000100000000000000090000000000000006c9f025dbc04904ed94236a15b1983c9fce36b41bb2556f19bda82a4867361bbcd19f294f7f5568c4a902ad08161fffc6646444400146c6f22c6bf5bce6dd3f0bc3dc5be3ea36567826f8b12ca2547b5db5a4d2e41f4b533ac0d9c4509e5dce751c8d97fc2730e3ea7add9fde545db7524747e1f4c4b88c48bedb08716f2648af7ca7a778a5d63eea09f90adab54f4d8adf7f4d27b5305a8935b1a85b6cb1e7e06023e3ec6f0ff462345c7896bea8d87a7b96e65c8efef338329eacf8f6ee97030782a2df2897569f19c3c204000007ffc204000c0000c910fe8000000000000000000000000000bb05020002c204fffffbff0c000000000000000100000000000029000000040000003c1c000000000000000100c2040000000807480000000210020300ce000000000000001150a309000000006c0000000000000009000000000000000000000000000000480000000000000001000000000000000700000000000000068d940ccd6a25f191a4ff34c087e2bfbcc65f9d2cfb68b1b494f08430ab96b79ad0a905a91970735fea3ac3ddb30b489a7ad0c8a71fcf48ab149c08554c911f23c775d890b84fc4435e5b304eb7bbb48965f82cb0b5fe255607132e17be9c530110fb708b1915f1bb13139b1b5b5729031456701123c44841e91fff35037e6b8abd6f543a00a9523dd04f66ebe70a000000000000140000000000000029000000430000000500000000000000200000000000000029000000360000002b00000000000000010100040101000024000000000000002900000032000000fc00"/664, @ANYRES32, @ANYBLOB="00000000980000000000000029000000390000001d100204009032eeaa880000f6ff0000000000000000010100000000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000010010000000010000000000000000000000000001ff0100000000000000000003000000015aad540800000000000000bda7a37d912cdfc7d33425aa7e18990f00"/183], 0x338}, 0xc040)

67.086269ms ago: executing program 4 (id=4382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180))
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq")
io_uring_setup(0x2e51, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r2, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x58, r7, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x58}, 0x1, 0x620b, 0x0, 0x44080}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f00000001001400"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080)

0s ago: executing program 3 (id=4383):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000100), &(0x7f00000000c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000080), 0x8)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r6 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x62202, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x17, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x1, 0x8}]})
r9 = timerfd_create(0x8, 0x80800)
timerfd_gettime(r9, &(0x7f0000000180))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4091, 0xffb}], 0x1)

kernel console output (not intermixed with test programs):

.213397][   T29] audit: type=1400 audit(1758067927.852:68892): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.257463][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[   83.264206][ T3033] audit: audit_lost=948 audit_rate_limit=0 audit_backlog_limit=64
[   83.270690][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64
[   83.272037][ T3033] audit: backlog limit exceeded
[   83.278560][ T3309] audit: audit_lost=949 audit_rate_limit=0 audit_backlog_limit=64
[   83.278574][ T3309] audit: backlog limit exceeded
[   83.281417][ T6747] audit: audit_backlog=65 > audit_backlog_limit=64
[   83.302769][ T6747] audit: audit_lost=950 audit_rate_limit=0 audit_backlog_limit=64
[   83.310628][ T6747] audit: backlog limit exceeded
[   83.316623][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[   83.325583][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[   83.410355][ T6757] netlink: 'syz.5.1121': attribute type 8 has an invalid length.
[   83.431192][ T6759] lo speed is unknown, defaulting to 1000
[   83.453312][ T6759] lo speed is unknown, defaulting to 1000
[   83.464233][ T6768] netlink: 'syz.0.1125': attribute type 8 has an invalid length.
[   83.472021][ T6768] netem: change failed
[   83.722396][ T6798] netlink: 'syz.2.1139': attribute type 8 has an invalid length.
[   83.943146][ T6819] lo speed is unknown, defaulting to 1000
[   83.974634][ T6819] lo speed is unknown, defaulting to 1000
[   83.986469][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'.
[   84.164615][ T6842] ip6erspan0: entered promiscuous mode
[   84.455041][ T6872] netlink: 'syz.4.1173': attribute type 8 has an invalid length.
[   84.462826][ T6872] netem: change failed
[   84.687887][ T6902] netlink: 'syz.0.1187': attribute type 8 has an invalid length.
[   84.695844][ T6902] netem: change failed
[   85.594658][ T7003] lo speed is unknown, defaulting to 1000
[   85.675742][ T7003] lo speed is unknown, defaulting to 1000
[   85.855851][ T7029] netlink: 'syz.0.1241': attribute type 8 has an invalid length.
[   85.863740][ T7029] netem: change failed
[   86.272809][ T7073] lo speed is unknown, defaulting to 1000
[   86.295963][ T7073] lo speed is unknown, defaulting to 1000
[   86.314395][ T7085] netlink: 'syz.4.1266': attribute type 8 has an invalid length.
[   86.322188][ T7085] netem: change failed
[   86.620819][ T7115] netem: change failed
[   87.538753][ T7250] validate_nla: 3 callbacks suppressed
[   87.538771][ T7250] netlink: 'syz.4.1339': attribute type 21 has an invalid length.
[   87.552275][ T7250] __nla_validate_parse: 11 callbacks suppressed
[   87.552292][ T7250] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1339'.
[   87.591753][ T7250] netlink: 'syz.4.1339': attribute type 5 has an invalid length.
[   87.599613][ T7250] netlink: 'syz.4.1339': attribute type 6 has an invalid length.
[   87.607512][ T7250] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1339'.
[   87.626469][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'.
[   88.032611][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'.
[   88.186289][ T7319] netlink: 'syz.0.1372': attribute type 8 has an invalid length.
[   88.194145][ T7319] netem: change failed
[   88.223094][   T29] kauditd_printk_skb: 16623 callbacks suppressed
[   88.223112][   T29] audit: type=1326 audit(1758067932.857:85246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[   88.248426][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.259095][   T29] audit: type=1400 audit(1758067932.867:85247): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.259815][ T3033] audit: audit_lost=1041 audit_rate_limit=0 audit_backlog_limit=64
[   88.280938][   T29] audit: type=1400 audit(1758067932.867:85248): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.289140][ T3033] audit: backlog limit exceeded
[   88.310060][   T29] audit: type=1400 audit(1758067932.867:85249): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.321372][ T7323] lo speed is unknown, defaulting to 1000
[   88.336098][   T29] audit: type=1400 audit(1758067932.867:85250): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.346148][ T7328] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.362967][   T29] audit: type=1400 audit(1758067932.867:85251): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.383198][ T7323] lo speed is unknown, defaulting to 1000
[   88.416033][ T7336] bridge_slave_0: default FDB implementation only supports local addresses
[   88.493211][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'.
[   88.580374][ T7354] netlink: 'syz.3.1388': attribute type 8 has an invalid length.
[   88.588219][ T7354] netem: change failed
[   88.778823][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'.
[   88.870407][ T7391] netlink: 'syz.0.1405': attribute type 8 has an invalid length.
[   88.878394][ T7391] netem: change failed
[   88.915044][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1397'.
[   89.052057][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'.
[   89.195714][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1416'.
[   89.312421][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'.
[   89.417362][ T7453] lo speed is unknown, defaulting to 1000
[   89.438439][ T7453] lo speed is unknown, defaulting to 1000
[   89.515392][ T7466] lo speed is unknown, defaulting to 1000
[   89.532771][ T7466] lo speed is unknown, defaulting to 1000
[   90.000914][ T7507] lo speed is unknown, defaulting to 1000
[   90.022301][ T7507] lo speed is unknown, defaulting to 1000
[   90.050079][ T7523] sch_fq: defrate 4294967295 ignored.
[   90.604861][ T7596] netlink: 'syz.3.1496': attribute type 8 has an invalid length.
[   90.612763][ T7596] netem: change failed
[   90.666983][ T7606] netlink: 'syz.2.1499': attribute type 10 has an invalid length.
[   90.677653][ T7606] batman_adv: batadv0: Adding interface: veth1_vlan
[   90.684500][ T7606] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.712661][ T7606] batman_adv: batadv0: Interface activated: veth1_vlan
[   91.661095][ T7745] netlink: 'syz.5.1562': attribute type 8 has an invalid length.
[   91.701385][ T7751] netlink: 'syz.3.1565': attribute type 8 has an invalid length.
[   91.709614][ T7751] netem: change failed
[   91.949733][ T7769] lo speed is unknown, defaulting to 1000
[   91.970158][ T7769] lo speed is unknown, defaulting to 1000
[   92.558888][ T7828] __nla_validate_parse: 8 callbacks suppressed
[   92.558906][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'.
[   92.637666][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'.
[   92.852198][ T7877] capability: warning: `syz.3.1621' uses deprecated v2 capabilities in a way that may be insecure
[   92.896665][ T7879] lo speed is unknown, defaulting to 1000
[   92.911195][ T7879] lo speed is unknown, defaulting to 1000
[   92.926017][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'.
[   93.102321][   T29] kauditd_printk_skb: 17200 callbacks suppressed
[   93.102340][   T29] audit: type=1400 audit(1758067937.868:102162): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.130216][   T29] audit: type=1400 audit(1758067937.868:102163): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.151497][   T29] audit: type=1400 audit(1758067937.868:102164): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.172818][   T29] audit: type=1400 audit(1758067937.868:102165): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.194126][   T29] audit: type=1400 audit(1758067937.868:102166): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.215378][   T29] audit: type=1400 audit(1758067937.868:102167): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.236690][   T29] audit: type=1400 audit(1758067937.868:102168): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.258059][   T29] audit: type=1400 audit(1758067937.868:102169): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.279360][   T29] audit: type=1400 audit(1758067937.868:102170): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.299247][ T7911] audit: audit_backlog=65 > audit_backlog_limit=64
[   93.345643][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'.
[   93.360680][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'.
[   93.578117][ T7950] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[   93.687566][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'.
[   93.955515][ T7989] lo speed is unknown, defaulting to 1000
[   93.962085][ T7989] lo speed is unknown, defaulting to 1000
[   93.976907][ T7991] lo speed is unknown, defaulting to 1000
[   94.004669][ T7991] lo speed is unknown, defaulting to 1000
[   94.028421][ T8000] netlink: 'syz.4.1676': attribute type 8 has an invalid length.
[   94.037150][ T8000] netem: change failed
[   94.065238][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1666'.
[   94.295719][ T8029] netlink: 'syz.3.1689': attribute type 8 has an invalid length.
[   94.303548][ T8029] netem: change failed
[   94.396546][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'.
[   94.597288][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'.
[   94.825973][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'.
[   95.073267][ T8117] lo speed is unknown, defaulting to 1000
[   95.081723][ T8117] lo speed is unknown, defaulting to 1000
[   95.414449][ T8152] dummy0: entered promiscuous mode
[   95.435538][ T8152] macsec1: entered promiscuous mode
[   95.460133][ T8152] macsec1: entered allmulticast mode
[   95.474834][ T8152] dummy0: entered allmulticast mode
[   95.499412][ T8152] dummy0: left allmulticast mode
[   95.520094][ T8152] dummy0: left promiscuous mode
[   95.701385][ T8190] netlink: 'syz.3.1759': attribute type 8 has an invalid length.
[   95.709282][ T8190] netem: change failed
[   95.961437][ T8223] netlink: 'syz.0.1776': attribute type 8 has an invalid length.
[   95.969423][ T8223] netem: change failed
[   96.130137][ T8246] netlink: 'syz.5.1786': attribute type 12 has an invalid length.
[   96.169891][ T8251] netlink: 'syz.0.1789': attribute type 8 has an invalid length.
[   96.177920][ T8251] netem: change failed
[   96.616997][ T8316] netlink: 'syz.4.1819': attribute type 21 has an invalid length.
[   96.797661][ T8342] dummy0: entered promiscuous mode
[   96.808202][ T8342] macsec1: entered promiscuous mode
[   96.820783][ T8342] macsec1: entered allmulticast mode
[   96.832852][ T8342] dummy0: entered allmulticast mode
[   96.842102][ T8342] dummy0: left allmulticast mode
[   96.851959][ T8342] dummy0: left promiscuous mode
[   97.001084][ T8359] lo speed is unknown, defaulting to 1000
[   97.022365][ T8359] lo speed is unknown, defaulting to 1000
[   97.470331][ T8411] __nla_validate_parse: 6 callbacks suppressed
[   97.470344][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'.
[   97.531831][ T8427] netlink: 'syz.3.1869': attribute type 8 has an invalid length.
[   97.531849][ T8427] netem: change failed
[   97.564667][ T8423] lo speed is unknown, defaulting to 1000
[   97.565022][ T8423] lo speed is unknown, defaulting to 1000
[   97.736574][ T8445] erspan0: entered promiscuous mode
[   97.804509][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'.
[   97.982182][ T8465] lo speed is unknown, defaulting to 1000
[   97.993386][ T8465] lo speed is unknown, defaulting to 1000
[   98.013312][   T29] kauditd_printk_skb: 18847 callbacks suppressed
[   98.013404][   T29] audit: type=1400 audit(1758067942.877:119585): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013436][   T29] audit: type=1400 audit(1758067942.877:119586): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013465][   T29] audit: type=1400 audit(1758067942.877:119587): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013493][   T29] audit: type=1400 audit(1758067942.877:119588): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013524][   T29] audit: type=1400 audit(1758067942.877:119589): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013547][   T29] audit: type=1400 audit(1758067942.877:119590): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013576][   T29] audit: type=1400 audit(1758067942.877:119591): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013611][   T29] audit: type=1400 audit(1758067942.877:119592): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013636][   T29] audit: type=1400 audit(1758067942.877:119593): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.013657][   T29] audit: type=1400 audit(1758067942.877:119594): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.236288][ T8495] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1896'.
[   98.431424][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'.
[   98.590100][ T8520] dummy0: entered promiscuous mode
[   98.610810][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'.
[   98.613364][ T8520] macvlan2: entered promiscuous mode
[   98.634301][ T8520] dummy0: left promiscuous mode
[   98.803315][ T8542] lo speed is unknown, defaulting to 1000
[   98.809491][ T8542] lo speed is unknown, defaulting to 1000
[   98.904849][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'.
[   98.916935][ T8551] lo speed is unknown, defaulting to 1000
[   98.942165][ T8551] lo speed is unknown, defaulting to 1000
[   98.950218][ T8554] lo speed is unknown, defaulting to 1000
[   98.986849][ T8554] lo speed is unknown, defaulting to 1000
[   99.227477][ T8583] netlink: 'syz.4.1931': attribute type 8 has an invalid length.
[   99.235663][ T8583] netem: change failed
[   99.700077][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'.
[   99.840752][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'.
[   99.913548][ T8674] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1974'.
[   99.932528][ T8674] 0ªX¹¦À: renamed from caif0
[   99.952169][ T8674] 0ªX¹¦À: entered allmulticast mode
[   99.957466][ T8674] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  100.048844][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'.
[  100.062040][ T8687] lo speed is unknown, defaulting to 1000
[  100.074716][ T8687] lo speed is unknown, defaulting to 1000
[  100.142617][ T8696] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8696 comm=syz.0.1984
[  100.982170][ T8808] lo speed is unknown, defaulting to 1000
[  101.008162][ T8808] lo speed is unknown, defaulting to 1000
[  101.229699][ T8826] netlink: 'syz.0.2042': attribute type 8 has an invalid length.
[  101.237491][ T8826] netem: change failed
[  101.794509][ T8891] netlink: 'syz.0.2071': attribute type 8 has an invalid length.
[  101.803051][ T8891] netem: change failed
[  102.469420][ T8981] __nla_validate_parse: 9 callbacks suppressed
[  102.469515][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'.
[  102.795154][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2127'.
[  102.799946][ T9012] lo speed is unknown, defaulting to 1000
[  102.819944][ T9012] lo speed is unknown, defaulting to 1000
[  102.950935][   T29] kauditd_printk_skb: 18361 callbacks suppressed
[  102.950953][   T29] audit: type=1400 audit(1758067947.889:135736): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  102.960766][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  102.985376][ T3033] audit: audit_lost=2357 audit_rate_limit=0 audit_backlog_limit=64
[  102.993330][ T3033] audit: backlog limit exceeded
[  103.002014][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.008086][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.008561][ T3033] audit: audit_lost=2358 audit_rate_limit=0 audit_backlog_limit=64
[  103.015912][ T3309] audit: audit_lost=2359 audit_rate_limit=0 audit_backlog_limit=64
[  103.023086][ T3033] audit: backlog limit exceeded
[  103.024556][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.215751][ T9054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.223028][ T9054] IPv6: NLM_F_CREATE should be set when creating new route
[  103.230321][ T9054] IPv6: NLM_F_CREATE should be set when creating new route
[  103.237561][ T9054] IPv6: NLM_F_CREATE should be set when creating new route
[  103.298715][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'.
[  104.109064][ T9181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2200'.
[  104.238671][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'.
[  104.370963][ T9219] IPv6: Can't replace route, no match found
[  104.750953][ T9276] netlink: 'syz.5.2248': attribute type 11 has an invalid length.
[  104.758837][ T9276] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2248'.
[  104.891645][ T9290] netlink: 'syz.4.2254': attribute type 8 has an invalid length.
[  104.900239][ T9290] netem: change failed
[  105.034356][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2255'.
[  105.104310][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'.
[  105.449103][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'.
[  105.575990][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  106.098451][ T9447] netlink: 'syz.0.2327': attribute type 8 has an invalid length.
[  106.106340][ T9447] netem: change failed
[  106.201851][ T9456] lo speed is unknown, defaulting to 1000
[  106.236961][ T9456] lo speed is unknown, defaulting to 1000
[  106.549527][ T9502] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  106.746343][ T9527] netlink: 'syz.5.2362': attribute type 8 has an invalid length.
[  106.754230][ T9527] netem: change failed
[  107.040685][ T9564] netlink: 'syz.4.2380': attribute type 8 has an invalid length.
[  107.048512][ T9564] netem: change failed
[  107.163883][ T9584] bridge0: entered promiscuous mode
[  107.440951][ T9602] __nla_validate_parse: 7 callbacks suppressed
[  107.440969][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'.
[  107.609862][ T9644] lo speed is unknown, defaulting to 1000
[  107.620109][ T9644] lo speed is unknown, defaulting to 1000
[  107.914728][   T29] kauditd_printk_skb: 17319 callbacks suppressed
[  107.914810][   T29] audit: type=1400 audit(1758067952.911:152264): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  107.942979][   T29] audit: type=1400 audit(1758067952.911:152265): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  107.964227][   T29] audit: type=1400 audit(1758067952.911:152266): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  107.985506][   T29] audit: type=1400 audit(1758067952.911:152267): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.006877][   T29] audit: type=1400 audit(1758067952.911:152268): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.028141][   T29] audit: type=1400 audit(1758067952.911:152269): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.049442][   T29] audit: type=1400 audit(1758067952.911:152270): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.070670][   T29] audit: type=1400 audit(1758067952.911:152271): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.084997][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.091914][   T29] audit: type=1400 audit(1758067952.911:152272): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.218097][ T9705] lo speed is unknown, defaulting to 1000
[  108.241224][ T9705] lo speed is unknown, defaulting to 1000
[  108.391798][ T9723] lo speed is unknown, defaulting to 1000
[  108.408733][ T9723] lo speed is unknown, defaulting to 1000
[  108.724091][ T9757] lo speed is unknown, defaulting to 1000
[  108.732911][ T9757] lo speed is unknown, defaulting to 1000
[  109.040924][ T9781] lo speed is unknown, defaulting to 1000
[  109.050916][ T9781] lo speed is unknown, defaulting to 1000
[  109.561291][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'.
[  109.697505][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'.
[  109.749880][ T9858] lo speed is unknown, defaulting to 1000
[  109.772728][ T9858] lo speed is unknown, defaulting to 1000
[  109.873633][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'.
[  110.072225][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'.
[  110.181054][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'.
[  110.600312][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'.
[  110.715475][ T9952] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2554'.
[  110.811659][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'.
[  110.849225][ T9960] IPv6: Can't replace route, no match found
[  110.894779][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'.
[  111.234918][T10000] lo speed is unknown, defaulting to 1000
[  111.261695][T10000] lo speed is unknown, defaulting to 1000
[  111.976611][T10073] lo speed is unknown, defaulting to 1000
[  112.005350][T10073] lo speed is unknown, defaulting to 1000
[  112.489562][T10131] lo speed is unknown, defaulting to 1000
[  112.500976][T10131] lo speed is unknown, defaulting to 1000
[  112.881418][   T29] kauditd_printk_skb: 18627 callbacks suppressed
[  112.881434][   T29] audit: type=1400 audit(1758067957.909:170871): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  112.888932][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  112.910087][   T29] audit: type=1400 audit(1758067957.919:170872): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  112.915826][ T3033] audit: audit_lost=2634 audit_rate_limit=0 audit_backlog_limit=64
[  112.915844][ T3033] audit: backlog limit exceeded
[  112.919196][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  112.938203][   T29] audit: type=1400 audit(1758067957.919:170873): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  112.945140][ T3033] audit: audit_lost=2635 audit_rate_limit=0 audit_backlog_limit=64
[  112.945159][ T3033] audit: backlog limit exceeded
[  112.950031][   T29] audit: type=1400 audit(1758067957.919:170874): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  113.251002][T10163] __nla_validate_parse: 6 callbacks suppressed
[  113.251040][T10163] netlink: 1022 bytes leftover after parsing attributes in process `syz.3.2648'.
[  113.273060][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'.
[  113.832235][T10243] lo speed is unknown, defaulting to 1000
[  113.845639][T10243] lo speed is unknown, defaulting to 1000
[  114.057923][T10267] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  114.064552][T10267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.072236][T10267] vhci_hcd vhci_hcd.0: Device attached
[  114.119985][T10268] vhci_hcd: connection closed
[  114.120251][   T12] vhci_hcd: stop threads
[  114.129304][   T12] vhci_hcd: release socket
[  114.133751][   T12] vhci_hcd: disconnect device
[  114.264695][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'.
[  114.283044][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'.
[  114.429510][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'.
[  114.519621][T10301] lo speed is unknown, defaulting to 1000
[  114.533859][T10301] lo speed is unknown, defaulting to 1000
[  114.558401][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2709'.
[  114.735957][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'.
[  114.829699][T10326] IPv6: Can't replace route, no match found
[  114.839163][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2722'.
[  114.848998][T10328] netlink: 'syz.4.2722': attribute type 7 has an invalid length.
[  114.856825][T10328] netlink: 'syz.4.2722': attribute type 8 has an invalid length.
[  114.864551][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'.
[  114.878871][T10328] gretap0: entered promiscuous mode
[  114.885174][T10328] batadv_slave_1: entered promiscuous mode
[  114.896785][T10328] gretap0: left promiscuous mode
[  114.908086][T10328] batadv_slave_1: left promiscuous mode
[  115.119250][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2729'.
[  115.878889][T10431] binfmt_misc: register: failed to install interpreter file ./file2
[  116.125653][T10462] netlink: 'syz.2.2784': attribute type 8 has an invalid length.
[  116.154177][T10466] netlink: 'syz.3.2785': attribute type 21 has an invalid length.
[  116.167385][T10466] netlink: 'syz.3.2785': attribute type 1 has an invalid length.
[  116.255657][T10473] lo speed is unknown, defaulting to 1000
[  116.282025][T10473] lo speed is unknown, defaulting to 1000
[  116.415202][T10495] netlink: 'syz.5.2798': attribute type 8 has an invalid length.
[  116.423039][T10495] netem: change failed
[  116.675965][T10533] lo speed is unknown, defaulting to 1000
[  116.682112][T10535] binfmt_misc: register: failed to install interpreter file ./file2
[  116.704319][T10533] lo speed is unknown, defaulting to 1000
[  116.918121][T10559] lo speed is unknown, defaulting to 1000
[  116.957411][T10559] lo speed is unknown, defaulting to 1000
[  117.480919][T10627] netlink: 'syz.4.2858': attribute type 8 has an invalid length.
[  117.489605][T10627] netem: change failed
[  117.888888][   T29] kauditd_printk_skb: 22366 callbacks suppressed
[  117.888906][   T29] audit: type=1326 audit(1758067969.922:190859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.5.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9c55eba9 code=0x7ffc0000
[  117.919192][   T29] audit: type=1400 audit(1758067969.922:190860): avc:  denied  { prog_load } for  pid=10654 comm="syz.5.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  117.938635][   T29] audit: type=1326 audit(1758067969.922:190861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.5.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c55eba9 code=0x7ffc0000
[  117.962401][   T29] audit: type=1326 audit(1758067969.922:190862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.5.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c55eba9 code=0x7ffc0000
[  117.991646][T10656] netlink: 'syz.5.2872': attribute type 8 has an invalid length.
[  117.991662][T10656] netem: change failed
[  117.991919][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  117.991933][ T3033] audit: audit_lost=3430 audit_rate_limit=0 audit_backlog_limit=64
[  117.991950][ T3033] audit: backlog limit exceeded
[  117.992028][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  117.992043][ T3033] audit: audit_lost=3431 audit_rate_limit=0 audit_backlog_limit=64
[  117.992058][ T3033] audit: backlog limit exceeded
[  118.243742][T10695] IPv6: Can't replace route, no match found
[  118.895341][T10757] __nla_validate_parse: 11 callbacks suppressed
[  118.895361][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2915'.
[  118.960574][T10771] macvtap0: refused to change device tx_queue_len
[  119.152867][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'.
[  119.351518][T10824] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  119.440384][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'.
[  119.643820][T10857] lo speed is unknown, defaulting to 1000
[  119.671643][T10857] lo speed is unknown, defaulting to 1000
[  119.961369][T10898] netlink: 'syz.2.2977': attribute type 8 has an invalid length.
[  119.993657][T10906] IPv6: Can't replace route, no match found
[  120.242752][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'.
[  120.758235][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3022'.
[  121.339680][T11061] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3056'.
[  121.443116][T11071] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  121.451433][T11071] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  121.454321][T11066] lo speed is unknown, defaulting to 1000
[  121.469526][T11066] lo speed is unknown, defaulting to 1000
[  121.828847][T11100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3073'.
[  122.119306][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'.
[  122.223362][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3097'.
[  122.233224][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3097'.
[  122.286425][T11149] lo speed is unknown, defaulting to 1000
[  122.297351][T11149] lo speed is unknown, defaulting to 1000
[  122.896341][   T29] kauditd_printk_skb: 20221 callbacks suppressed
[  122.896359][   T29] audit: type=1400 audit(1758067974.922:209119): avc:  denied  { read } for  pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  122.943668][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64
[  122.950272][ T3033] audit: audit_lost=4087 audit_rate_limit=0 audit_backlog_limit=64
[  122.950485][ T3306] audit: audit_backlog=65 > audit_backlog_limit=64
[  122.958195][ T3033] audit: backlog limit exceeded
[  122.959169][T11227] audit: audit_backlog=65 > audit_backlog_limit=64
[  122.964760][ T3306] audit: audit_lost=4088 audit_rate_limit=0 audit_backlog_limit=64
[  122.969655][T11227] audit: audit_lost=4089 audit_rate_limit=0 audit_backlog_limit=64
[  122.969675][T11227] audit: backlog limit exceeded
[  122.969789][T11215] audit: audit_backlog=65 > audit_backlog_limit=64
[  123.559528][T11302] netlink: 'syz.0.3169': attribute type 10 has an invalid length.
[  123.581764][T11302] team0: Device hsr_slave_0 failed to register rx_handler
[  123.709878][T11320] lo speed is unknown, defaulting to 1000
[  123.732523][T11320] lo speed is unknown, defaulting to 1000
[  124.060515][T11354] __nla_validate_parse: 3 callbacks suppressed
[  124.060549][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'.
[  124.334234][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'.
[  124.479848][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  124.695975][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'.
[  124.823515][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3259'.
[  124.855757][T11487] lo speed is unknown, defaulting to 1000
[  124.868653][T11487] lo speed is unknown, defaulting to 1000
[  125.255311][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'.
[  125.518019][T11578] bridge1: entered promiscuous mode
[  126.069273][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  126.145212][T11638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11638 comm=syz.4.3326
[  126.214983][T11651] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  126.606092][T11715] vhci_hcd: invalid port number 66
[  126.611495][T11715] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  126.695590][T11715] loop4: detected capacity change from 0 to 8192
[  126.718709][T11727] lo speed is unknown, defaulting to 1000
[  126.731762][T11727] lo speed is unknown, defaulting to 1000
[  126.748252][ T3537]  loop4: p1 p2 p3 p4
[  126.752492][ T3537] loop4: p1 start 51379968 is beyond EOD, truncated
[  126.759511][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3371'.
[  126.777161][ T3537] loop4: p3 size 15991040 extends beyond EOD, truncated
[  126.793141][ T3537] loop4: p4 start 16711680 is beyond EOD, truncated
[  126.823641][T11715]  loop4: p1 p2 p3 p4
[  126.833206][T11715] loop4: p1 start 51379968 is beyond EOD, truncated
[  126.852642][T11715] loop4: p3 size 15991040 extends beyond EOD, truncated
[  126.864999][T11715] loop4: p4 start 16711680 is beyond EOD, truncated
[  126.877006][T11742] netlink: 'syz.4.3364': attribute type 1 has an invalid length.
[  126.884800][T11742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3364'.
[  126.897858][T11743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11743 comm=syz.5.3376
[  126.912995][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'.
[  126.982513][T11745] ALSA: seq fatal error: cannot create timer (-19)
[  127.039384][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  127.039428][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  127.157681][T11772] netlink: 'syz.2.3389': attribute type 3 has an invalid length.
[  127.360169][T11799] IPVS: Error connecting to the multicast addr
[  127.428984][T11803] Driver unsupported XDP return value 0 on prog  (id 402) dev N/A, expect packet loss!
[  127.490413][T11812] vhci_hcd: invalid port number 66
[  127.495687][T11812] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  127.597593][T11812] loop0: detected capacity change from 0 to 8192
[  127.629121][T11812]  loop0: p1 p2 p3 p4
[  127.638770][T11812] loop0: p1 start 51379968 is beyond EOD, truncated
[  127.657590][T11812] loop0: p3 size 15991040 extends beyond EOD, truncated
[  127.668584][T11812] loop0: p4 start 16711680 is beyond EOD, truncated
[  127.697223][T11812] netlink: 'syz.0.3408': attribute type 1 has an invalid length.
[  127.937748][   T29] kauditd_printk_skb: 11924 callbacks suppressed
[  127.937763][   T29] audit: type=1400 audit(1758067979.972:220771): avc:  denied  { create } for  pid=11849 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  127.994331][   T29] audit: type=1400 audit(1758067980.022:220772): avc:  denied  { bind } for  pid=11851 comm="syz.5.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  128.025799][   T29] audit: type=1400 audit(1758067980.052:220773): avc:  denied  { kexec_image_load } for  pid=11853 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  128.155102][   T29] audit: type=1400 audit(1758067980.182:220774): avc:  denied  { create } for  pid=11867 comm="syz.2.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.189076][   T29] audit: type=1400 audit(1758067980.212:220775): avc:  denied  { read } for  pid=11867 comm="syz.2.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.218452][   T29] audit: type=1400 audit(1758067980.252:220776): avc:  denied  { write } for  pid=11867 comm="syz.2.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.528706][T11888] SELinux: security_context_str_to_sid (Ö) failed with errno=-22
[  128.537644][   T29] audit: type=1400 audit(1758067980.562:220777): avc:  denied  { mounton } for  pid=11887 comm="syz.4.3441" path="/734" dev="tmpfs" ino=3859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  128.587589][   T29] audit: type=1400 audit(1758067980.602:220778): avc:  denied  { write } for  pid=11891 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  128.608642][   T29] audit: type=1326 audit(1758067980.602:220779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.5.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c55eba9 code=0x7ffc0000
[  128.633122][   T29] audit: type=1326 audit(1758067980.602:220780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.5.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c55eba9 code=0x7ffc0000
[  128.695656][T11905] SELinux: security_context_str_to_sid (Ö) failed with errno=-22
[  128.786083][T11920] loop0: detected capacity change from 0 to 128
[  128.798187][T11920] EXT4-fs mount: 12 callbacks suppressed
[  128.798205][T11920] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.816878][T11920] ext4 filesystem being mounted at /638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.868003][T11920] EXT4-fs (loop0): shut down requested (2)
[  128.894991][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.093218][T11954] __nla_validate_parse: 8 callbacks suppressed
[  129.093236][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'.
[  129.163261][T11958] macvtap0: refused to change device tx_queue_len
[  129.231153][T11960] lo speed is unknown, defaulting to 1000
[  129.258985][T11960] lo speed is unknown, defaulting to 1000
[  129.414341][T11971] vhci_hcd: invalid port number 66
[  129.420428][T11971] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  129.629599][T11971] netlink: 'syz.2.3478': attribute type 1 has an invalid length.
[  129.638310][T11971] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3478'.
[  129.650679][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'.
[  129.733408][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'.
[  129.736812][T11984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3484'.
[  129.744882][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'.
[  129.852944][T11989] netlink: 'syz.0.3486': attribute type 1 has an invalid length.
[  129.861557][T11989] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3486'.
[  130.020154][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811aec1c00: rx timeout, send abort
[  130.028502][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aec1c00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[  130.253327][T11967] Set syz1 is full, maxelem 65536 reached
[  130.322347][T12000] loop0: detected capacity change from 0 to 8192
[  130.347306][ T3297] printk: udevd: 5 output lines suppressed due to ratelimiting
[  130.404976][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3499'.
[  130.697033][T12059] loop5: detected capacity change from 0 to 512
[  130.799758][T12072] vhci_hcd: invalid port number 66
[  130.804962][T12072] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  130.893954][T12072] loop5: detected capacity change from 0 to 8192
[  130.946786][T12072]  loop5: p1 p2 p3 p4
[  130.962931][T12072] loop5: p1 start 51379968 is beyond EOD, truncated
[  130.969533][T12088] rtc_cmos 00:00: Alarms can be up to one day in the future
[  130.984849][T12072] loop5: p3 size 15991040 extends beyond EOD, truncated
[  130.992545][T12072] loop5: p4 start 16711680 is beyond EOD, truncated
[  131.005680][T12087] lo speed is unknown, defaulting to 1000
[  131.014850][T12072] netlink: 'syz.5.3523': attribute type 1 has an invalid length.
[  131.018653][T12087] lo speed is unknown, defaulting to 1000
[  131.022674][T12072] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3523'.
[  131.073827][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'.
[  131.159922][T12102] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[  131.299748][T12120] loop0: detected capacity change from 0 to 2048
[  131.315742][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future
[  131.323576][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future
[  131.331336][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future
[  131.338339][T12128] loop4: detected capacity change from 0 to 256
[  131.339168][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future
[  131.345735][T12128] msdos: Bad value for 'fmask'
[  131.352389][ T3413] rtc rtc0: __rtc_set_alarm: err=-22
[  131.372924][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.531216][T12145] rdma_op ffff888125911980 conn xmit_rdma 0000000000000000
[  131.580940][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.591925][ T1035] hid-generic 0000:0006:0000.0003: unknown main item tag 0x0
[  131.600063][ T1035] hid-generic 0000:0006:0000.0003: unknown main item tag 0x0
[  131.607858][ T1035] hid-generic 0000:0006:0000.0003: unknown main item tag 0x0
[  131.627547][ T1035] hid-generic 0000:0006:0000.0003: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  131.648255][T12162] vhci_hcd: invalid port number 66
[  131.653428][T12162] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  131.725612][T12162] loop0: detected capacity change from 0 to 8192
[  131.786552][T12162]  loop0: p1 p2 p3 p4
[  131.790664][T12162] loop0: p1 start 51379968 is beyond EOD, truncated
[  131.810151][T12162] loop0: p3 size 15991040 extends beyond EOD, truncated
[  131.824395][T12162] loop0: p4 start 16711680 is beyond EOD, truncated
[  131.837924][T12162] netlink: 'syz.0.3558': attribute type 1 has an invalid length.
[  131.888134][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.928690][T12201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.000342][T12215] loop0: detected capacity change from 0 to 512
[  132.290749][T12275] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  132.299908][T12275] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  132.329557][T12277] SELinux:  Context system_u:object_r:semanage_store_t:s0 is not valid (left unmapped).
[  132.394642][T12289] loop4: detected capacity change from 0 to 256
[  132.411198][T12289] FAT-fs (loop4): Directory bread(block 64) failed
[  132.423789][T12289] FAT-fs (loop4): Directory bread(block 65) failed
[  132.437492][T12289] FAT-fs (loop4): Directory bread(block 66) failed
[  132.444304][T12289] FAT-fs (loop4): Directory bread(block 67) failed
[  132.453246][T12289] FAT-fs (loop4): Directory bread(block 68) failed
[  132.461440][T12289] FAT-fs (loop4): Directory bread(block 69) failed
[  132.470309][T12289] FAT-fs (loop4): Directory bread(block 70) failed
[  132.478528][T12289] FAT-fs (loop4): Directory bread(block 71) failed
[  132.485555][T12289] FAT-fs (loop4): Directory bread(block 72) failed
[  132.492264][T12289] FAT-fs (loop4): Directory bread(block 73) failed
[  132.562476][T12302] vhci_hcd: invalid port number 66
[  132.567663][T12302] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  132.629859][T12313] loop0: detected capacity change from 0 to 256
[  132.657414][T12302] loop5: detected capacity change from 0 to 8192
[  132.676968][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.685760][T12313] FAT-fs (loop0): Filesystem has been set read-only
[  132.697560][T12302]  loop5: p1 p2 p3 p4
[  132.697804][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.707783][T12302] loop5: p1 start 51379968 is beyond EOD, truncated
[  132.712996][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.731826][T12302] loop5: p3 size 15991040 extends beyond EOD, truncated
[  132.751679][T12302] loop5: p4 start 16711680 is beyond EOD, truncated
[  132.761096][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.778193][T12302] netlink: 'syz.5.3619': attribute type 1 has an invalid length.
[  132.786097][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.838422][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.868670][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.896060][T12328] pim6reg: entered allmulticast mode
[  132.899016][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.911266][T12328] pim6reg: left allmulticast mode
[  132.935877][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  132.990742][T12313] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  133.384100][T12345] syzkaller0: entered allmulticast mode
[  133.401454][T12345] syzkaller0 (unregistering): left allmulticast mode
[  133.432252][   T29] kauditd_printk_skb: 234 callbacks suppressed
[  133.432266][   T29] audit: type=1400 audit(1758067985.462:221015): avc:  denied  { ioctl } for  pid=12346 comm="syz.0.3638" path="socket:[38050]" dev="sockfs" ino=38050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  133.571319][   T29] audit: type=1400 audit(1758067985.602:221016): avc:  denied  { read } for  pid=12350 comm="syz.0.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  133.607416][T12353] vhci_hcd: invalid port number 66
[  133.612620][T12353] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  133.691917][T12353] loop2: detected capacity change from 0 to 8192
[  133.727244][T12353]  loop2: p1 p2 p3 p4
[  133.732136][T12353] loop2: p1 start 51379968 is beyond EOD, truncated
[  133.747576][T12353] loop2: p3 size 15991040 extends beyond EOD, truncated
[  133.760260][T12353] loop2: p4 start 16711680 is beyond EOD, truncated
[  133.790746][T12360] netlink: 'syz.3.3645': attribute type 10 has an invalid length.
[  133.801276][T12353] netlink: 'syz.2.3641': attribute type 1 has an invalid length.
[  133.818816][T12360] team0: Device hsr_slave_0 failed to register rx_handler
[  133.820003][T12364] loop0: detected capacity change from 0 to 256
[  133.842765][T12365] loop4: detected capacity change from 0 to 2048
[  133.857691][T12364] FAT-fs (loop0): Directory bread(block 64) failed
[  133.864704][T12364] FAT-fs (loop0): Directory bread(block 65) failed
[  133.871302][T12364] FAT-fs (loop0): Directory bread(block 66) failed
[  133.878046][T12364] FAT-fs (loop0): Directory bread(block 67) failed
[  133.884773][T12364] FAT-fs (loop0): Directory bread(block 68) failed
[  133.896177][T12364] FAT-fs (loop0): Directory bread(block 69) failed
[  133.903105][T12365]  loop4: p2 p3 p7
[  133.907802][T12364] FAT-fs (loop0): Directory bread(block 70) failed
[  133.915024][T12364] FAT-fs (loop0): Directory bread(block 71) failed
[  133.930135][T12364] FAT-fs (loop0): Directory bread(block 72) failed
[  133.936857][T12364] FAT-fs (loop0): Directory bread(block 73) failed
[  133.946488][T12371] vhci_hcd: invalid port number 66
[  133.951635][T12371] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  134.003968][T12374] lo speed is unknown, defaulting to 1000
[  134.011265][T12374] lo speed is unknown, defaulting to 1000
[  134.033711][T12371] loop2: detected capacity change from 0 to 8192
[  134.096702][T12371]  loop2: p1 p2 p3 p4
[  134.104086][T12371] loop2: p1 start 51379968 is beyond EOD, truncated
[  134.114656][T12371] loop2: p3 size 15991040 extends beyond EOD, truncated
[  134.123642][T12371] loop2: p4 start 16711680 is beyond EOD, truncated
[  134.139924][T12371] netlink: 'syz.2.3648': attribute type 1 has an invalid length.
[  134.147771][T12371] __nla_validate_parse: 10 callbacks suppressed
[  134.147791][T12371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3648'.
[  134.170257][   T29] audit: type=1326 audit(1758067986.202:221017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.195276][   T29] audit: type=1326 audit(1758067986.232:221018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.202985][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'.
[  134.219943][   T29] audit: type=1326 audit(1758067986.232:221019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.251875][   T29] audit: type=1326 audit(1758067986.232:221020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.301970][   T29] audit: type=1326 audit(1758067986.232:221021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.302039][T12398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3660'.
[  134.335580][   T29] audit: type=1326 audit(1758067986.232:221022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.360159][   T29] audit: type=1326 audit(1758067986.232:221023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.384763][   T29] audit: type=1326 audit(1758067986.232:221024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  134.493021][T12414] loop0: detected capacity change from 0 to 1024
[  134.512523][T12414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.557721][T12414] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #15: comm syz.0.3668: corrupted xattr block 209: invalid header
[  134.611798][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.710686][T12433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3674'.
[  134.730535][T12435] vhci_hcd: invalid port number 66
[  134.735815][T12435] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  134.811195][T12435] netlink: 'syz.3.3675': attribute type 1 has an invalid length.
[  134.819129][T12435] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3675'.
[  134.843785][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'.
[  134.937961][T12457] lo speed is unknown, defaulting to 1000
[  134.944517][T12457] lo speed is unknown, defaulting to 1000
[  134.956650][T12460] netlink: 'syz.2.3682': attribute type 13 has an invalid length.
[  134.964600][T12460] netlink: 'syz.2.3682': attribute type 17 has an invalid length.
[  135.013184][T12460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.029398][   T23] lo speed is unknown, defaulting to 1000
[  135.035591][T12459] lo speed is unknown, defaulting to 1000
[  135.059845][T12459] lo speed is unknown, defaulting to 1000
[  135.174435][T12479] loop5: detected capacity change from 0 to 2048
[  135.216670][T12479]  loop5: p1 < > p4
[  135.221167][T12479] loop5: p4 size 8388608 extends beyond EOD, truncated
[  135.266802][T12489] vhci_hcd: invalid port number 66
[  135.271992][T12489] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  135.318787][T12489] loop5: detected capacity change from 0 to 8192
[  135.347527][T12489]  loop5: p1 p2 p3 p4
[  135.351753][T12489] loop5: p1 start 51379968 is beyond EOD, truncated
[  135.359247][T12489] loop5: p3 size 15991040 extends beyond EOD, truncated
[  135.367515][T12489] loop5: p4 start 16711680 is beyond EOD, truncated
[  135.378672][T12489] netlink: 'syz.5.3694': attribute type 1 has an invalid length.
[  135.387384][T12489] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3694'.
[  135.398102][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'.
[  135.469720][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3699'.
[  135.478868][T12501] netem: change failed
[  135.485728][T12499] lo speed is unknown, defaulting to 1000
[  135.493846][T12499] lo speed is unknown, defaulting to 1000
[  135.505136][T12503] loop5: detected capacity change from 0 to 512
[  135.523001][T12503] EXT4-fs (loop5): orphan cleanup on readonly fs
[  135.530450][T12503] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3700: bad orphan inode 13
[  135.541269][T12503] ext4_test_bit(bit=12, block=18) = 1
[  135.547437][T12503] is_bad_inode(inode)=0
[  135.551787][T12503] NEXT_ORPHAN(inode)=2130706432
[  135.556735][T12503] max_ino=32
[  135.559943][T12503] i_nlink=1
[  135.564732][T12503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  135.584910][T12503] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  135.608172][T12503] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3700: bg 0: block 248: padding at end of block bitmap is not set
[  135.632739][T12503] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3700: Failed to acquire dquot type 1
[  135.645125][T12503] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  135.647497][T12510] vhci_hcd: invalid port number 66
[  135.664969][T12510] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  135.712837][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.730381][T12510] netlink: 'syz.3.3701': attribute type 1 has an invalid length.
[  135.738174][T12510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3701'.
[  135.781861][T12516] openvswitch: netlink: Message has 6 unknown bytes.
[  135.991706][T12547] vhci_hcd: invalid port number 66
[  135.996979][T12547] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  136.024328][T12549] vhci_hcd: invalid port number 66
[  136.029542][T12549] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  136.047455][T12551] macvtap0: refused to change device tx_queue_len
[  136.110825][T12555] loop2: detected capacity change from 0 to 256
[  136.123078][T12547] loop0: detected capacity change from 0 to 8192
[  136.178133][T12547]  loop0: p1 p2 p3 p4
[  136.191922][T12547] loop0: p1 start 51379968 is beyond EOD, truncated
[  136.207235][T12547] loop0: p3 size 15991040 extends beyond EOD, truncated
[  136.223755][T12549] netlink: 'syz.3.3718': attribute type 1 has an invalid length.
[  136.237642][T12547] loop0: p4 start 16711680 is beyond EOD, truncated
[  136.321413][T12562] lo speed is unknown, defaulting to 1000
[  136.328962][T12565] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967272. macoff=96
[  136.336862][T12562] lo speed is unknown, defaulting to 1000
[  136.461002][T12574] IPv6: NLM_F_CREATE should be specified when creating new route
[  136.582260][T12593] vhci_hcd: invalid port number 66
[  136.587468][T12593] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  136.590627][T12590] bond1: entered promiscuous mode
[  136.599753][T12590] bond1: entered allmulticast mode
[  136.635333][T12593] loop2: detected capacity change from 0 to 8192
[  136.642919][T12590] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.659952][T12590] bond1 (unregistering): Released all slaves
[  136.692483][T12593]  loop2: p1 p2 p3 p4
[  136.698675][T12593] loop2: p1 start 51379968 is beyond EOD, truncated
[  136.720847][T12593] loop2: p3 size 15991040 extends beyond EOD, truncated
[  136.734079][T12593] loop2: p4 start 16711680 is beyond EOD, truncated
[  136.835244][T12613] loop2: detected capacity change from 0 to 512
[  136.876480][T12613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.908574][T12622] loop5: detected capacity change from 0 to 512
[  136.937437][T12613] ext4 filesystem being mounted at /760/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.949922][T12622] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  136.971267][T12622] EXT4-fs (loop5): 1 truncate cleaned up
[  136.977645][T12624] lo speed is unknown, defaulting to 1000
[  136.983787][T12624] lo speed is unknown, defaulting to 1000
[  137.007411][T12622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.025766][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.049543][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.077508][T12632] vhci_hcd: invalid port number 66
[  137.082681][T12632] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  137.150611][T12642] loop4: detected capacity change from 0 to 512
[  137.168927][T12642] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  137.184336][T12642] EXT4-fs (loop4): mount failed
[  137.215468][T12652] vhci_hcd: invalid port number 66
[  137.220696][T12652] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  137.292408][T12652] loop0: detected capacity change from 0 to 8192
[  137.323206][T12667] loop5: detected capacity change from 0 to 512
[  137.347470][T12652]  loop0: p1 p2 p3 p4
[  137.351683][T12652] loop0: p1 start 51379968 is beyond EOD, truncated
[  137.366905][T12667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.382768][T12652] loop0: p3 size 15991040 extends beyond EOD, truncated
[  137.396530][T12675] lo speed is unknown, defaulting to 1000
[  137.403018][T12675] lo speed is unknown, defaulting to 1000
[  137.415934][T12667] ext4 filesystem being mounted at /745/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.429353][T12652] loop0: p4 start 16711680 is beyond EOD, truncated
[  137.454199][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.563915][T12681] loop0: detected capacity change from 0 to 512
[  137.578872][T12681] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3767: bg 0: block 104: invalid block bitmap
[  137.602159][T12681] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  137.613441][T12681] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3767: invalid indirect mapped block 1 (level 1)
[  137.634737][T12681] EXT4-fs (loop0): 1 truncate cleaned up
[  137.641303][T12681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.693781][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.820431][T12709] lo speed is unknown, defaulting to 1000
[  137.848004][T12709] lo speed is unknown, defaulting to 1000
[  137.854420][T12723] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  138.001050][T12740] bond0: entered promiscuous mode
[  138.006123][T12740] bond0: entered allmulticast mode
[  138.011901][T12740] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.025109][T12740] bond0 (unregistering): Released all slaves
[  138.119916][T12751] loop4: detected capacity change from 0 to 512
[  138.137883][T12748] loop2: detected capacity change from 0 to 512
[  138.159563][T12751] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  138.171412][T12751] EXT4-fs (loop4): orphan cleanup on readonly fs
[  138.205036][T12748] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  138.212195][T12761] vhci_hcd: invalid port number 66
[  138.225587][T12761] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  138.230543][T12748] EXT4-fs (loop2): mount failed
[  138.244579][T12751] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3795: corrupted inode contents
[  138.260909][T12751] EXT4-fs (loop4): Remounting filesystem read-only
[  138.267862][T12751] EXT4-fs (loop4): 1 truncate cleaned up
[  138.273825][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  138.285125][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  138.311999][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  138.323543][T12751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.347822][T12761] loop0: detected capacity change from 0 to 8192
[  138.363655][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.378217][T12761]  loop0: p1 p2 p3 p4
[  138.382396][T12761] loop0: p1 start 51379968 is beyond EOD, truncated
[  138.384576][T12761] loop0: p3 size 15991040 extends beyond EOD, truncated
[  138.386896][T12761] loop0: p4 start 16711680 is beyond EOD, truncated
[  138.388228][T12766] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  138.438104][T12761] validate_nla: 4 callbacks suppressed
[  138.438146][T12761] netlink: 'syz.0.3808': attribute type 1 has an invalid length.
[  138.468912][   T29] kauditd_printk_skb: 175 callbacks suppressed
[  138.468927][   T29] audit: type=1326 audit(1758067990.502:221190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.4.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899879eba9 code=0x7ffc0000
[  138.499545][   T29] audit: type=1326 audit(1758067990.502:221191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.4.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899879eba9 code=0x7ffc0000
[  138.541690][T12776] vhci_hcd: invalid port number 66
[  138.546887][T12776] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  138.605435][   T29] audit: type=1400 audit(1758067990.632:221192): avc:  denied  { read write } for  pid=12786 comm="syz.3.3806" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  138.630816][   T29] audit: type=1400 audit(1758067990.632:221193): avc:  denied  { open } for  pid=12786 comm="syz.3.3806" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  138.664435][T12776] loop0: detected capacity change from 0 to 8192
[  138.726849][T12776]  loop0: p1 p2 p3 p4
[  138.731038][T12776] loop0: p1 start 51379968 is beyond EOD, truncated
[  138.739365][T12776] loop0: p3 size 15991040 extends beyond EOD, truncated
[  138.747040][T12776] loop0: p4 start 16711680 is beyond EOD, truncated
[  138.758240][T12776] netlink: 'syz.0.3813': attribute type 1 has an invalid length.
[  138.818383][T12814] vhci_hcd: invalid port number 66
[  138.823556][T12814] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  138.867131][T12814] loop2: detected capacity change from 0 to 8192
[  138.890447][   T29] audit: type=1400 audit(1758067990.922:221194): avc:  denied  { execute } for  pid=12820 comm="syz.0.3825" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  138.918146][T12814]  loop2: p1 p2 p3 p4
[  138.922204][T12814] loop2: p1 start 51379968 is beyond EOD, truncated
[  138.931810][T12814] loop2: p3 size 15991040 extends beyond EOD, truncated
[  138.940120][T12814] loop2: p4 start 16711680 is beyond EOD, truncated
[  138.951451][T12814] netlink: 'syz.2.3822': attribute type 1 has an invalid length.
[  139.292977][T12835] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  139.364941][   T29] audit: type=1326 audit(1758067991.392:221195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  139.392883][   T29] audit: type=1326 audit(1758067991.432:221196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  139.417505][   T29] audit: type=1326 audit(1758067991.432:221197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  139.441984][   T29] audit: type=1326 audit(1758067991.432:221198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  139.466542][   T29] audit: type=1326 audit(1758067991.432:221199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  139.626123][T12867] vhci_hcd: invalid port number 66
[  139.632012][T12867] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  139.715908][T12867] loop5: detected capacity change from 0 to 8192
[  139.747485][T12867]  loop5: p1 p2 p3 p4
[  139.751565][T12867] loop5: p1 start 51379968 is beyond EOD, truncated
[  139.759964][T12867] loop5: p3 size 15991040 extends beyond EOD, truncated
[  139.774914][T12867] loop5: p4 start 16711680 is beyond EOD, truncated
[  139.796350][T12867] netlink: 'syz.5.3846': attribute type 1 has an invalid length.
[  139.804311][T12867] __nla_validate_parse: 19 callbacks suppressed
[  139.804342][T12867] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3846'.
[  139.855937][T12898] vhci_hcd: invalid port number 66
[  139.855941][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'.
[  139.870740][T12898] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  139.972706][T12898] loop0: detected capacity change from 0 to 8192
[  140.018678][T12898]  loop0: p1 p2 p3 p4
[  140.022808][T12898] loop0: p1 start 51379968 is beyond EOD, truncated
[  140.030600][T12898] loop0: p3 size 15991040 extends beyond EOD, truncated
[  140.039382][T12898] loop0: p4 start 16711680 is beyond EOD, truncated
[  140.050888][T12898] netlink: 'syz.0.3858': attribute type 1 has an invalid length.
[  140.058804][T12898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3858'.
[  140.071221][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'.
[  140.195145][T12927] lo speed is unknown, defaulting to 1000
[  140.211777][T12927] lo speed is unknown, defaulting to 1000
[  140.254777][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3873'.
[  140.273640][T12937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3874'.
[  140.290460][T12939] vhci_hcd: invalid port number 66
[  140.295648][T12939] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  140.389170][T12939] loop2: detected capacity change from 0 to 8192
[  140.397872][T12943] lo speed is unknown, defaulting to 1000
[  140.403929][T12943] lo speed is unknown, defaulting to 1000
[  140.447399][T12939]  loop2: p1 p2 p3 p4
[  140.453203][T12939] loop2: p1 start 51379968 is beyond EOD, truncated
[  140.465084][T12939] loop2: p3 size 15991040 extends beyond EOD, truncated
[  140.495951][T12939] loop2: p4 start 16711680 is beyond EOD, truncated
[  140.520185][T12939] netlink: 'syz.2.3875': attribute type 1 has an invalid length.
[  140.528809][T12939] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3875'.
[  140.560610][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3875'.
[  140.865030][T12993] ALSA: seq fatal error: cannot create timer (-19)
[  140.881514][T13002] vhci_hcd: invalid port number 66
[  140.887604][T13002] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  140.940269][T13006] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3904'.
[  140.955915][T13002] loop0: detected capacity change from 0 to 8192
[  141.006713][T13002]  loop0: p1 p2 p3 p4
[  141.009291][T13017] lo speed is unknown, defaulting to 1000
[  141.012835][T13002] loop0: p1 start 51379968 is beyond EOD, truncated
[  141.017382][T13017] lo speed is unknown, defaulting to 1000
[  141.025550][T13002] loop0: p3 size 15991040 extends beyond EOD, truncated
[  141.039591][T13002] loop0: p4 start 16711680 is beyond EOD, truncated
[  141.053900][T13002] netlink: 'syz.0.3902': attribute type 1 has an invalid length.
[  141.061812][T13002] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3902'.
[  141.227603][T13048] vhci_hcd: invalid port number 66
[  141.232766][T13048] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  141.269491][T13051] vhci_hcd: invalid port number 66
[  141.274697][T13051] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  141.290758][T13048] loop0: detected capacity change from 0 to 8192
[  141.337110][T13048]  loop0: p1 p2 p3 p4
[  141.347982][T13048] loop0: p1 start 51379968 is beyond EOD, truncated
[  141.374351][T13051] loop2: detected capacity change from 0 to 8192
[  141.382316][T13048] loop0: p3 size 15991040 extends beyond EOD, truncated
[  141.391439][T13048] loop0: p4 start 16711680 is beyond EOD, truncated
[  141.401310][T13048] netlink: 'syz.0.3921': attribute type 1 has an invalid length.
[  141.419457][T13051]  loop2: p1 p2 p3 p4
[  141.424304][T13051] loop2: p1 start 51379968 is beyond EOD, truncated
[  141.437744][T13051] loop2: p3 size 15991040 extends beyond EOD, truncated
[  141.465530][T13051] loop2: p4 start 16711680 is beyond EOD, truncated
[  141.495794][T13051] netlink: 'syz.2.3922': attribute type 1 has an invalid length.
[  141.537300][T13078] loop0: detected capacity change from 0 to 1024
[  141.544152][T13078] EXT4-fs: Ignoring removed bh option
[  141.556017][T13076] lo speed is unknown, defaulting to 1000
[  141.563001][T13076] lo speed is unknown, defaulting to 1000
[  141.573821][T13078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.605453][T13078] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #15: comm syz.0.3933: corrupted xattr entries
[  141.619385][T13078] EXT4-fs (loop0): Remounting filesystem read-only
[  141.626054][T13078] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.3933: dec ref error=-30
[  141.654021][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.683285][T13094] loop5: detected capacity change from 0 to 128
[  141.691539][T13094] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.704544][T13094] ext4 filesystem being mounted at /779/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  141.742703][T13094] EXT4-fs (loop5): shut down requested (2)
[  141.773042][ T3565] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.890097][T13111] macvtap0: refused to change device tx_queue_len
[  142.437303][T13153] macvtap0: refused to change device tx_queue_len
[  142.481990][T13157] lo speed is unknown, defaulting to 1000
[  142.488269][T13157] lo speed is unknown, defaulting to 1000
[  142.952459][T13172] vhci_hcd: invalid port number 66
[  142.957751][T13172] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  142.998714][T13175] lo speed is unknown, defaulting to 1000
[  143.004723][T13172] loop5: detected capacity change from 0 to 8192
[  143.005003][T13175] lo speed is unknown, defaulting to 1000
[  143.056640][T13172]  loop5: p1 p2 p3 p4
[  143.060795][T13172] loop5: p1 start 51379968 is beyond EOD, truncated
[  143.069168][T13172] loop5: p3 size 15991040 extends beyond EOD, truncated
[  143.076974][T13172] loop5: p4 start 16711680 is beyond EOD, truncated
[  143.088649][T13172] netlink: 'syz.5.3970': attribute type 1 has an invalid length.
[  143.420357][T13181] Set syz1 is full, maxelem 65536 reached
[  143.503129][T13202] loop2: detected capacity change from 0 to 8192
[  143.503993][T13204] lo speed is unknown, defaulting to 1000
[  143.521648][T13207] vhci_hcd: invalid port number 66
[  143.527619][T13207] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  143.545715][T13204] lo speed is unknown, defaulting to 1000
[  143.580201][T13207] loop5: detected capacity change from 0 to 8192
[  143.613762][T13214] vhci_hcd: invalid port number 66
[  143.618985][T13214] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  143.627248][T13207]  loop5: p1 p2 p3 p4
[  143.631297][T13207] loop5: p1 start 51379968 is beyond EOD, truncated
[  143.646663][T13207] loop5: p3 size 15991040 extends beyond EOD, truncated
[  143.664458][T13207] loop5: p4 start 16711680 is beyond EOD, truncated
[  143.678086][T13214] loop2: detected capacity change from 0 to 8192
[  143.681248][T13207] validate_nla: 1 callbacks suppressed
[  143.681268][T13207] netlink: 'syz.5.3984': attribute type 1 has an invalid length.
[  143.736566][T13214]  loop2: p1 p2 p3 p4
[  143.740716][T13214] loop2: p1 start 51379968 is beyond EOD, truncated
[  143.748411][T13214] loop2: p3 size 15991040 extends beyond EOD, truncated
[  143.758030][T13214] loop2: p4 start 16711680 is beyond EOD, truncated
[  143.965515][T13242] lo speed is unknown, defaulting to 1000
[  143.977926][T13242] lo speed is unknown, defaulting to 1000
[  144.162683][T13261] vhci_hcd: invalid port number 66
[  144.167916][T13261] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  144.223305][T13261] loop5: detected capacity change from 0 to 8192
[  144.266842][T13261]  loop5: p1 p2 p3 p4
[  144.271094][T13261] loop5: p1 start 51379968 is beyond EOD, truncated
[  144.279740][T13261] loop5: p3 size 15991040 extends beyond EOD, truncated
[  144.287948][T13261] loop5: p4 start 16711680 is beyond EOD, truncated
[  144.379481][T13266] vhci_hcd: invalid port number 66
[  144.384662][T13266] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  144.451635][T13273] rtc_cmos 00:00: Alarms can be up to one day in the future
[  144.467055][T13266] loop0: detected capacity change from 0 to 8192
[  144.506570][T13266]  loop0: p1 p2 p3 p4
[  144.510834][T13266] loop0: p1 start 51379968 is beyond EOD, truncated
[  144.520122][T13266] loop0: p3 size 15991040 extends beyond EOD, truncated
[  144.528546][T13266] loop0: p4 start 16711680 is beyond EOD, truncated
[  144.536517][T13278] vhci_hcd: invalid port number 66
[  144.541730][T13278] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  144.615907][T13278] loop5: detected capacity change from 0 to 8192
[  144.655040][T13285] lo speed is unknown, defaulting to 1000
[  144.661449][T13285] lo speed is unknown, defaulting to 1000
[  144.687357][T13278]  loop5: p1 p2 p3 p4
[  144.691468][T13278] loop5: p1 start 51379968 is beyond EOD, truncated
[  144.711431][T13278] loop5: p3 size 15991040 extends beyond EOD, truncated
[  144.726640][T13278] loop5: p4 start 16711680 is beyond EOD, truncated
[  144.744826][T13278] netlink: 'syz.5.4011': attribute type 1 has an invalid length.
[  144.794683][T13293] vhci_hcd: invalid port number 66
[  144.799912][T13293] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  144.874792][T13293] loop0: detected capacity change from 0 to 8192
[  144.889168][T13301] lo speed is unknown, defaulting to 1000
[  144.895438][T13301] lo speed is unknown, defaulting to 1000
[  144.921565][T13293]  loop0: p1 p2 p3 p4
[  144.933299][T13310] __nla_validate_parse: 16 callbacks suppressed
[  144.933316][T13310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4024'.
[  144.949915][T13293] loop0: p1 start 51379968 is beyond EOD, truncated
[  144.962576][T13293] loop0: p3 size 15991040 extends beyond EOD, truncated
[  144.970613][T13293] loop0: p4 start 16711680 is beyond EOD, truncated
[  144.982300][T13293] netlink: 'syz.0.4028': attribute type 1 has an invalid length.
[  144.990086][T13293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4028'.
[  145.003141][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'.
[  145.003160][T13312] vhci_hcd: invalid port number 66
[  145.003173][T13312] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  145.045583][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811aec3800: rx timeout, send abort
[  145.054623][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aec3800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[  145.124155][T13312] loop5: detected capacity change from 0 to 8192
[  145.134793][T13323] loop2: detected capacity change from 0 to 512
[  145.145620][T13319] lo speed is unknown, defaulting to 1000
[  145.152214][T13312]  loop5: p1 p2 p3 p4
[  145.157304][T13312] loop5: p1 start 51379968 is beyond EOD, truncated
[  145.164424][T13319] lo speed is unknown, defaulting to 1000
[  145.164894][T13312] loop5: p3 size 15991040 extends beyond EOD, truncated
[  145.179810][T13312] loop5: p4 start 16711680 is beyond EOD, truncated
[  145.194000][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4025'.
[  145.314446][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future
[  145.322170][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future
[  145.329861][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future
[  145.337547][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future
[  145.344872][ T3385] rtc rtc0: __rtc_set_alarm: err=-22
[  145.446314][T13344] vhci_hcd: invalid port number 66
[  145.451578][T13344] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  145.606015][T13348] loop4: detected capacity change from 0 to 8192
[  145.632627][T13354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4041'.
[  145.649074][T13347] lo speed is unknown, defaulting to 1000
[  145.659246][T13348]  loop4: p1 p2 p3 p4
[  145.663338][T13348] loop4: p1 start 51379968 is beyond EOD, truncated
[  145.676628][T13347] lo speed is unknown, defaulting to 1000
[  145.689900][T13348] loop4: p3 size 15991040 extends beyond EOD, truncated
[  145.708029][T13348] loop4: p4 start 16711680 is beyond EOD, truncated
[  145.719478][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4044'.
[  145.742399][T13358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.760699][T13344] netlink: 'syz.4.4038': attribute type 1 has an invalid length.
[  145.769311][T13344] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4038'.
[  145.805834][T13358] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.027317][T13331] Set syz1 is full, maxelem 65536 reached
[  146.051671][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4038'.
[  146.105652][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  146.105671][   T29] audit: type=1326 audit(1758067998.132:221274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998795b67 code=0x7ffc0000
[  146.135586][T13364] loop2: detected capacity change from 0 to 512
[  146.156111][T13364] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4046: casefold flag without casefold feature
[  146.169446][   T29] audit: type=1326 audit(1758067998.132:221275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f899873ada9 code=0x7ffc0000
[  146.193206][   T29] audit: type=1326 audit(1758067998.132:221276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998795b67 code=0x7ffc0000
[  146.202487][T13364] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4046: couldn't read orphan inode 15 (err -117)
[  146.216968][   T29] audit: type=1326 audit(1758067998.132:221277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f899873ada9 code=0x7ffc0000
[  146.217068][   T29] audit: type=1326 audit(1758067998.132:221278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998795b67 code=0x7ffc0000
[  146.217101][   T29] audit: type=1326 audit(1758067998.132:221279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f899873ada9 code=0x7ffc0000
[  146.217166][   T29] audit: type=1326 audit(1758067998.132:221280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998795b67 code=0x7ffc0000
[  146.217196][   T29] audit: type=1326 audit(1758067998.132:221281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f899873ada9 code=0x7ffc0000
[  146.217227][   T29] audit: type=1326 audit(1758067998.132:221282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8998795b67 code=0x7ffc0000
[  146.217313][   T29] audit: type=1326 audit(1758067998.132:221283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.4.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f899873ada9 code=0x7ffc0000
[  146.409931][T13364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.477197][T13379] lo speed is unknown, defaulting to 1000
[  146.477505][T13381] loop5: detected capacity change from 0 to 512
[  146.483835][T13379] lo speed is unknown, defaulting to 1000
[  146.583803][T13389] vhci_hcd: invalid port number 66
[  146.589747][T13389] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  146.644385][T13389] loop4: detected capacity change from 0 to 8192
[  146.667548][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.707449][T13389]  loop4: p1 p2 p3 p4
[  146.713859][T13389] loop4: p1 start 51379968 is beyond EOD, truncated
[  146.722953][T13389] loop4: p3 size 15991040 extends beyond EOD, truncated
[  146.734345][T13389] loop4: p4 start 16711680 is beyond EOD, truncated
[  146.744146][T13389] netlink: 'syz.4.4054': attribute type 1 has an invalid length.
[  146.752809][T13389] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4054'.
[  146.786532][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4054'.
[  146.860458][T13409] vhci_hcd: invalid port number 66
[  146.865647][T13409] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  146.925214][T13409] loop0: detected capacity change from 0 to 8192
[  146.956775][T13409]  loop0: p1 p2 p3 p4
[  146.961614][T13409] loop0: p1 start 51379968 is beyond EOD, truncated
[  146.969599][T13409] loop0: p3 size 15991040 extends beyond EOD, truncated
[  146.978151][T13409] loop0: p4 start 16711680 is beyond EOD, truncated
[  146.988527][T13409] netlink: 'syz.0.4071': attribute type 1 has an invalid length.
[  147.068782][T13412] lo speed is unknown, defaulting to 1000
[  147.077915][T13412] lo speed is unknown, defaulting to 1000
[  147.094614][T13419] loop0: detected capacity change from 0 to 256
[  147.134379][T13419] FAT-fs (loop0): Directory bread(block 64) failed
[  147.143227][T13419] FAT-fs (loop0): Directory bread(block 65) failed
[  147.158580][T13419] FAT-fs (loop0): Directory bread(block 66) failed
[  147.172162][T13419] FAT-fs (loop0): Directory bread(block 67) failed
[  147.186491][T13419] FAT-fs (loop0): Directory bread(block 68) failed
[  147.199658][T13419] FAT-fs (loop0): Directory bread(block 69) failed
[  147.216348][T13419] FAT-fs (loop0): Directory bread(block 70) failed
[  147.226085][T13419] FAT-fs (loop0): Directory bread(block 71) failed
[  147.233614][T13419] FAT-fs (loop0): Directory bread(block 72) failed
[  147.242131][T13419] FAT-fs (loop0): Directory bread(block 73) failed
[  147.254436][T13428] vhci_hcd: invalid port number 66
[  147.259641][T13428] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  147.400923][T13428] netlink: 'syz.3.4079': attribute type 1 has an invalid length.
[  147.470638][T13441] vhci_hcd: invalid port number 66
[  147.475821][T13441] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  147.558355][T13441] netlink: 'syz.3.4074': attribute type 1 has an invalid length.
[  147.578299][T13455] vhci_hcd: invalid port number 66
[  147.583615][T13455] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  147.648904][T13465] vhci_hcd: invalid port number 66
[  147.652268][T13462] vhci_hcd: invalid port number 66
[  147.654136][T13465] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  147.666287][T13462] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  147.673628][T13455] loop4: detected capacity change from 0 to 8192
[  147.706677][T13455]  loop4: p1 p2 p3 p4
[  147.710742][T13455] loop4: p1 start 51379968 is beyond EOD, truncated
[  147.739271][T13465] loop0: detected capacity change from 0 to 8192
[  147.771832][T13455] loop4: p3 size 15991040 extends beyond EOD, truncated
[  147.801654][T13455] loop4: p4 start 16711680 is beyond EOD, truncated
[  147.837604][T13465]  loop0: p1 p2 p3 p4
[  147.850455][T13465] loop0: p1 start 51379968 is beyond EOD, truncated
[  147.864728][T13462] loop2: detected capacity change from 0 to 8192
[  147.883182][T13465] loop0: p3 size 15991040 extends beyond EOD, truncated
[  147.896160][T13465] loop0: p4 start 16711680 is beyond EOD, truncated
[  147.918477][T13465] netlink: 'syz.0.4086': attribute type 1 has an invalid length.
[  147.938020][T13462]  loop2: p1 p2 p3 p4
[  147.945412][T13462] loop2: p1 start 51379968 is beyond EOD, truncated
[  147.968878][T13462] loop2: p3 size 15991040 extends beyond EOD, truncated
[  147.982341][T13462] loop2: p4 start 16711680 is beyond EOD, truncated
[  148.002917][T13462] netlink: 'syz.2.4085': attribute type 1 has an invalid length.
[  148.072474][T13488] vhci_hcd: invalid port number 66
[  148.078614][T13488] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  148.153481][T13488] loop0: detected capacity change from 0 to 8192
[  148.161684][T13490] loop5: detected capacity change from 0 to 256
[  148.182391][T13490] FAT-fs (loop5): Directory bread(block 64) failed
[  148.189203][T13490] FAT-fs (loop5): Directory bread(block 65) failed
[  148.195744][T13490] FAT-fs (loop5): Directory bread(block 66) failed
[  148.202347][T13490] FAT-fs (loop5): Directory bread(block 67) failed
[  148.209883][T13490] FAT-fs (loop5): Directory bread(block 68) failed
[  148.216508][T13488]  loop0: p1 p2 p3 p4
[  148.217421][T13490] FAT-fs (loop5): Directory bread(block 69) failed
[  148.220632][T13488] loop0: p1 start 51379968 is beyond EOD, truncated
[  148.228783][T13490] FAT-fs (loop5): Directory bread(block 70) failed
[  148.235674][T13488] loop0: p3 size 15991040 extends beyond EOD, truncated
[  148.242001][T13490] FAT-fs (loop5): Directory bread(block 71) failed
[  148.248913][T13488] loop0: p4 start 16711680 is beyond EOD, 
[  148.254708][T13490] FAT-fs (loop5): Directory bread(block 72) failed
[  148.254761][T13490] FAT-fs (loop5): Directory bread(block 73) failed
[  148.261478][T13488] truncated
[  148.328893][T13502] lo speed is unknown, defaulting to 1000
[  148.335008][T13502] lo speed is unknown, defaulting to 1000
[  148.625359][T13522] vhci_hcd: invalid port number 66
[  148.630562][T13522] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  148.678300][T13522] loop0: detected capacity change from 0 to 8192
[  148.717528][T13522]  loop0: p1 p2 p3 p4
[  148.721675][T13522] loop0: p1 start 51379968 is beyond EOD, truncated
[  148.728776][T13522] loop0: p3 size 15991040 extends beyond EOD, truncated
[  148.737369][T13522] loop0: p4 start 16711680 is beyond EOD, truncated
[  148.747182][T13522] validate_nla: 1 callbacks suppressed
[  148.747199][T13522] netlink: 'syz.0.4105': attribute type 1 has an invalid length.
[  148.811743][T13532] vhci_hcd: invalid port number 66
[  148.817011][T13532] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  148.871752][T13537] lo speed is unknown, defaulting to 1000
[  148.884063][T13532] loop4: detected capacity change from 0 to 8192
[  148.891597][T13537] lo speed is unknown, defaulting to 1000
[  148.946538][T13532]  loop4: p1 p2 p3 p4
[  148.950602][T13532] loop4: p1 start 51379968 is beyond EOD, truncated
[  148.961662][T13532] loop4: p3 size 15991040 extends beyond EOD, truncated
[  148.969286][T13532] loop4: p4 start 16711680 is beyond EOD, truncated
[  148.989182][T13532] netlink: 'syz.4.4110': attribute type 1 has an invalid length.
[  149.036676][T13541] vhci_hcd: invalid port number 66
[  149.041908][T13541] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.061909][T13543] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  149.070250][T13543] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  149.083428][T13547] vhci_hcd: invalid port number 66
[  149.088657][T13547] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.129149][T13541] loop5: detected capacity change from 0 to 8192
[  149.198007][T13541]  loop5: p1 p2 p3 p4
[  149.203255][T13541] loop5: p1 start 51379968 is beyond EOD, truncated
[  149.219162][T13541] loop5: p3 size 15991040 extends beyond EOD, truncated
[  149.235426][T13557] vhci_hcd: invalid port number 66
[  149.240924][T13547] loop4: detected capacity change from 0 to 8192
[  149.247689][T13557] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.255473][T13541] loop5: p4 start 16711680 is beyond EOD, truncated
[  149.304889][T13547]  loop4: p1 p2 p3 p4
[  149.316780][T13547] loop4: p1 start 51379968 is beyond EOD, truncated
[  149.335420][T13547] loop4: p3 size 15991040 extends beyond EOD, truncated
[  149.350824][T13560] loop5: detected capacity change from 0 to 2048
[  149.357764][T13547] loop4: p4 start 16711680 is beyond EOD, truncated
[  149.366166][T13557] netlink: 'syz.3.4120': attribute type 1 has an invalid length.
[  149.382004][T13547] netlink: 'syz.4.4113': attribute type 1 has an invalid length.
[  149.418158][T13560]  loop5: p2 p3 p7
[  149.422612][T13562] lo speed is unknown, defaulting to 1000
[  149.437651][T13562] lo speed is unknown, defaulting to 1000
[  149.502408][T13568] vhci_hcd: invalid port number 66
[  149.507631][T13568] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.612429][T13568] loop5: detected capacity change from 0 to 8192
[  149.677956][T13568]  loop5: p1 p2 p3 p4
[  149.685278][T13568] loop5: p1 start 51379968 is beyond EOD, truncated
[  149.693341][T13568] loop5: p3 size 15991040 extends beyond EOD, truncated
[  149.720413][T13568] loop5: p4 start 16711680 is beyond EOD, truncated
[  149.740957][T13568] netlink: 'syz.5.4124': attribute type 1 has an invalid length.
[  149.850921][T13595] vhci_hcd: invalid port number 66
[  149.856111][T13595] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.904399][T13601] vhci_hcd: invalid port number 66
[  149.910372][T13601] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  149.957202][T13595] loop4: detected capacity change from 0 to 8192
[  149.962493][T13601] loop0: detected capacity change from 0 to 8192
[  150.006570][T13601]  loop0: p1 p2 p3 p4
[  150.006593][T13595]  loop4: p1 p2 p3 p4
[  150.011314][T13601] loop0: p1 start 51379968 is beyond EOD, truncated
[  150.014679][T13595] loop4: p1 start 51379968 is beyond EOD, truncated
[  150.025007][T13601] loop0: p3 size 15991040 extends beyond EOD, truncated
[  150.035904][T13601] loop0: p4 start 16711680 is beyond EOD, truncated
[  150.056643][T13595] loop4: p3 size 15991040 extends beyond EOD, truncated
[  150.071805][T13595] loop4: p4 start 16711680 is beyond EOD, truncated
[  150.085281][T13601] __nla_validate_parse: 29 callbacks suppressed
[  150.085302][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4136'.
[  150.108503][T13595] netlink: 'syz.4.4133': attribute type 1 has an invalid length.
[  150.116333][T13595] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4133'.
[  150.130502][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4140'.
[  150.147161][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'.
[  150.173000][T13607] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4150'.
[  150.206004][T13617] vhci_hcd: invalid port number 66
[  150.212069][T13617] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  150.272828][T13617] loop4: detected capacity change from 0 to 8192
[  150.297339][T13617]  loop4: p1 p2 p3 p4
[  150.301475][T13617] loop4: p1 start 51379968 is beyond EOD, truncated
[  150.320464][T13617] loop4: p3 size 15991040 extends beyond EOD, truncated
[  150.344809][T13617] loop4: p4 start 16711680 is beyond EOD, truncated
[  150.380211][T13617] netlink: 'syz.4.4144': attribute type 1 has an invalid length.
[  150.388874][T13617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4144'.
[  150.401095][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4144'.
[  150.455295][T13640] vhci_hcd: invalid port number 66
[  150.460515][T13640] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  150.575076][T13640] loop0: detected capacity change from 0 to 8192
[  150.584333][T13649] vhci_hcd: invalid port number 66
[  150.590217][T13649] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  150.616663][T13640]  loop0: p1 p2 p3 p4
[  150.620917][T13640] loop0: p1 start 51379968 is beyond EOD, truncated
[  150.645225][T13640] loop0: p3 size 15991040 extends beyond EOD, truncated
[  150.665953][T13640] loop0: p4 start 16711680 is beyond EOD, truncated
[  150.677383][T13653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4158'.
[  150.688431][T13649] netlink: 'syz.3.4156': attribute type 1 has an invalid length.
[  150.697067][T13649] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4156'.
[  150.707373][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'.
[  150.890113][T13667] macvtap0: refused to change device tx_queue_len
[  150.919842][T13670] vhci_hcd: invalid port number 66
[  150.925009][T13670] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  150.938807][T13672] loop0: detected capacity change from 0 to 512
[  150.949288][T13672] EXT4-fs (loop0): orphan cleanup on readonly fs
[  150.964230][T13672] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4165: bad orphan inode 13
[  150.985292][T13672] ext4_test_bit(bit=12, block=18) = 1
[  150.991625][T13672] is_bad_inode(inode)=0
[  150.995821][T13672] NEXT_ORPHAN(inode)=2130706432
[  151.000713][T13672] max_ino=32
[  151.003937][T13672] i_nlink=1
[  151.025029][T13670] loop2: detected capacity change from 0 to 8192
[  151.027485][T13677] lo speed is unknown, defaulting to 1000
[  151.034598][T13672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  151.047223][T13677] lo speed is unknown, defaulting to 1000
[  151.057077][T13672] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  151.077720][T13672] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4165: bg 0: block 248: padding at end of block bitmap is not set
[  151.100476][T13670]  loop2: p1 p2 p3 p4
[  151.104717][T13670] loop2: p1 start 51379968 is beyond EOD, truncated
[  151.119534][T13670] loop2: p3 size 15991040 extends beyond EOD, truncated
[  151.130681][T13672] __quota_error: 1175 callbacks suppressed
[  151.130701][T13672] Quota error (device loop0): write_blk: dquota write failed
[  151.144089][T13672] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  151.154791][T13672] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4165: Failed to acquire dquot type 1
[  151.186771][T13670] loop2: p4 start 16711680 is beyond EOD, truncated
[  151.204891][T13672] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  151.232276][T13670] netlink: 'syz.2.4167': attribute type 1 has an invalid length.
[  151.269211][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.301711][T13685] vhci_hcd: invalid port number 66
[  151.306934][T13685] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  151.318832][T13687] vhci_hcd: invalid port number 66
[  151.324021][T13687] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  151.372465][T13691] netem: change failed
[  151.419881][T13685] loop5: detected capacity change from 0 to 8192
[  151.427957][T13687] loop2: detected capacity change from 0 to 8192
[  151.467490][T13687]  loop2: p1 p2 p3 p4
[  151.471618][T13685]  loop5: p1 p2 p3 p4
[  151.478716][T13687] loop2: p1 start 51379968 is beyond EOD, truncated
[  151.485816][T13685] loop5: p1 start 51379968 is beyond EOD, truncated
[  151.496502][T13687] loop2: p3 size 15991040 extends beyond EOD, truncated
[  151.516174][T13685] loop5: p3 size 15991040 extends beyond EOD, truncated
[  151.526151][T13687] loop2: p4 start 16711680 is beyond EOD, truncated
[  151.545892][T13685] loop5: p4 start 16711680 is beyond EOD, truncated
[  151.558074][T13687] netlink: 'syz.2.4181': attribute type 1 has an invalid length.
[  151.662411][T13702] lo speed is unknown, defaulting to 1000
[  151.668934][T13702] lo speed is unknown, defaulting to 1000
[  151.993194][T13718] vhci_hcd: invalid port number 66
[  151.998415][T13718] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  152.097922][T13718] loop5: detected capacity change from 0 to 8192
[  152.147328][T13718]  loop5: p1 p2 p3 p4
[  152.151396][T13718] loop5: p1 start 51379968 is beyond EOD, truncated
[  152.158517][T13718] loop5: p3 size 15991040 extends beyond EOD, truncated
[  152.166098][T13718] loop5: p4 start 16711680 is beyond EOD, truncated
[  152.382655][T13727] vhci_hcd: invalid port number 66
[  152.388624][T13727] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  152.433281][T13727] loop0: detected capacity change from 0 to 8192
[  152.441394][T13730] vhci_hcd: invalid port number 66
[  152.447299][T13730] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  152.488463][T13730] loop5: detected capacity change from 0 to 8192
[  152.497734][T13727]  loop0: p1 p2 p3 p4
[  152.501789][T13727] loop0: p1 start 51379968 is beyond EOD, truncated
[  152.509690][T13727] loop0: p3 size 15991040 extends beyond EOD, truncated
[  152.517598][T13727] loop0: p4 start 16711680 is beyond EOD, truncated
[  152.540434][T13730]  loop5: p1 p2 p3 p4
[  152.544483][T13730] loop5: p1 start 51379968 is beyond EOD, truncated
[  152.565565][T13730] loop5: p3 size 15991040 extends beyond EOD, truncated
[  152.581666][T13730] loop5: p4 start 16711680 is beyond EOD, truncated
[  152.582890][T13734] vhci_hcd: invalid port number 66
[  152.593537][T13734] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  152.640883][T13736] lo speed is unknown, defaulting to 1000
[  152.669439][T13736] lo speed is unknown, defaulting to 1000
[  152.692807][T13734] loop4: detected capacity change from 0 to 8192
[  152.736869][T13734]  loop4: p1 p2 p3 p4
[  152.744935][T13734] loop4: p1 start 51379968 is beyond EOD, truncated
[  152.765486][T13734] loop4: p3 size 15991040 extends beyond EOD, truncated
[  152.787545][T13734] loop4: p4 start 16711680 is beyond EOD, truncated
[  153.105201][T13769] vhci_hcd: invalid port number 66
[  153.110481][T13769] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  153.151862][T13771] vhci_hcd: invalid port number 66
[  153.157137][T13771] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  153.166115][T13769] loop2: detected capacity change from 0 to 8192
[  153.214978][T13771] loop0: detected capacity change from 0 to 8192
[  153.222003][T13769]  loop2: p1 p2 p3 p4
[  153.226167][T13769] loop2: p1 start 51379968 is beyond EOD, truncated
[  153.234973][T13769] loop2: p3 size 15991040 extends beyond EOD, truncated
[  153.243031][T13769] loop2: p4 start 16711680 is beyond EOD, truncated
[  153.268203][T13771]  loop0: p1 p2 p3 p4
[  153.275641][T13771] loop0: p1 start 51379968 is beyond EOD, truncated
[  153.292831][T13771] loop0: p3 size 15991040 extends beyond EOD, truncated
[  153.309364][T13771] loop0: p4 start 16711680 is beyond EOD, truncated
[  153.385718][   T29] audit: type=1400 audit(1758068005.412:222459): avc:  granted  { setsecparam } for  pid=13776 comm="syz.0.4206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  153.423488][T13779] lo speed is unknown, defaulting to 1000
[  153.435235][T13779] lo speed is unknown, defaulting to 1000
[  153.472844][T13781] lo speed is unknown, defaulting to 1000
[  153.488817][T13781] lo speed is unknown, defaulting to 1000
[  153.529333][T13786] vhci_hcd: invalid port number 66
[  153.534590][T13786] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  153.579202][T13786] loop2: detected capacity change from 0 to 8192
[  153.617492][T13786]  loop2: p1 p2 p3 p4
[  153.621616][T13786] loop2: p1 start 51379968 is beyond EOD, truncated
[  153.634465][T13786] loop2: p3 size 15991040 extends beyond EOD, truncated
[  153.643378][T13786] loop2: p4 start 16711680 is beyond EOD, truncated
[  153.845476][   T29] audit: type=1326 audit(1758068005.872:222460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.915880][T13809] loop2: detected capacity change from 0 to 1024
[  153.924191][   T29] audit: type=1326 audit(1758068005.902:222461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.947903][   T29] audit: type=1326 audit(1758068005.902:222462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.971610][   T29] audit: type=1326 audit(1758068005.902:222463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.977047][T13809] EXT4-fs: Ignoring removed nobh option
[  153.995315][   T29] audit: type=1326 audit(1758068005.902:222464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.995386][   T29] audit: type=1326 audit(1758068005.902:222465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  153.995420][   T29] audit: type=1326 audit(1758068005.902:222466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc311eba9 code=0x7ffc0000
[  154.215931][T13817] lo speed is unknown, defaulting to 1000
[  154.225403][T13809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.250488][T13817] lo speed is unknown, defaulting to 1000
[  154.261937][T13809] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  154.307181][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.461683][T13827] vhci_hcd: invalid port number 66
[  154.466881][T13827] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  154.626869][T13827] loop5: detected capacity change from 0 to 8192
[  154.668226][T13827]  loop5: p1 p2 p3 p4
[  154.672339][T13827] loop5: p1 start 51379968 is beyond EOD, truncated
[  154.686207][T13827] loop5: p3 size 15991040 extends beyond EOD, truncated
[  154.720596][T13827] loop5: p4 start 16711680 is beyond EOD, truncated
[  154.754459][T13845] validate_nla: 8 callbacks suppressed
[  154.754477][T13845] netlink: 'syz.5.4224': attribute type 1 has an invalid length.
[  154.898777][T13862] lo speed is unknown, defaulting to 1000
[  154.905145][T13862] lo speed is unknown, defaulting to 1000
[  154.966957][T13867] loop4: detected capacity change from 0 to 1024
[  154.990546][T13867] EXT4-fs: Ignoring removed nobh option
[  155.019349][T13867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.074825][T13867] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  155.094310][T13882] __nla_validate_parse: 37 callbacks suppressed
[  155.094327][T13882] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4245'.
[  155.147802][T13885] vhci_hcd: invalid port number 66
[  155.152983][T13885] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  155.168984][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.219141][T13888] vhci_hcd: invalid port number 66
[  155.224345][T13888] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  155.287043][T13888] loop0: detected capacity change from 0 to 8192
[  155.317556][T13887] loop5: detected capacity change from 0 to 8192
[  155.343168][T13898] vhci_hcd: invalid port number 66
[  155.348458][T13898] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  155.358833][T13887]  loop5: p1 p2 p3 p4
[  155.364609][T13888]  loop0: p1 p2 p3 p4
[  155.372594][T13887] loop5: p1 start 51379968 is beyond EOD, truncated
[  155.382122][T13888] loop0: p1 start 51379968 is beyond EOD, truncated
[  155.397605][T13887] loop5: p3 size 15991040 extends beyond EOD, truncated
[  155.409738][T13888] loop0: p3 size 15991040 extends beyond EOD, truncated
[  155.425567][T13887] loop5: p4 start 16711680 is beyond EOD, truncated
[  155.433193][T13888] loop0: p4 start 16711680 is beyond EOD, truncated
[  155.454681][T13885] netlink: 'syz.5.4246': attribute type 1 has an invalid length.
[  155.463255][T13885] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4246'.
[  155.492824][T13888] netlink: 'syz.0.4248': attribute type 1 has an invalid length.
[  155.501333][T13888] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4248'.
[  155.520880][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4246'.
[  155.536991][T13898] netlink: 'syz.3.4252': attribute type 1 has an invalid length.
[  155.544764][T13898] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4252'.
[  155.554038][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'.
[  155.597327][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4252'.
[  155.697646][T13910] lo speed is unknown, defaulting to 1000
[  155.712039][T13910] lo speed is unknown, defaulting to 1000
[  155.738338][T13915] lo speed is unknown, defaulting to 1000
[  155.755677][T13915] lo speed is unknown, defaulting to 1000
[  155.979717][T13932] vhci_hcd: invalid port number 66
[  155.984893][T13932] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  156.030722][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4264'.
[  156.039826][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4264'.
[  156.048823][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4264'.
[  156.053603][T13932] loop2: detected capacity change from 0 to 8192
[  156.065890][T13936] netlink: 'syz.5.4264': attribute type 6 has an invalid length.
[  156.097268][T13932]  loop2: p1 p2 p3 p4
[  156.105411][T13932] loop2: p1 start 51379968 is beyond EOD, truncated
[  156.139147][T13932] loop2: p3 size 15991040 extends beyond EOD, truncated
[  156.150479][T13942] vhci_hcd: invalid port number 66
[  156.151495][T13932] loop2: p4 start 16711680 is beyond EOD, truncated
[  156.155676][T13942] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  156.182985][T13945] vhci_hcd: invalid port number 66
[  156.188285][T13945] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  156.241272][T13942] loop5: detected capacity change from 0 to 8192
[  156.261892][T13950] vhci_hcd: invalid port number 66
[  156.267078][T13950] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  156.287732][T13942]  loop5: p1 p2 p3 p4
[  156.291917][T13942] loop5: p1 start 51379968 is beyond EOD, truncated
[  156.311499][T13942] loop5: p3 size 15991040 extends beyond EOD, truncated
[  156.320642][T13950] loop2: detected capacity change from 0 to 8192
[  156.321578][T13942] loop5: p4 start 16711680 is beyond EOD, truncated
[  156.335619][T13945] netlink: 'syz.3.4269': attribute type 1 has an invalid length.
[  156.345064][T13942] netlink: 'syz.5.4268': attribute type 1 has an invalid length.
[  156.358304][T13950]  loop2: p1 p2 p3 p4
[  156.362358][T13950] loop2: p1 start 51379968 is beyond EOD, truncated
[  156.374135][T13950] loop2: p3 size 15991040 extends beyond EOD, truncated
[  156.384776][T13950] loop2: p4 start 16711680 is beyond EOD, truncated
[  156.395034][T13950] netlink: 'syz.2.4270': attribute type 1 has an invalid length.
[  156.442584][T13954] lo speed is unknown, defaulting to 1000
[  156.464041][T13954] lo speed is unknown, defaulting to 1000
[  156.715220][T13965] lo speed is unknown, defaulting to 1000
[  156.730732][T13965] lo speed is unknown, defaulting to 1000
[  156.993762][T13975] netlink: 'syz.3.4280': attribute type 6 has an invalid length.
[  157.037333][T13978] vhci_hcd: invalid port number 66
[  157.042544][T13978] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.059549][T13980] vhci_hcd: invalid port number 66
[  157.064723][T13980] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.100109][T13982] vhci_hcd: invalid port number 66
[  157.105375][T13982] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.185146][T13978] loop0: detected capacity change from 0 to 8192
[  157.232931][T13982] loop4: detected capacity change from 0 to 8192
[  157.243610][T13980] netlink: 'syz.3.4282': attribute type 1 has an invalid length.
[  157.256519][T13978]  loop0: p1 p2 p3 p4
[  157.265773][T13978] loop0: p1 start 51379968 is beyond EOD, truncated
[  157.277496][T13982]  loop4: p1 p2 p3 p4
[  157.281685][T13982] loop4: p1 start 51379968 is beyond EOD, truncated
[  157.302307][T13982] loop4: p3 size 15991040 extends beyond EOD, truncated
[  157.302372][T13978] loop0: p3 size 15991040 extends beyond EOD, truncated
[  157.317495][T13982] loop4: p4 start 16711680 is beyond EOD, truncated
[  157.333364][T13985] vhci_hcd: invalid port number 66
[  157.338703][T13985] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.357448][T13978] loop0: p4 start 16711680 is beyond EOD, truncated
[  157.394056][T13987] lo speed is unknown, defaulting to 1000
[  157.404997][T13987] lo speed is unknown, defaulting to 1000
[  157.423373][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  157.423410][   T29] audit: type=1400 audit(1758068009.452:222479): avc:  denied  { create } for  pid=13989 comm="syz.2.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  157.471022][T13985] loop5: detected capacity change from 0 to 8192
[  157.478312][   T29] audit: type=1400 audit(1758068009.492:222480): avc:  denied  { connect } for  pid=13989 comm="syz.2.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  157.537561][T13985]  loop5: p1 p2 p3 p4
[  157.548553][T13985] loop5: p1 start 51379968 is beyond EOD, truncated
[  157.574070][T13985] loop5: p3 size 15991040 extends beyond EOD, truncated
[  157.598476][T13985] loop5: p4 start 16711680 is beyond EOD, truncated
[  157.638832][T14013] vhci_hcd: invalid port number 66
[  157.644058][T14013] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.704720][T14020] vhci_hcd: invalid port number 66
[  157.709938][T14020] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  157.722498][T14013] loop0: detected capacity change from 0 to 8192
[  157.766518][T14013]  loop0: p1 p2 p3 p4
[  157.774077][T14013] loop0: p1 start 51379968 is beyond EOD, truncated
[  157.798144][T14020] loop5: detected capacity change from 0 to 8192
[  157.804846][T14013] loop0: p3 size 15991040 extends beyond EOD, truncated
[  157.822019][T14013] loop0: p4 start 16711680 is beyond EOD, truncated
[  157.847439][T14020]  loop5: p1 p2 p3 p4
[  157.862867][T14020] loop5: p1 start 51379968 is beyond EOD, truncated
[  157.880812][T14020] loop5: p3 size 15991040 extends beyond EOD, truncated
[  157.897675][T14020] loop5: p4 start 16711680 is beyond EOD, truncated
[  157.997861][T14035] lo speed is unknown, defaulting to 1000
[  158.004160][T14035] lo speed is unknown, defaulting to 1000
[  158.026945][   T29] audit: type=1326 audit(1758068010.062:222481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.051390][   T29] audit: type=1326 audit(1758068010.062:222482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.138517][   T29] audit: type=1326 audit(1758068010.112:222483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.162957][   T29] audit: type=1326 audit(1758068010.112:222484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.187351][   T29] audit: type=1326 audit(1758068010.112:222485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.211896][   T29] audit: type=1326 audit(1758068010.112:222486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.236399][   T29] audit: type=1326 audit(1758068010.112:222487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.261006][   T29] audit: type=1326 audit(1758068010.112:222488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62023eba9 code=0x7ffc0000
[  158.330525][T14055] vhci_hcd: invalid port number 66
[  158.335858][T14055] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.387861][T14061] vhci_hcd: invalid port number 66
[  158.393067][T14061] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.405446][T14055] loop5: detected capacity change from 0 to 8192
[  158.442595][T14064] vhci_hcd: invalid port number 66
[  158.447783][T14064] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.458705][T14055]  loop5: p1 p2 p3 p4
[  158.462829][T14055] loop5: p1 start 51379968 is beyond EOD, truncated
[  158.479549][T14061] loop2: detected capacity change from 0 to 8192
[  158.486619][T14055] loop5: p3 size 15991040 extends beyond EOD, truncated
[  158.499566][T14064] loop4: detected capacity change from 0 to 8192
[  158.506520][T14055] loop5: p4 start 16711680 is beyond EOD, truncated
[  158.529222][T14064]  loop4: p1 p2 p3 p4
[  158.533538][T14061]  loop2: p1 p2 p3 p4
[  158.539696][T14061] loop2: p1 start 51379968 is beyond EOD, truncated
[  158.546499][T14064] loop4: p1 start 51379968 is beyond EOD, truncated
[  158.554124][T14064] loop4: p3 size 15991040 extends beyond EOD, truncated
[  158.562515][T14061] loop2: p3 size 15991040 extends beyond EOD, truncated
[  158.570474][T14061] loop2: p4 start 16711680 is beyond EOD, truncated
[  158.578555][T14064] loop4: p4 start 16711680 is beyond EOD, truncated
[  158.622264][T14071] vhci_hcd: invalid port number 66
[  158.627642][T14071] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.637980][T14073] loop5: detected capacity change from 0 to 128
[  158.715618][T14071] loop0: detected capacity change from 0 to 8192
[  158.722654][T14083] lo speed is unknown, defaulting to 1000
[  158.729088][T14083] lo speed is unknown, defaulting to 1000
[  158.766509][T14071]  loop0: p1 p2 p3 p4
[  158.770768][T14071] loop0: p1 start 51379968 is beyond EOD, truncated
[  158.779154][T14071] loop0: p3 size 15991040 extends beyond EOD, truncated
[  158.790366][T14071] loop0: p4 start 16711680 is beyond EOD, truncated
[  158.830610][T14095] vhci_hcd: invalid port number 66
[  158.835994][T14095] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.851758][T14098] vhci_hcd: invalid port number 66
[  158.856946][T14098] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  158.883027][T14095] loop2: detected capacity change from 0 to 8192
[  158.919907][T14098] loop4: detected capacity change from 0 to 8192
[  158.937794][T14095]  loop2: p1 p2 p3 p4
[  158.941857][T14095] loop2: p1 start 51379968 is beyond EOD, truncated
[  158.954993][T14095] loop2: p3 size 15991040 extends beyond EOD, truncated
[  158.963452][T14095] loop2: p4 start 16711680 is beyond EOD, truncated
[  158.977301][T14098]  loop4: p1 p2 p3 p4
[  158.981345][T14098] loop4: p1 start 51379968 is beyond EOD, truncated
[  158.997542][T14098] loop4: p3 size 15991040 extends beyond EOD, truncated
[  159.020424][T14098] loop4: p4 start 16711680 is beyond EOD, truncated
[  159.155812][T14122] lo speed is unknown, defaulting to 1000
[  159.170882][T14122] lo speed is unknown, defaulting to 1000
[  159.330946][T14144] vhci_hcd: invalid port number 66
[  159.336234][T14144] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  159.366152][T14150] vhci_hcd: invalid port number 66
[  159.371529][T14150] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  159.429369][T14152] lo speed is unknown, defaulting to 1000
[  159.435915][T14152] lo speed is unknown, defaulting to 1000
[  159.452099][T14150] loop4: detected capacity change from 0 to 8192
[  159.506889][T14150]  loop4: p1 p2 p3 p4
[  159.510983][T14150] loop4: p1 start 51379968 is beyond EOD, truncated
[  159.537127][T14150] loop4: p3 size 15991040 extends beyond EOD, truncated
[  159.562956][T14150] loop4: p4 start 16711680 is beyond EOD, truncated
[  159.663411][T14180] vhci_hcd: invalid port number 66
[  159.668773][T14180] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  159.712501][T14180] loop5: detected capacity change from 0 to 8192
[  159.746808][T14180]  loop5: p1 p2 p3 p4
[  159.750972][T14180] loop5: p1 start 51379968 is beyond EOD, truncated
[  159.759556][T14180] loop5: p3 size 15991040 extends beyond EOD, truncated
[  159.767333][T14180] loop5: p4 start 16711680 is beyond EOD, truncated
[  159.777862][T14180] validate_nla: 10 callbacks suppressed
[  159.777876][T14180] netlink: 'syz.5.4365': attribute type 1 has an invalid length.
[  159.778314][T14190] vhci_hcd: invalid port number 66
[  159.797230][T14190] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  159.858839][T14190] netlink: 'syz.3.4368': attribute type 1 has an invalid length.
[  159.905162][T14196] lo speed is unknown, defaulting to 1000
[  159.918515][T14196] lo speed is unknown, defaulting to 1000
[  159.924456][T14202] loop2: detected capacity change from 0 to 512
[  159.963635][T14202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.001213][T14202] ext4 filesystem being mounted at /874/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.041257][T14217] lo speed is unknown, defaulting to 1000
[  160.047717][T14217] lo speed is unknown, defaulting to 1000
[  160.119935][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.140889][T14226] vhci_hcd: invalid port number 66
[  160.146056][T14226] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  160.167007][T14229] vhci_hcd: invalid port number 66
[  160.172177][T14229] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  160.199983][T14231] vhci_hcd: invalid port number 66
[  160.205151][T14231] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0
[  160.264688][T14226] loop5: detected capacity change from 0 to 8192
[  160.271203][T14229] loop2: detected capacity change from 0 to 8192
[  160.293925][T14234] ==================================================================
[  160.302052][T14234] BUG: KCSAN: data-race in getrusage / try_to_migrate_one
[  160.309186][T14234] 
[  160.311517][T14234] write to 0xffff8881095c5798 of 8 bytes by task 14233 on cpu 1:
[  160.319238][T14234]  try_to_migrate_one+0x918/0x16e0
[  160.324371][T14234]  rmap_walk_anon+0x27d/0x430
[  160.329064][T14234]  try_to_migrate+0x12a/0x210
[  160.333755][T14234]  migrate_pages_batch+0x6e1/0x1ae0
[  160.338975][T14234]  migrate_pages+0xf5f/0x1770
[  160.343669][T14234]  __se_sys_mbind+0x975/0xac0
[  160.348367][T14234]  __x64_sys_mbind+0x78/0x90
[  160.352973][T14234]  x64_sys_call+0x2932/0x2ff0
[  160.357659][T14234]  do_syscall_64+0xd2/0x200
[  160.362198][T14234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.368102][T14234] 
[  160.370431][T14234] read to 0xffff8881095c5798 of 8 bytes by task 14234 on cpu 0:
[  160.378058][T14234]  getrusage+0xa52/0xbb0
[  160.382313][T14234]  io_sq_thread+0x5dd/0x1190
[  160.386920][T14234]  ret_from_fork+0x11f/0x1b0
[  160.391519][T14234]  ret_from_fork_asm+0x1a/0x30
[  160.396378][T14234] 
[  160.398703][T14234] value changed: 0x000000000000150c -> 0x0000000000001775
[  160.405808][T14234] 
[  160.408141][T14234] Reported by Kernel Concurrency Sanitizer on:
[  160.414305][T14234] CPU: 0 UID: 0 PID: 14234 Comm: iou-sqp-14233 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  160.424378][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  160.434437][T14234] ==================================================================
[  160.444893][T14226]  loop5: p1 p2 p3 p4
[  160.449213][T14226] loop5: p1 start 51379968 is beyond EOD, truncated
[  160.458262][T14231] loop4: detected capacity change from 0 to 8192
[  160.461487][T14226] loop5: p3 size 15991040 extends beyond EOD, truncated
[  160.472100][T14229]  loop2: p1 p2 p3 p4
[  160.476170][T14229] loop2: p1 start 51379968 is beyond EOD, truncated
[  160.478482][T14235] netlink: 'syz.5.4381': attribute type 1 has an invalid length.
[  160.490653][T14235] __nla_validate_parse: 58 callbacks suppressed
[  160.490670][T14235] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4381'.
[  160.507446][T14229] loop2: p3 size 15991040 extends beyond EOD, truncated
[  160.514607][T14226] loop5: p4 start 16711680 is beyond EOD, truncated
[  160.516588][T14231]  loop4: p1 p2 p3 p4
[  160.524957][T14229] loop2: p4 start 16711680 is beyond EOD, truncated
[  160.526743][T14231] loop4: p1 start 51379968 is beyond EOD, truncated
[  160.539478][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'.
[  160.542213][T14231] loop4: p3 size 15991040 extends beyond EOD, truncated
[  160.550863][T14237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4382'.
[  160.559308][T14231] loop4: p4 start 16711680 is beyond EOD, truncated
[  160.576721][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4382'.
[  160.585978][T14229] netlink: 'syz.2.4379': attribute type 1 has an invalid length.
[  160.593776][T14229] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4379'.
[  160.622156][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'.