last executing test programs:

29.104561361s ago: executing program 0 (id=3238):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat2(r2, &(0x7f0000000380)='./cgroup\x00', r2, &(0x7f00000003c0)='./mnt\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="6b8ba1f6931a228e4a02cfc42e3986e1512567478be6e57b7d83fcc1ef05781ec63d643fe6a9b3e86bfdc47990cbc26f0f59b6c227c11c00630a47f7e1c2a80b0867d3feaa870723d226fe16f7dc27b506cd455a94ad838e97bdb2fe19a988b054f1366b5dae9a097edc42812bd2af7ac06f51d20c44de2094de25ffe4e0f57730cde8566bca59160e449631230cc3a91e8b397572a4b0b2b8fb134d106e5a34ae96bfeb8538814f8cbeaa0c115f704acf43a95ab61120ce8695d66bef8f0473f076f4cb9c4f8b2f3b67461255e38b24de0c04aac64a2469eb0bf411f2094520e8d6da68e936431970adb9d023de37179a", @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

29.074605922s ago: executing program 0 (id=3241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)

29.026889943s ago: executing program 0 (id=3242):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cq_reschedule\x00', r2}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xf, 0xa}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0x7}}, './file0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
getsockname$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23)

29.026327352s ago: executing program 0 (id=3243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0)

29.006399723s ago: executing program 0 (id=3245):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cq_reschedule\x00', r2}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xf, 0xa}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0x7}}, './file0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
getsockname$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23)

26.563813745s ago: executing program 3 (id=3313):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cq_reschedule\x00', r2}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xf, 0xa}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0x7}}, './file0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
getsockname$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23)

26.507665826s ago: executing program 3 (id=3314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r1, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20890}, 0x10)

26.381380008s ago: executing program 3 (id=3317):
r0 = socket$inet6(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000340)=""/254, 0xfe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="3daa0000000811b0950000007ca3bf97d99509958e"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007158d9ba9fe8cffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, 0x0, &(0x7f0000000340)=""/55}, 0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x7ff, 0x3753, 0x49, 0x2}, &(0x7f0000000040)=0x14)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)

26.20546616s ago: executing program 3 (id=3319):
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x10800, 0x88)
mknodat$loop(r1, &(0x7f0000000340)='./file0\x00', 0x400, 0x0) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/vmcoreinfo', 0x0, 0x3a) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x121a02, 0x0)
sendfile(r4, r3, 0x0, 0x8) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02890d2a63"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7bdecaac8b2a2ef76db4bfe270"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4010)

26.004948583s ago: executing program 3 (id=3320):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002)
getdents64(r2, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r5, 0x0)

25.953733134s ago: executing program 3 (id=3323):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8820}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x5c, 0x19, "1dcb0848933bd21ba5be49a6eccbfb6cbcaea918136a705ceeca00c46536064a82f5af89ee7df2ae9b61842878c4bca61e03f7ddd3bcc043895058b3432370e92e917b7ba805acac2d72534aa9c4abc69869816e3ec847f7"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r12, &(0x7f0000000040), 0x10)
listen(r12, 0x0)
r13 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r13, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0))
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)

25.903196624s ago: executing program 0 (id=3248):
socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000002940)='asymmetric\x00', &(0x7f0000002980)='#\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r3=>0x0, 0x101}, &(0x7f0000000080)=0x8)
r4 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x4, 0x2}, 0x6)
write$rfkill(r4, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r3, 0x64aa, 0x2, [0x9, 0x2]}, 0xc)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10.932366334s ago: executing program 32 (id=3323):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8820}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x5c, 0x19, "1dcb0848933bd21ba5be49a6eccbfb6cbcaea918136a705ceeca00c46536064a82f5af89ee7df2ae9b61842878c4bca61e03f7ddd3bcc043895058b3432370e92e917b7ba805acac2d72534aa9c4abc69869816e3ec847f7"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r12, &(0x7f0000000040), 0x10)
listen(r12, 0x0)
r13 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r13, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0))
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)

10.866599815s ago: executing program 33 (id=3248):
socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000002940)='asymmetric\x00', &(0x7f0000002980)='#\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r3=>0x0, 0x101}, &(0x7f0000000080)=0x8)
r4 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x4, 0x2}, 0x6)
write$rfkill(r4, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r3, 0x64aa, 0x2, [0x9, 0x2]}, 0xc)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5.815151482s ago: executing program 5 (id=3690):
socket$packet(0x11, 0x3, 0x300)
getrlimit(0x1, &(0x7f0000000740))
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff)
timerfd_settime(r3, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

2.305914839s ago: executing program 4 (id=3732):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = dup2(r1, r0)
r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r3, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000200))

2.305481089s ago: executing program 4 (id=3733):
r0 = socket$inet6(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000340)=""/254, 0xfe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="3daa0000000811b0950000007ca3bf97d99509958e000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007158d9ba9fe8cffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, 0x0, &(0x7f0000000340)=""/55}, 0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x7ff, 0x3753, 0x49, 0x2}, &(0x7f0000000040)=0x14)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)

1.771040006s ago: executing program 1 (id=3737):
r0 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x1, 0xfffffefe, 0xb9})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1)

1.741592627s ago: executing program 1 (id=3738):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

1.723264917s ago: executing program 1 (id=3739):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002)
getdents64(r2, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027"], 0x124}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r6, 0x0)

1.717676007s ago: executing program 2 (id=3740):
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe30, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)

1.669535428s ago: executing program 2 (id=3741):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r0 = io_uring_setup(0x4fc9, &(0x7f0000000080)={0x0, 0x6d32, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.668867158s ago: executing program 1 (id=3742):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000005c0)=ANY=[], 0x1, 0x11dc, &(0x7f0000002480)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xc0)
chmod(&(0x7f0000000000)='./file0\x00', 0xc1)

1.640714078s ago: executing program 2 (id=3743):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
close(0x3)

1.623168679s ago: executing program 2 (id=3744):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000010000100000000000000014100000014001700001000000000000f74683a6c6f", @ANYRESHEX, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40012)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000d5827b70a5c16297076f0f960b420fb3f94cfad3fdb9c5c2de564d690a63d8acbfd84c2345fd5379b725252bb4a6de511f90c024c66801eaa9ed959051612faf71e71713e055a03380a6f2b23cfb58af90f057f6380d214d6812f9761882d83ed65190e06ed823a8523156893c4bc5bcee7441455e1b4d5877d6901cfa7712ba76a65bfe5929b0c31324bc44c4cdb2178b74554c71b676354fabea6f933c608ca964edcd5314a044480fc6620c56cf73fb6a2a0591ecbc7a549933fb923e4eca39ac2574cfc93e4c16d1259806b3a7b8fcf310c1d06e0160a5cf380e21677751f89fdf99f232ff8227ee0c51006a20aa21f32afb730c16d5f64c5a9a9fa08edd19506e3ebc3860df"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000020000000ed000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

1.356369822s ago: executing program 4 (id=3745):
r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983c, 0x1, 0x1, 0x1bc}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket(0x80000000000000a, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)
write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x24000001)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108)
r9 = socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r11}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0)

572.456653ms ago: executing program 2 (id=3752):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)

494.235914ms ago: executing program 4 (id=3754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x0, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20890}, 0x10)

474.812494ms ago: executing program 2 (id=3755):
r0 = socket$inet6(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000340)=""/254, 0xfe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="3daa0000000811b0950000007ca3bf97d99509958e000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007158d9ba9fe8cffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, 0x0, &(0x7f0000000340)=""/55}, 0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x7ff, 0x3753, 0x49, 0x2}, &(0x7f0000000040)=0x14)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)

417.785384ms ago: executing program 5 (id=3756):
r0 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x1, 0xfffffefe, 0xb9})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1)

297.349186ms ago: executing program 5 (id=3758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x4fc9, &(0x7f0000000080)={0x0, 0x6d32, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

279.565956ms ago: executing program 6 (id=3759):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080))
keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0)

262.287847ms ago: executing program 5 (id=3760):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

244.745607ms ago: executing program 6 (id=3761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1800)

226.885877ms ago: executing program 5 (id=3762):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002)
getdents64(r2, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r6, 0x0)

207.989247ms ago: executing program 6 (id=3763):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000010000100000000000000014100000014001700001000000000000f74683a6c6f", @ANYRESHEX, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40012)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000020000000ed000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

189.774538ms ago: executing program 5 (id=3764):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x48042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x8101)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0xfc, &(0x7f0000000440), &(0x7f0000000000)=0x4)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000022c0), 0x4)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r6=>0x0}, 0x0)
r7 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r7, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000})
msgsnd(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0)
msgrcv(r7, 0x0, 0x0, 0x3, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
msgctl$IPC_SET(r7, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, r8}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, r6, r8, 0x100, 0x4}, 0x0, 0x0, 0x21b, 0x4, 0x7, 0x8, 0x4, 0xf3, 0x5, 0x6db3})
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63727566742c636865e7ee3d72656c6146cc69643d", @ANYRESHEX=r6, @ANYBLOB=',map=normal,check=strict,dmode=0x0000000000000003,block=0x0000000000000800,cruft,gid=', @ANYRESHEX=0x0, @ANYBLOB=',block=0x0000000000000200,utf8,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x4, 0xa00, &(0x7f00000003c0)="$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")
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500))
getuid()

117.229078ms ago: executing program 1 (id=3765):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

94.020099ms ago: executing program 4 (id=3766):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = syz_io_uring_complete(0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], <r5=>0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5, 0x5, 0xc0600000, 0x20, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xf, @void, @value, @void, @value}, 0x50)
io_uring_setup(0x695, &(0x7f0000000480)={0x0, 0x3e7f, 0x8, 0x0, 0x80128, 0x0, r4})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0992e735e9cb6d5b84010000000000950000000000000085000000bb000000bf91020000000000b7020000020000008500000084000000b7000000000000009500000008000000"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x17, '\x00', r1, @xdp=0x25, r4, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x9, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6], 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94)
r7 = getpgid(0x0)
r8 = syz_pidfd_open(r7, 0x0)
r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
pidfd_getfd(r8, r9, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r2)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r11, 0x5, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xffffffffffffdfff})

83.224989ms ago: executing program 6 (id=3767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003380)=ANY=[], 0x2ff8}}, 0x0)

67.581709ms ago: executing program 4 (id=3768):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
unshare(0x8040600)
r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000200)={0x6, 'hsr0\x00', {0x8}, 0x4f4c})
r2 = socket$inet6(0xa, 0x3, 0x404)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000032a7abce474ae84a66d6b404ea8887817e49410c5c22b6b1f1b864ec6bda4834ad3f103a9f3998a7484bf76b0edd9fd4094e8a02b2c349255b2329201f532a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="07ef004000000000000008"], 0x14}}, 0x4000080)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'})
r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @private0}, 0x1c)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
readlinkat(r4, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000001800)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
ioctl$RTC_UIE_ON(r0, 0x7003)

67.131999ms ago: executing program 6 (id=3769):
getuid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x15084, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff])

29.01352ms ago: executing program 1 (id=3770):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x4fc9, &(0x7f0000000080)={0x0, 0x6d32, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

0s ago: executing program 6 (id=3771):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0xe}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") (async, rerun: 32)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

kernel console output (not intermixed with test programs):

lity=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  139.953336][   T29] audit: type=1400 audit(1746172363.449:15325): avc:  denied  { prog_run } for  pid=11664 comm="syz.0.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  139.972615][   T29] audit: type=1400 audit(1746172363.449:15326): avc:  denied  { read } for  pid=11664 comm="syz.0.3113" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  139.993919][   T29] audit: type=1400 audit(1746172363.449:15327): avc:  denied  { open } for  pid=11664 comm="syz.0.3113" path="net:[4026532631]" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  140.020501][ T7051] veth1_macvtap: left promiscuous mode
[  140.026065][ T7051] veth0_macvtap: left promiscuous mode
[  140.093132][ T7051] team0 (unregistering): Port device team_slave_1 removed
[  140.102527][ T7051] team0 (unregistering): Port device team_slave_0 removed
[  140.130869][ T7050] smc: removing ib device syz0
[  140.136944][ T2968] lo speed is unknown, defaulting to 1000
[  140.142850][ T2968] syz0: Port: 1 Link DOWN
[  140.345143][T11682] FAULT_INJECTION: forcing a failure.
[  140.345143][T11682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.358237][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.0.3130 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  140.358320][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  140.358392][T11682] Call Trace:
[  140.358397][T11682]  <TASK>
[  140.358403][T11682]  __dump_stack+0x1d/0x30
[  140.358421][T11682]  dump_stack_lvl+0xe8/0x140
[  140.358441][T11682]  dump_stack+0x15/0x1b
[  140.358464][T11682]  should_fail_ex+0x265/0x280
[  140.358491][T11682]  should_fail+0xb/0x20
[  140.358515][T11682]  should_fail_usercopy+0x1a/0x20
[  140.358530][T11682]  _copy_from_user+0x1c/0xb0
[  140.358611][T11682]  __sys_bpf+0x178/0x790
[  140.358661][T11682]  __x64_sys_bpf+0x41/0x50
[  140.358743][T11682]  x64_sys_call+0x2478/0x2fb0
[  140.358784][T11682]  do_syscall_64+0xd0/0x1a0
[  140.358802][T11682]  ? clear_bhb_loop+0x25/0x80
[  140.358897][T11682]  ? clear_bhb_loop+0x25/0x80
[  140.358918][T11682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.358935][T11682] RIP: 0033:0x7f7eff35e969
[  140.358947][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.358968][T11682] RSP: 002b:00007f7efd9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  140.359040][T11682] RAX: ffffffffffffffda RBX: 00007f7eff585fa0 RCX: 00007f7eff35e969
[  140.359051][T11682] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000
[  140.359061][T11682] RBP: 00007f7efd9c7090 R08: 0000000000000000 R09: 0000000000000000
[  140.359071][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.359081][T11682] R13: 0000000000000000 R14: 00007f7eff585fa0 R15: 00007ffeb17ad4a8
[  140.359096][T11682]  </TASK>
[  140.592043][T11690] loop4: detected capacity change from 0 to 164
[  140.605500][T11690] iso9660: Corrupted directory entry in block 0 of inode 1920
[  140.657244][T11564] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  140.671350][T11564] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  140.695071][T11564] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  140.707407][T11564] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  140.765533][T11564] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.788349][T11564] 8021q: adding VLAN 0 to HW filter on device team0
[  140.797753][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.804843][ T6994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.817830][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.824927][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.847553][T11564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.926097][T11564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.027660][T11564] veth0_vlan: entered promiscuous mode
[  141.028723][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'.
[  141.036193][T11564] veth1_vlan: entered promiscuous mode
[  141.054825][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'.
[  141.064288][T11564] veth0_macvtap: entered promiscuous mode
[  141.075368][T11564] veth1_macvtap: entered promiscuous mode
[  141.095582][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.106108][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.115991][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.126427][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.136275][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.146715][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.157111][T11564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.166014][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.176505][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.186370][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.196836][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.206702][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.217224][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.228973][T11564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.242595][T11767] IPv6: sit1: Disabled Multicast RS
[  141.249001][T11767] sit1: entered allmulticast mode
[  141.261036][T11564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.269852][T11564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.278625][T11564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.287316][T11564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.517790][T11808] IPv6: sit1: Disabled Multicast RS
[  141.524012][T11808] sit1: entered allmulticast mode
[  141.539218][T11810] loop4: detected capacity change from 0 to 1024
[  141.550939][T11810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.573647][T11820] hsr0: entered promiscuous mode
[  141.582227][T11810] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  141.617017][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.649010][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3168'.
[  141.738700][T11842] loop2: detected capacity change from 0 to 512
[  141.759390][T11842] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.768469][T11842] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  141.782934][T11853] FAULT_INJECTION: forcing a failure.
[  141.782934][T11853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.796117][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.1.3192 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  141.796229][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  141.796299][T11853] Call Trace:
[  141.796305][T11853]  <TASK>
[  141.796313][T11853]  __dump_stack+0x1d/0x30
[  141.796336][T11853]  dump_stack_lvl+0xe8/0x140
[  141.796358][T11853]  dump_stack+0x15/0x1b
[  141.796375][T11853]  should_fail_ex+0x265/0x280
[  141.796518][T11853]  should_fail+0xb/0x20
[  141.796541][T11853]  should_fail_usercopy+0x1a/0x20
[  141.796556][T11853]  strncpy_from_user+0x25/0x230
[  141.796584][T11853]  ? kmem_cache_alloc_noprof+0x186/0x310
[  141.796647][T11853]  ? getname_flags+0x80/0x3b0
[  141.796700][T11853]  getname_flags+0xae/0x3b0
[  141.796732][T11853]  user_path_at+0x28/0x130
[  141.796748][T11853]  __se_sys_mount+0x25b/0x2e0
[  141.796772][T11853]  ? fput+0x8f/0xc0
[  141.796849][T11853]  __x64_sys_mount+0x67/0x80
[  141.796872][T11853]  x64_sys_call+0xd36/0x2fb0
[  141.796889][T11853]  do_syscall_64+0xd0/0x1a0
[  141.796905][T11853]  ? clear_bhb_loop+0x25/0x80
[  141.796928][T11853]  ? clear_bhb_loop+0x25/0x80
[  141.797080][T11853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.797102][T11853] RIP: 0033:0x7fd8fb4fe969
[  141.797121][T11853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.797180][T11853] RSP: 002b:00007fd8f9b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  141.797199][T11853] RAX: ffffffffffffffda RBX: 00007fd8fb725fa0 RCX: 00007fd8fb4fe969
[  141.797213][T11853] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000
[  141.797226][T11853] RBP: 00007fd8f9b67090 R08: 0000200000000780 R09: 0000000000000000
[  141.797239][T11853] R10: 0000000000018000 R11: 0000000000000246 R12: 0000000000000001
[  141.797252][T11853] R13: 0000000000000000 R14: 00007fd8fb725fa0 R15: 00007fff78864f88
[  141.797271][T11853]  </TASK>
[  142.089330][T11842] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  142.098569][T11842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  142.121199][T11842] System zones: 0-2, 18-18, 34-34
[  142.214067][T11842] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  142.235387][T11842] EXT4-fs (loop2): 1 truncate cleaned up
[  142.241539][T11842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.255757][T11842] FAULT_INJECTION: forcing a failure.
[  142.255757][T11842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.268890][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.2.3188 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  142.268917][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  142.268943][T11842] Call Trace:
[  142.268948][T11842]  <TASK>
[  142.268953][T11842]  __dump_stack+0x1d/0x30
[  142.268971][T11842]  dump_stack_lvl+0xe8/0x140
[  142.269013][T11842]  dump_stack+0x15/0x1b
[  142.269031][T11842]  should_fail_ex+0x265/0x280
[  142.269064][T11842]  should_fail+0xb/0x20
[  142.269173][T11842]  should_fail_usercopy+0x1a/0x20
[  142.269191][T11842]  copy_page_from_iter_atomic+0x21b/0xff0
[  142.269214][T11842]  generic_perform_write+0x2c2/0x490
[  142.269242][T11842]  ext4_buffered_write_iter+0x1ee/0x3c0
[  142.269337][T11842]  ? ext4_file_write_iter+0xfe/0xf00
[  142.269361][T11842]  ext4_file_write_iter+0x383/0xf00
[  142.269383][T11842]  ? __rcu_read_unlock+0x4f/0x70
[  142.269466][T11842]  ? avc_policy_seqno+0x15/0x30
[  142.269518][T11842]  ? selinux_file_permission+0x213/0x360
[  142.269673][T11842]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  142.269751][T11842]  vfs_write+0x49d/0x8d0
[  142.269782][T11842]  __x64_sys_pwrite64+0xfd/0x150
[  142.269835][T11842]  x64_sys_call+0xe45/0x2fb0
[  142.269852][T11842]  do_syscall_64+0xd0/0x1a0
[  142.269874][T11842]  ? clear_bhb_loop+0x25/0x80
[  142.269897][T11842]  ? clear_bhb_loop+0x25/0x80
[  142.269920][T11842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.269960][T11842] RIP: 0033:0x7fb9b4cfe969
[  142.269974][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.269989][T11842] RSP: 002b:00007fb9b3367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  142.270008][T11842] RAX: ffffffffffffffda RBX: 00007fb9b4f25fa0 RCX: 00007fb9b4cfe969
[  142.270021][T11842] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004
[  142.270105][T11842] RBP: 00007fb9b3367090 R08: 0000000000000000 R09: 0000000000000000
[  142.270117][T11842] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000002
[  142.270127][T11842] R13: 0000000000000000 R14: 00007fb9b4f25fa0 R15: 00007ffe90a8fb28
[  142.270141][T11842]  </TASK>
[  142.555587][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.728696][   T23] usb usb6-port7: attempt power cycle
[  142.852278][T11899] netlink: 'syz.0.3212': attribute type 11 has an invalid length.
[  142.933839][T11907] loop2: detected capacity change from 0 to 512
[  142.944573][T11909] FAULT_INJECTION: forcing a failure.
[  142.944573][T11909] name failslab, interval 1, probability 0, space 0, times 0
[  142.957324][T11909] CPU: 0 UID: 0 PID: 11909 Comm: syz.0.3216 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  142.957349][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  142.957363][T11909] Call Trace:
[  142.957369][T11909]  <TASK>
[  142.957377][T11909]  __dump_stack+0x1d/0x30
[  142.957440][T11909]  dump_stack_lvl+0xe8/0x140
[  142.957462][T11909]  dump_stack+0x15/0x1b
[  142.957480][T11909]  should_fail_ex+0x265/0x280
[  142.957530][T11909]  ? ceph_key_preparse+0x96/0x140
[  142.957546][T11909]  should_failslab+0x8c/0xb0
[  142.957627][T11909]  __kmalloc_cache_noprof+0x4c/0x320
[  142.957645][T11909]  ceph_key_preparse+0x96/0x140
[  142.957665][T11909]  __key_create_or_update+0x288/0x750
[  142.957692][T11909]  ? key_validate+0xad/0xd0
[  142.957720][T11909]  key_create_or_update+0x42/0x60
[  142.957814][T11909]  __se_sys_add_key+0x296/0x350
[  142.957845][T11909]  __x64_sys_add_key+0x67/0x80
[  142.957940][T11909]  x64_sys_call+0x1d0d/0x2fb0
[  142.957961][T11909]  do_syscall_64+0xd0/0x1a0
[  142.957979][T11909]  ? clear_bhb_loop+0x25/0x80
[  142.957997][T11909]  ? clear_bhb_loop+0x25/0x80
[  142.958067][T11909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.958091][T11909] RIP: 0033:0x7f7eff35e969
[  142.958104][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.958200][T11909] RSP: 002b:00007f7efd9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  142.958227][T11909] RAX: ffffffffffffffda RBX: 00007f7eff585fa0 RCX: 00007f7eff35e969
[  142.958238][T11909] RDX: 0000200000000400 RSI: 0000000000000000 RDI: 00002000000003c0
[  142.958252][T11909] RBP: 00007f7efd9c7090 R08: 00000000102fafef R09: 0000000000000000
[  142.958266][T11909] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[  142.958320][T11909] R13: 0000000000000000 R14: 00007f7eff585fa0 R15: 00007ffeb17ad4a8
[  142.958340][T11909]  </TASK>
[  143.159045][T11907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  143.236470][T11907] EXT4-fs (loop2): orphan cleanup on readonly fs
[  143.253364][T11907] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3210: Failed to acquire dquot type 1
[  143.313500][T11907] EXT4-fs (loop2): 1 truncate cleaned up
[  143.329384][T11907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  143.461329][T11924] IPv6: sit1: Disabled Multicast RS
[  143.467524][T11924] sit1: entered allmulticast mode
[  143.514370][T11920] bridge0: entered promiscuous mode
[  143.525385][T11920] macvlan0: entered promiscuous mode
[  143.537954][T11920] bridge0: port 3(macvlan0) entered blocking state
[  143.544559][T11920] bridge0: port 3(macvlan0) entered disabled state
[  143.572580][T11920] macvlan0: entered allmulticast mode
[  143.577991][T11920] bridge0: entered allmulticast mode
[  143.597556][T11920] macvlan0: left allmulticast mode
[  143.602877][T11920] bridge0: left allmulticast mode
[  143.643904][T11920] bridge0: left promiscuous mode
[  143.661470][T11927] hsr0: entered promiscuous mode
[  143.780680][T11941] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  143.819986][T11941] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  144.548456][   T23] usb usb6-port7: unable to enumerate USB device
[  144.707334][   T29] kauditd_printk_skb: 476 callbacks suppressed
[  144.707348][   T29] audit: type=1400 audit(1746172368.329:15802): avc:  denied  { create } for  pid=11956 comm="syz.4.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  144.748322][   T29] audit: type=1400 audit(1746172368.359:15803): avc:  denied  { write } for  pid=11956 comm="syz.4.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  144.786011][T11959] loop4: detected capacity change from 0 to 512
[  144.804381][T11959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.818033][T11959] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.865907][   T29] audit: type=1400 audit(1746172368.489:15804): avc:  denied  { ioctl } for  pid=11958 comm="syz.4.3236" path="/558/bus/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  144.915597][   T29] audit: type=1326 audit(1746172368.489:15805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  144.939462][   T29] audit: type=1326 audit(1746172368.489:15806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  144.953811][T11959] siw: device registration error -23
[  144.963195][   T29] audit: type=1326 audit(1746172368.489:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  144.991991][   T29] audit: type=1326 audit(1746172368.489:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  145.015551][   T29] audit: type=1326 audit(1746172368.489:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  145.039110][   T29] audit: type=1326 audit(1746172368.489:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84e721e969 code=0x7ffc0000
[  145.062742][   T29] audit: type=1326 audit(1746172368.489:15811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84e721e9a3 code=0x7ffc0000
[  145.135389][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.275153][T11967] __nla_validate_parse: 3 callbacks suppressed
[  145.275170][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3240'.
[  145.319471][T11990] loop4: detected capacity change from 0 to 256
[  145.383291][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.463959][T11991] lo speed is unknown, defaulting to 1000
[  145.538439][ T7051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.551708][T12018] $Hÿ: renamed from bond0 (while UP)
[  145.563232][T12018] $Hÿ: entered promiscuous mode
[  145.568307][T12018] bond_slave_0: entered promiscuous mode
[  145.574125][T12018] bond_slave_1: entered promiscuous mode
[  145.584922][T11991] chnl_net:caif_netlink_parms(): no params data found
[  145.612628][ T7051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.643483][T11991] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.650746][T11991] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.658038][T11991] bridge_slave_0: entered allmulticast mode
[  145.664522][T11991] bridge_slave_0: entered promiscuous mode
[  145.673784][ T7051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.687127][T11991] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.694070][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3260'.
[  145.694208][T11991] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.710323][T11991] bridge_slave_1: entered allmulticast mode
[  145.716758][T11991] bridge_slave_1: entered promiscuous mode
[  145.742070][ T7051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.761651][T11991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.772682][T11991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.793851][T11991] team0: Port device team_slave_0 added
[  145.800723][T11991] team0: Port device team_slave_1 added
[  145.821996][T11991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.829003][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.855174][T11991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.877107][T11991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.884133][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.910380][T11991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.914804][T12049] loop4: detected capacity change from 0 to 1024
[  145.970116][T11991] hsr_slave_0: entered promiscuous mode
[  145.978713][T11991] hsr_slave_1: entered promiscuous mode
[  145.984643][T11991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.992543][T11991] Cannot create hsr debugfs directory
[  145.998718][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.008677][ T7051] bridge_slave_1: left allmulticast mode
[  146.016360][ T7051] bridge_slave_1: left promiscuous mode
[  146.022142][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.039930][T12049] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  146.063287][ T7051] bridge_slave_0: left allmulticast mode
[  146.068966][ T7051] bridge_slave_0: left promiscuous mode
[  146.074790][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.086529][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.124934][T12075] loop4: detected capacity change from 0 to 1024
[  146.162094][T12075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.179228][T12075] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  146.194320][ T7051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.215002][ T7051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.221366][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.233469][ T7051] bond0 (unregistering): Released all slaves
[  146.256521][T12077] bridge0: entered promiscuous mode
[  146.265507][T12077] macvlan2: entered promiscuous mode
[  146.272039][T12077] bridge0: port 3(macvlan2) entered blocking state
[  146.278630][T12077] bridge0: port 3(macvlan2) entered disabled state
[  146.289247][T12077] macvlan2: entered allmulticast mode
[  146.294717][T12077] bridge0: entered allmulticast mode
[  146.301494][T12077] macvlan2: left allmulticast mode
[  146.301511][T12077] bridge0: left allmulticast mode
[  146.302140][T12077] bridge0: left promiscuous mode
[  146.307577][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  146.323174][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  146.330607][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.336619][ T7051] IPVS: stopping master sync thread 3505 ...
[  146.337998][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[  146.349108][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  146.356714][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.363690][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11)
[  146.370293][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  146.378047][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.384263][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  146.385261][T12095] IPv6: sit1: Disabled Multicast RS
[  146.390856][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  146.397529][T12095] sit1: entered allmulticast mode
[  146.403477][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.409791][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  146.420638][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  146.428275][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.435703][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18)
[  146.442421][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  146.450067][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.457906][T12087] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21)
[  146.464506][T12087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  146.472717][ T7051] hsr_slave_0: left promiscuous mode
[  146.472725][T12087] vhci_hcd vhci_hcd.0: Device attached
[  146.473232][T12105] vhci_hcd: connection closed
[  146.481563][T12101] vhci_hcd: connection closed
[  146.484058][T12103] vhci_hcd: connection closed
[  146.494141][ T7051] hsr_slave_1: left promiscuous mode
[  146.504930][T12096] vhci_hcd: connection closed
[  146.505140][T12093] vhci_hcd: connection closed
[  146.507286][T12098] vhci_hcd: connection closed
[  146.510171][T12091] vhci_hcd: connection closed
[  146.521733][ T7033] vhci_hcd: stop threads
[  146.528293][ T1040] vhci_hcd: vhci_device speed not set
[  146.530703][ T7033] vhci_hcd: release socket
[  146.540482][ T7033] vhci_hcd: disconnect device
[  146.545521][ T7051] veth1_macvtap: left promiscuous mode
[  146.551468][ T7033] vhci_hcd: stop threads
[  146.553533][ T7051] veth0_macvtap: left promiscuous mode
[  146.555702][ T7033] vhci_hcd: release socket
[  146.555713][ T7033] vhci_hcd: disconnect device
[  146.562703][ T7051] veth1_vlan: left promiscuous mode
[  146.567503][ T7033] vhci_hcd: stop threads
[  146.578448][ T7051] veth0_vlan: left promiscuous mode
[  146.579973][ T7033] vhci_hcd: release socket
[  146.590042][ T7033] vhci_hcd: disconnect device
[  146.598662][ T1040] usb 9-1: new full-speed USB device number 10 using vhci_hcd
[  146.619306][T12092] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  146.633728][ T7033] vhci_hcd: stop threads
[  146.638116][ T7033] vhci_hcd: release socket
[  146.642657][ T7033] vhci_hcd: disconnect device
[  146.651034][ T7033] vhci_hcd: stop threads
[  146.655311][ T7033] vhci_hcd: release socket
[  146.659761][ T7033] vhci_hcd: disconnect device
[  146.665372][ T7033] vhci_hcd: stop threads
[  146.669861][ T7033] vhci_hcd: release socket
[  146.674399][ T7033] vhci_hcd: disconnect device
[  146.685909][ T7033] vhci_hcd: stop threads
[  146.690234][ T7033] vhci_hcd: release socket
[  146.694657][ T7033] vhci_hcd: disconnect device
[  146.727123][ T7051] team0 (unregistering): Port device team_slave_1 removed
[  146.737415][ T7051] team0 (unregistering): Port device team_slave_0 removed
[  146.778101][T12100] bridge0: entered promiscuous mode
[  146.783599][T12100] macvlan2: entered promiscuous mode
[  146.790444][T12100] bridge0: port 3(macvlan2) entered blocking state
[  146.796588][T12125] loop2: detected capacity change from 0 to 512
[  146.796991][T12100] bridge0: port 3(macvlan2) entered disabled state
[  146.809953][T12100] macvlan2: entered allmulticast mode
[  146.815325][T12100] bridge0: entered allmulticast mode
[  146.821935][T12100] macvlan2: left allmulticast mode
[  146.822224][T12125] EXT4-fs (loop2): orphan cleanup on readonly fs
[  146.827063][T12100] bridge0: left allmulticast mode
[  146.827442][T12100] bridge0: left promiscuous mode
[  146.835044][T12125] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3294: bad orphan inode 13
[  146.853912][T12125] ext4_test_bit(bit=12, block=18) = 1
[  146.859331][T12125] is_bad_inode(inode)=0
[  146.863466][T12125] NEXT_ORPHAN(inode)=2130706432
[  146.868339][T12125] max_ino=32
[  146.871566][T12125] i_nlink=1
[  146.875203][T12125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  146.903206][T10006] infiniband syz1: ib_query_port failed (-19)
[  146.926850][T12125] lo speed is unknown, defaulting to 1000
[  146.933761][T12125] lo speed is unknown, defaulting to 1000
[  146.940257][T12125] lo speed is unknown, defaulting to 1000
[  146.981285][T12125] infiniband syz0: set active
[  146.986108][T12125] infiniband syz0: added lo
[  146.990723][   T10] lo speed is unknown, defaulting to 1000
[  146.997743][T12132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12132 comm=syz.2.3294
[  147.030744][T12125] RDS/IB: syz0: added
[  147.037941][T12125] smc: adding ib device syz0 with port count 1
[  147.048552][T12125] smc:    ib device syz0 port 1 has pnetid 
[  147.054551][T10006] lo speed is unknown, defaulting to 1000
[  147.083203][T12125] lo speed is unknown, defaulting to 1000
[  147.132191][T12125] lo speed is unknown, defaulting to 1000
[  147.171416][T12148] loop4: detected capacity change from 0 to 512
[  147.178013][T12148] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.187837][T12148] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.199067][T12125] lo speed is unknown, defaulting to 1000
[  147.240176][T12148] EXT4-fs (loop4): 1 truncate cleaned up
[  147.241145][T12125] lo speed is unknown, defaulting to 1000
[  147.277141][T12148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.303363][T11991] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  147.323210][T11991] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  147.341063][T12125] lo speed is unknown, defaulting to 1000
[  147.354488][T11991] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  147.387216][T11991] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  147.451120][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.471456][T11991] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.481863][T11991] 8021q: adding VLAN 0 to HW filter on device team0
[  147.504169][T12164] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  147.510711][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  147.518204][T12164] vhci_hcd vhci_hcd.0: Device attached
[  147.534560][T11991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  147.545016][T11991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.568235][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.575450][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.586161][T12164] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9)
[  147.592693][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.600303][T12164] vhci_hcd vhci_hcd.0: Device attached
[  147.602328][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.613040][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.623437][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  147.630167][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  147.637934][T12180] vhci_hcd vhci_hcd.0: Device attached
[  147.686706][T11991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.712042][   T10] vhci_hcd: vhci_device speed not set
[  147.730040][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11)
[  147.736741][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  147.744379][T12180] vhci_hcd vhci_hcd.0: Device attached
[  147.758615][T12164] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  147.765318][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  147.772820][T12164] vhci_hcd vhci_hcd.0: Device attached
[  147.779337][T12180] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19)
[  147.786049][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  147.793634][   T10] usb 3-1: new full-speed USB device number 8 using vhci_hcd
[  147.793678][T12180] vhci_hcd vhci_hcd.0: Device attached
[  147.818380][T12198] loop2: detected capacity change from 0 to 1024
[  147.825286][T12164] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(22)
[  147.825341][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.840902][T12164] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  147.849130][T12164] vhci_hcd vhci_hcd.0: Device attached
[  147.862152][T12203] vhci_hcd: connection closed
[  147.862266][T12195] vhci_hcd: connection closed
[  147.862282][T12189] vhci_hcd: connection closed
[  147.867471][ T7050] vhci_hcd: stop threads
[  147.872080][T12188] vhci_hcd: connection closed
[  147.876301][ T7050] vhci_hcd: release socket
[  147.876310][ T7050] vhci_hcd: disconnect device
[  147.879698][T12167] vhci_hcd: connection reset by peer
[  147.881335][T12173] vhci_hcd: connection closed
[  147.894676][ T7050] vhci_hcd: stop threads
[  147.901484][T12181] vhci_hcd: connection closed
[  147.904533][ T7050] vhci_hcd: release socket
[  147.917958][ T7050] vhci_hcd: disconnect device
[  147.925075][T11991] veth0_vlan: entered promiscuous mode
[  147.932105][T11991] veth1_vlan: entered promiscuous mode
[  147.933414][ T7050] vhci_hcd: stop threads
[  147.943321][ T7050] vhci_hcd: release socket
[  147.947739][ T7050] vhci_hcd: disconnect device
[  147.955041][ T7050] vhci_hcd: stop threads
[  147.959448][ T7050] vhci_hcd: release socket
[  147.963904][ T7050] vhci_hcd: disconnect device
[  147.970816][ T7050] vhci_hcd: stop threads
[  147.975075][ T7050] vhci_hcd: release socket
[  147.979574][ T7050] vhci_hcd: disconnect device
[  147.983442][T12198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.997066][T11991] veth0_macvtap: entered promiscuous mode
[  148.000213][ T7050] vhci_hcd: stop threads
[  148.007026][ T7050] vhci_hcd: release socket
[  148.007423][T11991] veth1_macvtap: entered promiscuous mode
[  148.011461][ T7050] vhci_hcd: disconnect device
[  148.022751][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.033386][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.034929][T12198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, 
[  148.043208][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.043269][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.043279][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.043289][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.043298][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.043308][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.051564][T12198] block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  148.063212][T11991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.094453][ T7050] vhci_hcd: stop threads
[  148.132239][ T7050] vhci_hcd: release socket
[  148.133980][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.136644][ T7050] vhci_hcd: disconnect device
[  148.147062][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.147076][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.172152][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.181958][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.192456][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.202336][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.212805][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.242510][T11991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.254272][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.260030][T11991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.271979][T11991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.280692][T11991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.289483][T11991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.397161][T12251] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  148.403826][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  148.411280][T12251] vhci_hcd vhci_hcd.0: Device attached
[  148.419987][T12251] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[  148.426543][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  148.434166][T12251] vhci_hcd vhci_hcd.0: Device attached
[  148.445135][T12251] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11)
[  148.451824][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.459609][T12251] vhci_hcd vhci_hcd.0: Device attached
[  148.466448][T12251] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  148.473069][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  148.480511][T12251] vhci_hcd vhci_hcd.0: Device attached
[  148.487337][T12251] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  148.493937][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.501651][T12251] vhci_hcd vhci_hcd.0: Device attached
[  148.562367][T12268] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18)
[  148.568969][T12268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.576559][T12268] vhci_hcd vhci_hcd.0: Device attached
[  148.585665][T12268] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21)
[  148.592308][T12268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  148.600485][T12268] vhci_hcd vhci_hcd.0: Device attached
[  149.226105][T12271] vhci_hcd: connection closed
[  149.226238][T12263] vhci_hcd: connection closed
[  149.226321][T12269] vhci_hcd: connection closed
[  149.231379][T12259] vhci_hcd: connection closed
[  149.235857][T12261] vhci_hcd: connection closed
[  149.240581][T12255] vhci_hcd: connection closed
[  149.246709][T12252] vhci_hcd: connection closed
[  149.250298][ T7050] vhci_hcd: stop threads
[  149.263553][ T7050] vhci_hcd: release socket
[  149.263566][ T7050] vhci_hcd: disconnect device
[  149.263698][ T7050] vhci_hcd: stop threads
[  149.276919][ T7050] vhci_hcd: release socket
[  149.281421][ T7050] vhci_hcd: disconnect device
[  149.286264][ T7050] vhci_hcd: stop threads
[  149.290655][ T7050] vhci_hcd: release socket
[  149.295065][ T7050] vhci_hcd: disconnect device
[  149.299798][ T7050] vhci_hcd: stop threads
[  149.304030][ T7050] vhci_hcd: release socket
[  149.308512][ T7050] vhci_hcd: disconnect device
[  149.313667][ T7050] vhci_hcd: stop threads
[  149.317921][ T7050] vhci_hcd: release socket
[  149.322445][ T7050] vhci_hcd: disconnect device
[  149.327197][ T7050] vhci_hcd: stop threads
[  149.331524][ T7050] vhci_hcd: release socket
[  149.335967][ T7050] vhci_hcd: disconnect device
[  149.340975][ T7050] vhci_hcd: stop threads
[  149.345218][ T7050] vhci_hcd: release socket
[  149.349646][ T7050] vhci_hcd: disconnect device
[  151.295188][T12227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.420393][   T29] kauditd_printk_skb: 331 callbacks suppressed
[  151.420409][   T29] audit: type=1326 audit(1746172375.049:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.453563][   T29] audit: type=1326 audit(1746172375.049:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.477342][   T29] audit: type=1326 audit(1746172375.049:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.501041][   T29] audit: type=1326 audit(1746172375.049:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.524695][   T29] audit: type=1326 audit(1746172375.049:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.548344][   T29] audit: type=1326 audit(1746172375.049:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.572053][   T29] audit: type=1326 audit(1746172375.049:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.595692][   T29] audit: type=1326 audit(1746172375.049:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.619250][   T29] audit: type=1326 audit(1746172375.049:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12299 comm="syz.2.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  151.644630][ T1040] usb 9-1: enqueue for inactive port 0
[  151.650142][ T1040] usb 9-1: enqueue for inactive port 0
[  151.659515][T12313] bridge0: entered promiscuous mode
[  151.664787][T12313] macvlan2: entered promiscuous mode
[  151.671752][T12313] bridge0: port 3(macvlan2) entered blocking state
[  151.678437][T12313] bridge0: port 3(macvlan2) entered disabled state
[  151.685877][T12313] macvlan2: entered allmulticast mode
[  151.691321][T12313] bridge0: entered allmulticast mode
[  151.698051][T12313] macvlan2: left allmulticast mode
[  151.703210][T12313] bridge0: left allmulticast mode
[  151.710662][T12313] bridge0: left promiscuous mode
[  151.712251][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3346'.
[  151.724586][ T1040] vhci_hcd: vhci_device speed not set
[  151.735707][T12314] netem: incorrect gi model size
[  151.740696][T12314] netem: change failed
[  151.754866][   T29] audit: type=1400 audit(1746172375.369:16152): avc:  denied  { ioctl } for  pid=12310 comm="syz.4.3346" path="socket:[36077]" dev="sockfs" ino=36077 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  151.834782][T12316] loop2: detected capacity change from 0 to 1024
[  151.861576][T12316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.896605][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.959894][T12337] bridge0: entered promiscuous mode
[  151.965421][T12337] macvlan2: entered promiscuous mode
[  151.972335][T12337] bridge0: port 3(macvlan2) entered blocking state
[  151.978988][T12337] bridge0: port 3(macvlan2) entered disabled state
[  151.985743][T12337] macvlan2: entered allmulticast mode
[  151.991182][T12337] bridge0: entered allmulticast mode
[  151.997035][T12337] macvlan2: left allmulticast mode
[  152.002362][T12337] bridge0: left allmulticast mode
[  152.009017][T12337] bridge0: left promiscuous mode
[  152.017915][T12334] 9pnet_fd: Insufficient options for proto=fd
[  152.110802][T12361] FAULT_INJECTION: forcing a failure.
[  152.110802][T12361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.123979][T12361] CPU: 1 UID: 0 PID: 12361 Comm: syz.1.3363 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  152.124012][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  152.124027][T12361] Call Trace:
[  152.124077][T12361]  <TASK>
[  152.124086][T12361]  __dump_stack+0x1d/0x30
[  152.124109][T12361]  dump_stack_lvl+0xe8/0x140
[  152.124131][T12361]  dump_stack+0x15/0x1b
[  152.124160][T12361]  should_fail_ex+0x265/0x280
[  152.124196][T12361]  should_fail+0xb/0x20
[  152.124269][T12361]  should_fail_usercopy+0x1a/0x20
[  152.124303][T12361]  strncpy_from_user+0x25/0x230
[  152.124329][T12361]  keyctl_restrict_keyring+0x80/0x1b0
[  152.124371][T12361]  __se_sys_keyctl+0x1ed/0xb80
[  152.124445][T12361]  ? __rcu_read_unlock+0x4f/0x70
[  152.124490][T12361]  ? __fget_files+0x184/0x1c0
[  152.124524][T12361]  ? fput+0x8f/0xc0
[  152.124613][T12361]  __x64_sys_keyctl+0x67/0x80
[  152.124716][T12361]  x64_sys_call+0x2e7f/0x2fb0
[  152.124738][T12361]  do_syscall_64+0xd0/0x1a0
[  152.124757][T12361]  ? clear_bhb_loop+0x25/0x80
[  152.124782][T12361]  ? clear_bhb_loop+0x25/0x80
[  152.124808][T12361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.124940][T12361] RIP: 0033:0x7fd8fb4fe969
[  152.124969][T12361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.124989][T12361] RSP: 002b:00007fd8f9b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  152.125010][T12361] RAX: ffffffffffffffda RBX: 00007fd8fb725fa0 RCX: 00007fd8fb4fe969
[  152.125100][T12361] RDX: 0000200000000040 RSI: 000000000f74e869 RDI: 000000000000001d
[  152.125114][T12361] RBP: 00007fd8f9b67090 R08: 0000000000000000 R09: 0000000000000000
[  152.125126][T12361] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.125136][T12361] R13: 0000000000000000 R14: 00007fd8fb725fa0 R15: 00007fff78864f88
[  152.125152][T12361]  </TASK>
[  152.341462][T12363] hsr0: entered promiscuous mode
[  152.417513][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'.
[  152.702063][T12415] hsr0: entered promiscuous mode
[  152.776534][T12416] lo speed is unknown, defaulting to 1000
[  152.783269][T12416] lo speed is unknown, defaulting to 1000
[  152.810811][T12434] loop2: detected capacity change from 0 to 512
[  152.827244][T12434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.840061][   T10] usb 3-1: enqueue for inactive port 0
[  152.840945][T12434] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.845540][   T10] usb 3-1: enqueue for inactive port 0
[  152.861802][T12434] FAULT_INJECTION: forcing a failure.
[  152.861802][T12434] name failslab, interval 1, probability 0, space 0, times 0
[  152.874545][T12434] CPU: 0 UID: 0 PID: 12434 Comm: syz.2.3389 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  152.874636][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  152.874649][T12434] Call Trace:
[  152.874700][T12434]  <TASK>
[  152.874707][T12434]  __dump_stack+0x1d/0x30
[  152.874786][T12434]  dump_stack_lvl+0xe8/0x140
[  152.874807][T12434]  dump_stack+0x15/0x1b
[  152.874826][T12434]  should_fail_ex+0x265/0x280
[  152.874861][T12434]  should_failslab+0x8c/0xb0
[  152.874932][T12434]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  152.875034][T12434]  ? __d_alloc+0x3d/0x350
[  152.875069][T12434]  __d_alloc+0x3d/0x350
[  152.875129][T12434]  d_alloc+0x2e/0x100
[  152.875154][T12434]  lookup_one_qstr_excl_raw+0x95/0x1b0
[  152.875217][T12434]  filename_create+0x14a/0x290
[  152.875242][T12434]  do_mkdirat+0x52/0x3f0
[  152.875315][T12434]  __x64_sys_mkdir+0x42/0x50
[  152.875334][T12434]  x64_sys_call+0x2289/0x2fb0
[  152.875353][T12434]  do_syscall_64+0xd0/0x1a0
[  152.875436][T12434]  ? clear_bhb_loop+0x25/0x80
[  152.875456][T12434]  ? clear_bhb_loop+0x25/0x80
[  152.875474][T12434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.875494][T12434] RIP: 0033:0x7fb9b4cfe969
[  152.875537][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.875551][T12434] RSP: 002b:00007fb9b3367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  152.875567][T12434] RAX: ffffffffffffffda RBX: 00007fb9b4f25fa0 RCX: 00007fb9b4cfe969
[  152.875577][T12434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  152.875587][T12434] RBP: 00007fb9b3367090 R08: 0000000000000000 R09: 0000000000000000
[  152.875599][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.875612][T12434] R13: 0000000000000000 R14: 00007fb9b4f25fa0 R15: 00007ffe90a8fb28
[  152.875642][T12434]  </TASK>
[  153.069275][   T10] vhci_hcd: vhci_device speed not set
[  153.080243][ T7070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.100856][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.120322][T12416] chnl_net:caif_netlink_parms(): no params data found
[  153.154460][T12449] loop2: detected capacity change from 0 to 512
[  153.164396][ T7070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.190401][T12449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.203148][T12449] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.221349][T12449] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3393: corrupted inode contents
[  153.221898][ T7070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.233857][T12449] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3393: mark_inode_dirty error
[  153.255044][T12416] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.255273][T12449] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3393: corrupted inode contents
[  153.262143][T12416] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.279314][T12449] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3393: mark_inode_dirty error
[  153.283073][T12416] bridge_slave_0: entered allmulticast mode
[  153.298859][T12416] bridge_slave_0: entered promiscuous mode
[  153.307501][ T7070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.318707][T12416] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.319063][T11564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.325837][T12416] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.335559][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3394'.
[  153.343291][T12416] bridge_slave_1: entered allmulticast mode
[  153.357526][T12416] bridge_slave_1: entered promiscuous mode
[  153.380881][T12416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.392581][T12416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.415070][T12416] team0: Port device team_slave_0 added
[  153.424977][T12416] team0: Port device team_slave_1 added
[  153.444022][T12462] lo speed is unknown, defaulting to 1000
[  153.454875][ T7070] bridge_slave_1: left allmulticast mode
[  153.460608][ T7070] bridge_slave_1: left promiscuous mode
[  153.466234][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.474055][ T7070] bridge_slave_0: left promiscuous mode
[  153.479917][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.523639][ T7070] team0: Port device geneve1 removed
[  153.560861][ T7070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.570448][ T7070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.579844][ T7070] bond0 (unregistering): Released all slaves
[  153.587699][T12416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.594710][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.620694][T12416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.632148][T12416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.639169][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.665237][T12416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.676454][ T7070] IPVS: stopping master sync thread 4452 ...
[  153.683937][T12462] lo speed is unknown, defaulting to 1000
[  153.705361][T12416] hsr_slave_0: entered promiscuous mode
[  153.712276][T12416] hsr_slave_1: entered promiscuous mode
[  153.718179][T12416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.727875][T12416] Cannot create hsr debugfs directory
[  153.740480][ T7070] hsr_slave_0: left promiscuous mode
[  153.746110][ T7070] hsr_slave_1: left promiscuous mode
[  153.751774][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.759314][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.766946][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.774394][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.784535][ T7070] veth1_macvtap: left promiscuous mode
[  153.790130][ T7070] veth0_macvtap: left promiscuous mode
[  153.855170][ T7070] team0 (unregistering): Port device team_slave_1 removed
[  153.864687][ T7070] team0 (unregistering): Port device team_slave_0 removed
[  153.906152][ T1040] lo speed is unknown, defaulting to 1000
[  153.911907][ T1040] infiniband syz2: ib_query_port failed (-19)
[  153.975162][T12469] FAULT_INJECTION: forcing a failure.
[  153.975162][T12469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.988270][T12469] CPU: 1 UID: 0 PID: 12469 Comm: syz.2.3398 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  153.988300][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  153.988315][T12469] Call Trace:
[  153.988325][T12469]  <TASK>
[  153.988365][T12469]  __dump_stack+0x1d/0x30
[  153.988386][T12469]  dump_stack_lvl+0xe8/0x140
[  153.988484][T12469]  dump_stack+0x15/0x1b
[  153.988579][T12469]  should_fail_ex+0x265/0x280
[  153.988668][T12469]  should_fail+0xb/0x20
[  153.988691][T12469]  should_fail_usercopy+0x1a/0x20
[  153.988706][T12469]  _copy_from_user+0x1c/0xb0
[  153.988782][T12469]  do_sock_getsockopt+0xf1/0x240
[  153.988818][T12469]  __x64_sys_getsockopt+0x11e/0x1a0
[  153.988855][T12469]  x64_sys_call+0x12aa/0x2fb0
[  153.988946][T12469]  do_syscall_64+0xd0/0x1a0
[  153.988964][T12469]  ? clear_bhb_loop+0x25/0x80
[  153.988986][T12469]  ? clear_bhb_loop+0x25/0x80
[  153.989044][T12469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.989063][T12469] RIP: 0033:0x7fb9b4cfe969
[  153.989075][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.989090][T12469] RSP: 002b:00007fb9b3367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  153.989123][T12469] RAX: ffffffffffffffda RBX: 00007fb9b4f25fa0 RCX: 00007fb9b4cfe969
[  153.989134][T12469] RDX: 000000000000001f RSI: 0000000000000001 RDI: 0000000000000003
[  153.989194][T12469] RBP: 00007fb9b3367090 R08: 0000200000000340 R09: 0000000000000000
[  153.989235][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.989248][T12469] R13: 0000000000000000 R14: 00007fb9b4f25fa0 R15: 00007ffe90a8fb28
[  153.989295][T12469]  </TASK>
[  154.191707][T12473] IPv6: NLM_F_CREATE should be specified when creating new route
[  154.216611][T12475] lo speed is unknown, defaulting to 1000
[  154.266494][T12478] loop2: detected capacity change from 0 to 128
[  154.350954][T12488] netlink: 'syz.2.3407': attribute type 3 has an invalid length.
[  154.358813][T12488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3407'.
[  154.414728][T12416] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  154.423597][T12416] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  154.434774][T12416] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  154.441647][T12488] loop2: detected capacity change from 0 to 512
[  154.450769][T12416] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  154.496312][T12416] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.507998][T12416] 8021q: adding VLAN 0 to HW filter on device team0
[  154.511661][T12488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3407: bg 0: block 5: invalid block bitmap
[  154.526636][T12416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.537321][T12416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.550971][T12494] binfmt_misc: register: failed to install interpreter file ./file2
[  154.560343][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.567424][ T6994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.578306][T12488] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  154.578790][ T3381] usb usb10-port6: attempt power cycle
[  154.588038][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.599658][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.612398][T12488] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3407: invalid indirect mapped block 3 (level 2)
[  154.636398][T12488] EXT4-fs (loop2): 2 truncates cleaned up
[  154.643565][T12494] rdma_rxe: rxe_newlink: failed to add lo
[  154.650529][T12494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12494 comm=syz.1.3409
[  154.674787][T12488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.716733][T12488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.730191][T12416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.906804][T12522] binfmt_misc: register: failed to install interpreter file ./file2
[  154.917592][T12522] rdma_rxe: rxe_newlink: failed to add lo
[  154.924163][T12522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12522 comm=syz.1.3413
[  154.956849][T12515] bridge0: entered promiscuous mode
[  155.013255][T12515] macvlan2: entered promiscuous mode
[  155.019372][T12515] bridge0: port 3(macvlan2) entered blocking state
[  155.025909][T12515] bridge0: port 3(macvlan2) entered disabled state
[  155.033630][T12515] macvlan2: entered allmulticast mode
[  155.039027][T12515] bridge0: entered allmulticast mode
[  155.044944][T12515] macvlan2: left allmulticast mode
[  155.050283][T12515] bridge0: left allmulticast mode
[  155.058048][T12515] bridge0: left promiscuous mode
[  155.068312][T12416] veth0_vlan: entered promiscuous mode
[  155.076610][T12416] veth1_vlan: entered promiscuous mode
[  155.129215][T12416] veth0_macvtap: entered promiscuous mode
[  155.136287][T12416] veth1_macvtap: entered promiscuous mode
[  155.163370][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.173877][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.183712][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.194135][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.203957][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.214383][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.224192][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.234702][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.259949][T12416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.280280][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.290758][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.291140][T12529] loop2: detected capacity change from 0 to 2048
[  155.300605][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.300702][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.327296][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.327519][T12529] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  155.337712][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.337726][T12416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.337737][T12416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.377956][T12416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.385187][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.386548][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.395656][T12416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.410082][T12416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.418909][T12416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.427629][T12416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.560100][T12554] bridge0: entered promiscuous mode
[  155.565348][T12554] macvlan2: entered promiscuous mode
[  155.571587][T12554] bridge0: port 3(macvlan2) entered blocking state
[  155.578157][T12554] bridge0: port 3(macvlan2) entered disabled state
[  155.584844][T12554] macvlan2: entered allmulticast mode
[  155.590326][T12554] bridge0: entered allmulticast mode
[  155.596133][T12554] macvlan2: left allmulticast mode
[  155.601416][T12554] bridge0: left allmulticast mode
[  155.606831][T12554] bridge0: left promiscuous mode
[  155.728765][   T23] usb usb4-port6: attempt power cycle
[  155.734424][T12563] loop4: detected capacity change from 0 to 512
[  155.742185][T12563] EXT4-fs (loop4): orphan cleanup on readonly fs
[  155.749135][T12563] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3427: bad orphan inode 13
[  155.759299][T12563] ext4_test_bit(bit=12, block=18) = 1
[  155.764723][T12563] is_bad_inode(inode)=0
[  155.768918][T12563] NEXT_ORPHAN(inode)=2130706432
[  155.773768][T12563] max_ino=32
[  155.777012][T12563] i_nlink=1
[  155.780535][T12563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  155.795941][T12563] rdma_rxe: rxe_newlink: failed to add lo
[  155.802395][T12563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12563 comm=syz.4.3427
[  155.896098][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.982382][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'.
[  156.023980][T12588] bond1: entered promiscuous mode
[  156.029300][T12588] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.036371][T12598] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3435'.
[  156.048319][T12598] batadv1: entered promiscuous mode
[  156.053656][T12598] batadv1: entered allmulticast mode
[  156.060128][T12598] 8021q: adding VLAN 0 to HW filter on device batadv1
[  156.068227][T12598] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  156.088464][T12588] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3435'.
[  156.100360][T12588] batadv2: entered promiscuous mode
[  156.105595][T12588] batadv2: entered allmulticast mode
[  156.111565][T12588] 8021q: adding VLAN 0 to HW filter on device batadv2
[  156.119900][T12588] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  156.158936][T12605] loop4: detected capacity change from 0 to 512
[  156.165625][T12605] EXT4-fs: test_dummy_encryption option not supported
[  156.177213][T12605] loop4: detected capacity change from 0 to 1024
[  156.184375][T12605] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  156.198087][T12605] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3440: Invalid block bitmap block 0 in block_group 0
[  156.214112][T12605] EXT4-fs (loop4): Remounting filesystem read-only
[  156.221039][T12605] EXT4-fs (loop4): 1 orphan inode deleted
[  156.227321][T12605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.247521][T12605] vlan2: entered allmulticast mode
[  156.263111][T12618] FAULT_INJECTION: forcing a failure.
[  156.263111][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.276331][T12618] CPU: 1 UID: 0 PID: 12618 Comm: syz.1.3447 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  156.276386][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  156.276399][T12618] Call Trace:
[  156.276404][T12618]  <TASK>
[  156.276411][T12618]  __dump_stack+0x1d/0x30
[  156.276508][T12618]  dump_stack_lvl+0xe8/0x140
[  156.276531][T12618]  dump_stack+0x15/0x1b
[  156.276613][T12618]  should_fail_ex+0x265/0x280
[  156.276643][T12618]  should_fail+0xb/0x20
[  156.276675][T12618]  should_fail_usercopy+0x1a/0x20
[  156.276746][T12618]  strncpy_from_user+0x25/0x230
[  156.276823][T12618]  ? rcu_segcblist_enqueue+0x92/0xb0
[  156.276861][T12618]  strncpy_from_user_nofault+0x68/0xf0
[  156.276889][T12618]  bpf_probe_read_compat_str+0xb4/0x130
[  156.276916][T12618]  bpf_prog_597e1462992804d8+0x46/0x48
[  156.276930][T12618]  bpf_trace_run2+0x104/0x1c0
[  156.277031][T12618]  ? debugfs_release_dentry+0x4a/0x60
[  156.277120][T12618]  ? debugfs_release_dentry+0x4a/0x60
[  156.277137][T12618]  __traceiter_kfree+0x2b/0x50
[  156.277212][T12618]  ? debugfs_release_dentry+0x4a/0x60
[  156.277227][T12618]  ? __pfx_debugfs_release_dentry+0x10/0x10
[  156.277310][T12618]  kfree+0x26f/0x310
[  156.277363][T12618]  ? __pfx_debugfs_release_dentry+0x10/0x10
[  156.277391][T12618]  debugfs_release_dentry+0x4a/0x60
[  156.277407][T12618]  __dentry_kill+0x1d6/0x4b0
[  156.277427][T12618]  ? lock_for_kill+0x41/0x140
[  156.277473][T12618]  dput+0x5e/0xd0
[  156.277515][T12618]  simple_recursive_removal+0x56f/0x590
[  156.277585][T12618]  ? __pfx_remove_one+0x10/0x10
[  156.277599][T12618]  debugfs_remove+0x5b/0x80
[  156.277633][T12618]  bdi_unregister+0x2f3/0x3a0
[  156.277661][T12618]  del_gendisk+0x2e7/0x5f0
[  156.277739][T12618]  loop_remove+0x26/0x80
[  156.277767][T12618]  loop_control_ioctl+0x3b3/0x3f0
[  156.277788][T12618]  ? __pfx_loop_control_ioctl+0x10/0x10
[  156.277826][T12618]  __se_sys_ioctl+0xcb/0x140
[  156.277841][T12618]  __x64_sys_ioctl+0x43/0x50
[  156.277856][T12618]  x64_sys_call+0x19a8/0x2fb0
[  156.277872][T12618]  do_syscall_64+0xd0/0x1a0
[  156.277888][T12618]  ? clear_bhb_loop+0x25/0x80
[  156.277950][T12618]  ? clear_bhb_loop+0x25/0x80
[  156.277966][T12618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.278042][T12618] RIP: 0033:0x7fd8fb4fe969
[  156.278079][T12618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.278092][T12618] RSP: 002b:00007fd8f9b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.278105][T12618] RAX: ffffffffffffffda RBX: 00007fd8fb725fa0 RCX: 00007fd8fb4fe969
[  156.278122][T12618] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005
[  156.278130][T12618] RBP: 00007fd8f9b67090 R08: 0000000000000000 R09: 0000000000000000
[  156.278138][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.278147][T12618] R13: 0000000000000000 R14: 00007fd8fb725fa0 R15: 00007fff78864f88
[  156.278160][T12618]  </TASK>
[  156.569855][ T3381] usb usb10-port6: unable to enumerate USB device
[  156.866876][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  156.866893][   T29] audit: type=1326 audit(1746173148.492:16363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  156.896722][   T29] audit: type=1326 audit(1746173148.492:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  156.920504][   T29] audit: type=1326 audit(1746173148.532:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  156.944120][   T29] audit: type=1326 audit(1746173148.532:16366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  156.967820][   T29] audit: type=1326 audit(1746173148.532:16367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  157.003004][   T29] audit: type=1400 audit(1746173148.632:16368): avc:  denied  { create } for  pid=12639 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  157.003054][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.026152][   T29] audit: type=1400 audit(1746173148.652:16369): avc:  denied  { bind } for  pid=12639 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  157.032226][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'.
[  157.067478][T12635] bond0: entered promiscuous mode
[  157.073024][T12635] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.098076][T12635] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3453'.
[  157.110083][T12635] batadv1: entered promiscuous mode
[  157.115317][T12635] batadv1: entered allmulticast mode
[  157.122223][T12635] 8021q: adding VLAN 0 to HW filter on device batadv1
[  157.130569][T12635] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  157.139840][   T29] audit: type=1326 audit(1746173148.752:16370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  157.144804][T12635] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3453'.
[  157.163424][   T29] audit: type=1326 audit(1746173148.752:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  157.175422][T12635] batadv2: entered promiscuous mode
[  157.201226][T12635] batadv2: entered allmulticast mode
[  157.209897][T12635] 8021q: adding VLAN 0 to HW filter on device batadv2
[  157.238355][T12635] bond0: (slave batadv2): Enslaving as an active interface with an up link
[  157.261952][   T29] audit: type=1400 audit(1746173148.892:16372): avc:  denied  { create } for  pid=12655 comm="syz.1.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  157.361844][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3458'.
[  157.729045][   T23] usb usb4-port6: unable to enumerate USB device
[  158.277198][T12416] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  158.288104][T12416] CPU: 1 UID: 0 PID: 12416 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  158.288133][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  158.288150][T12416] Call Trace:
[  158.288157][T12416]  <TASK>
[  158.288164][T12416]  __dump_stack+0x1d/0x30
[  158.288185][T12416]  dump_stack_lvl+0xe8/0x140
[  158.288253][T12416]  dump_stack+0x15/0x1b
[  158.288266][T12416]  dump_header+0x81/0x220
[  158.288299][T12416]  oom_kill_process+0x334/0x3f0
[  158.288404][T12416]  out_of_memory+0x979/0xb80
[  158.288428][T12416]  ? css_next_descendant_pre+0x138/0x160
[  158.288494][T12416]  mem_cgroup_out_of_memory+0x13d/0x190
[  158.288526][T12416]  try_charge_memcg+0x5e2/0x870
[  158.288616][T12416]  charge_memcg+0x51/0xc0
[  158.288639][T12416]  __mem_cgroup_charge+0x28/0xb0
[  158.288663][T12416]  filemap_add_folio+0x4e/0x1b0
[  158.288736][T12416]  __filemap_get_folio+0x31e/0x650
[  158.288759][T12416]  filemap_fault+0x41d/0xb40
[  158.288788][T12416]  __do_fault+0xb9/0x200
[  158.288846][T12416]  handle_mm_fault+0x110c/0x2ae0
[  158.288977][T12416]  ? mas_walk+0xf2/0x120
[  158.288997][T12416]  do_user_addr_fault+0x636/0x1090
[  158.289058][T12416]  exc_page_fault+0x54/0xc0
[  158.289086][T12416]  asm_exc_page_fault+0x26/0x30
[  158.289120][T12416] RIP: 0033:0x7f8294c45994
[  158.289132][T12416] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1
[  158.289150][T12416] RSP: 002b:00007ffeb0d9c900 EFLAGS: 00010206
[  158.289165][T12416] RAX: 0000001b33820000 RBX: 0000000000000040 RCX: 0000000000026930
[  158.289175][T12416] RDX: 00000000035b2bbd RSI: 00007ffeb0d9c990 RDI: 0000000000000001
[  158.289262][T12416] RBP: 00007ffeb0d9c93c R08: 000000000ccd7a0c R09: 7fffffffffffffff
[  158.289274][T12416] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  158.289286][T12416] R13: 00000000000927c0 R14: 00000000000269e6 R15: 00007ffeb0d9c990
[  158.289387][T12416]  </TASK>
[  158.485828][T12416] memory: usage 307200kB, limit 307200kB, failcnt 283
[  158.492841][T12416] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  158.500764][T12416] kmem: usage 301380kB, limit 9007199254740988kB, failcnt 0
[  158.508049][T12416] Memory cgroup stats for /syz4:
[  158.508586][T12416] cache 0
[  158.515334][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3481'.
[  158.516539][T12416] rss 5959680
[  158.516549][T12416] shmem 0
[  158.531702][T12416] mapped_file 0
[  158.535309][T12416] dirty 0
[  158.538244][T12416] writeback 0
[  158.541580][T12416] workingset_refault_anon 44
[  158.546205][T12416] workingset_refault_file 321
[  158.550912][T12416] swap 192512
[  158.554267][T12416] swapcached 0
[  158.557632][T12416] pgpgin 122634
[  158.561161][T12416] pgpgout 121179
[  158.564766][T12416] pgfault 162842
[  158.568301][T12416] pgmajfault 33
[  158.571776][T12416] inactive_anon 0
[  158.575403][T12416] active_anon 0
[  158.578857][T12416] inactive_file 0
[  158.582511][T12416] active_file 0
[  158.586034][T12416] unevictable 5959680
[  158.590047][T12416] hierarchical_memory_limit 314572800
[  158.595401][T12416] hierarchical_memsw_limit 9223372036854771712
[  158.601564][T12416] total_cache 0
[  158.605059][T12416] total_rss 5959680
[  158.608920][T12416] total_shmem 0
[  158.612395][T12416] total_mapped_file 0
[  158.616404][T12416] total_dirty 0
[  158.619872][T12416] total_writeback 0
[  158.623728][T12416] total_workingset_refault_anon 44
[  158.628837][T12416] total_workingset_refault_file 321
[  158.634060][T12416] total_swap 192512
[  158.637861][T12416] total_swapcached 0
[  158.641767][T12416] total_pgpgin 122634
[  158.645741][T12416] total_pgpgout 121179
[  158.649910][T12416] total_pgfault 162842
[  158.653981][T12416] total_pgmajfault 33
[  158.658027][T12416] total_inactive_anon 0
[  158.662204][T12416] total_active_anon 0
[  158.666252][T12416] total_inactive_file 0
[  158.670464][T12416] total_active_file 0
[  158.674446][T12416] total_unevictable 5959680
[  158.678976][T12416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3482,pid=12697,uid=0
[  158.693791][T12416] Memory cgroup out of memory: Killed process 12697 (syz.4.3482) total-vm:93748kB, anon-rss:9000kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  158.728143][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3484'.
[  158.833502][T12718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3487'.
[  158.864530][T12722] IPv6: NLM_F_CREATE should be specified when creating new route
[  159.398409][T12743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3499'.
[  159.429822][T12745] IPv6: NLM_F_CREATE should be specified when creating new route
[  159.464992][T12750] FAULT_INJECTION: forcing a failure.
[  159.464992][T12750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.478181][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.4.3502 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  159.478225][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  159.478240][T12750] Call Trace:
[  159.478247][T12750]  <TASK>
[  159.478256][T12750]  __dump_stack+0x1d/0x30
[  159.478279][T12750]  dump_stack_lvl+0xe8/0x140
[  159.478297][T12750]  dump_stack+0x15/0x1b
[  159.478337][T12750]  should_fail_ex+0x265/0x280
[  159.478366][T12750]  should_fail+0xb/0x20
[  159.478392][T12750]  should_fail_usercopy+0x1a/0x20
[  159.478410][T12750]  _copy_to_user+0x20/0xa0
[  159.478450][T12750]  simple_read_from_buffer+0xb5/0x130
[  159.478477][T12750]  proc_fail_nth_read+0x100/0x140
[  159.478509][T12750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  159.478539][T12750]  vfs_read+0x19d/0x6f0
[  159.478618][T12750]  ? kmem_cache_free+0xdd/0x2f0
[  159.478640][T12750]  ? __rcu_read_unlock+0x4f/0x70
[  159.478665][T12750]  ? __fget_files+0x184/0x1c0
[  159.478700][T12750]  ksys_read+0xda/0x1a0
[  159.478728][T12750]  __x64_sys_read+0x40/0x50
[  159.478827][T12750]  x64_sys_call+0x2d77/0x2fb0
[  159.478884][T12750]  do_syscall_64+0xd0/0x1a0
[  159.478905][T12750]  ? clear_bhb_loop+0x25/0x80
[  159.478924][T12750]  ? clear_bhb_loop+0x25/0x80
[  159.478943][T12750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.478972][T12750] RIP: 0033:0x7f8294d6d37c
[  159.478987][T12750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  159.479007][T12750] RSP: 002b:00007f82933d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  159.479073][T12750] RAX: ffffffffffffffda RBX: 00007f8294f95fa0 RCX: 00007f8294d6d37c
[  159.479088][T12750] RDX: 000000000000000f RSI: 00007f82933d70a0 RDI: 0000000000000006
[  159.479102][T12750] RBP: 00007f82933d7090 R08: 0000000000000000 R09: 0000000000000000
[  159.479114][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.479124][T12750] R13: 0000000000000000 R14: 00007f8294f95fa0 R15: 00007ffeb0d9c578
[  159.479141][T12750]  </TASK>
[  159.749378][T12761] binfmt_misc: register: failed to install interpreter file ./file2
[  159.778510][T12761] syz0: rxe_newlink: already configured on lo
[  159.786217][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'.
[  159.797929][T12761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12761 comm=syz.2.3506
[  159.818480][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'.
[  159.839903][T12765] bond0: (slave bond_slave_0): Releasing backup interface
[  160.072034][T12794] loop4: detected capacity change from 0 to 512
[  160.081505][T12794] EXT4-fs (loop4): orphan cleanup on readonly fs
[  160.088260][T12794] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3522: bad orphan inode 13
[  160.098639][T12794] ext4_test_bit(bit=12, block=18) = 1
[  160.104056][T12794] is_bad_inode(inode)=0
[  160.108252][T12794] NEXT_ORPHAN(inode)=2130706432
[  160.113186][T12794] max_ino=32
[  160.116386][T12794] i_nlink=1
[  160.120175][T12794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  160.135737][T12794] rdma_rxe: rxe_newlink: failed to add lo
[  160.141969][T12794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12794 comm=syz.4.3522
[  160.164846][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  160.171422][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  160.178985][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.187959][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9)
[  160.194545][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  160.202161][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.209986][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  160.216605][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  160.224277][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.233459][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.239161][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[  160.249121][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  160.256546][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.263209][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15)
[  160.269807][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  160.277886][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.287599][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18)
[  160.294243][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  160.301924][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.321599][T12801] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21)
[  160.328205][T12801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  160.336408][T12801] vhci_hcd vhci_hcd.0: Device attached
[  160.344034][T12817] vhci_hcd: connection closed
[  160.344131][ T7033] vhci_hcd: stop threads
[  160.353121][ T7033] vhci_hcd: release socket
[  160.357537][ T7033] vhci_hcd: disconnect device
[  160.365818][T12815] vhci_hcd: connection closed
[  160.366060][T12805] vhci_hcd: connection closed
[  160.370968][T12807] vhci_hcd: connection closed
[  160.371245][T12809] vhci_hcd: connection closed
[  160.375918][ T7033] vhci_hcd: stop threads
[  160.380565][ T3381] vhci_hcd: vhci_device speed not set
[  160.385135][ T7033] vhci_hcd: release socket
[  160.389361][T12803] vhci_hcd: connection closed
[  160.389491][T12811] vhci_hcd: connection closed
[  160.394762][ T7033] vhci_hcd: disconnect device
[  160.414040][ T7033] vhci_hcd: stop threads
[  160.418428][ T7033] vhci_hcd: release socket
[  160.423073][ T7033] vhci_hcd: disconnect device
[  160.428031][ T7033] vhci_hcd: stop threads
[  160.432461][ T7033] vhci_hcd: release socket
[  160.437153][ T7033] vhci_hcd: disconnect device
[  160.442319][ T7033] vhci_hcd: stop threads
[  160.446662][ T7033] vhci_hcd: release socket
[  160.451114][ T7033] vhci_hcd: disconnect device
[  160.455986][ T7033] vhci_hcd: stop threads
[  160.460296][ T7033] vhci_hcd: release socket
[  160.464847][ T7033] vhci_hcd: disconnect device
[  160.469951][ T3381] usb 3-1: new full-speed USB device number 9 using vhci_hcd
[  160.477329][ T3381] usb 3-1: enqueue for inactive port 0
[  160.483010][ T3381] usb 3-1: enqueue for inactive port 0
[  160.488474][ T3381] usb 3-1: enqueue for inactive port 0
[  160.494107][ T7033] vhci_hcd: stop threads
[  160.498351][ T7033] vhci_hcd: release socket
[  160.502813][ T7033] vhci_hcd: disconnect device
[  160.579292][ T3381] vhci_hcd: vhci_device speed not set
[  161.121398][T12887] bridge0: entered promiscuous mode
[  161.131071][T12887] macvlan2: entered promiscuous mode
[  161.146194][T12887] bridge0: port 3(macvlan2) entered blocking state
[  161.152888][T12887] bridge0: port 3(macvlan2) entered disabled state
[  161.176966][T12887] macvlan2: entered allmulticast mode
[  161.182453][T12887] bridge0: entered allmulticast mode
[  161.202913][T12887] macvlan2: left allmulticast mode
[  161.208104][T12887] bridge0: left allmulticast mode
[  161.224987][T12887] bridge0: left promiscuous mode
[  161.517257][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  161.523918][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  161.531425][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.548112][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[  161.554654][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.562776][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.618584][T12898] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11)
[  161.625258][T12898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  161.633182][T12898] vhci_hcd vhci_hcd.0: Device attached
[  161.645188][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  161.651799][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  161.659339][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.678672][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  161.685295][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  161.692922][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.704950][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18)
[  161.711553][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  161.719107][ T3382] vhci_hcd: vhci_device speed not set
[  161.724520][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.738056][T12897] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21)
[  161.744658][T12897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  161.752870][T12897] vhci_hcd vhci_hcd.0: Device attached
[  161.760570][T12925] vhci_hcd: connection closed
[  161.760731][ T7033] vhci_hcd: stop threads
[  161.761022][T12915] vhci_hcd: connection closed
[  161.765497][ T7033] vhci_hcd: release socket
[  161.771226][T12903] vhci_hcd: connection closed
[  161.774336][ T7033] vhci_hcd: disconnect device
[  161.774405][T12917] vhci_hcd: connection closed
[  161.779483][T12899] vhci_hcd: connection closed
[  161.783546][T12919] vhci_hcd: connection closed
[  161.797771][T12923] vhci_hcd: connection closed
[  161.797861][ T3382] usb 9-1: new full-speed USB device number 11 using vhci_hcd
[  161.797901][T12900] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  161.798245][ T7033] vhci_hcd: stop threads
[  161.798254][ T7033] vhci_hcd: release socket
[  161.798269][ T7033] vhci_hcd: disconnect device
[  161.798352][ T7033] vhci_hcd: stop threads
[  161.798359][ T7033] vhci_hcd: release socket
[  161.798369][ T7033] vhci_hcd: disconnect device
[  161.798689][ T7033] vhci_hcd: stop threads
[  161.852131][ T7033] vhci_hcd: release socket
[  161.856552][ T7033] vhci_hcd: disconnect device
[  161.866348][ T7033] vhci_hcd: stop threads
[  161.870771][ T7033] vhci_hcd: release socket
[  161.875199][ T7033] vhci_hcd: disconnect device
[  161.880250][ T7033] vhci_hcd: stop threads
[  161.884505][ T7033] vhci_hcd: release socket
[  161.888918][ T7033] vhci_hcd: disconnect device
[  161.894052][ T7033] vhci_hcd: stop threads
[  161.898293][ T7033] vhci_hcd: release socket
[  161.902747][ T7033] vhci_hcd: disconnect device
[  161.941241][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  161.941257][   T29] audit: type=1326 audit(1746173153.541:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  161.971011][   T29] audit: type=1326 audit(1746173153.541:16400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  161.994680][   T29] audit: type=1326 audit(1746173153.541:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.018223][   T29] audit: type=1326 audit(1746173153.541:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.041919][   T29] audit: type=1326 audit(1746173153.541:16403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.065549][   T29] audit: type=1326 audit(1746173153.541:16404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.089006][   T29] audit: type=1326 audit(1746173153.541:16405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.112557][   T29] audit: type=1326 audit(1746173153.541:16406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.136213][   T29] audit: type=1326 audit(1746173153.541:16407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.159781][   T29] audit: type=1326 audit(1746173153.541:16408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd8fb4fe969 code=0x7ffc0000
[  162.440170][T12937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  162.440254][T12938] __nla_validate_parse: 4 callbacks suppressed
[  162.440271][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3569'.
[  162.446798][T12937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  162.469303][T12937] vhci_hcd vhci_hcd.0: Device attached
[  162.479449][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[  162.485977][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  162.493522][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.500111][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11)
[  162.506717][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  162.514299][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.521052][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13)
[  162.527653][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  162.535204][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.544232][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15)
[  162.550877][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  162.558484][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.566124][T12950] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3571'.
[  162.566857][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18)
[  162.581666][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  162.589249][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.624363][T12935] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(21)
[  162.631014][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  162.639171][T12935] vhci_hcd vhci_hcd.0: Device attached
[  162.651289][T12951] vhci_hcd: connection closed
[  162.651410][T12957] vhci_hcd: connection closed
[  162.656359][T12947] vhci_hcd: connection closed
[  162.659725][ T3381] vhci_hcd: vhci_device speed not set
[  162.661592][T12945] vhci_hcd: connection closed
[  162.671064][ T6993] vhci_hcd: stop threads
[  162.671079][ T6993] vhci_hcd: release socket
[  162.671100][ T6993] vhci_hcd: disconnect device
[  162.675760][ T6993] vhci_hcd: stop threads
[  162.676411][T12943] vhci_hcd: connection closed
[  162.680134][ T6993] vhci_hcd: release socket
[  162.685839][T12941] vhci_hcd: connection closed
[  162.689245][ T6993] vhci_hcd: disconnect device
[  162.694312][T12939] vhci_hcd: connection closed
[  162.713038][ T6993] vhci_hcd: stop threads
[  162.722151][ T6993] vhci_hcd: release socket
[  162.726593][ T6993] vhci_hcd: disconnect device
[  162.731490][ T6993] vhci_hcd: stop threads
[  162.735730][ T6993] vhci_hcd: release socket
[  162.740220][ T6993] vhci_hcd: disconnect device
[  162.742218][ T3381] usb 5-1: new full-speed USB device number 6 using vhci_hcd
[  162.745826][ T6993] vhci_hcd: stop threads
[  162.756566][ T6993] vhci_hcd: release socket
[  162.756575][ T6993] vhci_hcd: disconnect device
[  162.766073][ T6993] vhci_hcd: stop threads
[  162.770429][ T6993] vhci_hcd: release socket
[  162.774846][ T6993] vhci_hcd: disconnect device
[  162.782484][T12940] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  162.788550][ T6993] vhci_hcd: stop threads
[  162.792829][ T6993] vhci_hcd: release socket
[  162.797251][ T6993] vhci_hcd: disconnect device
[  162.945271][T12977] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3582'.
[  162.983860][T12983] bridge0: entered promiscuous mode
[  162.989207][T12983] macvlan2: entered promiscuous mode
[  162.995774][T12983] bridge0: port 3(macvlan2) entered blocking state
[  163.002336][T12983] bridge0: port 3(macvlan2) entered disabled state
[  163.009322][T12983] macvlan2: entered allmulticast mode
[  163.014993][T12983] bridge0: entered allmulticast mode
[  163.020814][T12983] macvlan2: left allmulticast mode
[  163.026133][T12983] bridge0: left allmulticast mode
[  163.031663][T12983] bridge0: left promiscuous mode
[  163.077951][T12995] hsr0: entered promiscuous mode
[  163.103648][T12999] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3593'.
[  163.170275][ T1040] usb usb4-port6: attempt power cycle
[  163.423423][T13047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3614'.
[  163.432457][T13047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3614'.
[  163.463441][T13047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3614'.
[  163.484580][T13040] lo speed is unknown, defaulting to 1000
[  163.507114][T13068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3619'.
[  163.560011][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  163.566638][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  163.574142][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.581416][T13056] lo speed is unknown, defaulting to 1000
[  163.595858][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[  163.602491][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.610030][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.654955][T13089] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12)
[  163.661615][T13089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  163.669297][T13089] vhci_hcd vhci_hcd.0: Device attached
[  163.685994][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11)
[  163.692617][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  163.700132][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.713599][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  163.720319][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  163.727956][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.740737][T13040] chnl_net:caif_netlink_parms(): no params data found
[  163.765440][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18)
[  163.772073][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  163.779674][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.786337][T13056] chnl_net:caif_netlink_parms(): no params data found
[  163.818033][T13072] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21)
[  163.822158][T13117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3630'.
[  163.824631][T13072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  163.841741][T13072] vhci_hcd vhci_hcd.0: Device attached
[  163.857326][T13118] vhci_hcd: connection closed
[  163.857516][T13105] vhci_hcd: connection closed
[  163.859220][ T7033] vhci_hcd: stop threads
[  163.871778][ T7033] vhci_hcd: release socket
[  163.874231][T13100] vhci_hcd: connection closed
[  163.876238][ T7033] vhci_hcd: disconnect device
[  163.876600][T13094] vhci_hcd: connection closed
[  163.882354][T13090] vhci_hcd: connection closed
[  163.885794][ T7033] vhci_hcd: stop threads
[  163.899304][ T7033] vhci_hcd: release socket
[  163.903825][ T7033] vhci_hcd: disconnect device
[  163.909039][T13074] vhci_hcd: connection closed
[  163.910603][ T7033] vhci_hcd: stop threads
[  163.915343][T13082] vhci_hcd: connection closed
[  163.919570][ T7033] vhci_hcd: release socket
[  163.919583][ T7033] vhci_hcd: disconnect device
[  163.919868][ T7033] vhci_hcd: stop threads
[  163.937730][ T7033] vhci_hcd: release socket
[  163.942195][ T7033] vhci_hcd: disconnect device
[  163.947356][ T7033] vhci_hcd: stop threads
[  163.951712][ T7033] vhci_hcd: release socket
[  163.956127][ T7033] vhci_hcd: disconnect device
[  163.961228][ T7033] vhci_hcd: stop threads
[  163.965467][ T7033] vhci_hcd: release socket
[  163.969967][ T7033] vhci_hcd: disconnect device
[  163.986386][T13040] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.993693][T13040] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.001541][T13040] bridge_slave_0: entered allmulticast mode
[  164.007456][ T7033] vhci_hcd: stop threads
[  164.011806][ T7033] vhci_hcd: release socket
[  164.016227][ T7033] vhci_hcd: disconnect device
[  164.021627][T13040] bridge_slave_0: entered promiscuous mode
[  164.040471][T13040] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.047539][T13040] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.061030][T13040] bridge_slave_1: entered allmulticast mode
[  164.067895][T13040] bridge_slave_1: entered promiscuous mode
[  164.074546][T13056] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.081679][T13056] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.089068][T13056] bridge_slave_0: entered allmulticast mode
[  164.097943][T13056] bridge_slave_0: entered promiscuous mode
[  164.105196][T13056] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.112545][T13056] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.119913][T13056] bridge_slave_1: entered allmulticast mode
[  164.126313][T13056] bridge_slave_1: entered promiscuous mode
[  164.148124][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.162988][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.178065][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.488925][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.498041][T13143] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3639'.
[  164.520716][T13144] lo speed is unknown, defaulting to 1000
[  164.755837][T13040] team0: Port device team_slave_0 added
[  164.773237][T13040] team0: Port device team_slave_1 added
[  164.799418][T13056] team0: Port device team_slave_0 added
[  164.817138][T13056] team0: Port device team_slave_1 added
[  164.823684][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.830682][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.856643][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.935871][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.942974][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.968966][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.173610][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.180608][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.206673][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.246650][T13040] hsr_slave_0: entered promiscuous mode
[  165.255015][T13040] hsr_slave_1: entered promiscuous mode
[  165.292365][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.306156][T13040] Cannot create hsr debugfs directory
[  165.314146][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.321203][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.347129][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.507790][T13056] hsr_slave_0: entered promiscuous mode
[  165.516438][T13056] hsr_slave_1: entered promiscuous mode
[  165.522365][T13056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.532426][T13056] Cannot create hsr debugfs directory
[  165.561748][T13040] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  165.574307][T13040] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  165.601653][T13040] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  165.612421][T13040] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.715626][T13056] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  165.729404][T13056] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  165.739283][T13056] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  165.750007][T13056] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  165.762819][T13040] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.786109][T13040] 8021q: adding VLAN 0 to HW filter on device team0
[  165.810790][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.817994][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.838636][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.845921][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.875239][T13056] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.882399][ T1040] usb usb4-port6: unable to enumerate USB device
[  165.897972][T13040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.908412][T13040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.927087][T13056] 8021q: adding VLAN 0 to HW filter on device team0
[  165.957714][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.964775][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.975299][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.982471][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.055936][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.097099][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.288796][T13056] veth0_vlan: entered promiscuous mode
[  166.310858][T13056] veth1_vlan: entered promiscuous mode
[  166.344981][T13040] veth0_vlan: entered promiscuous mode
[  166.363150][T13056] veth0_macvtap: entered promiscuous mode
[  166.373385][T13040] veth1_vlan: entered promiscuous mode
[  166.383964][T13056] veth1_macvtap: entered promiscuous mode
[  166.399044][T13040] veth0_macvtap: entered promiscuous mode
[  166.410952][T13040] veth1_macvtap: entered promiscuous mode
[  166.417462][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.427946][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.437927][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.448452][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.458352][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.468911][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.478768][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.489223][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.499094][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.509551][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.531776][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.553780][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.564285][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.574244][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.584737][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.594574][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.605012][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.614847][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.625278][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.628031][T13243] random: crng reseeded on system resumption
[  166.635195][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.635208][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.635223][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.672585][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.704413][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.731242][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.741793][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.751642][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.762131][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.771967][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.782480][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.792296][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.802935][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.812752][T13056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.823275][T13056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.880930][ T3382] usb 9-1: enqueue for inactive port 0
[  166.886487][ T3382] usb 9-1: enqueue for inactive port 0
[  166.898850][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.916744][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.927289][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.937207][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.947752][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.957601][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.968092][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.977947][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.988403][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.998329][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.008799][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.018619][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.029054][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.039752][ T3382] vhci_hcd: vhci_device speed not set
[  167.044359][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  167.044393][   T29] audit: type=1326 audit(1746173158.671:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.4.3666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8294d6e969 code=0x0
[  167.077405][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.087356][T13056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.096237][T13056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.105007][T13056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.113821][T13056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.125992][T13040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.134767][T13040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.143524][T13040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.152235][T13040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.267792][   T29] audit: type=1326 audit(1746173158.891:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13259 comm="syz.6.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37819ae969 code=0x7ffc0000
[  167.291926][T13260] FAULT_INJECTION: forcing a failure.
[  167.291926][T13260] name failslab, interval 1, probability 0, space 0, times 0
[  167.304590][T13260] CPU: 1 UID: 0 PID: 13260 Comm: syz.6.3670 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  167.304651][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  167.304665][T13260] Call Trace:
[  167.304672][T13260]  <TASK>
[  167.304678][T13260]  __dump_stack+0x1d/0x30
[  167.304698][T13260]  dump_stack_lvl+0xe8/0x140
[  167.304720][T13260]  dump_stack+0x15/0x1b
[  167.304796][T13260]  should_fail_ex+0x265/0x280
[  167.304824][T13260]  should_failslab+0x8c/0xb0
[  167.304850][T13260]  kmem_cache_alloc_noprof+0x50/0x310
[  167.304896][T13260]  ? audit_log_start+0x365/0x6c0
[  167.304938][T13260]  audit_log_start+0x365/0x6c0
[  167.304967][T13260]  audit_seccomp+0x48/0x100
[  167.304989][T13260]  ? __seccomp_filter+0x68c/0x10d0
[  167.305010][T13260]  __seccomp_filter+0x69d/0x10d0
[  167.305083][T13260]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  167.305225][T13260]  ? vfs_write+0x75e/0x8d0
[  167.305299][T13260]  ? __rcu_read_unlock+0x4f/0x70
[  167.305329][T13260]  ? __fget_files+0x184/0x1c0
[  167.305360][T13260]  __secure_computing+0x82/0x150
[  167.305382][T13260]  syscall_trace_enter+0xcf/0x1e0
[  167.305452][T13260]  do_syscall_64+0xaa/0x1a0
[  167.305550][T13260]  ? clear_bhb_loop+0x25/0x80
[  167.305567][T13260]  ? clear_bhb_loop+0x25/0x80
[  167.305583][T13260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.305600][T13260] RIP: 0033:0x7f37819ae969
[  167.305612][T13260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.305641][T13260] RSP: 002b:00007f3780017038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  167.305659][T13260] RAX: ffffffffffffffda RBX: 00007f3781bd5fa0 RCX: 00007f37819ae969
[  167.305670][T13260] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000
[  167.305679][T13260] RBP: 00007f3780017090 R08: 0000000000000000 R09: 0000000000000000
[  167.305688][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.305697][T13260] R13: 0000000000000000 R14: 00007f3781bd5fa0 R15: 00007ffed42af958
[  167.305711][T13260]  </TASK>
[  167.305716][T13260] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[  167.519463][T13260] audit: out of memory in audit_log_start
[  167.526352][   T29] audit: type=1326 audit(1746173158.921:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13259 comm="syz.6.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f37819ae969 code=0x7ffc0000
[  167.549959][   T29] audit: type=1326 audit(1746173158.921:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13259 comm="syz.6.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37819ae969 code=0x7ffc0000
[  167.573579][   T29] audit: type=1326 audit(1746173158.921:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13259 comm="syz.6.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37819ad2d0 code=0x7ffc0000
[  167.597209][   T29] audit: type=1326 audit(1746173158.921:16543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13259 comm="syz.6.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37819ad41f code=0x7ffc0000
[  167.620669][   T29] audit: type=1326 audit(1746173159.141:16544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  167.644237][   T29] audit: type=1326 audit(1746173159.141:16545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  167.705239][T13267] __nla_validate_parse: 3 callbacks suppressed
[  167.705252][T13267] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3673'.
[  167.784977][T13275] lo speed is unknown, defaulting to 1000
[  167.791043][ T3381] usb 5-1: enqueue for inactive port 0
[  167.796531][ T3381] usb 5-1: enqueue for inactive port 0
[  167.841823][T13279] binfmt_misc: register: failed to install interpreter file ./file2
[  167.844619][T13278] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  167.856312][T13278] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  167.863759][T13278] vhci_hcd vhci_hcd.0: Device attached
[  167.886750][ T3381] vhci_hcd: vhci_device speed not set
[  167.894498][T13286] vlan2: entered allmulticast mode
[  167.899919][T13279] rdma_rxe: rxe_newlink: failed to add lo
[  167.907711][T13287] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  167.908704][T13279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13279 comm=syz.5.3679
[  167.914303][T13287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  167.934233][T13287] vhci_hcd vhci_hcd.0: Device attached
[  167.973888][T13278] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9)
[  167.980433][T13278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  167.988103][T13278] vhci_hcd vhci_hcd.0: Device attached
[  168.040343][T13278] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  168.046982][T13278] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  168.054459][T13278] vhci_hcd vhci_hcd.0: Device attached
[  168.072367][T13278] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  168.078980][T13278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.086640][T13278] vhci_hcd vhci_hcd.0: Device attached
[  168.129220][T13287] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19)
[  168.135847][T13287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.143430][T13287] vhci_hcd vhci_hcd.0: Device attached
[  168.179744][T13278] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21)
[  168.186374][T13278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  168.194539][T13278] vhci_hcd vhci_hcd.0: Device attached
[  168.221168][T13309] vhci_hcd: connection closed
[  168.221413][T13306] vhci_hcd: connection closed
[  168.226536][T13288] vhci_hcd: connection closed
[  168.228297][T13295] vhci_hcd: connection closed
[  168.231406][T13299] vhci_hcd: connection closed
[  168.236103][T13301] vhci_hcd: connection closed
[  168.245552][T13281] vhci_hcd: connection closed
[  168.263808][ T7018] vhci_hcd: stop threads
[  168.272845][ T7018] vhci_hcd: release socket
[  168.277444][ T7018] vhci_hcd: disconnect device
[  168.299201][ T7018] vhci_hcd: stop threads
[  168.303573][ T7018] vhci_hcd: release socket
[  168.307995][ T7018] vhci_hcd: disconnect device
[  168.322096][ T7018] vhci_hcd: stop threads
[  168.326360][ T7018] vhci_hcd: release socket
[  168.330965][ T7018] vhci_hcd: disconnect device
[  168.343271][T13316] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3687'.
[  168.352435][ T7018] vhci_hcd: stop threads
[  168.356681][ T7018] vhci_hcd: release socket
[  168.361202][ T7018] vhci_hcd: disconnect device
[  168.381103][ T7018] vhci_hcd: stop threads
[  168.385536][ T7018] vhci_hcd: release socket
[  168.389998][ T7018] vhci_hcd: disconnect device
[  168.410970][ T7018] vhci_hcd: stop threads
[  168.415262][ T7018] vhci_hcd: release socket
[  168.419689][ T7018] vhci_hcd: disconnect device
[  168.436066][T13322] bridge0: entered promiscuous mode
[  168.441366][ T7018] vhci_hcd: stop threads
[  168.445778][ T7018] vhci_hcd: release socket
[  168.450284][ T7018] vhci_hcd: disconnect device
[  168.450401][T13322] macvlan2: entered promiscuous mode
[  168.473042][T13322] bridge0: port 3(macvlan2) entered blocking state
[  168.479590][T13322] bridge0: port 3(macvlan2) entered disabled state
[  168.514196][T13322] macvlan2: entered allmulticast mode
[  168.519592][T13322] bridge0: entered allmulticast mode
[  168.542162][T13322] macvlan2: left allmulticast mode
[  168.547313][T13322] bridge0: left allmulticast mode
[  168.560548][T13322] bridge0: left promiscuous mode
[  168.969535][T13340] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3696'.
[  168.992262][T13341] lo speed is unknown, defaulting to 1000
[  169.334879][T13344] lo speed is unknown, defaulting to 1000
[  169.496694][T13347] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3699'.
[  169.822320][T13351] binfmt_misc: register: failed to install interpreter file ./file2
[  169.861362][T13351] syz0: rxe_newlink: already configured on lo
[  169.907721][T13351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13351 comm=syz.2.3701
[  170.336474][T13376] hsr0: entered promiscuous mode
[  170.424992][T13379] lo speed is unknown, defaulting to 1000
[  170.520640][T10006] usb usb10-port6: attempt power cycle
[  170.600458][ T3382] vhci_hcd: vhci_device speed not set
[  172.085401][T13438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3734'.
[  172.178407][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  172.178421][   T29] audit: type=1326 audit(1746173163.800:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.240460][   T29] audit: type=1326 audit(1746173163.840:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.264163][   T29] audit: type=1326 audit(1746173163.840:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.287940][   T29] audit: type=1326 audit(1746173163.840:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.311751][   T29] audit: type=1326 audit(1746173163.840:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.335316][   T29] audit: type=1326 audit(1746173163.840:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.358998][   T29] audit: type=1326 audit(1746173163.840:16580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.382650][   T29] audit: type=1326 audit(1746173163.840:16581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.406299][   T29] audit: type=1326 audit(1746173163.840:16582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.429870][   T29] audit: type=1326 audit(1746173163.840:16583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb9b4cfe969 code=0x7ffc0000
[  172.527401][T13448] netlink: 'syz.1.3739': attribute type 39 has an invalid length.
[  172.935678][T13462] loop4: detected capacity change from 0 to 512
[  172.972454][T13462] EXT4-fs (loop4): orphan cleanup on readonly fs
[  172.986106][T13462] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3745: bad orphan inode 13
[  173.013956][T13467] IPv6: NLM_F_CREATE should be specified when creating new route
[  173.028716][T13462] ext4_test_bit(bit=12, block=18) = 1
[  173.034173][T13462] is_bad_inode(inode)=0
[  173.038349][T13462] NEXT_ORPHAN(inode)=2130706432
[  173.043308][T13462] max_ino=32
[  173.046557][T13462] i_nlink=1
[  173.113856][T13462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.219649][T13462] rdma_rxe: rxe_newlink: failed to add lo
[  173.262924][T13462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13462 comm=syz.4.3745
[  173.615776][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3751'.
[  173.763805][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.270643][T13532] ==================================================================
[  174.278761][T13532] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  174.286053][T13532] 
[  174.288369][T13532] write to 0xffff88810806d200 of 8 bytes by task 13529 on cpu 1:
[  174.296076][T13532]  mas_wmb_replace+0x20e/0x14a0
[  174.300931][T13532]  mas_wr_store_entry+0x17ae/0x2b60
[  174.306129][T13532]  mas_store_prealloc+0x74d/0x9e0
[  174.311150][T13532]  vma_iter_store_new+0x1c5/0x200
[  174.316184][T13532]  vma_complete+0x125/0x570
[  174.320690][T13532]  __split_vma+0x594/0x610
[  174.325119][T13532]  vma_modify+0x1a4/0x210
[  174.329446][T13532]  vma_modify_flags+0x101/0x130
[  174.334302][T13532]  mprotect_fixup+0x2cc/0x570
[  174.338982][T13532]  do_mprotect_pkey+0x6d6/0x980
[  174.343824][T13532]  __x64_sys_mprotect+0x48/0x60
[  174.348678][T13532]  x64_sys_call+0x2794/0x2fb0
[  174.353352][T13532]  do_syscall_64+0xd0/0x1a0
[  174.357869][T13532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.363756][T13532] 
[  174.366070][T13532] read to 0xffff88810806d200 of 8 bytes by task 13532 on cpu 0:
[  174.373691][T13532]  mas_state_walk+0x119/0x650
[  174.378360][T13532]  mas_walk+0x30/0x120
[  174.382420][T13532]  lock_vma_under_rcu+0xa2/0x2f0
[  174.387371][T13532]  do_user_addr_fault+0x233/0x1090
[  174.392503][T13532]  exc_page_fault+0x54/0xc0
[  174.397009][T13532]  asm_exc_page_fault+0x26/0x30
[  174.401850][T13532] 
[  174.404160][T13532] value changed: 0xffff88810743cd41 -> 0xffff88810806d200
[  174.411258][T13532] 
[  174.413580][T13532] Reported by Kernel Concurrency Sanitizer on:
[  174.419735][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.6.3771 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) 
[  174.432228][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  174.442274][T13532] ==================================================================
[  175.081149][T10006] usb usb10-port6: unable to enumerate USB device