last executing test programs:

9.921486061s ago: executing program 2 (id=165):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r1, 0x0, 0x0)

9.849223027s ago: executing program 2 (id=168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x86)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f0000"], 0x48)
open(&(0x7f00009e1000)='./file0\x00', 0x48941, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = getuid()
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r2, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x0, @val=@tracing={0x0, 0x20000000}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r8, &(0x7f00000001c0)="f14a18f6", 0x4)
sendfile(r8, r6, 0x0, 0x40001)
sendfile(r8, r7, 0x0, 0x7ffff000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80}, &(0x7f0000000100)=0x10)

8.660840682s ago: executing program 2 (id=186):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r4, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000200)=0x14)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0xfe, 0x2c, 0x0, 0x82, 0x0, 0x2c010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x6a9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x8004)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

7.675666912s ago: executing program 2 (id=206):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
poll(&(0x7f0000000040)=[{r0, 0x8000}], 0x1, 0x11ff)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpgrp(0x0)
kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = epoll_create1(0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0xc000201e})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x5e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}}, 0xea5bc50b6199d77e)
r11 = epoll_create1(0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"d6006314881542ca2c1fcfac841c35cd8613410c7407466eabc3c308e075950801a7d3684d642dbf35b8acf0452f328f554c9ae782c50d2c722edbf4cd2e95f38f86a0e096145d699aa236d2c59475e903244bc84ef4ca260bda68c47af11cb783bba9011b218fb4220a48ef6fa3460d6140b5c3982cbe2f10a83b958bd6201356bf2934bca68acf3c11a3ee788c3b4827e430bf8eff20f44d0e25e2016ec0af4c73ee6600322c2a3d7e194482b19142d79334381b0361b8f6cffc0b101c2d88cc2d09dc53d2302fbce197549dfb3ee246948dcc9add2d82f455f6b1bf94e48bb968299c335225a79f7ebb21ec55d28a7ec861905c03a21b452ca73ebce74cf4a402212d812839b1d2756a2ae02c513052aa2b22cfb91bd4aa2bb43dc9cb456e9e4fb56a6aa036114b5c694f84cfb71480507d5057f667107899f17805df6af934d2db70aa6c3aa3cb27174d0f6c4a047bd0cfd73561fc5a69884391211fa4aa6c4701b9edc6d4bab89a03b6eaddd98feb5f21c049f189d1b8e9806fa1e9fec5b5f5b7265c43b8b1a2666b9af56ed9053204cdd565649663e1f612021bb802f7aac249a9bda5dcf2adc65f4f0d6278d71ed6dcdc59895e830311f29aeb365fc98c64589f4d3fd84c8aee706e36bf7eb90b1c43736d427a96cbd05be8b8eb4ee670e62ca6c4264e1eaf28341e7ff110f206e87983418af0fc988fceb9e8d9dfc4ac6b6ead16eb368d2edd1ed1c39a047fc649fa62361b565f1ec904398e509eaf3e2b7d7e84513699b4cfb9dbe62f14701c5fb61dc5cbd0af59eb16657e4ce2ed03398573cac5b9d9d8b250305ff7e5d7ec1c872d03a1bd1ac2d84a57d345822104dee458ec772c28793835c7ad56ed2abeae5375c03435807e7ca2e42c80e6da36bec76e2576b1bf8965d9c59ed47953114fdc3aeb696f2bdf7e5a39c98a62698bd3e463eac3cd300617c9d79791a2061bf58b979e88cce8cc168bda40291afb93c8d7f8fde83e818d4b01623e3243c10a4128f1cc0b6fe8f4c584fb4456d2d57834500019f711b7a76fbed374f33476caa0a5bba6e51b9b2cd50b368d40a05d65f44e79b66eb52d7bb2d3506a791cb758e1a489b178a32c5c2ae82eedf122d0adcf264d35674a1240b51ea135cd32e544ccf7185bb1d42befaa81796fcbbacdd946fbe96fea72702e140d03bb50d760b665c9e1766de0ff067ff00c17acec89d90e4a08553d5390902c032b832475d5cb3000b311084cd6532d75fe93f3c58b7a7318be16f74681dce7cb27b4e394662ab40e1f658c862a587bdddfa409cdae26ecc087a6260c3a52f7cb69a5138fdd395baa1ac5e61d37b949a8eaf73b3c0e4e1daf785d72428483d0cd75b719b9055bb48821ea87b9f66a0dbaa24c3cf7f9b6c168843484bc114f6060796a1e5c04da450ab665af5bf2aeba71da8c76eade38134a626182d7c9618c2418990517bf3342d1a80215f1b83f6e4dbf87c943a81bb080f1c889c52d1bcc991eed6caa2dedf142948faffd16e29c9dd68d83b3a3cb7073bb3faacf845323c9006b7fbdc1b652c93d7460e70bfffccdf5dd9a1584cc2413e0ccadfa0edc2450b3a61b2cb2d2d3718023ab9d715a9465917b22d4b40049ae840548a100a60d085c2ea763e1eb3091de8ae7a79f6df24d497496d198a0b027d9e51f665edca8ab3dd78ae0bacbad1ac3286440ce139c4e9eae273494bb1eb39791f10f976fef105641e466fabda1936fad92f2c10125b4faf59df4f0c32223ae979b46435b43d25976c590094992fb54eda4af9c90a9992904cd87e7d8bea9f47933e0610a7791086b2f7d06d4c3aae8ea2d6ba4dfec676542b301aa870b3ace9040967e0440d08bf1cb8b4dea43a24cfd3872b9f39fc8de75bf4222623df25c8ca166a585a17012cac1f97d44702c19a05a45fc595f5a57410bdc23b605cb80ab2a8d63bdd34d386ff9516e6570adc45970d95639c5533ea4c8ecda82f921a6e76ebedd2778369a5ead081880f7620a36d97390ab27877827e8753c28e61a01c8fc57d5b47af5089a4cf787fe6a919e47c51e6cdeccb5c2e9c313b9c815b56f007cf4d1fb16c7d2c324fd00c4bcd2c59fddc862c4e5eea4490670e06dd560aa67f314cfa8cc4d68dd8a041fa4d242883a1ec59fbe392377624474b6f60919a27afadf02945b123e3d94aac14282d86eda976a9aabb3618944a73ecb23833c085b2db2ee75ad621e7ffbb85c5f102d24564a37008cbee31cc8e8c4410e52c7d6d1ba4ac119531833fcd1c41c686cf3570ce793145ff77cfc88b59f31918ed38d9c7824a7897e77f35d58cb106587adce959ce2cdd10b92d501b2a26d1ee662764e1e9df423d3e341aa4ff5d9cbc58db156e585a07ac54fc31d1250d389f3b3a1b4065ec7b47528f2f7e4aa2b8ef2238f61b00856d28170d3a3b0d0c3ac114a5e4b41d4fb912e805bdd1676e68d3a96d91a9ded4e6560a743f497d9fe4a7341d70d41de6f70cd411c4bade85b10ffb4ea910e9381c2f616c1ffaf23a4cfcbab27a8a07da1486976fa0143fe406310cc4206bbc9f29fe2f9c166722866e0f61a6a60ea2eda89bc09a36daaa2fb6db7f3e99b4deeb31429a758bc74eb7b7f82bec4c09c8e92445f185ae258f20dd40aa7b57b8157da6ab27d1d0084b99ddb11606d8bec499e8cf100e72c06bb73f53c76bdba071c0494f0e3baa65f03531ca0563e0f2b1be60ea29783a08dff8db0c1325fafc1d89094ebb15901ed715816be211952bc8a0a42ead71a8417909544b50d54fcf903b7260ecd69fed30860315a72ceb9ef13c62920b9dfccf51e36345ad6a3ce25980ec0e56d2423c9f0f8dfaee17e48d87b15c79bfb06f0fcb059f6ac7d78b181d18996f8466905c0e911412b007ce7e8e447fbb8feb10ef637210e616af3edc60d5b6efd2c60bd15fdc6561980cdbefa8cc50967b5bde66372ed23b2bbb948294df3bf776053aade8a10d1cd615adcaf1c9780619285e2c1938f4dc20bf9e3853c4ccc67d67b9e570fe916edac21b05b83eb367df1bbb1aa46fc1fb4803b04f587f551ed7a448f6ad1dff73144d1eb6df591b1f60f63b55ebb626349c5ac88462ba7a5f1be5f6c65ce0ee07797041af982f1e4ad1fad2bc60adac40a162d01e6d1e901bee760cf244921231742a9cc20a18c369e022ac2cae46de7df28076b9bbce4d1bcf5bb916f623d1c97d024c26b1abbe1a426187319a2bcbd6d5f3763cd79f6da165e181841d0394da94d327e0f4886ffbfea3d4eafec780365ba622def3fb6c96b8ba262debae33259bfb634c1c29f8aee58097634fc8a01ecf39a6bac49f225b0aaa954bf61bc61648ac8fb2798bdc10194ab01923a9b0f85b8f2687031df8e962391340565635bf9e9b39a612784b64261d8be9c9772fae330b2dd7a4e23ce303f572dda1126f23a1fe02532cf11b15a91e8ee32653e96ea1ae01fda2009bb594eccd7a1da3be4220e854917d96f06bd4ca1b85e72a218872d138571d4eda462ca1f32e463e5eb2577a11a4b845dda01a613668b983e5e9ad5fdb1e925357d1958a98ac61d000e3e1e37328682ca87683f964891fd12fe4ff680e59afcaea792fd2805e571b97adf86b2f3edd7bbe0b131e330a9d614ee5afd4a2c81c76e95cc29e911560f1dd27533735140b669d7824b58978015ef3d08fd8edbccd08284f8137cd3662ddc39e26a3b73e7c1108d20b79ba604195869dedc3c4acdb02fb5076b996beaa37cc610029fdb4cb72c978d4831886c2774c4c6ecd77aa7bd9582e2a21feebb63ed8c7ab0efad6a3f578a83ed26bba0c834d8aef3670a72258f8911ae3bc67842370cf744f7903c72a06b4ede318d6a3128fdf01bf20b8563a5d6dd39ebf9c7488890c4a9dd6f095c0a6b951d7cca78e083996b617c96a240d54b5546367d386b8f6fa36cc06aa67ad62b8c7d0e0745288049d3eaa77e5e2d28bc46c8abfb179fdd8a96531079688be15bc64028ee0fc036c4900d8898c5d6d97ac811010879cbfa2b3104c96bcd0efd0c97f7ebb3f6c3f7fdfb7d9e0f0d258725cc3eddc7f9be31860e2dbffaf588b127ab1087967622eb499919cd08eddd9b27ec39d0dc773e6601b6105b4c9253b0eea044b9485763a7e180722f8f1b038098222faa10434f59ce847c21993c464884daec1853ea4665da7f151b9bf65c6408342d42e51d5c29986377ef8ea230e6901dbcafce011451bcc4eaad67c11b00368ee01337f3cd8d22e7a3b553330a1ae738b6f788903a426cc0778657bd2c2b3aabed4a56dc9ed3bdb94c86ae66b4f130dc3d3468e377017a8a838c9b8ab0362f7a5854afe2800da3585933be57cd34e609e7800a6dbab865b7aad9824d56304326e6730d51f5ac5b3c3228d31c22b1db20db788ca1b82995002eb5b390028c17654181b1d0f6d1351b33af2592d7acf06563876fc50bbc817d8f1359f6a42f4424d3156c07309ccad04b0dbae0a9be4d59d06979b38b2cc1ff013ddd1301e97c178a560f5875351c15f3c3704584da03e47ac62a25338d62cc1258ee69bfcb409757c07f81c67f4744bb88035d07ea85c0cfd346fe75c608759fc1bc3fd1e6eefbb6289a727dda61bf63c6fa1feeb28d7fc0687f5e6792530ebe1d5d10c88cfd8a57a4b3ec7ec6bc1caf24f19715b7ae27d1a8ea1e107781b12056f9d4f53d03df1804adaa1b83f9be8214c80d2b1c840eabe6bfe10a7efdbf4a64b922fca4121ff4e04753f64a7c0e9419e3de57c1c661a2b1ebeed48f18bcb8c8cb13f16e06215759b0f83127cc01c1995c2e662e19947349c7da5140a520c2b10d52ba94f2b8115e9f0ea29553d48e087be5d7fff6854dc1252d3ef42dd858e3d391b923865f5ad8e344aeb75dc5c96c0aec110e8074033d4cd350733199b403d095ccaaa742c141bfe957b99c908b0c4e761ae676501eed36a16c10186112c476e0f92fd6bf90ac4a8565767c18d1eb530ff0c08733b5ff80fd195e5ad4eef3e1fda087d4bc29d0accfb83616d030575aa4584d67e9a3ab8ff9515946d1384b1b4dfc1debdb69b6c54747a9daf8a0aff92abb865ac08ee605c1fcd847e36cead5e40d62aa6421e2d98d6e2c65a1759d97c43ce3dcc8177d718195620bf395ecd71009916cb3abf88d8ac191486443672f7f04224a4355bf3d27f9abb2508d5c240c6496a871e9232b48e8f498fe538008db87a09dda381bcc59c7084dfdae1056d2161b25ddf85b131ad999305f002b00f542954462d8e77a9b6e43b78c7a7cfc0d782973c2f5b50e43a5868e6449d995a842bd0f0ac93007cba5d8362ba3e503f2a65f0b4a668bf5663e37e0646fcda41f9e4688a7290a60d6b126757e56afff54f86dd81189c458f63336744e975e3866d8a46b4f8354f5df5d1b0229281ec0196f99e4bfa9222c5678999d025a3ba8233781debbafb0b53a0d4f1f7ab95cefcb10a98211e82958829b5e97abaa660ac3979be16bcda041411fc23b23bfd2ae6050396e336dca69f048527fbb188683edc7b8b93d5b96179e01424268bb3d3b24bc08016348036a58abf36a3564566a4f29e9a45457a80436c6e5b3e3630da2047f99c091bb806fc2a44416e21791efad94dc7cc78fe349e7aaf156e928cc3ff26449b69bbb88dfabc33a447926d7aa633b91bde60bbc8f60834aa65115572c4f3d34752068693fa961f9adc4341fcbdaf19de4580b8bb8335b6c103847425f5e4325a6e2800c4f0f8d0fec3eea609b106279e1db4fd697a96965d0285168f4051080e62d91423d4d99f9", 0x1000}}, 0x1006)
dup3(r11, r6, 0x80000)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000000)={0x3, 0xe})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x9, 0x1c}, 0xc)
shutdown(r0, 0x0)

7.412065533s ago: executing program 2 (id=210):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb28bd7000010000000100"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x404c040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120)
fcntl$setlease(r7, 0x400, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xe, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8f}, 0x10}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x23a, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001", @ANYRES8=0x0, @ANYBLOB="090028f3ab3071f09f3ba79498fa23742304380df37fdb80eacaac7054d0f4f3efda134721d02cb03e6d655766e447fe500144a86757db9e32de70fcb6f81408c03bcbea3681a1cee6071728df6d7f0ada44315d7f87d211c3d60472578c235d1ff623e508457602befd7b104386bff12c1f8408f92c4ed77da4d6a52d"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x100000000000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001000)={{{@in=@multicast1, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000001100)=0xe8)
getresuid(&(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0))

7.083309849s ago: executing program 2 (id=214):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000001c00), 0x12)

6.991360127s ago: executing program 32 (id=214):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000001c00), 0x12)

4.462641261s ago: executing program 0 (id=254):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8810)

3.97144482s ago: executing program 0 (id=257):
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x300, 0x1, 0x0, r0, 0x0}])
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000380))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x67e}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)

3.574240103s ago: executing program 0 (id=265):
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x10fbc0, 0x0)
fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3cf1cedaa00fef100000071101a00000000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r3, 0x560a, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000600)=""/189, 0xbd}], 0x1, 0x4c, 0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x0, 0xfffffffffffffffb, 0x43, 0x0, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000000c0)=""/18, 0x12}]}, &(0x7f00000003c0)="0c942b5ce9c50a8bca9fd8905c7594581a4cef921f3f25d51a925ac8faa6b2c31d42f055e93c7163015caca6e14e55cce4dd2bcd09fb92e42aa410e8ae992430c5ce95", &(0x7f0000000440)=""/231, 0x43, 0x10020, 0x2, &(0x7f0000000240)})
unshare(0x64000600)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

2.478596271s ago: executing program 0 (id=272):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/29, 0x1d)

2.429730215s ago: executing program 4 (id=273):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)

2.395819157s ago: executing program 0 (id=274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200"], 0x2d4}}, 0x4048010)

2.314508104s ago: executing program 0 (id=276):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'team_slave_0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100"/16, @ANYRESDEC, @ANYBLOB="0000000000000000000000000000000000000000dd58c5cd207db93379091a8400057591dd069d93b1eda836d599eb6364", @ANYRES64=r6, @ANYRES32, @ANYBLOB="c8523675a8b638715041cf040000000000000000000092e7b62700091ebe39f9e6009cbf000000"], 0x50)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x6, 0xf}, {0x10, 0xb}}}, 0x24}}, 0x44004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)

2.101345201s ago: executing program 4 (id=280):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r4, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000200)=0x14)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0xfe, 0x2c, 0x0, 0x82, 0x0, 0x2c010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x6a9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x8004)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'})

1.565225305s ago: executing program 3 (id=286):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, 0x0)

1.49843588s ago: executing program 3 (id=287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
readlinkat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/147, 0x93)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r8}, 0x3d)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r9}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r7, 0x0, 0x7fffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', <r10=>0x0, 0x8, 0x8000, 0x1ff, 0x1, {{0x12, 0x4, 0x2, 0x1b, 0x48, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@noop, @generic={0x83, 0xa, "2d696f3b736330c9"}, @noop, @rr={0x7, 0x7, 0xb7, [@remote]}, @generic={0x94, 0x6, "1e6133f3"}, @timestamp={0x44, 0x18, 0x19, 0x0, 0xb, [0x2, 0x6, 0x7fffffff, 0x401, 0x1]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', r10, 0x10, 0x7, 0x8, 0x10000, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x1b, 0xc8, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x14}]}, @lsrr={0x83, 0xb, 0xe6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @lsrr={0x83, 0x13, 0x2a, [@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})

1.440094504s ago: executing program 4 (id=288):
getpid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfdbc}, 0x26)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="800100001000010000000000fedbdf2500000000000000000000000000000001fe8000000000000000000000000000aa000000002000"/64, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
io_uring_setup(0x54a0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vcsa(0x0, 0x9, 0x8000)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x4, 0x252, &(0x7f0000000600)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
open_by_handle_at(r5, 0x0, 0x36f0516f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0xc5, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000001400)=0xffffffffffffffff)
fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000010)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

1.233277501s ago: executing program 1 (id=294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
rt_sigpending(&(0x7f0000000340), 0x8)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r4, 0x4bfb, &(0x7f0000002c80)=""/268)
close_range(0xffffffffffffffff, r3, 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$ttys(0xc, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r7, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)

1.114749251s ago: executing program 5 (id=295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
readlinkat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/147, 0x93)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r9}, 0x3d)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r8, 0x0, 0x7fffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x8, 0x10000, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x1b, 0xc8, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x14}]}, @lsrr={0x83, 0xb, 0xe6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @lsrr={0x83, 0x13, 0x2a, [@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})

1.091101002s ago: executing program 1 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

1.058205755s ago: executing program 1 (id=297):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.024575608s ago: executing program 1 (id=298):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r4, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000200)=0x14)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0xfe, 0x2c, 0x0, 0x82, 0x0, 0x2c010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x6a9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x8004)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'})

537.316827ms ago: executing program 4 (id=299):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000001a00)=""/4090, 0xffa}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f00000004c0)=""/28, 0x1c}, {&(0x7f0000000280)=""/183, 0xb7}], 0x5}, 0x60}], 0x1, 0x10042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8, 0x2}, 0x28)
io_setup(0x541e, &(0x7f0000001240)=<r4=>0x0)
io_pgetevents(r4, 0x2, 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f00000013c0)={0x0, 0x3938700}, 0x0)

536.757678ms ago: executing program 3 (id=300):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r2, 0x0, 0x0)

482.524621ms ago: executing program 3 (id=301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioperm(0x1, 0xa2, 0x6) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(0x0, 0x80040) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

405.220318ms ago: executing program 1 (id=302):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)

328.763644ms ago: executing program 1 (id=303):
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r2 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009e7f698680e6d5cea9bedb3f6bb3bb599aff69e34ff6433c7a82b2acdf6422053701b25319694f9396cf7c908f770e25413fe0add5a3b7dbca75e463d80f5f5c3025b2b0ee395551aa1ceeca2ecc3cb4640f310509d72596cae0d77f2d74637bb6dd3543393e6174fe8a166fefe66356fc3924ba267f4a1a356aa1c1708f888ac365ee0fd563d90805fc3f60168e2a623946c45786290b00000000"], 0x50)
openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

328.640164ms ago: executing program 3 (id=304):
pipe(&(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

328.203144ms ago: executing program 3 (id=305):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102387, 0x19033}], 0x1, 0x3fd, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x20, &(0x7f00000005c0)={&(0x7f0000000480)=""/230, 0xe6, <r5=>0x0, &(0x7f0000000580)=""/18, 0x12}}, 0x10)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x20, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xec, &(0x7f0000000300)=""/236, 0x41000, 0x40, '\x00', r3, @fallback=0xf, r1, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x5, 0x8, 0xace}, 0x10, r5, r0, 0x3, &(0x7f0000000640)=[r1, r1, r7], &(0x7f0000000680)=[{0x0, 0x2, 0x3, 0x5}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x3, 0xf, 0x2}], 0x10, 0x9}, 0x94)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)

311.738595ms ago: executing program 4 (id=306):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10)
r3 = semget(0x3, 0x0, 0x2a8)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000280)=[0x9])
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5ILhxKQckfkSgBomDVzOepG5iN1GT2FH8+UijeW/e1N/3ks579TeNXwBD63pE7EbEWETcjYjp7HouO+KT9pHc92zv4dL+3sOlXLRan/0rl7Yn16LjzySuZa9ZjIgffS/ip7njcRvbO2uL1WplM6vPNmsbs43tnVurtcWVykplvVxemF+Y++j2h+VzG+s7tbGs9NWnf9z91s+Tbk1lVzrHcZ7aQy8cxkmMRsQPLiLYAIxk4xkbdEd4JfmIeDMi3k2f/+kYSb+bAMBV1mpNR2u6sw4AXHX5NAeWy5eyXMBU5POlUjuH91ZM5qv1RvPmvfrW+nI7VzYThfy91WplLssVzkQhl9Tn0/LzevlI/XZEvBERvxyfSOulpXp1eZD/8AGAIXbtyPr/3/H2+g8AXHHFQXcAAOg76z8ADB/rPwAMH+s/AAyf9vo/MehuAAB95P0/AAwf6z8ADJUffvppcrT2s8+/Xr6/vbVWv39rudJYK9W2lkpL9c2N0kq9vpJ+Zk/tpNer1usb8x/E1oOZb280mrON7Z07tfrWevNO+rnedyqF9K7dPowMAOjljXee/CWXrMgfT6RHdOzlUBhoz4CLlh90B4CBGRl0B4CBsdsXDK8zvMeXHoArossWvS8odvsFoVar1bq4LgEX7MaX5P9hWHXk//0vYBgy8v8wvOT/YXi1WrnT7vkfp70RALjc5PiBHj//fzM7/y774cBPlo/e8fgiewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACX28H+v6VsL/CpyOdLpYjXImImCrl7q9XKXES8HhF/Hi+MJ/X5AfcZADir/N9z2f5fN6bfn3qh6e1rh8WxiPjZrz/71YPFZnPzTxFjuX+PH1xvPs6ul/vfewDgZAfrdHrueCP/bO/h0sHRz/7847sRUWzH398bi/3D+KMxmp6LUYiIyf/ksnpbriN3cRa7jyLii93Gn4upNAfS3vn0aPwk9mt9jZ9/IX4+bWufk6/FF86hLzBsniTzzyfdnr98XE/P3Z//YjpDnV02/yUvtbSfzoHP4x/MfyM95r/rp43xwR++3y5NHG97FPHl0YiD2Psd889B/FyP+O+fMv5fv/L2u73aWr+JuBHd43fGmm3WNmYb2zu3VmuLK5WVynq5vDC/MPfR7Q/Ls2mOerb3avDPj2++3qstGf9kj/jFE8b/9Xbx+Bf1iN/+/+6Pv/aS+N98r1v8fLz1kvjJmviNkwJnFid/X+zVlsRf7jH+k77/N08Z/+nfdo5tGw4ADE5je2dtsVqtbCooXP5C8lf2EnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGeWTdgMvg8KGPiP8NujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKvr8wAAAP//j5zPLA==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0)
unlink(0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003c00000000000190780a010102ac1414aa03049078640100ff4800000000002002984ec28ed15fc5fa2f2322fee30000fc7300000000000000000000440c00010a0101004e210000"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0)

156.177878ms ago: executing program 5 (id=307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

131.99356ms ago: executing program 5 (id=308):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

83.540894ms ago: executing program 4 (id=309):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)

73.325104ms ago: executing program 5 (id=310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r1, 0x4bfb, &(0x7f0000002c80)=""/268)

23.745539ms ago: executing program 5 (id=311):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r2, 0x0, 0x0)

0s ago: executing program 5 (id=312):
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x300, 0x1, 0x0, r0, 0x0}])
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000380))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x67e}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   26.310322][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   26.310339][   T29] audit: type=1400 audit(1754805880.636:57): avc:  denied  { transition } for  pid=3282 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.339538][   T29] audit: type=1400 audit(1754805880.636:58): avc:  denied  { noatsecure } for  pid=3282 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.359249][   T29] audit: type=1400 audit(1754805880.646:59): avc:  denied  { write } for  pid=3282 comm="sh" path="pipe:[2412]" dev="pipefs" ino=2412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   26.381567][   T29] audit: type=1400 audit(1754805880.646:60): avc:  denied  { rlimitinh } for  pid=3282 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   26.400337][   T29] audit: type=1400 audit(1754805880.646:61): avc:  denied  { siginh } for  pid=3282 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts.
[   34.536847][   T29] audit: type=1400 audit(1754805888.866:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.537958][ T3292] cgroup: Unknown subsys name 'net'
[   34.559573][   T29] audit: type=1400 audit(1754805888.866:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.586905][   T29] audit: type=1400 audit(1754805888.906:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.703523][ T3292] cgroup: Unknown subsys name 'cpuset'
[   34.709686][ T3292] cgroup: Unknown subsys name 'rlimit'
[   34.821268][   T29] audit: type=1400 audit(1754805889.146:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.844597][   T29] audit: type=1400 audit(1754805889.146:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.865088][   T29] audit: type=1400 audit(1754805889.156:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.885580][   T29] audit: type=1400 audit(1754805889.156:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.894129][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.906004][   T29] audit: type=1400 audit(1754805889.156:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.939438][   T29] audit: type=1400 audit(1754805889.156:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.962681][   T29] audit: type=1400 audit(1754805889.256:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   34.999509][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.162947][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   36.233983][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   36.266389][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.273486][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.280624][ T3310] bridge_slave_0: entered allmulticast mode
[   36.287170][ T3310] bridge_slave_0: entered promiscuous mode
[   36.294921][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.302028][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.309183][ T3310] bridge_slave_1: entered allmulticast mode
[   36.315652][ T3310] bridge_slave_1: entered promiscuous mode
[   36.334970][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   36.384002][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.397068][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   36.408482][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.422088][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   36.451789][ T3310] team0: Port device team_slave_0 added
[   36.462240][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.469319][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.476473][ T3303] bridge_slave_0: entered allmulticast mode
[   36.482894][ T3303] bridge_slave_0: entered promiscuous mode
[   36.504502][ T3310] team0: Port device team_slave_1 added
[   36.512547][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.519617][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.526813][ T3303] bridge_slave_1: entered allmulticast mode
[   36.533224][ T3303] bridge_slave_1: entered promiscuous mode
[   36.560719][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.567798][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.574923][ T3302] bridge_slave_0: entered allmulticast mode
[   36.581194][ T3302] bridge_slave_0: entered promiscuous mode
[   36.603715][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.610766][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.619058][ T3302] bridge_slave_1: entered allmulticast mode
[   36.625449][ T3302] bridge_slave_1: entered promiscuous mode
[   36.634372][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.641310][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.667324][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.684813][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.701596][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.708640][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.734572][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.745438][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.752582][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.759734][ T3305] bridge_slave_0: entered allmulticast mode
[   36.766098][ T3305] bridge_slave_0: entered promiscuous mode
[   36.773501][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.803651][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.810689][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.817867][ T3305] bridge_slave_1: entered allmulticast mode
[   36.824232][ T3305] bridge_slave_1: entered promiscuous mode
[   36.836047][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.845976][ T3303] team0: Port device team_slave_0 added
[   36.852793][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.859841][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.867085][ T3308] bridge_slave_0: entered allmulticast mode
[   36.873631][ T3308] bridge_slave_0: entered promiscuous mode
[   36.885306][ T3303] team0: Port device team_slave_1 added
[   36.896691][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.911387][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.918484][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.925684][ T3308] bridge_slave_1: entered allmulticast mode
[   36.932135][ T3308] bridge_slave_1: entered promiscuous mode
[   36.954496][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.978593][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.985566][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.011536][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.023402][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.032738][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.039683][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.065662][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.081729][ T3302] team0: Port device team_slave_0 added
[   37.088569][ T3302] team0: Port device team_slave_1 added
[   37.095382][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.113509][ T3310] hsr_slave_0: entered promiscuous mode
[   37.119591][ T3310] hsr_slave_1: entered promiscuous mode
[   37.131508][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.156137][ T3305] team0: Port device team_slave_0 added
[   37.174624][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.181581][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.207527][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.226087][ T3305] team0: Port device team_slave_1 added
[   37.232450][ T3308] team0: Port device team_slave_0 added
[   37.251641][ T3303] hsr_slave_0: entered promiscuous mode
[   37.258626][ T3303] hsr_slave_1: entered promiscuous mode
[   37.264617][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   37.270364][ T3303] Cannot create hsr debugfs directory
[   37.276102][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.283105][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.308988][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.328772][ T3308] team0: Port device team_slave_1 added
[   37.352381][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.359409][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.385481][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.411121][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.418222][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.444139][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.457401][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.464399][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.490360][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.501791][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.508767][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.534774][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.560855][ T3302] hsr_slave_0: entered promiscuous mode
[   37.566955][ T3302] hsr_slave_1: entered promiscuous mode
[   37.573025][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   37.578756][ T3302] Cannot create hsr debugfs directory
[   37.610452][ T3305] hsr_slave_0: entered promiscuous mode
[   37.616669][ T3305] hsr_slave_1: entered promiscuous mode
[   37.622457][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   37.628391][ T3305] Cannot create hsr debugfs directory
[   37.679904][ T3308] hsr_slave_0: entered promiscuous mode
[   37.685970][ T3308] hsr_slave_1: entered promiscuous mode
[   37.691832][ T3308] debugfs: 'hsr0' already exists in 'hsr'
[   37.697629][ T3308] Cannot create hsr debugfs directory
[   37.832477][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.852682][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.863833][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.872772][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.891490][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.901807][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.910539][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.919510][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.947407][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.956576][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.966771][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.977139][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.023258][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.032227][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.053248][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.062283][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.094625][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.101929][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.110681][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.125195][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.134400][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.147690][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.167269][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   38.178673][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   38.190990][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.204353][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.211455][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.222986][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.230031][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.238748][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.245790][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.262105][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.269208][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.302050][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   38.327682][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.334758][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.344737][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.351818][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.385846][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.401962][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.416502][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   38.443585][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   38.457467][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.464550][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.473828][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.480894][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.498825][  T378] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.505897][  T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.520440][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.530088][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.552854][  T378] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.560008][  T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.573942][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.678154][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.719632][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.782776][ T3303] veth0_vlan: entered promiscuous mode
[   38.816531][ T3303] veth1_vlan: entered promiscuous mode
[   38.823286][ T3305] veth0_vlan: entered promiscuous mode
[   38.839261][ T3305] veth1_vlan: entered promiscuous mode
[   38.863092][ T3310] veth0_vlan: entered promiscuous mode
[   38.871249][ T3310] veth1_vlan: entered promiscuous mode
[   38.878846][ T3302] veth0_vlan: entered promiscuous mode
[   38.884862][ T3308] veth0_vlan: entered promiscuous mode
[   38.892218][ T3302] veth1_vlan: entered promiscuous mode
[   38.907534][ T3305] veth0_macvtap: entered promiscuous mode
[   38.926076][ T3303] veth0_macvtap: entered promiscuous mode
[   38.934687][ T3308] veth1_vlan: entered promiscuous mode
[   38.946060][ T3305] veth1_macvtap: entered promiscuous mode
[   38.953261][ T3302] veth0_macvtap: entered promiscuous mode
[   38.960624][ T3302] veth1_macvtap: entered promiscuous mode
[   38.969279][ T3310] veth0_macvtap: entered promiscuous mode
[   38.975943][ T3303] veth1_macvtap: entered promiscuous mode
[   38.986679][ T3310] veth1_macvtap: entered promiscuous mode
[   38.996174][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.018625][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.027865][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.036286][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.045234][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.053719][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.065912][ T3308] veth0_macvtap: entered promiscuous mode
[   39.073817][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.081985][ T3308] veth1_macvtap: entered promiscuous mode
[   39.091818][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.108568][ T3452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.121073][ T3452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.134770][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.143478][   T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.152428][   T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.167311][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.184815][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.209099][   T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.218300][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.244549][   T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.253498][   T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.262295][   T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.308467][   T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.351557][   T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.390929][   T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.391049][ T3484] FAULT_INJECTION: forcing a failure.
[   39.391049][ T3484] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.404127][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.412826][ T3484] CPU: 1 UID: 0 PID: 3484 Comm: syz.4.5 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   39.412861][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.412877][ T3484] Call Trace:
[   39.412885][ T3484]  <TASK>
[   39.412896][ T3484]  __dump_stack+0x1d/0x30
[   39.412930][ T3484]  dump_stack_lvl+0xe8/0x140
[   39.413011][ T3484]  dump_stack+0x15/0x1b
[   39.413033][ T3484]  should_fail_ex+0x265/0x280
[   39.413058][ T3484]  should_fail+0xb/0x20
[   39.413150][ T3484]  should_fail_usercopy+0x1a/0x20
[   39.413200][ T3484]  _copy_from_user+0x1c/0xb0
[   39.413304][ T3484]  ___sys_sendmsg+0xc1/0x1d0
[   39.413345][ T3484]  __x64_sys_sendmsg+0xd4/0x160
[   39.413375][ T3484]  x64_sys_call+0x191e/0x2ff0
[   39.413401][ T3484]  do_syscall_64+0xd2/0x200
[   39.413479][ T3484]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   39.413509][ T3484]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   39.413538][ T3484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.413563][ T3484] RIP: 0033:0x7f3d8bf6ebe9
[   39.413613][ T3484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.413709][ T3484] RSP: 002b:00007f3d8a9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   39.413736][ T3484] RAX: ffffffffffffffda RBX: 00007f3d8c195fa0 RCX: 00007f3d8bf6ebe9
[   39.413751][ T3484] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   39.413766][ T3484] RBP: 00007f3d8a9d7090 R08: 0000000000000000 R09: 0000000000000000
[   39.413780][ T3484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.413794][ T3484] R13: 00007f3d8c196038 R14: 00007f3d8c195fa0 R15: 00007fff68571c28
[   39.413854][ T3484]  </TASK>
[   39.414631][ T3485] loop2: detected capacity change from 0 to 512
[   39.429095][   T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.463098][ T3485] =======================================================
[   39.463098][ T3485] WARNING: The mand mount option has been deprecated and
[   39.463098][ T3485]          and is ignored by this kernel. Remove the mand
[   39.463098][ T3485]          option from the mount to silence this warning.
[   39.463098][ T3485] =======================================================
[   39.502384][   T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.512822][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.674831][   T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.683750][   T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.691634][ T3485] EXT4-fs: test_dummy_encryption option not supported
[   39.699377][   T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.714924][   T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.730074][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   39.730104][   T29] audit: type=1400 audit(1754805894.036:106): avc:  denied  { create } for  pid=3490 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.755316][   T29] audit: type=1400 audit(1754805894.056:107): avc:  denied  { create } for  pid=3494 comm="+}[@" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.779203][   T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.786010][ T3492] netlink: 'syz.3.8': attribute type 1 has an invalid length.
[   39.788055][   T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.831559][   T29] audit: type=1400 audit(1754805894.066:108): avc:  denied  { create } for  pid=3499 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.850822][   T29] audit: type=1400 audit(1754805894.076:109): avc:  denied  { mounton } for  pid=3494 comm="+}[@" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.851694][ T3504] loop1: detected capacity change from 0 to 512
[   39.872970][   T29] audit: type=1400 audit(1754805894.076:110): avc:  denied  { mount } for  pid=3494 comm="+}[@" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   39.873048][   T29] audit: type=1400 audit(1754805894.086:111): avc:  denied  { getopt } for  pid=3499 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.873075][   T29] audit: type=1400 audit(1754805894.086:112): avc:  denied  { connect } for  pid=3499 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.939289][   T29] audit: type=1400 audit(1754805894.086:113): avc:  denied  { name_connect } for  pid=3499 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   39.959281][   T29] audit: type=1400 audit(1754805894.106:114): avc:  denied  { unlink } for  pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.981788][   T29] audit: type=1400 audit(1754805894.116:115): avc:  denied  { create } for  pid=3491 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   40.011003][ T3504] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.10: invalid fast symlink length 0
[   40.031340][ T3510] SELinux:  Context Ü is not valid (left unmapped).
[   40.048713][ T3510] loop3: detected capacity change from 0 to 512
[   40.056218][ T3504] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10: couldn't read orphan inode 17 (err -117)
[   40.077934][ T3485] 9pnet_fd: Insufficient options for proto=fd
[   40.085880][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.099188][ T3510] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   40.109182][ T3510] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.12: invalid indirect mapped block 2683928664 (level 1)
[   40.124547][ T3510] EXT4-fs (loop3): Remounting filesystem read-only
[   40.131125][ T3510] EXT4-fs (loop3): 1 truncate cleaned up
[   40.143784][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.228264][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.391913][ T3525] loop3: detected capacity change from 0 to 1024
[   40.399112][ T3525] EXT4-fs: inline encryption not supported
[   40.436622][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.460599][ T3523] syz.0.16 (3523) used greatest stack depth: 10008 bytes left
[   40.508054][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.636343][    C0] hrtimer: interrupt took 45053 ns
[   40.648806][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.733728][ T3540] loop1: detected capacity change from 0 to 4096
[   40.748404][ T3540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.799345][ T3540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.900246][ T3547] FAULT_INJECTION: forcing a failure.
[   40.900246][ T3547] name failslab, interval 1, probability 0, space 0, times 1
[   40.912936][ T3547] CPU: 1 UID: 0 PID: 3547 Comm: syz.4.23 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   40.912961][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   40.912973][ T3547] Call Trace:
[   40.912978][ T3547]  <TASK>
[   40.912984][ T3547]  __dump_stack+0x1d/0x30
[   40.913004][ T3547]  dump_stack_lvl+0xe8/0x140
[   40.913042][ T3547]  dump_stack+0x15/0x1b
[   40.913106][ T3547]  should_fail_ex+0x265/0x280
[   40.913125][ T3547]  should_failslab+0x8c/0xb0
[   40.913153][ T3547]  kmem_cache_alloc_noprof+0x50/0x310
[   40.913262][ T3547]  ? skb_clone+0x151/0x1f0
[   40.913345][ T3547]  skb_clone+0x151/0x1f0
[   40.913370][ T3547]  nfnetlink_rcv+0x305/0x1690
[   40.913439][ T3547]  ? nlmon_xmit+0x4f/0x60
[   40.913463][ T3547]  ? consume_skb+0x49/0x150
[   40.913495][ T3547]  ? nlmon_xmit+0x4f/0x60
[   40.913563][ T3547]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   40.913590][ T3547]  ? __dev_queue_xmit+0x1200/0x2000
[   40.913682][ T3547]  ? __dev_queue_xmit+0x182/0x2000
[   40.913707][ T3547]  ? ref_tracker_free+0x37d/0x3e0
[   40.913742][ T3547]  netlink_unicast+0x5c0/0x690
[   40.913781][ T3547]  netlink_sendmsg+0x58b/0x6b0
[   40.913826][ T3547]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.913853][ T3547]  __sock_sendmsg+0x142/0x180
[   40.913967][ T3547]  ____sys_sendmsg+0x31e/0x4e0
[   40.913997][ T3547]  ___sys_sendmsg+0x17b/0x1d0
[   40.914085][ T3547]  __x64_sys_sendmsg+0xd4/0x160
[   40.914116][ T3547]  x64_sys_call+0x191e/0x2ff0
[   40.914158][ T3547]  do_syscall_64+0xd2/0x200
[   40.914215][ T3547]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.914239][ T3547]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   40.914270][ T3547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.914332][ T3547] RIP: 0033:0x7f3d8bf6ebe9
[   40.914348][ T3547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.914374][ T3547] RSP: 002b:00007f3d8a9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.914392][ T3547] RAX: ffffffffffffffda RBX: 00007f3d8c195fa0 RCX: 00007f3d8bf6ebe9
[   40.914402][ T3547] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[   40.914415][ T3547] RBP: 00007f3d8a9d7090 R08: 0000000000000000 R09: 0000000000000000
[   40.914429][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.914442][ T3547] R13: 00007f3d8c196038 R14: 00007f3d8c195fa0 R15: 00007fff68571c28
[   40.914464][ T3547]  </TASK>
[   41.199083][ T3549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.246722][ T3554] loop3: detected capacity change from 0 to 512
[   41.281360][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.302853][ T3554] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.323273][ T3560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'.
[   41.366551][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.413459][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'.
[   41.599483][ T3573] loop2: detected capacity change from 0 to 512
[   41.621124][ T3573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.627570][ T3531] syz.0.20 (3531) used greatest stack depth: 8208 bytes left
[   41.634201][ T3573] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.642957][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'.
[   41.690427][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.699033][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.713390][ T3573] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.733977][ T3577] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.760084][ T3573] EXT4-fs (loop2): 1 truncate cleaned up
[   41.766364][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.866323][ T3572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32'.
[   41.920014][ T3583] loop3: detected capacity change from 0 to 512
[   41.938581][ T3583] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   41.947054][ T3583] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.34: invalid indirect mapped block 2683928664 (level 1)
[   41.961319][ T3583] EXT4-fs (loop3): Remounting filesystem read-only
[   41.968139][ T3583] EXT4-fs (loop3): 1 truncate cleaned up
[   41.975983][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.091425][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.121813][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[   42.131694][ T3586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.35'.
[   42.334028][ T3601] FAULT_INJECTION: forcing a failure.
[   42.334028][ T3601] name failslab, interval 1, probability 0, space 0, times 0
[   42.346670][ T3601] CPU: 0 UID: 0 PID: 3601 Comm: syz.3.38 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   42.346696][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.346710][ T3601] Call Trace:
[   42.346716][ T3601]  <TASK>
[   42.346752][ T3601]  __dump_stack+0x1d/0x30
[   42.346769][ T3601]  dump_stack_lvl+0xe8/0x140
[   42.346786][ T3601]  dump_stack+0x15/0x1b
[   42.346799][ T3601]  should_fail_ex+0x265/0x280
[   42.346820][ T3601]  should_failslab+0x8c/0xb0
[   42.346916][ T3601]  __kmalloc_noprof+0xa5/0x3e0
[   42.346983][ T3601]  ? unregister_netdevice_many_notify+0x4c9/0x15d0
[   42.347012][ T3601]  ? unlist_netdevice+0x2cc/0x320
[   42.347038][ T3601]  unregister_netdevice_many_notify+0x4c9/0x15d0
[   42.347100][ T3601]  ? __rcu_read_unlock+0x4f/0x70
[   42.347121][ T3601]  unregister_netdevice_queue+0x1f5/0x220
[   42.347227][ T3601]  unregister_netdev+0xb3/0xe0
[   42.347254][ T3601]  slip_close+0xe4/0x100
[   42.347291][ T3601]  ? __pfx_slip_hangup+0x10/0x10
[   42.347369][ T3601]  slip_hangup+0x15/0x20
[   42.347405][ T3601]  tty_ldisc_hangup+0x12f/0x370
[   42.347437][ T3601]  __tty_hangup+0x3c2/0x540
[   42.347466][ T3601]  tty_ioctl+0x601/0xb80
[   42.347555][ T3601]  ? __pfx_tty_ioctl+0x10/0x10
[   42.347593][ T3601]  __se_sys_ioctl+0xce/0x140
[   42.347713][ T3601]  __x64_sys_ioctl+0x43/0x50
[   42.347760][ T3601]  x64_sys_call+0x1816/0x2ff0
[   42.347822][ T3601]  do_syscall_64+0xd2/0x200
[   42.347854][ T3601]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.347878][ T3601]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.347944][ T3601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.347971][ T3601] RIP: 0033:0x7fa162c8ebe9
[   42.347988][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.348007][ T3601] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   42.348025][ T3601] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   42.348072][ T3601] RDX: 0000000000000002 RSI: 0000000000005437 RDI: 0000000000000006
[   42.348086][ T3601] RBP: 00007fa1616f7090 R08: 0000000000000000 R09: 0000000000000000
[   42.348098][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.348110][ T3601] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   42.348132][ T3601]  </TASK>
[   42.351982][ T3606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'.
[   42.462691][ T3611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'.
[   42.613033][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.712271][ T3628] loop2: detected capacity change from 0 to 1024
[   42.735837][ T3628] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   42.746715][ T3633] loop0: detected capacity change from 0 to 512
[   42.768717][ T3628] team0 (unregistering): Port device team_slave_0 removed
[   42.776506][ T3633] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   42.785336][ T3633] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.45: invalid indirect mapped block 2683928664 (level 1)
[   42.786064][ T3628] team0 (unregistering): Port device team_slave_1 removed
[   42.810801][ T3633] EXT4-fs (loop0): Remounting filesystem read-only
[   42.817636][ T3633] EXT4-fs (loop0): 1 truncate cleaned up
[   42.824104][ T3633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.931298][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.972462][ T3644] FAULT_INJECTION: forcing a failure.
[   42.972462][ T3644] name failslab, interval 1, probability 0, space 0, times 0
[   42.985251][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: syz.0.47 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   42.985329][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.985340][ T3644] Call Trace:
[   42.985346][ T3644]  <TASK>
[   42.985351][ T3644]  __dump_stack+0x1d/0x30
[   42.985374][ T3644]  dump_stack_lvl+0xe8/0x140
[   42.985394][ T3644]  dump_stack+0x15/0x1b
[   42.985408][ T3644]  should_fail_ex+0x265/0x280
[   42.985483][ T3644]  should_failslab+0x8c/0xb0
[   42.985504][ T3644]  __kvmalloc_node_noprof+0x123/0x4e0
[   42.985530][ T3644]  ? traverse+0x9d/0x3a0
[   42.985574][ T3644]  traverse+0x9d/0x3a0
[   42.985630][ T3644]  ? terminate_walk+0x27f/0x2a0
[   42.985744][ T3644]  seq_read_iter+0x853/0x940
[   42.985837][ T3644]  ? _parse_integer_limit+0x170/0x190
[   42.985863][ T3644]  seq_read+0x270/0x2b0
[   42.985898][ T3644]  ? __pfx_seq_read+0x10/0x10
[   42.985937][ T3644]  proc_reg_read+0x125/0x1c0
[   42.985973][ T3644]  ? __pfx_proc_reg_read+0x10/0x10
[   42.986005][ T3644]  vfs_readv+0x3fb/0x690
[   42.986083][ T3644]  __x64_sys_preadv+0xfd/0x1c0
[   42.986117][ T3644]  x64_sys_call+0x282a/0x2ff0
[   42.986136][ T3644]  do_syscall_64+0xd2/0x200
[   42.986163][ T3644]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.986240][ T3644]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.986317][ T3644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.986393][ T3644] RIP: 0033:0x7faa953eebe9
[   42.986405][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.986418][ T3644] RSP: 002b:00007faa93e4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   42.986449][ T3644] RAX: ffffffffffffffda RBX: 00007faa95615fa0 RCX: 00007faa953eebe9
[   42.986458][ T3644] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003
[   42.986467][ T3644] RBP: 00007faa93e4f090 R08: 000000000000d215 R09: 0000000000000000
[   42.986476][ T3644] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001
[   42.986485][ T3644] R13: 00007faa95616038 R14: 00007faa95615fa0 R15: 00007ffcc6a140d8
[   42.986499][ T3644]  </TASK>
[   43.205802][ T3549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.265819][ T3549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.339331][ T3549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.351926][ T3650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'.
[   43.391835][   T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.413579][   T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.423430][ T3650] loop2: detected capacity change from 0 to 512
[   43.431913][   T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.441108][   T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.467568][ T3650] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   43.500718][ T3650] EXT4-fs (loop2): mount failed
[   43.618035][ T3665] netlink: 'syz.2.55': attribute type 21 has an invalid length.
[   43.645284][ T3665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.55'.
[   43.654214][ T3665] netlink: 'syz.2.55': attribute type 1 has an invalid length.
[   43.677318][ T3669] capability: warning: `syz.3.56' uses deprecated v2 capabilities in a way that may be insecure
[   43.750670][ T3672] loop1: detected capacity change from 0 to 512
[   43.771227][ T3672] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   43.782118][ T3672] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.59: invalid indirect mapped block 2683928664 (level 1)
[   43.805334][ T3676] vlan2: entered allmulticast mode
[   43.805510][ T3681] capability: warning: `syz.3.58' uses 32-bit capabilities (legacy support in use)
[   43.825950][ T3672] EXT4-fs (loop1): Remounting filesystem read-only
[   43.833545][ T3681] netlink: 'syz.3.58': attribute type 15 has an invalid length.
[   43.841738][ T3672] EXT4-fs (loop1): 1 truncate cleaned up
[   43.849349][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.955139][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.364680][ T3750] random: crng reseeded on system resumption
[   44.577795][ T3768] loop4: detected capacity change from 0 to 764
[   44.596019][ T3768] rock: directory entry would overflow storage
[   44.602275][ T3768] rock: sig=0x5245, size=8, remaining=5
[   44.798969][   T29] kauditd_printk_skb: 575 callbacks suppressed
[   44.799007][   T29] audit: type=1326 audit(1754805899.126:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.2.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f296489ebe9 code=0x0
[   44.860750][   T29] audit: type=1326 audit(1754805899.176:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   44.883932][   T29] audit: type=1326 audit(1754805899.176:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   44.907171][   T29] audit: type=1326 audit(1754805899.176:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   44.930601][   T29] audit: type=1326 audit(1754805899.176:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   44.954076][   T29] audit: type=1326 audit(1754805899.176:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   44.977242][   T29] audit: type=1326 audit(1754805899.176:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   45.000393][   T29] audit: type=1326 audit(1754805899.176:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   45.024043][   T29] audit: type=1326 audit(1754805899.176:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   45.047356][   T29] audit: type=1326 audit(1754805899.186:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd68ebe9 code=0x7ffc0000
[   45.870439][ T3888] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   45.984121][ T3898] netlink: 'syz.2.89': attribute type 21 has an invalid length.
[   45.992020][ T3898] netlink: 'syz.2.89': attribute type 1 has an invalid length.
[   46.129483][ T3907] SELinux: failed to load policy
[   46.260990][ T3918] loop1: detected capacity change from 0 to 1764
[   46.297331][ T3925] loop3: detected capacity change from 0 to 512
[   46.334792][ T3925] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.378014][ T3925] EXT4-fs (loop3): mount failed
[   46.433567][ T3934] netlink: '’': attribute type 1 has an invalid length.
[   46.442817][ T3934] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   46.451489][ T3934] SELinux: failed to load policy
[   46.558212][ T3953] netlink: 'syz.4.102': attribute type 15 has an invalid length.
[   46.641898][ T3964] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   47.069071][ T4007] FAULT_INJECTION: forcing a failure.
[   47.069071][ T4007] name failslab, interval 1, probability 0, space 0, times 0
[   47.081775][ T4007] CPU: 1 UID: 0 PID: 4007 Comm: syz.2.110 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   47.081808][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.081823][ T4007] Call Trace:
[   47.081832][ T4007]  <TASK>
[   47.081854][ T4007]  __dump_stack+0x1d/0x30
[   47.081879][ T4007]  dump_stack_lvl+0xe8/0x140
[   47.081960][ T4007]  dump_stack+0x15/0x1b
[   47.081977][ T4007]  should_fail_ex+0x265/0x280
[   47.082004][ T4007]  should_failslab+0x8c/0xb0
[   47.082054][ T4007]  kmem_cache_alloc_node_noprof+0x57/0x320
[   47.082104][ T4007]  ? __alloc_skb+0x101/0x320
[   47.082146][ T4007]  __alloc_skb+0x101/0x320
[   47.082183][ T4007]  netlink_alloc_large_skb+0xba/0xf0
[   47.082310][ T4007]  netlink_sendmsg+0x3cf/0x6b0
[   47.082335][ T4007]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.082356][ T4007]  __sock_sendmsg+0x142/0x180
[   47.082432][ T4007]  ____sys_sendmsg+0x31e/0x4e0
[   47.082459][ T4007]  ___sys_sendmsg+0x17b/0x1d0
[   47.082495][ T4007]  __x64_sys_sendmsg+0xd4/0x160
[   47.082534][ T4007]  x64_sys_call+0x191e/0x2ff0
[   47.082564][ T4007]  do_syscall_64+0xd2/0x200
[   47.082632][ T4007]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.082662][ T4007]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.082695][ T4007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.082796][ T4007] RIP: 0033:0x7f296489ebe9
[   47.082812][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.082833][ T4007] RSP: 002b:00007f29632ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.082857][ T4007] RAX: ffffffffffffffda RBX: 00007f2964ac5fa0 RCX: 00007f296489ebe9
[   47.082875][ T4007] RDX: 0000000024048840 RSI: 00002000000002c0 RDI: 0000000000000003
[   47.082965][ T4007] RBP: 00007f29632ff090 R08: 0000000000000000 R09: 0000000000000000
[   47.082978][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.083000][ T4007] R13: 00007f2964ac6038 R14: 00007f2964ac5fa0 R15: 00007ffcf9c9f2a8
[   47.083025][ T4007]  </TASK>
[   47.338899][ T4015] __nla_validate_parse: 6 callbacks suppressed
[   47.338916][ T4015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'.
[   47.354019][ T4015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'.
[   47.367345][ T4015] 9pnet_fd: Insufficient options for proto=fd
[   47.410866][ T4022] tipc: Started in network mode
[   47.415845][ T4022] tipc: Node identity ac14140f, cluster identity 4711
[   47.426395][ T4024] FAULT_INJECTION: forcing a failure.
[   47.426395][ T4024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.429792][ T4022] tipc: New replicast peer: 255.255.255.83
[   47.439508][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.3.113 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   47.439582][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.439601][ T4024] Call Trace:
[   47.439610][ T4024]  <TASK>
[   47.439622][ T4024]  __dump_stack+0x1d/0x30
[   47.439651][ T4024]  dump_stack_lvl+0xe8/0x140
[   47.439677][ T4024]  dump_stack+0x15/0x1b
[   47.439747][ T4024]  should_fail_ex+0x265/0x280
[   47.439850][ T4024]  should_fail+0xb/0x20
[   47.439874][ T4024]  should_fail_usercopy+0x1a/0x20
[   47.439963][ T4024]  _copy_from_user+0x1c/0xb0
[   47.440048][ T4024]  vmemdup_user+0x59/0xd0
[   47.440084][ T4024]  con_set_unimap+0x3f/0x6f0
[   47.440117][ T4024]  ? selinux_capable+0x31/0x40
[   47.440154][ T4024]  ? should_fail_ex+0xdb/0x280
[   47.440220][ T4024]  vt_ioctl+0xfbb/0x1880
[   47.440258][ T4024]  ? tty_jobctrl_ioctl+0x29e/0x810
[   47.440317][ T4024]  tty_ioctl+0x7de/0xb80
[   47.440409][ T4024]  ? __pfx_tty_ioctl+0x10/0x10
[   47.440452][ T4024]  __se_sys_ioctl+0xce/0x140
[   47.440589][ T4024]  __x64_sys_ioctl+0x43/0x50
[   47.440632][ T4024]  x64_sys_call+0x1816/0x2ff0
[   47.440662][ T4024]  do_syscall_64+0xd2/0x200
[   47.440697][ T4024]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.440742][ T4024]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.440775][ T4024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.440805][ T4024] RIP: 0033:0x7fa162c8ebe9
[   47.440824][ T4024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.440916][ T4024] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.440983][ T4024] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   47.441023][ T4024] RDX: 0000200000001ec0 RSI: 0000000000004b67 RDI: 0000000000000004
[   47.441040][ T4024] RBP: 00007fa1616f7090 R08: 0000000000000000 R09: 0000000000000000
[   47.441076][ T4024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.441093][ T4024] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   47.441184][ T4024]  </TASK>
[   47.654613][ T4022] tipc: Enabled bearer <udp:£>, priority 10
[   48.475845][ T4056] syz.2.114 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[   48.490421][ T4056] CPU: 0 UID: 0 PID: 4056 Comm: syz.2.114 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   48.490506][ T4056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.490519][ T4056] Call Trace:
[   48.490526][ T4056]  <TASK>
[   48.490533][ T4056]  __dump_stack+0x1d/0x30
[   48.490553][ T4056]  dump_stack_lvl+0xe8/0x140
[   48.490576][ T4056]  dump_stack+0x15/0x1b
[   48.490598][ T4056]  dump_header+0x81/0x220
[   48.490753][ T4056]  oom_kill_process+0x342/0x400
[   48.490791][ T4056]  out_of_memory+0x979/0xb80
[   48.490821][ T4056]  try_charge_memcg+0x5e6/0x9e0
[   48.490890][ T4056]  obj_cgroup_charge_pages+0xa6/0x150
[   48.490925][ T4056]  __memcg_kmem_charge_page+0x9f/0x170
[   48.490954][ T4056]  __alloc_frozen_pages_noprof+0x188/0x360
[   48.491034][ T4056]  alloc_pages_mpol+0xb3/0x250
[   48.491071][ T4056]  alloc_pages_noprof+0x90/0x130
[   48.491108][ T4056]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   48.491216][ T4056]  __kvmalloc_node_noprof+0x30f/0x4e0
[   48.491263][ T4056]  ? ip_set_alloc+0x1f/0x30
[   48.491304][ T4056]  ? ip_set_alloc+0x1f/0x30
[   48.491356][ T4056]  ? __kmalloc_cache_noprof+0x189/0x320
[   48.491405][ T4056]  ip_set_alloc+0x1f/0x30
[   48.491442][ T4056]  hash_netiface_create+0x282/0x740
[   48.491476][ T4056]  ? __pfx_hash_netiface_create+0x10/0x10
[   48.491601][ T4056]  ip_set_create+0x3c9/0x960
[   48.491634][ T4056]  ? __nla_parse+0x40/0x60
[   48.491669][ T4056]  nfnetlink_rcv_msg+0x4c6/0x590
[   48.491720][ T4056]  netlink_rcv_skb+0x120/0x220
[   48.491738][ T4056]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   48.491857][ T4056]  nfnetlink_rcv+0x16b/0x1690
[   48.491890][ T4056]  ? nlmon_xmit+0x4f/0x60
[   48.491915][ T4056]  ? consume_skb+0x49/0x150
[   48.491966][ T4056]  ? nlmon_xmit+0x4f/0x60
[   48.491999][ T4056]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   48.492025][ T4056]  ? __dev_queue_xmit+0x1200/0x2000
[   48.492102][ T4056]  ? __dev_queue_xmit+0x182/0x2000
[   48.492132][ T4056]  ? ref_tracker_free+0x37d/0x3e0
[   48.492165][ T4056]  ? __netlink_deliver_tap+0x4dc/0x500
[   48.492191][ T4056]  netlink_unicast+0x5c0/0x690
[   48.492295][ T4056]  netlink_sendmsg+0x58b/0x6b0
[   48.492318][ T4056]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.492453][ T4056]  __sock_sendmsg+0x142/0x180
[   48.492478][ T4056]  ____sys_sendmsg+0x31e/0x4e0
[   48.492505][ T4056]  ___sys_sendmsg+0x17b/0x1d0
[   48.492540][ T4056]  __x64_sys_sendmsg+0xd4/0x160
[   48.492586][ T4056]  x64_sys_call+0x191e/0x2ff0
[   48.492614][ T4056]  do_syscall_64+0xd2/0x200
[   48.492642][ T4056]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.492664][ T4056]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.492740][ T4056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.492762][ T4056] RIP: 0033:0x7f296489ebe9
[   48.492776][ T4056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.492798][ T4056] RSP: 002b:00007f29632ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.492821][ T4056] RAX: ffffffffffffffda RBX: 00007f2964ac5fa0 RCX: 00007f296489ebe9
[   48.492837][ T4056] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[   48.492894][ T4056] RBP: 00007f2964921e19 R08: 0000000000000000 R09: 0000000000000000
[   48.492906][ T4056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.492921][ T4056] R13: 00007f2964ac6038 R14: 00007f2964ac5fa0 R15: 00007ffcf9c9f2a8
[   48.492943][ T4056]  </TASK>
[   48.823437][ T4056] memory: usage 307200kB, limit 307200kB, failcnt 71
[   48.824699][ T2955] tipc: Node number set to 2886997007
[   48.830122][ T4056] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[   48.830141][ T4056] kmem: usage 306720kB, limit 9007199254740988kB, failcnt 0
[   48.830155][ T4056] Memory cgroup stats for /syz2:
[   48.925703][ T4056] cache 294912
[   48.934052][ T4056] rss 0
[   48.936831][ T4056] shmem 0
[   48.939771][ T4056] mapped_file 290816
[   48.943699][ T4056] dirty 290816
[   48.947092][ T4056] writeback 0
[   48.950371][ T4056] workingset_refault_anon 4
[   48.954947][ T4056] workingset_refault_file 63
[   48.959711][ T4056] swap 180224
[   48.963006][ T4056] swapcached 16384
[   48.966771][ T4056] pgpgin 9437
[   48.970055][ T4056] pgpgout 9361
[   48.973455][ T4056] pgfault 9646
[   48.976828][ T4056] pgmajfault 5
[   48.980196][ T4056] inactive_anon 0
[   48.983833][ T4056] active_anon 16384
[   48.987782][ T4056] inactive_file 290816
[   48.991854][ T4056] active_file 4096
[   48.995585][ T4056] unevictable 0
[   48.999111][ T4056] hierarchical_memory_limit 314572800
[   49.004531][ T4056] hierarchical_memsw_limit 9223372036854771712
[   49.010696][ T4056] total_cache 294912
[   49.014601][ T4056] total_rss 0
[   49.017961][ T4056] total_shmem 0
[   49.021434][ T4056] total_mapped_file 290816
[   49.025933][ T4056] total_dirty 290816
[   49.029839][ T4056] total_writeback 0
[   49.033731][ T4056] total_workingset_refault_anon 4
[   49.038757][ T4056] total_workingset_refault_file 63
[   49.043889][ T4056] total_swap 180224
[   49.047782][ T4056] total_swapcached 16384
[   49.052031][ T4056] total_pgpgin 9437
[   49.055891][ T4056] total_pgpgout 9361
[   49.059792][ T4056] total_pgfault 9646
[   49.063725][ T4056] total_pgmajfault 5
[   49.067650][ T4056] total_inactive_anon 0
[   49.071813][ T4056] total_active_anon 16384
[   49.076266][ T4056] total_inactive_file 290816
[   49.080870][ T4056] total_active_file 4096
[   49.085161][ T4056] total_unevictable 0
[   49.089147][ T4056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.114,pid=4055,uid=0
[   49.103706][ T4056] Memory cgroup out of memory: Killed process 4055 (syz.2.114) total-vm:93768kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   49.639651][ T4132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.743951][ T4132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.958376][ T4146] loop2: detected capacity change from 0 to 128
[   50.044162][   T29] kauditd_printk_skb: 404 callbacks suppressed
[   50.044175][   T29] audit: type=1326 audit(1754805904.356:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.073810][   T29] audit: type=1326 audit(1754805904.356:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.097119][   T29] audit: type=1326 audit(1754805904.356:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa954214a5 code=0x7ffc0000
[   50.120450][   T29] audit: type=1326 audit(1754805904.356:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.143800][   T29] audit: type=1326 audit(1754805904.356:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.167196][   T29] audit: type=1326 audit(1754805904.376:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.330292][ T4146] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.372304][ T4146] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   50.409226][   T29] audit: type=1326 audit(1754805904.536:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.432532][   T29] audit: type=1326 audit(1754805904.586:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa9538add9 code=0x7ffc0000
[   50.455798][   T29] audit: type=1326 audit(1754805904.586:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.479103][   T29] audit: type=1326 audit(1754805904.586:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa953eebe9 code=0x7ffc0000
[   50.591682][ T4160] netlink: 'syz.0.134': attribute type 15 has an invalid length.
[   50.637806][ T4129] Set syz1 is full, maxelem 65536 reached
[   51.183451][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.230970][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'.
[   51.240688][ T4242] FAULT_INJECTION: forcing a failure.
[   51.240688][ T4242] name failslab, interval 1, probability 0, space 0, times 0
[   51.253456][ T4242] CPU: 1 UID: 0 PID: 4242 Comm: syz.4.139 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   51.253515][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   51.253529][ T4242] Call Trace:
[   51.253537][ T4242]  <TASK>
[   51.253545][ T4242]  __dump_stack+0x1d/0x30
[   51.253571][ T4242]  dump_stack_lvl+0xe8/0x140
[   51.253617][ T4242]  dump_stack+0x15/0x1b
[   51.253638][ T4242]  should_fail_ex+0x265/0x280
[   51.253663][ T4242]  should_failslab+0x8c/0xb0
[   51.253731][ T4242]  kmem_cache_alloc_node_noprof+0x57/0x320
[   51.253767][ T4242]  ? __alloc_skb+0x101/0x320
[   51.253807][ T4242]  __alloc_skb+0x101/0x320
[   51.253905][ T4242]  netlink_alloc_large_skb+0xba/0xf0
[   51.253945][ T4242]  netlink_sendmsg+0x3cf/0x6b0
[   51.253967][ T4242]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.254061][ T4242]  __sock_sendmsg+0x142/0x180
[   51.254092][ T4242]  ____sys_sendmsg+0x31e/0x4e0
[   51.254176][ T4242]  ___sys_sendmsg+0x17b/0x1d0
[   51.254207][ T4242]  __x64_sys_sendmsg+0xd4/0x160
[   51.254237][ T4242]  x64_sys_call+0x191e/0x2ff0
[   51.254264][ T4242]  do_syscall_64+0xd2/0x200
[   51.254293][ T4242]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.254408][ T4242]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   51.254455][ T4242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.254483][ T4242] RIP: 0033:0x7f3d8bf6ebe9
[   51.254502][ T4242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.254524][ T4242] RSP: 002b:00007f3d8a9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.254558][ T4242] RAX: ffffffffffffffda RBX: 00007f3d8c195fa0 RCX: 00007f3d8bf6ebe9
[   51.254573][ T4242] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006
[   51.254586][ T4242] RBP: 00007f3d8a9d7090 R08: 0000000000000000 R09: 0000000000000000
[   51.254654][ T4242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.254666][ T4242] R13: 00007f3d8c196038 R14: 00007f3d8c195fa0 R15: 00007fff68571c28
[   51.254684][ T4242]  </TASK>
[   51.464337][ T4243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'.
[   51.536569][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   51.546181][ T4251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'.
[   51.689729][ T4271] loop4: detected capacity change from 0 to 512
[   51.769380][ T4279] 9pnet_fd: Insufficient options for proto=fd
[   51.842983][ T4271] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   51.882186][ T4271] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.146: invalid indirect mapped block 2683928664 (level 1)
[   51.905212][ T4271] EXT4-fs (loop4): Remounting filesystem read-only
[   51.925327][ T4271] EXT4-fs (loop4): 1 truncate cleaned up
[   51.931574][ T4271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.971171][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'.
[   52.037985][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[   52.072041][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'.
[   52.139589][ T4309] netlink: 'syz.1.149': attribute type 21 has an invalid length.
[   52.149885][ T4309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.149'.
[   52.158872][ T4309] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   52.183925][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.227361][ T4318] loop4: detected capacity change from 0 to 512
[   52.268115][ T4318] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   52.280378][ T4318] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.151: invalid indirect mapped block 2683928664 (level 1)
[   52.296583][ T4318] EXT4-fs (loop4): Remounting filesystem read-only
[   52.303834][ T4318] EXT4-fs (loop4): 1 truncate cleaned up
[   52.310132][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.414329][ T4246] syz.3.140 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[   52.428718][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.3.140 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   52.428746][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.428799][ T4246] Call Trace:
[   52.428807][ T4246]  <TASK>
[   52.428815][ T4246]  __dump_stack+0x1d/0x30
[   52.428841][ T4246]  dump_stack_lvl+0xe8/0x140
[   52.428865][ T4246]  dump_stack+0x15/0x1b
[   52.428886][ T4246]  dump_header+0x81/0x220
[   52.429011][ T4246]  oom_kill_process+0x342/0x400
[   52.429053][ T4246]  out_of_memory+0x979/0xb80
[   52.429085][ T4246]  try_charge_memcg+0x5e6/0x9e0
[   52.429113][ T4246]  obj_cgroup_charge_pages+0xa6/0x150
[   52.429201][ T4246]  __memcg_kmem_charge_page+0x9f/0x170
[   52.429242][ T4246]  __alloc_frozen_pages_noprof+0x188/0x360
[   52.429283][ T4246]  alloc_pages_mpol+0xb3/0x250
[   52.429400][ T4246]  alloc_pages_noprof+0x90/0x130
[   52.429468][ T4246]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   52.429573][ T4246]  __kvmalloc_node_noprof+0x30f/0x4e0
[   52.429609][ T4246]  ? ip_set_alloc+0x1f/0x30
[   52.429646][ T4246]  ? ip_set_alloc+0x1f/0x30
[   52.429740][ T4246]  ? __kmalloc_cache_noprof+0x189/0x320
[   52.429778][ T4246]  ip_set_alloc+0x1f/0x30
[   52.429805][ T4246]  hash_netiface_create+0x282/0x740
[   52.429850][ T4246]  ? __pfx_hash_netiface_create+0x10/0x10
[   52.429962][ T4246]  ip_set_create+0x3c9/0x960
[   52.429986][ T4246]  ? __nla_parse+0x40/0x60
[   52.430018][ T4246]  nfnetlink_rcv_msg+0x4c6/0x590
[   52.430076][ T4246]  netlink_rcv_skb+0x120/0x220
[   52.430111][ T4246]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   52.430153][ T4246]  nfnetlink_rcv+0x16b/0x1690
[   52.430199][ T4246]  ? nlmon_xmit+0x4f/0x60
[   52.430230][ T4246]  ? consume_skb+0x49/0x150
[   52.430269][ T4246]  ? nlmon_xmit+0x4f/0x60
[   52.430342][ T4246]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   52.430363][ T4246]  ? __dev_queue_xmit+0x1200/0x2000
[   52.430383][ T4246]  ? __dev_queue_xmit+0x182/0x2000
[   52.430436][ T4246]  ? ref_tracker_free+0x37d/0x3e0
[   52.430464][ T4246]  ? __netlink_deliver_tap+0x4dc/0x500
[   52.430485][ T4246]  netlink_unicast+0x5c0/0x690
[   52.430515][ T4246]  netlink_sendmsg+0x58b/0x6b0
[   52.430612][ T4246]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.430638][ T4246]  __sock_sendmsg+0x142/0x180
[   52.430665][ T4246]  ____sys_sendmsg+0x31e/0x4e0
[   52.430685][ T4246]  ___sys_sendmsg+0x17b/0x1d0
[   52.430752][ T4246]  __x64_sys_sendmsg+0xd4/0x160
[   52.430777][ T4246]  x64_sys_call+0x191e/0x2ff0
[   52.430796][ T4246]  do_syscall_64+0xd2/0x200
[   52.430845][ T4246]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.430922][ T4246]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.430947][ T4246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.430974][ T4246] RIP: 0033:0x7fa162c8ebe9
[   52.431026][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.431042][ T4246] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.431062][ T4246] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   52.431078][ T4246] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[   52.431093][ T4246] RBP: 00007fa162d11e19 R08: 0000000000000000 R09: 0000000000000000
[   52.431108][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.431124][ T4246] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   52.431147][ T4246]  </TASK>
[   52.431219][ T4246] memory: usage 307200kB, limit 307200kB, failcnt 286
[   52.771170][ T4246] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[   52.780062][ T4246] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[   52.787403][ T4246] Memory cgroup stats for /syz3:
[   52.787977][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.788054][ T4246] cache 4096
[   52.805119][ T4246] rss 0
[   52.807941][ T4246] shmem 0
[   52.810885][ T4246] mapped_file 0
[   52.814362][ T4246] dirty 0
[   52.817366][ T4246] writeback 0
[   52.820683][ T4246] workingset_refault_anon 6
[   52.825273][ T4246] workingset_refault_file 8
[   52.829856][ T4246] swap 192512
[   52.833170][ T4246] swapcached 4096
[   52.836861][ T4246] pgpgin 11998
[   52.840323][ T4246] pgpgout 11996
[   52.843818][ T4246] pgfault 13242
[   52.847282][ T4246] pgmajfault 8
[   52.850651][ T4246] inactive_anon 4096
[   52.854571][ T4246] active_anon 0
[   52.858101][ T4246] inactive_file 4096
[   52.861984][ T4246] active_file 0
[   52.865447][ T4246] unevictable 0
[   52.868980][ T4246] hierarchical_memory_limit 314572800
[   52.874373][ T4246] hierarchical_memsw_limit 9223372036854771712
[   52.880523][ T4246] total_cache 4096
[   52.884253][ T4246] total_rss 0
[   52.887576][ T4246] total_shmem 0
[   52.891026][ T4246] total_mapped_file 0
[   52.895081][ T4246] total_dirty 0
[   52.898562][ T4246] total_writeback 0
[   52.902422][ T4246] total_workingset_refault_anon 6
[   52.907557][ T4246] total_workingset_refault_file 8
[   52.912602][ T4246] total_swap 192512
[   52.916415][ T4246] total_swapcached 4096
[   52.920579][ T4246] total_pgpgin 11998
[   52.924548][ T4246] total_pgpgout 11996
[   52.928525][ T4246] total_pgfault 13242
[   52.932543][ T4246] total_pgmajfault 8
[   52.936440][ T4246] total_inactive_anon 4096
[   52.940850][ T4246] total_active_anon 0
[   52.944857][ T4246] total_inactive_file 4096
[   52.949324][ T4246] total_active_file 0
[   52.953324][ T4246] total_unevictable 0
[   52.957307][ T4246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.140,pid=4245,uid=0
[   52.971866][ T4246] Memory cgroup out of memory: Killed process 4245 (syz.3.140) total-vm:93768kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   53.148378][ T4344] FAULT_INJECTION: forcing a failure.
[   53.148378][ T4344] name failslab, interval 1, probability 0, space 0, times 0
[   53.161142][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.0.158 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   53.161166][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.161176][ T4344] Call Trace:
[   53.161181][ T4344]  <TASK>
[   53.161189][ T4344]  __dump_stack+0x1d/0x30
[   53.161213][ T4344]  dump_stack_lvl+0xe8/0x140
[   53.161238][ T4344]  dump_stack+0x15/0x1b
[   53.161256][ T4344]  should_fail_ex+0x265/0x280
[   53.161280][ T4344]  should_failslab+0x8c/0xb0
[   53.161302][ T4344]  kmem_cache_alloc_node_noprof+0x57/0x320
[   53.161327][ T4344]  ? __alloc_skb+0x101/0x320
[   53.161468][ T4344]  ? __rtnl_unlock+0x95/0xb0
[   53.161508][ T4344]  __alloc_skb+0x101/0x320
[   53.161558][ T4344]  netlink_ack+0xfd/0x500
[   53.161584][ T4344]  netlink_rcv_skb+0x192/0x220
[   53.161616][ T4344]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   53.161646][ T4344]  rtnetlink_rcv+0x1c/0x30
[   53.161668][ T4344]  netlink_unicast+0x5c0/0x690
[   53.161709][ T4344]  netlink_sendmsg+0x58b/0x6b0
[   53.161802][ T4344]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.161897][ T4344]  __sock_sendmsg+0x142/0x180
[   53.161927][ T4344]  ____sys_sendmsg+0x31e/0x4e0
[   53.161982][ T4344]  ___sys_sendmsg+0x17b/0x1d0
[   53.162198][ T4344]  __x64_sys_sendmsg+0xd4/0x160
[   53.162229][ T4344]  x64_sys_call+0x191e/0x2ff0
[   53.162250][ T4344]  do_syscall_64+0xd2/0x200
[   53.162274][ T4344]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.162378][ T4344]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.162527][ T4344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.162553][ T4344] RIP: 0033:0x7faa953eebe9
[   53.162570][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.162590][ T4344] RSP: 002b:00007faa93e4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.162637][ T4344] RAX: ffffffffffffffda RBX: 00007faa95615fa0 RCX: 00007faa953eebe9
[   53.162686][ T4344] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004
[   53.162701][ T4344] RBP: 00007faa93e4f090 R08: 0000000000000000 R09: 0000000000000000
[   53.162725][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.162740][ T4344] R13: 00007faa95616038 R14: 00007faa95615fa0 R15: 00007ffcc6a140d8
[   53.162759][ T4344]  </TASK>
[   53.457776][ T4350] netlink: 'syz.0.161': attribute type 21 has an invalid length.
[   53.469973][ T4350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.161'.
[   53.478987][ T4350] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   53.497594][ T4348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.159'.
[   53.506787][ T4348] unsupported nlmsg_type 40
[   53.515647][ T4348] loop4: detected capacity change from 0 to 512
[   53.527989][ T4348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   53.548412][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.549016][ T4357] loop0: detected capacity change from 0 to 512
[   53.562981][ T4348] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.595998][ T4357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.163: bg 0: block 248: padding at end of block bitmap is not set
[   53.604380][ T4348] syz.4.159 uses obsolete (PF_INET,SOCK_PACKET)
[   53.629705][ T4357] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.163: Failed to acquire dquot type 1
[   53.641642][ T4357] EXT4-fs (loop0): 1 truncate cleaned up
[   53.655079][ T4357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.667943][ T4357] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.668865][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.696442][ T4246] syz.3.140 (4246) used greatest stack depth: 8176 bytes left
[   53.709152][ T4357] EXT4-fs (loop0): shut down requested (1)
[   53.753311][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.754108][ T4369] loop2: detected capacity change from 0 to 512
[   53.766728][ T4365] FAULT_INJECTION: forcing a failure.
[   53.766728][ T4365] name failslab, interval 1, probability 0, space 0, times 0
[   53.781225][ T4365] CPU: 1 UID: 0 PID: 4365 Comm: syz.3.167 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   53.781248][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.781259][ T4365] Call Trace:
[   53.781264][ T4365]  <TASK>
[   53.781270][ T4365]  __dump_stack+0x1d/0x30
[   53.781288][ T4365]  dump_stack_lvl+0xe8/0x140
[   53.781392][ T4365]  dump_stack+0x15/0x1b
[   53.781410][ T4365]  should_fail_ex+0x265/0x280
[   53.781449][ T4365]  should_failslab+0x8c/0xb0
[   53.781473][ T4365]  __kvmalloc_node_noprof+0x123/0x4e0
[   53.781499][ T4365]  ? xp_create_and_assign_umem+0x7e/0x5c0
[   53.781536][ T4365]  xp_create_and_assign_umem+0x7e/0x5c0
[   53.781718][ T4365]  ? __rcu_read_unlock+0x4f/0x70
[   53.781738][ T4365]  xsk_bind+0x2e3/0x960
[   53.781766][ T4365]  __sys_bind+0x1d1/0x2a0
[   53.781805][ T4365]  __x64_sys_bind+0x3f/0x50
[   53.781851][ T4365]  x64_sys_call+0x2b6e/0x2ff0
[   53.781871][ T4365]  do_syscall_64+0xd2/0x200
[   53.781893][ T4365]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.781913][ T4365]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.781958][ T4365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.781997][ T4365] RIP: 0033:0x7fa162c8ebe9
[   53.782011][ T4365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.782030][ T4365] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   53.782096][ T4365] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   53.782111][ T4365] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003
[   53.782126][ T4365] RBP: 00007fa1616f7090 R08: 0000000000000000 R09: 0000000000000000
[   53.782142][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.782156][ T4365] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   53.782242][ T4365]  </TASK>
[   53.788057][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.889735][ T4373] Zero length message leads to an empty skb
[   54.023133][ T4381] netlink: 'syz.0.171': attribute type 21 has an invalid length.
[   54.031025][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.171'.
[   54.040015][ T4381] netlink: 'syz.0.171': attribute type 1 has an invalid length.
[   54.131464][ T4391] openvswitch: netlink: Message has 6 unknown bytes.
[   54.197559][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'.
[   54.206807][ T4398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[   54.303333][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'.
[   54.334741][ T4403] loop3: detected capacity change from 0 to 1024
[   54.345020][ T4405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'.
[   54.480784][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'.
[   54.509994][ T4416] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.602492][ T4416] vlan2: entered allmulticast mode
[   54.607692][ T4416] bond1: entered allmulticast mode
[   54.625843][ T4420] FAULT_INJECTION: forcing a failure.
[   54.625843][ T4420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.639025][ T4420] CPU: 0 UID: 0 PID: 4420 Comm: syz.3.183 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   54.639061][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   54.639075][ T4420] Call Trace:
[   54.639082][ T4420]  <TASK>
[   54.639090][ T4420]  __dump_stack+0x1d/0x30
[   54.639114][ T4420]  dump_stack_lvl+0xe8/0x140
[   54.639137][ T4420]  dump_stack+0x15/0x1b
[   54.639209][ T4420]  should_fail_ex+0x265/0x280
[   54.639233][ T4420]  should_fail+0xb/0x20
[   54.639263][ T4420]  should_fail_usercopy+0x1a/0x20
[   54.639288][ T4420]  _copy_from_user+0x1c/0xb0
[   54.639320][ T4420]  ucma_write+0xd9/0x250
[   54.639344][ T4420]  ? __pfx_ucma_write+0x10/0x10
[   54.639366][ T4420]  vfs_write+0x269/0x960
[   54.639391][ T4420]  ? __rcu_read_unlock+0x4f/0x70
[   54.639487][ T4420]  ? __fget_files+0x184/0x1c0
[   54.639596][ T4420]  ksys_write+0xda/0x1a0
[   54.639622][ T4420]  __x64_sys_write+0x40/0x50
[   54.639647][ T4420]  x64_sys_call+0x27fe/0x2ff0
[   54.639738][ T4420]  do_syscall_64+0xd2/0x200
[   54.639780][ T4420]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   54.639829][ T4420]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.639881][ T4420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.639904][ T4420] RIP: 0033:0x7fa162c8ebe9
[   54.639920][ T4420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.639940][ T4420] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   54.640008][ T4420] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   54.640022][ T4420] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000005
[   54.640104][ T4420] RBP: 00007fa1616f7090 R08: 0000000000000000 R09: 0000000000000000
[   54.640118][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.640130][ T4420] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   54.640151][ T4420]  </TASK>
[   54.946102][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.102891][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'.
[   55.132884][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.141360][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.202762][   T29] kauditd_printk_skb: 304 callbacks suppressed
[   55.202777][   T29] audit: type=1326 audit(1754805909.536:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.221881][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'.
[   55.242896][   T29] audit: type=1326 audit(1754805909.536:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.266291][   T29] audit: type=1326 audit(1754805909.536:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.289794][   T29] audit: type=1326 audit(1754805909.536:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.313299][   T29] audit: type=1326 audit(1754805909.536:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.336611][   T29] audit: type=1326 audit(1754805909.536:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.359890][   T29] audit: type=1326 audit(1754805909.536:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.383383][   T29] audit: type=1326 audit(1754805909.536:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.406724][   T29] audit: type=1326 audit(1754805909.536:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.430079][   T29] audit: type=1326 audit(1754805909.536:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d8bf6ebe9 code=0x7ffc0000
[   55.666488][ T4473] FAULT_INJECTION: forcing a failure.
[   55.666488][ T4473] name failslab, interval 1, probability 0, space 0, times 0
[   55.679215][ T4473] CPU: 0 UID: 0 PID: 4473 Comm: syz.0.204 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   55.679239][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   55.679250][ T4473] Call Trace:
[   55.679328][ T4473]  <TASK>
[   55.679335][ T4473]  __dump_stack+0x1d/0x30
[   55.679428][ T4473]  dump_stack_lvl+0xe8/0x140
[   55.679472][ T4473]  dump_stack+0x15/0x1b
[   55.679488][ T4473]  should_fail_ex+0x265/0x280
[   55.679507][ T4473]  should_failslab+0x8c/0xb0
[   55.679612][ T4473]  kmem_cache_alloc_noprof+0x50/0x310
[   55.679646][ T4473]  ? audit_log_start+0x365/0x6c0
[   55.679738][ T4473]  audit_log_start+0x365/0x6c0
[   55.679776][ T4473]  audit_seccomp+0x48/0x100
[   55.679857][ T4473]  ? __seccomp_filter+0x68c/0x10d0
[   55.679875][ T4473]  __seccomp_filter+0x69d/0x10d0
[   55.679895][ T4473]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   55.679992][ T4473]  ? vfs_write+0x7e8/0x960
[   55.680052][ T4473]  ? __rcu_read_unlock+0x4f/0x70
[   55.680073][ T4473]  ? __fget_files+0x184/0x1c0
[   55.680096][ T4473]  __secure_computing+0x82/0x150
[   55.680187][ T4473]  syscall_trace_enter+0xcf/0x1e0
[   55.680210][ T4473]  do_syscall_64+0xac/0x200
[   55.680233][ T4473]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.680322][ T4473]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   55.680344][ T4473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.680362][ T4473] RIP: 0033:0x7faa953eebe9
[   55.680374][ T4473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.680389][ T4473] RSP: 002b:00007faa93e4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[   55.680416][ T4473] RAX: ffffffffffffffda RBX: 00007faa95615fa0 RCX: 00007faa953eebe9
[   55.680459][ T4473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[   55.680473][ T4473] RBP: 00007faa93e4f090 R08: 0000000000000000 R09: 0000000000000000
[   55.680487][ T4473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.680498][ T4473] R13: 00007faa95616038 R14: 00007faa95615fa0 R15: 00007ffcc6a140d8
[   55.680514][ T4473]  </TASK>
[   55.998322][ T4479] loop2: detected capacity change from 0 to 4096
[   56.036908][ T4479] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   56.065871][ T4479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.248132][ T4487] loop3: detected capacity change from 0 to 8192
[   56.281446][ T4487] FAT-fs (loop3): bogus logical sector size 155
[   56.287839][ T4487] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   56.297272][ T4487] FAT-fs (loop3): Can't find a valid FAT filesystem
[   56.474920][ T4489] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.510866][ T4497] loop4: detected capacity change from 0 to 512
[   56.523154][ T4497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.213: bg 0: block 131: padding at end of block bitmap is not set
[   56.540448][   T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.572602][ T4497] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   56.610595][ T4497] EXT4-fs (loop4): 1 truncate cleaned up
[   56.647074][ T4497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.663160][   T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.746746][   T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.762660][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.826013][   T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.839660][ T4510] FAULT_INJECTION: forcing a failure.
[   56.839660][ T4510] name failslab, interval 1, probability 0, space 0, times 0
[   56.852311][ T4510] CPU: 0 UID: 0 PID: 4510 Comm: syz.4.216 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   56.852340][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   56.852353][ T4510] Call Trace:
[   56.852360][ T4510]  <TASK>
[   56.852367][ T4510]  __dump_stack+0x1d/0x30
[   56.852410][ T4510]  dump_stack_lvl+0xe8/0x140
[   56.852431][ T4510]  dump_stack+0x15/0x1b
[   56.852451][ T4510]  should_fail_ex+0x265/0x280
[   56.852476][ T4510]  should_failslab+0x8c/0xb0
[   56.852580][ T4510]  __kmalloc_noprof+0xa5/0x3e0
[   56.852615][ T4510]  ? kernfs_fop_write_iter+0xe1/0x2d0
[   56.852655][ T4510]  ? selinux_file_permission+0x1e4/0x320
[   56.852679][ T4510]  kernfs_fop_write_iter+0xe1/0x2d0
[   56.852758][ T4510]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   56.852839][ T4510]  vfs_write+0x52a/0x960
[   56.852874][ T4510]  ksys_write+0xda/0x1a0
[   56.852905][ T4510]  __x64_sys_write+0x40/0x50
[   56.852991][ T4510]  x64_sys_call+0x27fe/0x2ff0
[   56.853016][ T4510]  do_syscall_64+0xd2/0x200
[   56.853112][ T4510]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   56.853170][ T4510]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   56.853203][ T4510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.853225][ T4510] RIP: 0033:0x7f3d8bf6ebe9
[   56.853245][ T4510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.853264][ T4510] RSP: 002b:00007f3d8a9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   56.853284][ T4510] RAX: ffffffffffffffda RBX: 00007f3d8c195fa0 RCX: 00007f3d8bf6ebe9
[   56.853309][ T4510] RDX: 0000000000000012 RSI: 0000200000001c00 RDI: 0000000000000005
[   56.853363][ T4510] RBP: 00007f3d8a9d7090 R08: 0000000000000000 R09: 0000000000000000
[   56.853378][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.853391][ T4510] R13: 00007f3d8c196038 R14: 00007f3d8c195fa0 R15: 00007fff68571c28
[   56.853410][ T4510]  </TASK>
[   57.121546][   T31] bridge_slave_1: left allmulticast mode
[   57.127293][   T31] bridge_slave_1: left promiscuous mode
[   57.132955][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.163135][   T31] bridge_slave_0: left allmulticast mode
[   57.168811][   T31] bridge_slave_0: left promiscuous mode
[   57.174517][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.320496][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.342415][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.362320][   T31] bond0 (unregistering): Released all slaves
[   57.406917][ T4519] vlan0: entered allmulticast mode
[   57.435148][   T31] tipc: Disabling bearer <udp:£>
[   57.440150][   T31] tipc: Left network mode
[   57.455970][ T4491] syz.3.211 (4491) used greatest stack depth: 8000 bytes left
[   57.491695][   T31] hsr_slave_0: left promiscuous mode
[   57.532786][   T31] hsr_slave_1: left promiscuous mode
[   57.542803][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.550209][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.578672][ T4542] netlink: 'syz.0.227': attribute type 21 has an invalid length.
[   57.593048][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.600510][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.666110][   T31] veth1_macvtap: left promiscuous mode
[   57.676979][   T31] veth0_macvtap: left promiscuous mode
[   57.686271][   T31] veth1_vlan: left promiscuous mode
[   57.691607][   T31] veth0_vlan: left promiscuous mode
[   57.857162][ T4542] netlink: 'syz.0.227': attribute type 1 has an invalid length.
[   58.052151][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.060790][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.094578][ T4563] bridge0: entered allmulticast mode
[   58.247047][ T4503] chnl_net:caif_netlink_parms(): no params data found
[   58.471081][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.478264][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.516277][ T4503] bridge_slave_0: entered allmulticast mode
[   58.532845][ T4503] bridge_slave_0: entered promiscuous mode
[   58.555824][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.563128][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.581516][ T4612] netlink: 'syz.4.242': attribute type 21 has an invalid length.
[   58.585516][ T4503] bridge_slave_1: entered allmulticast mode
[   58.624375][ T4503] bridge_slave_1: entered promiscuous mode
[   58.649470][ T4612] __nla_validate_parse: 13 callbacks suppressed
[   58.649483][ T4612] netlink: 132 bytes leftover after parsing attributes in process `syz.4.242'.
[   58.664761][ T4612] netlink: 'syz.4.242': attribute type 1 has an invalid length.
[   58.692004][ T4616] FAULT_INJECTION: forcing a failure.
[   58.692004][ T4616] name failslab, interval 1, probability 0, space 0, times 0
[   58.704805][ T4616] CPU: 1 UID: 0 PID: 4616 Comm: syz.3.244 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   58.704828][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   58.704845][ T4616] Call Trace:
[   58.704850][ T4616]  <TASK>
[   58.704855][ T4616]  __dump_stack+0x1d/0x30
[   58.704894][ T4616]  dump_stack_lvl+0xe8/0x140
[   58.704916][ T4616]  dump_stack+0x15/0x1b
[   58.704934][ T4616]  should_fail_ex+0x265/0x280
[   58.704991][ T4616]  should_failslab+0x8c/0xb0
[   58.705014][ T4616]  kmem_cache_alloc_noprof+0x50/0x310
[   58.705055][ T4616]  ? getname_flags+0x80/0x3b0
[   58.705083][ T4616]  ? fput+0x8f/0xc0
[   58.705174][ T4616]  getname_flags+0x80/0x3b0
[   58.705216][ T4616]  __x64_sys_unlinkat+0x70/0xb0
[   58.705240][ T4616]  x64_sys_call+0x2ede/0x2ff0
[   58.705260][ T4616]  do_syscall_64+0xd2/0x200
[   58.705297][ T4616]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   58.705392][ T4616]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   58.705418][ T4616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.705440][ T4616] RIP: 0033:0x7fa162c8ebe9
[   58.705465][ T4616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.705479][ T4616] RSP: 002b:00007fa1616f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[   58.705495][ T4616] RAX: ffffffffffffffda RBX: 00007fa162eb5fa0 RCX: 00007fa162c8ebe9
[   58.705505][ T4616] RDX: 0000000000000200 RSI: 0000200000000040 RDI: ffffffffffffffff
[   58.705519][ T4616] RBP: 00007fa1616f7090 R08: 0000000000000000 R09: 0000000000000000
[   58.705532][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.705544][ T4616] R13: 00007fa162eb6038 R14: 00007fa162eb5fa0 R15: 00007ffc981a9b88
[   58.705565][ T4616]  </TASK>
[   58.934767][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.997378][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.076802][ T4503] team0: Port device team_slave_0 added
[   59.093172][ T4503] team0: Port device team_slave_1 added
[   59.135903][ T4651] netlink: 'syz.0.254': attribute type 21 has an invalid length.
[   59.229141][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'.
[   59.266929][ T4657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.253'.
[   59.297819][ T4651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   59.306836][ T4651] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   59.325785][ T4656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'.
[   59.339488][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.346576][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.372500][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.415605][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.422677][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.448679][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.461405][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.469981][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.570427][ T4503] hsr_slave_0: entered promiscuous mode
[   59.579778][ T4503] hsr_slave_1: entered promiscuous mode
[   59.600396][ T4503] debugfs: 'hsr0' already exists in 'hsr'
[   59.606164][ T4503] Cannot create hsr debugfs directory
[   59.639056][ T4672] loop0: detected capacity change from 0 to 512
[   59.651559][ T4675] netlink: 'syz.1.258': attribute type 21 has an invalid length.
[   59.676832][ T4672] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   59.697974][ T4675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.258'.
[   59.706987][ T4675] netlink: 'syz.1.258': attribute type 1 has an invalid length.
[   59.721814][ T4672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.257: invalid indirect mapped block 2683928664 (level 1)
[   59.755225][ T4672] EXT4-fs (loop0): Remounting filesystem read-only
[   59.792169][ T4672] EXT4-fs (loop0): 1 truncate cleaned up
[   59.796854][ T4503] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   59.813206][ T4503] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   59.821287][ T4672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.838481][ T4503] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   59.855663][ T4503] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   59.880420][ T4692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[   59.911199][ T4701] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   59.921569][ T4692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.931459][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.973881][ T4503] 8021q: adding VLAN 0 to HW filter on device team0
[   59.983012][  T378] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.990164][  T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.019329][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.030454][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.037537][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.136071][ T4715] netlink: 'syz.3.266': attribute type 21 has an invalid length.
[   60.164353][ T4715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.266'.
[   60.173356][ T4715] netlink: 'syz.3.266': attribute type 1 has an invalid length.
[   60.358005][   T29] kauditd_printk_skb: 556 callbacks suppressed
[   60.358020][   T29] audit: type=1400 audit(1754805914.616:1978): avc:  denied  { create } for  pid=4710 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   60.489477][ T4733] tipc: Started in network mode
[   60.494446][ T4733] tipc: Node identity ac14140f, cluster identity 4711
[   60.629204][ T4733] tipc: New replicast peer: 255.255.255.83
[   60.635131][ T4733] tipc: Enabled bearer <udp:£>, priority 10
[   60.660886][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.742358][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'.
[   60.771283][ T4748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.270'.
[   60.830418][   T29] audit: type=1326 audit(1754805915.146:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.853786][   T29] audit: type=1326 audit(1754805915.146:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.877162][   T29] audit: type=1326 audit(1754805915.146:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.900488][   T29] audit: type=1326 audit(1754805915.146:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.923850][   T29] audit: type=1326 audit(1754805915.146:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.927451][ T4503] veth0_vlan: entered promiscuous mode
[   60.947220][   T29] audit: type=1326 audit(1754805915.146:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   60.960096][ T4503] veth1_vlan: entered promiscuous mode
[   60.975912][   T29] audit: type=1326 audit(1754805915.146:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   61.001452][ T4503] veth0_macvtap: entered promiscuous mode
[   61.004684][   T29] audit: type=1326 audit(1754805915.156:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   61.015986][ T4503] veth1_macvtap: entered promiscuous mode
[   61.033643][   T29] audit: type=1326 audit(1754805915.156:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa162c8ebe9 code=0x7ffc0000
[   61.091083][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.137533][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.174135][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.206824][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.215792][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.240997][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.406975][ T4776] loop3: detected capacity change from 0 to 8192
[   61.434916][ T4776] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.459827][ T4776] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[   61.467777][ T4776] FAT-fs (loop3): Filesystem has been set read-only
[   61.533154][ T4819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.568604][ T4819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.642642][ T3390] tipc: Node number set to 2886997007
[   62.178534][ T4912] loop4: detected capacity change from 0 to 128
[   62.199698][ T4912] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.224417][ T4912] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.272374][ T4912] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.288: No space for directory leaf checksum. Please run e2fsck -D.
[   62.287914][ T4912] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.288: checksumming directory block 0
[   62.372826][ T4935] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.288: No space for directory leaf checksum. Please run e2fsck -D.
[   62.388093][ T4935] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.288: checksumming directory block 0
[   63.028351][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   63.303771][ T5025] loop4: detected capacity change from 0 to 512
[   63.324016][ T5025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   63.351863][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.371715][ T5025] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.490009][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.603217][ T5043] loop5: detected capacity change from 0 to 512
[   63.610204][ T5043] ==================================================================
[   63.618324][ T5043] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
[   63.627223][ T5043] 
[   63.629549][ T5043] write to 0xffff8881046af9f4 of 4 bytes by task 3785 on cpu 0:
[   63.637180][ T5043]  fsnotify_detach_mark+0xba/0x160
[   63.642330][ T5043]  fsnotify_destroy_mark+0x70/0x150
[   63.647533][ T5043]  __se_sys_inotify_rm_watch+0xe8/0x170
[   63.653094][ T5043]  __x64_sys_inotify_rm_watch+0x31/0x40
[   63.658655][ T5043]  x64_sys_call+0x2e86/0x2ff0
[   63.663342][ T5043]  do_syscall_64+0xd2/0x200
[   63.667857][ T5043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.673758][ T5043] 
[   63.676081][ T5043] read to 0xffff8881046af9f4 of 4 bytes by task 5043 on cpu 1:
[   63.683614][ T5043]  fsnotify_handle_inode_event+0x125/0x220
[   63.689435][ T5043]  fsnotify+0x13c9/0x14b0
[   63.693772][ T5043]  __fsnotify_parent+0x2ed/0x330
[   63.698716][ T5043]  __fput+0x1de/0x650
[   63.702703][ T5043]  fput_close_sync+0x6e/0x120
[   63.707395][ T5043]  __x64_sys_close+0x56/0xf0
[   63.711985][ T5043]  x64_sys_call+0x2738/0x2ff0
[   63.716747][ T5043]  do_syscall_64+0xd2/0x200
[   63.721265][ T5043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.727156][ T5043] 
[   63.729488][ T5043] value changed: 0x00000003 -> 0x00000000
[   63.735193][ T5043] 
[   63.737511][ T5043] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   63.743753][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.5.312 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) 
[   63.755727][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   63.765778][ T5043] ==================================================================
[   63.903318][ T5043] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   63.911531][ T5043] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.312: invalid indirect mapped block 2683928664 (level 1)
[   63.931386][ T5043] EXT4-fs (loop5): Remounting filesystem read-only
[   63.938038][ T5043] EXT4-fs (loop5): 1 truncate cleaned up
[   63.946184][ T5043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.980994][   T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.032808][ T5043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.105650][   T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.196733][   T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.247593][   T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.306658][   T56] bridge_slave_1: left allmulticast mode
[   64.312315][   T56] bridge_slave_1: left promiscuous mode
[   64.318083][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.328149][   T56] bridge_slave_0: left promiscuous mode
[   64.333952][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.386004][   T56] bridge0 (unregistering): left allmulticast mode
[   64.424321][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.434049][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.443665][   T56] bond0 (unregistering): Released all slaves
[   64.495783][   T56] hsr_slave_0: left promiscuous mode
[   64.501555][   T56] hsr_slave_1: left promiscuous mode
[   64.507464][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.514916][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.522414][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.529884][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.540695][   T56] veth1_macvtap: left promiscuous mode
[   64.548061][   T56] veth0_macvtap: left promiscuous mode
[   64.599709][   T56] team0 (unregistering): Port device team_slave_1 removed
[   64.609194][   T56] team0 (unregistering): Port device team_slave_0 removed
[   64.859324][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.905517][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.975321][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.025115][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.084310][   T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.125076][   T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.165543][   T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.215439][   T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.295333][   T56] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.333836][   T56] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.373886][   T56] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.424108][   T56] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.510784][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.561823][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.615721][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.645412][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.711947][   T56] bridge_slave_1: left allmulticast mode
[   65.717733][   T56] bridge_slave_1: left promiscuous mode
[   65.723440][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.731379][   T56] bridge_slave_0: left allmulticast mode
[   65.737081][   T56] bridge_slave_0: left promiscuous mode
[   65.742749][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.751053][   T56] bridge_slave_1: left allmulticast mode
[   65.756745][   T56] bridge_slave_1: left promiscuous mode
[   65.762430][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.772407][   T56] bridge_slave_0: left allmulticast mode
[   65.778120][   T56] bridge_slave_0: left promiscuous mode
[   65.783775][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.791977][   T56] bridge_slave_1: left allmulticast mode
[   65.797677][   T56] bridge_slave_1: left promiscuous mode
[   65.803490][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.811294][   T56] bridge_slave_0: left allmulticast mode
[   65.816977][   T56] bridge_slave_0: left promiscuous mode
[   65.822631][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.830779][   T56] bridge_slave_1: left allmulticast mode
[   65.836440][   T56] bridge_slave_1: left promiscuous mode
[   65.842130][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.849886][   T56] bridge_slave_0: left allmulticast mode
[   65.855558][   T56] bridge_slave_0: left promiscuous mode
[   65.861164][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.995228][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.004866][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.014099][   T56] bond0 (unregistering): Released all slaves
[   66.095256][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.105012][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.114229][   T56] bond0 (unregistering): Released all slaves
[   66.164267][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.173901][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.183446][   T56] bond0 (unregistering): Released all slaves
[   66.191704][   T56] bond1 (unregistering): Released all slaves
[   66.324663][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.334473][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.343829][   T56] bond0 (unregistering): Released all slaves
[   66.408226][   T56] tipc: Disabling bearer <udp:£>
[   66.413241][   T56] tipc: Left network mode
[   66.428145][   T56] IPVS: stopping backup sync thread 4701 ...
[   66.485778][   T56] hsr_slave_0: left promiscuous mode
[   66.491429][   T56] hsr_slave_1: left promiscuous mode
[   66.497304][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.504735][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.512188][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.519594][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.529205][   T56] hsr_slave_0: left promiscuous mode
[   66.534794][   T56] hsr_slave_1: left promiscuous mode
[   66.540293][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.547720][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.555254][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.562731][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.571644][   T56] hsr_slave_0: left promiscuous mode
[   66.577483][   T56] hsr_slave_1: left promiscuous mode
[   66.583022][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.590407][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.597905][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.605413][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.614595][   T56] hsr_slave_0: left promiscuous mode
[   66.620118][   T56] hsr_slave_1: left promiscuous mode
[   66.625793][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.633173][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.640758][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.648163][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.664574][   T56] veth1_macvtap: left promiscuous mode
[   66.670040][   T56] veth0_macvtap: left promiscuous mode
[   66.675637][   T56] veth1_vlan: left promiscuous mode
[   66.680897][   T56] veth0_vlan: left promiscuous mode
[   66.687003][   T56] veth1_macvtap: left promiscuous mode
[   66.692470][   T56] veth0_macvtap: left promiscuous mode
[   66.698216][   T56] veth1_vlan: left promiscuous mode
[   66.703961][   T56] veth0_vlan: left promiscuous mode
[   66.709770][   T56] veth1_macvtap: left promiscuous mode
[   66.715260][   T56] veth0_macvtap: left promiscuous mode
[   66.720817][   T56] veth1_vlan: left promiscuous mode
[   66.726106][   T56] veth0_vlan: left promiscuous mode
[   66.731779][   T56] veth1_macvtap: left promiscuous mode
[   66.737340][   T56] veth0_macvtap: left promiscuous mode
[   66.742943][   T56] veth1_vlan: left promiscuous mode
[   66.748160][   T56] veth0_vlan: left promiscuous mode
[   66.910647][   T56] team0 (unregistering): Port device team_slave_1 removed
[   66.921564][   T56] team0 (unregistering): Port device team_slave_0 removed
[   66.974167][   T56] team0 (unregistering): Port device team_slave_1 removed
[   66.983759][   T56] team0 (unregistering): Port device team_slave_0 removed
[   67.036894][   T56] team0 (unregistering): Port device team_slave_1 removed
[   67.046410][   T56] team0 (unregistering): Port device team_slave_0 removed
[   67.099434][   T56] team0 (unregistering): Port device team_slave_1 removed
[   67.109297][   T56] team0 (unregistering): Port device team_slave_0 removed