last executing test programs:

9m49.870022937s ago: executing program 32 (id=334):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1200000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r6, 0x0, 0xe}, 0x18)
semop(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x553, &(0x7f0000000480)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$key(0xf, 0x3, 0x2)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000006c0)=ANY=[], 0x841, 0x1)
llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000000, 0x8})

9m48.823328174s ago: executing program 33 (id=185):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x491, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_bp={0x0, 0x1}, 0x1000, 0x1, 0x0, 0x8, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$P9_RAUTH(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000180), 0x1, 0x42e, &(0x7f0000000940)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x1471c2, 0x1)
r1 = syz_io_uring_setup(0x514d, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x387}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x8031, 0xffffffffffffffff, 0x6a857000)
mount$9p_xen(&(0x7f0000000200), 0x0, 0x0, 0x200000, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
pipe(&(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r10, 0x0, '\x00', 0x0, r9, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x5, 0x6, 0x8108, r12, 0x9, '\x00', 0x0, r10, 0x5, 0x1, 0x1, 0x6, @value=r9, @void, @void, @value}, 0x50)
write$nci(r11, 0x0, 0xfffffeea)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xb3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000340), 0x8, 0x93, 0x8, 0x4efa423182ee171d, &(0x7f0000000380)}}, 0x10)

8m52.330648342s ago: executing program 34 (id=995):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18)
r1 = socket(0x1e, 0x4, 0x0)
socketpair(0x1d, 0x2, 0x3841, &(0x7f00000001c0))
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0)

8m39.88897866s ago: executing program 35 (id=1095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0)

8m31.499607333s ago: executing program 36 (id=1148):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x0, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x52, 0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20)

6m52.286705679s ago: executing program 4 (id=2578):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357)
close(r0)
r1 = socket(0x18, 0x0, 0x2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x44880)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)

6m51.457764162s ago: executing program 4 (id=2584):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000380)=""/181, 0xb5, 0x7f)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cfffe8000000000000000edffffffffff3200000000000000000000000000000001"], 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6m50.287208291s ago: executing program 4 (id=2593):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
umount2(&(0x7f0000000040)='./file0\x00', 0xd)

6m50.151462013s ago: executing program 4 (id=2595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r8], 0x3c}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e1b, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @local}}}], 0x20}}], 0x1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r9}, 0x18)
r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x4})
write$P9_RLERRORu(r3, 0x0, 0x53)

6m50.045488405s ago: executing program 4 (id=2596):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000086dbdd46"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r7)

6m49.877791757s ago: executing program 4 (id=2598):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001ac0)=@newtaction={0x74, 0x26, 0xffff, 0x70bd2b, 0x0, {}, [{0x60, 0x1, [@m_bpf={0x2c, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x74}}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
close(r0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1})

6m34.703476319s ago: executing program 37 (id=2598):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001ac0)=@newtaction={0x74, 0x26, 0xffff, 0x70bd2b, 0x0, {}, [{0x60, 0x1, [@m_bpf={0x2c, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x74}}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
close(r0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1})

5m14.66558099s ago: executing program 6 (id=3869):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r2)

5m14.586152851s ago: executing program 6 (id=3870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x78d7, 0x0, &(0x7f0000000080)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x8)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18)
syz_emit_ethernet(0x31e, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x2e8, 0x2c, 0x0, @remote, @local, {[@hopopts={0x32, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x86}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x3, [0x81, 0xe53, 0x5]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0xd6, 0x8, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xa2, 0x4, [0x7ff, 0x1, 0x1, 0x100000000, 0x9ab, 0x8]}}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}, @routing={0x88, 0xa, 0x0, 0x6, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast1, @empty]}, @fragment={0x32, 0x0, 0x4, 0x1, 0x0, 0x2, 0x65}, @dstopts={0x2, 0x1a, '\x00', [@ra={0x5, 0x2, 0x7fc0}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x0, [0x8, 0x2, 0x9, 0xffffffffffffffff, 0x8, 0xc, 0x200]}}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x36, 0x7c, "f41a506e23178dfe0605a8071b7ded27044835e9f3bbc36db112e99aacc73bbd51c9063501911da85a826bac8ae0075919e69fc5aa50975b92f4363de4ad7b241182eb982bac42eb32bb4efd0502e25ffb42be5c313636424505d5506f70c60479a8d187304dae1b2d8b1f8b451324b26edbc57778c2737d12535e5a"}]}, @hopopts={0x6b, 0x1c, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @pad1, @pad1, @generic={0x7, 0xb3, "93b509ed48b5d14a15677e7a5b1017a3b322d612ef7fb2bc55472b8f99206105221842e777427eb05119b6fa197a0b8843a8696debdad499ba36e84018fb741c0dd675343caa120d61b4232b10194dd60406fa5d78cb1669ac7da4441238ccce30f7e9721526ce392029f2bf80e1502639d8c058d62722e0fb79834e3dd645221f38650547836d7e61050ec63cec438ec9d914a5b8488c6ee81b22e5bd4a437e5be47a4a3995a37f7f17e50201cc5c38cd2fb8"}, @enc_lim={0x4, 0x1, 0xa}, @hao={0xc9, 0x10, @mcast2}]}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@generic={0x1, 0xf, "c14bbbf2a5a2893046ee190c50"}, @generic={0x22, 0xb, "dd1c1626e296f409e4"}]}}}}}}}}, 0x0)

5m14.502000113s ago: executing program 6 (id=3872):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'ip6tnl0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'veth0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_to_batadv\x00'}}, 0x1e)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'ip6tnl0\x00'}}, 0x1e) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'veth0\x00'}}, 0x1e) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_to_batadv\x00'}}, 0x1e) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async)

5m14.379009835s ago: executing program 6 (id=3874):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x82)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="00000004000000a70000004800400000008500000086000016bb5863cf14bd28f457ba1ce6b9f899ca6aef31ff6fc379db18ca07cb392dbfd19c23ac46"], &(0x7f0000000100)='GPL\x00', 0x1, 0x33, &(0x7f0000000180)=""/51, 0x61900, 0x14, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xd, 0x8, 0x549d}, 0x10, 0x174c2, r0, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0xa}, {0x5, 0x1, 0xe, 0xe}, {0x2, 0x2, 0xb, 0x1}, {0x1, 0x4}], 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @loopback}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @local}, 0xc)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000a00)='./bus\x00', 0x42a00, 0xccf7d364fd8f545)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
preadv2(r3, &(0x7f0000004000)=[{&(0x7f0000004040)=""/4096, 0x1000}], 0x1, 0x2000, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async)
openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) (async)
creat(&(0x7f0000000040)='./bus\x00', 0x82) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="00000004000000a70000004800400000008500000086000016bb5863cf14bd28f457ba1ce6b9f899ca6aef31ff6fc379db18ca07cb392dbfd19c23ac46"], &(0x7f0000000100)='GPL\x00', 0x1, 0x33, &(0x7f0000000180)=""/51, 0x61900, 0x14, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xd, 0x8, 0x549d}, 0x10, 0x174c2, r0, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0xa}, {0x5, 0x1, 0xe, 0xe}, {0x2, 0x2, 0xb, 0x1}, {0x1, 0x4}], 0x10, 0x0, @void, @value}, 0x94) (async)
socket$inet(0x2, 0x1, 0x0) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @local}, 0xc) (async)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async)
open(&(0x7f0000000a00)='./bus\x00', 0x42a00, 0xccf7d364fd8f545) (async)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
preadv2(r3, &(0x7f0000004000)=[{&(0x7f0000004040)=""/4096, 0x1000}], 0x1, 0x2000, 0x1, 0x0) (async)

5m14.311753936s ago: executing program 6 (id=3875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000)

5m10.158862642s ago: executing program 6 (id=3927):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340)=0x4)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000380)={0x0, 0x0, 0x10, r5, 0x5}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee}, 0x0)
r8 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket(0x25, 0x1, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x2017be01})

5m10.158647612s ago: executing program 38 (id=3927):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340)=0x4)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000380)={0x0, 0x0, 0x10, r5, 0x5}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee}, 0x0)
r8 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket(0x25, 0x1, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x2017be01})

4m7.171119753s ago: executing program 8 (id=5197):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m7.065595375s ago: executing program 8 (id=5204):
iopl(0x3)
eventfd2(0xfff, 0x60612bb324f0844b)

4m6.923055416s ago: executing program 8 (id=5212):
pipe2(&(0x7f0000000040), 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$mouse(&(0x7f0000000080), 0xfffffff7, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb}, 0x38)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

4m6.882166187s ago: executing program 8 (id=5216):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

4m6.292501787s ago: executing program 8 (id=5239):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x1d)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
close(r0)

4m6.05913486s ago: executing program 8 (id=5248):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff034}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aa0605302107d807ae590a7f08"], 0x0)

4m6.0554765s ago: executing program 39 (id=5248):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff034}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aa0605302107d807ae590a7f08"], 0x0)

3m57.525750576s ago: executing program 9 (id=5435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x78d7, 0x0, &(0x7f0000000080)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x8)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18)
syz_emit_ethernet(0x316, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x2e0, 0x2c, 0x0, @remote, @local, {[@hopopts={0x32, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x86}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x3, [0x81, 0xe53, 0x5]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0xd6, 0x8, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xa2, 0x4, [0x7ff, 0x1, 0x1, 0x100000000, 0x9ab, 0x8]}}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}, @routing={0x88, 0xa, 0x0, 0x6, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast1, @empty]}, @fragment={0x32, 0x0, 0x4, 0x1, 0x0, 0x2, 0x65}, @dstopts={0x2, 0x12, '\x00', [@ra={0x5, 0x2, 0x7fc0}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x36, 0x7c, "f41a506e23178dfe0605a8071b7ded27044835e9f3bbc36db112e99aacc73bbd51c9063501911da85a826bac8ae0075919e69fc5aa50975b92f4363de4ad7b241182eb982bac42eb32bb4efd0502e25ffb42be5c313636424505d5506f70c60479a8d187304dae1b2d8b1f8b451324b26edbc57778c2737d12535e5a"}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x9, 0x60, 0xfaa, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x6b, 0x1c, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @pad1, @pad1, @generic={0x7, 0xb3, "93b509ed48b5d14a15677e7a5b1017a3b322d612ef7fb2bc55472b8f99206105221842e777427eb05119b6fa197a0b8843a8696debdad499ba36e84018fb741c0dd675343caa120d61b4232b10194dd60406fa5d78cb1669ac7da4441238ccce30f7e9721526ce392029f2bf80e1502639d8c058d62722e0fb79834e3dd645221f38650547836d7e61050ec63cec438ec9d914a5b8488c6ee81b22e5bd4a437e5be47a4a3995a37f7f17e50201cc5c38cd2fb8"}, @enc_lim={0x4, 0x1, 0xa}, @hao={0xc9, 0x10, @mcast2}]}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@generic={0x1, 0xf, "c14bbbf2a5a2893046ee190c50"}, @generic={0x22, 0xb, "dd1c1626e296f409e4"}]}}}}}}}}, 0x0)

3m57.499769947s ago: executing program 9 (id=5445):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
bind$inet6(r0, 0x0, 0x0)

3m57.335737279s ago: executing program 9 (id=5439):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18)
r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000500)={{0x2, 0x4e22, @multicast1}, {0x6, @multicast}, 0x40, {0x2, 0x4e24, @remote}, 'vxcan1\x00'})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7})

3m57.073604163s ago: executing program 9 (id=5443):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

3m56.970858454s ago: executing program 9 (id=5448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10)

3m56.943159345s ago: executing program 9 (id=5450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

3m56.916840065s ago: executing program 40 (id=5450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

11.306616961s ago: executing program 3 (id=10024):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x3, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x4}, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20080, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001f40), 0x200000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x85ff}, 0x70)

11.233968352s ago: executing program 3 (id=10025):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x7}, 0x18)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba10000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r10) (async)
r11 = dup(r10)
write$UHID_INPUT(r11, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000130a010100737900010000000000000000000000000000000000200052dd4d5f55c40c3fdca0a95499bfa4f248a7954609d71c2c40381c4906f769902d64ab67e34d6fe0bf751547aeee1c7563970bc81807ebe7c8b8f54149e1c520817d03477cf030931a8d754a775656c2081aa91ddfd9f2f7b2389d98b817ffb0f2d949f066a58c92ea8dbed900eaca01e4b0ab5e15841489581cbef3bc35724040e651"], 0x20}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x100000000000000) (async)
close_range(r1, 0xffffffffffffffff, 0x100000000000000)

10.771108119s ago: executing program 3 (id=10030):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="01000000000000000000020000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)

10.590018942s ago: executing program 3 (id=10035):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x38}, 0x48, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@canfd={{0x4, 0x0, 0x1}, 0x2b, 0x3, 0x0, 0x0, "78930988d17961c458b0dc4c103d75d75d6342f318e8bc57d35d572ea723734c636e0ce13e0c119d791a4a20dd9d318fe464cb6a6e33f8b48c60bec8783c6c31"}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e2300004e2300000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000010000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000080000000000000000000000000000100000000000000000000000000000000000feffffff000000000a000400000000000000000048000200656362286300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089f0f5d545178d4a848b4d08e103e7dd4b04a14f1d80ebe182d835e08db6e2393cffc4a6178fdf9ad4dbcb6689e404d0c8ac3c559a3c952cacca462ff780e7d70f9cc0e7780dde713e8395647bc03cfaa0eb506be803080401004b3bb5035271ca77bc5cafaa9eb1ea68fc7997d5f3132067b8a82737ab5380335e419364e9540000000000000000000000000000007f346d548489b7f746459c98314fe9dc484a06b56654425059753506ca0f4ff3070e193cec"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x24060400)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
symlinkat(&(0x7f0000000300)='./file0\x00', r5, &(0x7f0000000400)='./file0/file0/file1\x00')
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x112f441, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

9.799114005s ago: executing program 3 (id=10052):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r2, &(0x7f00000011c0)=[{{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000c40)=""/95, 0x5f}, {0x0}, {0x0}, {0x0}], 0x4}, 0xa96}, {{0x0, 0x0, &(0x7f00000010c0)}, 0x10}], 0x2, 0x2002, 0x0)

9.273358013s ago: executing program 3 (id=10062):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r2, &(0x7f00000011c0)=[{{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000c40)=""/95, 0x5f}, {&(0x7f0000001240)=""/184, 0xb8}, {0x0}, {&(0x7f0000000980)=""/25, 0x19}, {&(0x7f0000001440)=""/160, 0xa0}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x6}, 0xa96}, {{0x0, 0x0, &(0x7f00000010c0)}, 0x10}], 0x2, 0x2002, 0x0)

9.213459684s ago: executing program 41 (id=10062):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r2, &(0x7f00000011c0)=[{{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000c40)=""/95, 0x5f}, {&(0x7f0000001240)=""/184, 0xb8}, {0x0}, {&(0x7f0000000980)=""/25, 0x19}, {&(0x7f0000001440)=""/160, 0xa0}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x6}, 0xa96}, {{0x0, 0x0, &(0x7f00000010c0)}, 0x10}], 0x2, 0x2002, 0x0)

1.426556318s ago: executing program 7 (id=10198):
unshare(0x22030200)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0xc008744c, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84080)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_enter(r4, 0x0, 0x10a5, 0x3, 0x0, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
ioprio_set$pid(0x3, 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
sendfile(r7, r7, 0x0, 0x7f03)
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001480)={0x2, 0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)=""/70, 0x46}, {0x0}], &(0x7f0000001440)=[0x2, 0x1]}, 0x20)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x1, 0x2, 0x9, r3}}, 0x1e)

1.191673441s ago: executing program 5 (id=10203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
pipe2(&(0x7f0000001cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733d8403"])

1.059107814s ago: executing program 1 (id=10204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x5}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.058501874s ago: executing program 1 (id=10205):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.021230754s ago: executing program 5 (id=10207):
r0 = socket(0x1e, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @remote, 0x380}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
creat(0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xa, 0xbb8, &(0x7f00000017c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
unshare(0x28000600)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
socket(0xa, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000200)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')

1.000633804s ago: executing program 1 (id=10208):
r0 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46")
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5)
sendfile(r4, r4, 0x0, 0xfffe80)

737.092959ms ago: executing program 2 (id=10210):
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0)

726.973139ms ago: executing program 0 (id=10211):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @loopback, 0x9}, r3, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18)

682.50749ms ago: executing program 0 (id=10212):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x10000000005}, 0x76)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd, 0x9, 0x10000000, 0xfffffff8, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0)

667.10924ms ago: executing program 0 (id=10213):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300), 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

627.8536ms ago: executing program 2 (id=10214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x7, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18130000", @ANYRES32=r0, @ANYBLOB="00000000000000008810fcff01000000180877c0940700000000000007000000"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x45, &(0x7f0000000580)=""/69, 0x41100, 0x60, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x5, 0x1}, 0x10, 0x0, r1, 0x5, &(0x7f0000000940)=[r0, r0, r0, r5, r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000980)=[{0x4, 0x3, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x0, 0x2, 0x9, 0x7}, {0x3, 0x1, 0x4, 0xc}, {0x0, 0x2, 0x7}], 0x10, 0x42, @void, @value}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = socket$inet6(0xa, 0x3, 0x8)
sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x28}}], 0x1, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x4, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

607.739951ms ago: executing program 0 (id=10215):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x18}, 0x0)

583.728921ms ago: executing program 5 (id=10216):
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
lstat(0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

557.545552ms ago: executing program 1 (id=10217):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = semget(0x2, 0x1, 0x0)
semctl$SETVAL(r0, 0x1bda4da68550cde1, 0x10, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x84, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8bb7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x10000}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x8c}}, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x80, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000004f0018110001", @ANYRES32=r4, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10)
sendmmsg(r8, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="96", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0xa8}}], 0x1, 0x0)
close(r8)
bind$can_j1939(r6, &(0x7f0000000f00)={0x1d, r7, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18)
socket(0x10, 0x803, 0x5)
bind$can_j1939(r6, &(0x7f000001f900)={0x1d, r7, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18)
socket(0x10, 0x3, 0x0)

513.142052ms ago: executing program 0 (id=10218):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8f, 0x0, 0x0, 0x80, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_bp={0x0}, 0xb4d0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000bc9df4cb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0, 0x0, 0xfffffffffffffffe}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='page_pool_update_nid\x00', r4, 0x0, 0x1000}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0xf7996000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18)
futimesat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680)={{0x77359400}})
sendfile(r2, r5, 0x0, 0xb)
fchdir(r3)
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

512.561922ms ago: executing program 5 (id=10219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

475.945003ms ago: executing program 7 (id=10220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae3b}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
setrlimit(0x9, 0x0)

453.329163ms ago: executing program 5 (id=10221):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'veth0_to_hsr\x00', @local})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x70bd2a, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '['}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0)

394.347514ms ago: executing program 7 (id=10222):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

345.088395ms ago: executing program 7 (id=10223):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @loopback, 0x9}, r3, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18)

255.155986ms ago: executing program 2 (id=10224):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x10000000005}, 0x76)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd, 0x9, 0x10000000, 0xfffffff8, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0)

243.644186ms ago: executing program 7 (id=10225):
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0)

205.804277ms ago: executing program 1 (id=10226):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64000000010000000000000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) (async)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64000000010000000000000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async)

205.442477ms ago: executing program 5 (id=10227):
r0 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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")
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5)
sendfile(r4, r4, 0x0, 0xfffe80)

134.895418ms ago: executing program 7 (id=10228):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@nodelalloc, 0x22}, {@journal_async_commit}, {@errors_remount}, {@noblock_validity}], [{@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@obj_user={'obj_user', 0x3d, '^'}}, {@fowner_lt}, {@appraise_type}, {@flag='sync'}]}, 0x1, 0x44e, &(0x7f0000000d80)="$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")
r0 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x3, 0xc, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x267}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x92, 0x7}}}}}]}}]}}, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0)
poll(0x0, 0x0, 0x1000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r4=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18)
sendmsg$inet(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/10}], 0x1000000000000108}, 0x121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x18fd62e8, 0x6}, {0x9ba7, 0x5}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="000001000130316471a153514979", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x180, 0x0, 0x148, 0x180, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bond_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x2]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x6bf40d95cad5dcdd, 0x508, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r5, 0x0, 0x6, 0xd7, &(0x7f00000001c0)="ca6e12d3b74a", &(0x7f0000000440)=""/215, 0x4ce5, 0x0, 0x95, 0xcf, &(0x7f0000000ac0)="abf2e0790fa5ffc99c4c943e822fa8e4b57212ebdf5c2981d80156ae9c206654b0cdafafaffd6cba3008707933dc419e582e5f005117865dba85a8b65ea5b6280c27a333fd1e171e49bbdaf41edc3302f244af6747e8e8b0db98c9c2d3e865ece11c41d21444aa0c8fcb785c796ba0ef5d4703aabf49ab5c692a2514f60a5ea5e766262823d082d07b7776e13250f19b01a04cfe19", &(0x7f0000000bc0)="c3538e2200c73a6ed37198fec96f56eb58797765d0943a91fef9ef36fa87386b58589108b90edc9c649a77d7eea7b2a3985cb92fcf4a4552791f4fde2ab0fbc487a808fed4d093bfde564be97c6198e855d3b0ecec9304d192d37996027559ce01df75605f2bde0b582a83a50b3fef03a432525d386f658fe9f17891f0cbaa303d08ee7a944c206ae688e861a90beb2696721bb2015e698f1399d59ac758aa58ea3e667523f5e37389f9d7b33e5be5a7da76d6c8f378da01150ac2cee589aa38b0a40d58a2ccfae46eef63562672d0", 0x3, 0x0, 0x791d}, 0x50)
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1)

132.191838ms ago: executing program 2 (id=10229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
sync()

82.468719ms ago: executing program 1 (id=10230):
r0 = socket(0x1e, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @remote, 0x380}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
creat(0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xa, 0xbb8, &(0x7f00000017c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
unshare(0x28000600)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r7 = socket(0xa, 0x2, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
close_range(r7, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000200)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')

36.74219ms ago: executing program 2 (id=10231):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

34.9353ms ago: executing program 0 (id=10232):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$inet6_udplite(0xa, 0x2, 0x88) (fail_nth: 9)

0s ago: executing program 2 (id=10233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="706f32f78a67a44325a016ba6e761c5fa52b3e7b5a73eef15582ca421ef8252b9b36b333569b644f37037acf891f34d5aa29405365c9ba431a3560d810561066e833", @ANYRES16=r0, @ANYRES16=r2, @ANYRES32=r0, @ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r2, r1, 0x0)
recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6, 0x0, 0x20000000}, 0x18)
setgroups(0x0, 0x0)

kernel console output (not intermixed with test programs):

  597.742783][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9310'.
[  597.754377][T28539] netlink: 'syz.2.9310': attribute type 5 has an invalid length.
[  597.953965][T28551] dummy0 speed is unknown, defaulting to 1000
[  598.008762][T28557] dummy0 speed is unknown, defaulting to 1000
[  598.037836][T28570] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  598.341996][T28580] can0: slcan on ttyS3.
[  598.386057][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9322'.
[  598.422097][T28583] FAULT_INJECTION: forcing a failure.
[  598.422097][T28583] name failslab, interval 1, probability 0, space 0, times 0
[  598.434818][T28583] CPU: 1 UID: 0 PID: 28583 Comm: syz.0.9324 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  598.434841][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  598.434852][T28583] Call Trace:
[  598.434857][T28583]  <TASK>
[  598.434864][T28583]  dump_stack_lvl+0xf6/0x150
[  598.434887][T28583]  dump_stack+0x15/0x1a
[  598.434900][T28583]  should_fail_ex+0x261/0x270
[  598.434918][T28583]  should_failslab+0x8f/0xb0
[  598.435011][T28583]  kmem_cache_alloc_noprof+0x59/0x340
[  598.435058][T28583]  ? getname_flags+0x81/0x3b0
[  598.435084][T28583]  getname_flags+0x81/0x3b0
[  598.435109][T28583]  __se_sys_fsconfig+0x5bf/0x9b0
[  598.435137][T28583]  __x64_sys_fsconfig+0x67/0x80
[  598.435161][T28583]  x64_sys_call+0x3af/0x2e10
[  598.435203][T28583]  do_syscall_64+0xc9/0x1c0
[  598.435250][T28583]  ? clear_bhb_loop+0x25/0x80
[  598.435271][T28583]  ? clear_bhb_loop+0x25/0x80
[  598.435292][T28583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.435340][T28583] RIP: 0033:0x7ff6e4f5d169
[  598.435358][T28583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.435385][T28583] RSP: 002b:00007ff6e35bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  598.435404][T28583] RAX: ffffffffffffffda RBX: 00007ff6e5175fa0 RCX: 00007ff6e4f5d169
[  598.435415][T28583] RDX: 0000200000000400 RSI: 0000000000000003 RDI: 0000000000000006
[  598.435427][T28583] RBP: 00007ff6e35bf090 R08: 0000000000000000 R09: 0000000000000000
[  598.435438][T28583] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  598.435517][T28583] R13: 0000000000000000 R14: 00007ff6e5175fa0 R15: 00007ffff430ccd8
[  598.435588][T28583]  </TASK>
[  598.657472][T28579] can0 (unregistered): slcan off ttyS3.
[  598.975474][T28620] 9pnet_fd: Insufficient options for proto=fd
[  599.761398][T28670] xt_hashlimit: size too large, truncated to 1048576
[  600.218906][   T29] kauditd_printk_skb: 326 callbacks suppressed
[  600.218926][   T29] audit: type=1400 audit(2000000455.863:30633): avc:  denied  { write } for  pid=28690 comm="syz.0.9367" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  600.277386][   T29] audit: type=1400 audit(2000000455.893:30634): avc:  denied  { open } for  pid=28690 comm="syz.0.9367" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  600.301752][   T29] audit: type=1400 audit(2000000455.893:30635): avc:  denied  { read } for  pid=28690 comm="syz.0.9367" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  600.476369][T28696] netlink: 'syz.1.9368': attribute type 4 has an invalid length.
[  600.484549][T28696] netlink: 'syz.1.9368': attribute type 4 has an invalid length.
[  600.688013][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9371'.
[  600.698360][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9371'.
[  600.712556][T28702] 9p: Unknown access argument „: -22
[  600.848806][T28710] program syz.0.9375 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  600.858453][T28710] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  600.939836][   T29] audit: type=1400 audit(2000000456.583:30636): avc:  denied  { write } for  pid=28711 comm="syz.3.9372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  600.982091][   T29] audit: type=1326 audit(2000000456.623:30637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.005943][   T29] audit: type=1326 audit(2000000456.623:30638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.029613][   T29] audit: type=1326 audit(2000000456.623:30639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.053357][   T29] audit: type=1326 audit(2000000456.623:30640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.077027][   T29] audit: type=1326 audit(2000000456.623:30641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.100824][   T29] audit: type=1326 audit(2000000456.623:30642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.0.9376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  601.149518][T28715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.176326][T28718] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  601.193325][T28715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.253527][T28715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.339945][T28715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.449389][T28715] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.480602][T28715] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.507381][T28715] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.543354][T28715] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.852125][T28728] loop0: detected capacity change from 0 to 2048
[  601.919197][T28732] netlink: 'syz.2.9379': attribute type 4 has an invalid length.
[  601.932840][T28732] netlink: 'syz.2.9379': attribute type 4 has an invalid length.
[  601.954080][T28728] syz.0.9382: attempt to access beyond end of device
[  601.954080][T28728] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  602.028028][T28741] program syz.0.9386 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  602.037685][T28741] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  602.209867][T28760] netlink: 'syz.0.9395': attribute type 4 has an invalid length.
[  602.230229][T28760] netlink: 'syz.0.9395': attribute type 4 has an invalid length.
[  602.261088][T28764] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  602.321183][T28768] program syz.1.9399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  602.337685][T28768] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  602.587991][T28779] can: request_module (can-proto-0) failed.
[  602.769194][T28791] netlink: 'syz.3.9408': attribute type 4 has an invalid length.
[  602.805733][T28791] netlink: 'syz.3.9408': attribute type 4 has an invalid length.
[  602.845169][T28789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9404'.
[  603.280304][T28819] ieee802154 phy0 wpan0: encryption failed: -22
[  603.314441][T28819] syzkaller1: entered promiscuous mode
[  603.320064][T28819] syzkaller1: entered allmulticast mode
[  603.331471][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9419'.
[  603.409399][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9419'.
[  603.431849][T28821] 9p: Unknown access argument „: -22
[  603.922464][T28847] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  604.011659][T28853] loop0: detected capacity change from 0 to 764
[  604.426660][T28884] loop0: detected capacity change from 0 to 1024
[  604.477896][T28884] EXT4-fs: Ignoring removed nobh option
[  604.483540][T28884] EXT4-fs: Ignoring removed bh option
[  604.549579][T28881] program syz.1.9443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  604.660405][T28884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.717595][T28884] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.9444: Allocating blocks 385-513 which overlap fs metadata
[  604.741022][T28898] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9446'.
[  604.820740][T28883] EXT4-fs (loop0): pa ffff888106988af0: logic 16, phys. 129, len 24
[  604.828914][T28883] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[  604.881914][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.284037][T28927] loop5: detected capacity change from 0 to 2048
[  605.293376][   T29] kauditd_printk_skb: 282 callbacks suppressed
[  605.293392][   T29] audit: type=1400 audit(2000000460.933:30925): avc:  denied  { kexec_image_load } for  pid=28928 comm="syz.1.9461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  605.392610][T28932] syz.5.9460: attempt to access beyond end of device
[  605.392610][T28932] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  605.533193][   T29] audit: type=1400 audit(2000000461.173:30926): avc:  denied  { write } for  pid=28939 comm="syz.1.9464" name="rt_acct" dev="proc" ino=4026533064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  605.610780][   T29] audit: type=1400 audit(2000000461.253:30927): avc:  denied  { mounton } for  pid=28939 comm="syz.1.9464" path="/352/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  605.673498][   T29] audit: type=1326 audit(2000000461.313:30928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.674628][T28934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.697118][   T29] audit: type=1326 audit(2000000461.313:30929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.741670][T28934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.809542][   T29] audit: type=1326 audit(2000000461.373:30930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.833231][   T29] audit: type=1326 audit(2000000461.373:30931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.856967][   T29] audit: type=1326 audit(2000000461.373:30932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.880564][   T29] audit: type=1326 audit(2000000461.373:30933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.887992][T28946] loop0: detected capacity change from 0 to 1024
[  605.904247][   T29] audit: type=1326 audit(2000000461.373:30934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28941 comm="syz.1.9465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  605.975198][T28946] EXT4-fs: Ignoring removed nobh option
[  605.980933][T28946] EXT4-fs: Ignoring removed bh option
[  606.019188][T28946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.062220][T28944] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.9466: Allocating blocks 385-513 which overlap fs metadata
[  606.114431][T28943] EXT4-fs (loop0): pa ffff8881068be460: logic 16, phys. 129, len 24
[  606.122595][T28943] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[  606.240016][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.303307][T28961] can: request_module (can-proto-0) failed.
[  606.389015][T28964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9472'.
[  606.413948][T28964] SELinux:  Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped).
[  606.534777][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9473'.
[  606.619139][T28979] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  606.949685][T29007] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.9488'.
[  606.959071][T29007] netlink: zone id is out of range
[  606.964208][T29007] netlink: zone id is out of range
[  606.969454][T29007] netlink: zone id is out of range
[  606.974635][T29007] netlink: zone id is out of range
[  606.979849][T29007] netlink: zone id is out of range
[  606.987621][T29006] ªªªªªª: renamed from veth0_to_hsr (while UP)
[  606.993889][T29007] netlink: zone id is out of range
[  606.993897][T29007] netlink: zone id is out of range
[  606.993964][T29007] netlink: zone id is out of range
[  607.026013][T29007] netlink: zone id is out of range
[  607.169731][T29012] can: request_module (can-proto-0) failed.
[  607.306301][T29023] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9493'.
[  607.324436][T29019] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9493'.
[  607.399765][T29028] loop5: detected capacity change from 0 to 512
[  607.436745][T29028] EXT4-fs: Ignoring removed mblk_io_submit option
[  607.450981][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9491'.
[  607.481202][T29028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.501943][T29025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9496'.
[  607.523414][T29036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9499'.
[  607.555445][T29028] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.601799][T29028] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.9497: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  607.627639][T28890] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap
[  607.671279][T29028] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  607.730407][T29028] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.9497: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  607.817367][T29028] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  607.826530][T29028] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.9497: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  607.848019][T29028] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.9497: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  607.921092][T29028] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  607.968660][T29028] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.9497: Failed to acquire dquot type 1
[  608.026630][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.067430][T29070] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[  608.067430][T29070]    program syz.5.9511 not setting count and/or reply_len properly
[  608.089344][T29076] program syz.0.9512 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  608.100890][T29076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  608.150443][T29080] can: request_module (can-proto-0) failed.
[  608.170462][T29083] syzkaller1: entered promiscuous mode
[  608.176012][T29083] syzkaller1: entered allmulticast mode
[  608.315364][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9520'.
[  608.366863][T29094] loop0: detected capacity change from 0 to 764
[  608.383591][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9520'.
[  608.408685][T29096] 9p: Unknown access argument „: -22
[  608.521528][T29104] program syz.1.9523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  608.532770][T29104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  608.639028][T29108] FAULT_INJECTION: forcing a failure.
[  608.639028][T29108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.652172][T29108] CPU: 1 UID: 0 PID: 29108 Comm: syz.1.9525 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  608.652203][T29108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  608.652218][T29108] Call Trace:
[  608.652226][T29108]  <TASK>
[  608.652234][T29108]  dump_stack_lvl+0xf6/0x150
[  608.652259][T29108]  dump_stack+0x15/0x1a
[  608.652277][T29108]  should_fail_ex+0x261/0x270
[  608.652334][T29108]  should_fail+0xb/0x10
[  608.652355][T29108]  should_fail_usercopy+0x1a/0x20
[  608.652383][T29108]  _copy_from_user+0x1c/0xa0
[  608.652413][T29108]  io_submit_one+0x56/0x1230
[  608.652442][T29108]  ? __se_sys_io_submit+0x6f/0x280
[  608.652499][T29108]  __se_sys_io_submit+0xf7/0x280
[  608.652517][T29108]  __x64_sys_io_submit+0x43/0x50
[  608.652533][T29108]  x64_sys_call+0xa8b/0x2e10
[  608.652595][T29108]  do_syscall_64+0xc9/0x1c0
[  608.652617][T29108]  ? clear_bhb_loop+0x25/0x80
[  608.652702][T29108]  ? clear_bhb_loop+0x25/0x80
[  608.652765][T29108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.652800][T29108] RIP: 0033:0x7f0c68fdd169
[  608.652812][T29108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.652830][T29108] RSP: 002b:00007f0c6763f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  608.652851][T29108] RAX: ffffffffffffffda RBX: 00007f0c691f5fa0 RCX: 00007f0c68fdd169
[  608.652865][T29108] RDX: 0000200000000140 RSI: 0000000000000002 RDI: 00007f0c67595000
[  608.652879][T29108] RBP: 00007f0c6763f090 R08: 0000000000000000 R09: 0000000000000000
[  608.652892][T29108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.652903][T29108] R13: 0000000000000000 R14: 00007f0c691f5fa0 R15: 00007ffd3a104f58
[  608.652987][T29108]  </TASK>
[  608.832210][T29113] loop0: detected capacity change from 0 to 1024
[  608.838890][T29113] EXT4-fs: Ignoring removed nobh option
[  608.844477][T29113] EXT4-fs: Ignoring removed bh option
[  608.868808][T29113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.994446][T29113] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.9527: Allocating blocks 385-513 which overlap fs metadata
[  609.031591][T29111] EXT4-fs (loop0): pa ffff8881068be460: logic 16, phys. 129, len 24
[  609.039774][T29111] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[  609.073535][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.122570][T29138] program syz.0.9536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  609.170094][T29138] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  609.514324][T29152] dummy0 speed is unknown, defaulting to 1000
[  609.679155][T29169] loop5: detected capacity change from 0 to 8192
[  609.759088][T29152] chnl_net:caif_netlink_parms(): no params data found
[  609.797776][T29169]  loop5: p2 p3 p4
[  609.804217][T29169] loop5: p2 start 32769 is beyond EOD, truncated
[  609.810652][T29169] loop5: p3 start 458496 is beyond EOD, truncated
[  609.817074][T29169] loop5: p4 start 198639616 is beyond EOD, truncated
[  609.831311][T29152] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.838497][T29152] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.846085][T29152] bridge_slave_0: entered allmulticast mode
[  609.852849][T29152] bridge_slave_0: entered promiscuous mode
[  609.859873][T29152] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.861458][T29182] loop0: detected capacity change from 0 to 2048
[  609.866921][T29152] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.880622][T29152] bridge_slave_1: entered allmulticast mode
[  609.886928][T29152] bridge_slave_1: entered promiscuous mode
[  609.889087][T29183] program syz.5.9547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  609.916600][T29152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.939216][T29152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.994473][T29176] program syz.3.9548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  610.016279][T29152] team0: Port device team_slave_0 added
[  610.022974][T29152] team0: Port device team_slave_1 added
[  610.070330][T29152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.070906][T29182] syz.0.9550: attempt to access beyond end of device
[  610.070906][T29182] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  610.077330][T29152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.116759][T29152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.164906][T29152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.171935][T29152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.198047][T29152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.348384][T29152] hsr_slave_0: entered promiscuous mode
[  610.354766][T29152] hsr_slave_1: entered promiscuous mode
[  610.360881][T29152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  610.377424][T29152] Cannot create hsr debugfs directory
[  610.387627][T29201] veth0_macvtap: left promiscuous mode
[  610.551201][T29152] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.582599][   T29] kauditd_printk_skb: 270 callbacks suppressed
[  610.582612][   T29] audit: type=1400 audit(2000000466.223:31203): avc:  denied  { mounton } for  pid=29221 comm="syz.1.9565" path="/379/file0" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  610.621148][T29152] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.637401][   T29] audit: type=1400 audit(2000000466.263:31204): avc:  denied  { mount } for  pid=29221 comm="syz.1.9565" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  610.659614][   T29] audit: type=1400 audit(2000000466.263:31205): avc:  denied  { setattr } for  pid=29221 comm="syz.1.9565" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  610.718268][T29152] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.737303][   T29] audit: type=1400 audit(2000000466.293:31206): avc:  denied  { unmount } for  pid=24590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  610.772458][T29220] dummy0 speed is unknown, defaulting to 1000
[  610.778709][   T29] audit: type=1326 audit(2000000466.413:31207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  610.802364][   T29] audit: type=1326 audit(2000000466.413:31208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  610.826008][   T29] audit: type=1326 audit(2000000466.413:31209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  610.849645][   T29] audit: type=1326 audit(2000000466.413:31210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  610.873221][   T29] audit: type=1326 audit(2000000466.413:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  610.947959][T29152] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.005962][   T29] audit: type=1326 audit(2000000466.423:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.1.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  611.094648][T29152] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  611.114121][T29152] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  611.130419][T29236] can: request_module (can-proto-0) failed.
[  611.143715][T29152] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  611.155358][T29152] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  611.266059][T29152] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.320182][T29152] 8021q: adding VLAN 0 to HW filter on device team0
[  611.338893][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.345978][ T4907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.357828][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.364969][ T4907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.412914][T29152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  611.423470][T29152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  611.529176][T29258] __nla_validate_parse: 7 callbacks suppressed
[  611.529191][T29258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9571'.
[  611.569824][T29263] program syz.3.9580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  611.572299][T29152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.761096][T29152] veth0_vlan: entered promiscuous mode
[  611.789707][T29152] veth1_vlan: entered promiscuous mode
[  611.829235][T29152] veth0_macvtap: entered promiscuous mode
[  611.856383][T29283] loop0: detected capacity change from 0 to 2048
[  611.858493][T29152] veth1_macvtap: entered promiscuous mode
[  611.897562][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.908108][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.917985][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.928462][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.938324][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.943878][T29286] syz.0.9585: attempt to access beyond end of device
[  611.943878][T29286] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  611.948786][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.948805][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.948822][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.948839][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.948856][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.948873][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.023588][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.033480][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.043914][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.053776][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.064239][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.076403][T29152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.084978][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.095465][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.105353][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.115876][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.125742][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.136393][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.146245][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.156746][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.166561][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.177008][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.186823][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.197666][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.207496][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.217998][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.227931][T29152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.238348][T29152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.273478][T29152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.316715][T29152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.325555][T29152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.334391][T29152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.343127][T29152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.381065][T29298] syzkaller1: entered promiscuous mode
[  612.386569][T29298] syzkaller1: entered allmulticast mode
[  612.442236][T29305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9593'.
[  612.442418][T29308] FAULT_INJECTION: forcing a failure.
[  612.442418][T29308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.464244][T29308] CPU: 0 UID: 0 PID: 29308 Comm: syz.5.9589 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  612.464272][T29308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  612.464289][T29308] Call Trace:
[  612.464296][T29308]  <TASK>
[  612.464305][T29308]  dump_stack_lvl+0xf6/0x150
[  612.464328][T29308]  dump_stack+0x15/0x1a
[  612.464344][T29308]  should_fail_ex+0x261/0x270
[  612.464371][T29308]  should_fail+0xb/0x10
[  612.464391][T29308]  should_fail_usercopy+0x1a/0x20
[  612.464416][T29308]  _copy_from_iter+0xd8/0xd10
[  612.464507][T29308]  ? _copy_from_iter+0x16c/0xd10
[  612.464533][T29308]  copy_page_from_iter+0x14f/0x280
[  612.464558][T29308]  skb_copy_datagram_from_iter+0x23b/0x490
[  612.464584][T29308]  tun_get_user+0x1172/0x2670
[  612.464611][T29308]  ? _parse_integer+0x27/0x30
[  612.464670][T29308]  ? check_zeroed_user+0x150/0x190
[  612.464697][T29308]  ? ref_tracker_alloc+0x1ff/0x310
[  612.464800][T29308]  tun_chr_write_iter+0x188/0x240
[  612.464833][T29308]  vfs_write+0x79b/0x950
[  612.464890][T29308]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  612.464925][T29308]  ksys_write+0xeb/0x1b0
[  612.464958][T29308]  __x64_sys_write+0x42/0x50
[  612.465061][T29308]  x64_sys_call+0x2a45/0x2e10
[  612.465078][T29308]  do_syscall_64+0xc9/0x1c0
[  612.465100][T29308]  ? clear_bhb_loop+0x25/0x80
[  612.465119][T29308]  ? clear_bhb_loop+0x25/0x80
[  612.465212][T29308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.465246][T29308] RIP: 0033:0x7f7979cfd169
[  612.465260][T29308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  612.465297][T29308] RSP: 002b:00007f7978346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.465317][T29308] RAX: ffffffffffffffda RBX: 00007f7979f16080 RCX: 00007f7979cfd169
[  612.465332][T29308] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003
[  612.465399][T29308] RBP: 00007f7978346090 R08: 0000000000000000 R09: 0000000000000000
[  612.465415][T29308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.465496][T29308] R13: 0000000000000001 R14: 00007f7979f16080 R15: 00007ffc27d66008
[  612.465518][T29308]  </TASK>
[  612.466514][T29305] 9p: Unknown access argument „: -22
[  612.711080][T29312] can: request_module (can-proto-0) failed.
[  612.817804][T29319] netlink: 'syz.1.9598': attribute type 4 has an invalid length.
[  612.841483][T29319] netlink: 'syz.1.9598': attribute type 4 has an invalid length.
[  613.049473][T29345] netlink: 3 bytes leftover after parsing attributes in process `gtp'.
[  613.060394][T29312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9595'.
[  613.069503][T29345] 0ªX¹¦À: renamed from caif0
[  613.082826][T29345] 0ªX¹¦À: entered allmulticast mode
[  613.088146][T29345] net_ratelimit: 6 callbacks suppressed
[  613.088159][T29345] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  613.207872][T29355] netlink: 'syz.1.9611': attribute type 4 has an invalid length.
[  613.239761][T29355] netlink: 'syz.1.9611': attribute type 4 has an invalid length.
[  613.300834][T29353] dummy0 speed is unknown, defaulting to 1000
[  613.462803][T29373] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  613.578461][T29377] FAULT_INJECTION: forcing a failure.
[  613.578461][T29377] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  613.591767][T29377] CPU: 1 UID: 0 PID: 29377 Comm: syz.1.9619 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  613.591790][T29377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  613.591805][T29377] Call Trace:
[  613.591811][T29377]  <TASK>
[  613.591818][T29377]  dump_stack_lvl+0xf6/0x150
[  613.591843][T29377]  dump_stack+0x15/0x1a
[  613.591859][T29377]  should_fail_ex+0x261/0x270
[  613.591951][T29377]  should_fail_alloc_page+0xfd/0x110
[  613.591972][T29377]  __alloc_frozen_pages_noprof+0x11e/0x340
[  613.592010][T29377]  alloc_pages_mpol+0xb6/0x260
[  613.592040][T29377]  vma_alloc_folio_noprof+0x1a2/0x310
[  613.592077][T29377]  handle_mm_fault+0xdd9/0x2b10
[  613.592101][T29377]  ? __rcu_read_lock+0x36/0x50
[  613.592126][T29377]  ? __pte_offset_map_lock+0x1d3/0x290
[  613.592217][T29377]  __get_user_pages+0xf64/0x2350
[  613.592258][T29377]  __gup_longterm_locked+0x943/0xfb0
[  613.592308][T29377]  ? down_read_killable+0x174/0x6b0
[  613.592335][T29377]  ? __import_iovec+0x316/0x540
[  613.592364][T29377]  ? down_read+0x179/0x4e0
[  613.592391][T29377]  pin_user_pages_remote+0x81/0xc0
[  613.592470][T29377]  process_vm_rw+0x4c2/0x8a0
[  613.592500][T29377]  ? kstrtouint+0x7b/0xc0
[  613.592533][T29377]  ? ksys_write+0x180/0x1b0
[  613.592628][T29377]  __x64_sys_process_vm_writev+0x7a/0x90
[  613.592657][T29377]  x64_sys_call+0xaf3/0x2e10
[  613.592679][T29377]  do_syscall_64+0xc9/0x1c0
[  613.592706][T29377]  ? clear_bhb_loop+0x25/0x80
[  613.592741][T29377]  ? clear_bhb_loop+0x25/0x80
[  613.592789][T29377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.592857][T29377] RIP: 0033:0x7f0c68fdd169
[  613.592894][T29377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  613.592931][T29377] RSP: 002b:00007f0c6763f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  613.592952][T29377] RAX: ffffffffffffffda RBX: 00007f0c691f5fa0 RCX: 00007f0c68fdd169
[  613.592966][T29377] RDX: 000000000000002b RSI: 0000200000c22000 RDI: 00000000000003be
[  613.593031][T29377] RBP: 00007f0c6763f090 R08: 0000000000000001 R09: 0000000000000000
[  613.593095][T29377] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000001
[  613.593108][T29377] R13: 0000000000000000 R14: 00007f0c691f5fa0 R15: 00007ffd3a104f58
[  613.593127][T29377]  </TASK>
[  613.911200][T29383] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  614.046012][T29397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9625'.
[  614.082847][T29397] 9p: Unknown access argument „: -22
[  614.123150][T29404] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  614.314577][T29417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.392564][T29417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.412545][T29421] loop0: detected capacity change from 0 to 512
[  614.426026][T29421] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.9634: corrupted in-inode xattr: invalid ea_ino
[  614.452291][T29426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9636'.
[  614.490010][T29421] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.9634: couldn't read orphan inode 15 (err -117)
[  614.505715][T29417] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  614.557716][T29421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.576533][T29417] team0: Failed to send options change via netlink (err -105)
[  614.625294][T29417] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  614.704730][T29417] team0: Port device netdevsim1 removed
[  614.742281][T29417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.834931][T29417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.907206][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9634'.
[  614.916177][T29447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9634'.
[  614.997472][T29417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.094134][T29417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.169096][T29417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.334960][T29417] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.438991][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.468111][T29453] loop5: detected capacity change from 0 to 8192
[  615.508822][T29453]  loop5: p2 p3 p4
[  615.512612][T29453] loop5: p2 start 32769 is beyond EOD, truncated
[  615.519019][T29453] loop5: p3 start 458496 is beyond EOD, truncated
[  615.525456][T29453] loop5: p4 start 198639616 is beyond EOD, truncated
[  615.540129][T29464] program syz.0.9648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  615.601277][   T29] kauditd_printk_skb: 223 callbacks suppressed
[  615.601293][   T29] audit: type=1326 audit(2000000471.213:31436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.631339][   T29] audit: type=1326 audit(2000000471.213:31437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.655158][   T29] audit: type=1326 audit(2000000471.213:31438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.679044][   T29] audit: type=1326 audit(2000000471.213:31439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.702917][   T29] audit: type=1326 audit(2000000471.213:31440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.726659][   T29] audit: type=1326 audit(2000000471.213:31441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.750541][   T29] audit: type=1326 audit(2000000471.213:31442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.754343][T29462] 9p: Unknown access argument „: -22
[  615.774113][   T29] audit: type=1326 audit(2000000471.213:31443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.774144][   T29] audit: type=1326 audit(2000000471.213:31444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.826804][   T29] audit: type=1326 audit(2000000471.213:31445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  615.943022][T29473] loop0: detected capacity change from 0 to 1024
[  615.973661][T29473] EXT4-fs: Ignoring removed nobh option
[  615.979352][T29473] EXT4-fs: Ignoring removed bh option
[  616.107384][T29473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.136496][T29473] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.9653: Allocating blocks 385-513 which overlap fs metadata
[  616.155356][T29472] EXT4-fs (loop0): pa ffff888106988af0: logic 16, phys. 129, len 24
[  616.163428][T29472] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[  616.195941][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.259688][T29484] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.266918][T29484] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.578322][T29484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.601364][T29484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.655571][T29484] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.664753][T29484] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.673905][T29484] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.682880][T29484] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.684467][T29501] loop0: detected capacity change from 0 to 2048
[  616.889714][T29510] loop5: detected capacity change from 0 to 512
[  616.906172][T29510] EXT4-fs (loop5): orphan cleanup on readonly fs
[  616.918475][T29510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9664: bg 0: block 248: padding at end of block bitmap is not set
[  616.952504][T29501] syz.0.9662: attempt to access beyond end of device
[  616.952504][T29501] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  616.977131][T29510] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.9664: Failed to acquire dquot type 1
[  617.012988][T29515] netlink: 'syz.1.9668': attribute type 4 has an invalid length.
[  617.027725][T29510] EXT4-fs (loop5): 1 truncate cleaned up
[  617.059788][T29515] netlink: 'syz.1.9668': attribute type 4 has an invalid length.
[  617.083594][T29510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  617.138361][T29527] netlink: 'syz.1.9672': attribute type 39 has an invalid length.
[  617.148898][T29526] netlink: 'syz.1.9672': attribute type 39 has an invalid length.
[  617.177636][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.194598][T29530] can: request_module (can-proto-0) failed.
[  617.395830][T29530] __nla_validate_parse: 3 callbacks suppressed
[  617.395851][T29530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9673'.
[  617.466547][T29546] loop5: detected capacity change from 0 to 512
[  617.519008][T29546] ext3: Unknown parameter 'nodelalloc"journal_async_commit'
[  617.582618][T29550] Timeout policy `syz0' can only be used by L4 protocol number 33
[  617.606903][T29549] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.614160][T29549] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.652257][T29554] FAULT_INJECTION: forcing a failure.
[  617.652257][T29554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  617.665439][T29554] CPU: 1 UID: 0 PID: 29554 Comm: syz.0.9678 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  617.665473][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  617.665489][T29554] Call Trace:
[  617.665497][T29554]  <TASK>
[  617.665506][T29554]  dump_stack_lvl+0xf6/0x150
[  617.665580][T29554]  dump_stack+0x15/0x1a
[  617.665601][T29554]  should_fail_ex+0x261/0x270
[  617.665625][T29554]  should_fail+0xb/0x10
[  617.665646][T29554]  should_fail_usercopy+0x1a/0x20
[  617.665672][T29554]  strncpy_from_user+0x25/0x230
[  617.665780][T29554]  ? kstrtouint_from_user+0xbf/0x100
[  617.665802][T29554]  path_setxattrat+0xef/0x320
[  617.665841][T29554]  __x64_sys_fsetxattr+0x6d/0x80
[  617.665865][T29554]  x64_sys_call+0x2bad/0x2e10
[  617.665967][T29554]  do_syscall_64+0xc9/0x1c0
[  617.665996][T29554]  ? clear_bhb_loop+0x25/0x80
[  617.666022][T29554]  ? clear_bhb_loop+0x25/0x80
[  617.666044][T29554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.666066][T29554] RIP: 0033:0x7ff6e4f5d169
[  617.666157][T29554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  617.666176][T29554] RSP: 002b:00007ff6e35bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  617.666196][T29554] RAX: ffffffffffffffda RBX: 00007ff6e5175fa0 RCX: 00007ff6e4f5d169
[  617.666208][T29554] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000005
[  617.666220][T29554] RBP: 00007ff6e35bf090 R08: 0000000000000000 R09: 0000000000000000
[  617.666233][T29554] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001
[  617.666319][T29554] R13: 0000000000000000 R14: 00007ff6e5175fa0 R15: 00007ffff430ccd8
[  617.666337][T29554]  </TASK>
[  617.906706][T29549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.917093][T29549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.954519][T29549] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.963580][T29549] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.972626][T29549] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.981735][T29549] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.088408][T29563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9682'.
[  618.278864][T29572] can: request_module (can-proto-0) failed.
[  618.455838][T29572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9687'.
[  618.927013][T29579] vlan2: entered allmulticast mode
[  619.130650][T29595] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9693'.
[  619.140842][T29589] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9693'.
[  619.219578][T29603] can: request_module (can-proto-0) failed.
[  619.525895][T29603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9699'.
[  620.202639][T29658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.211187][T29658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.430936][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9721'.
[  620.440336][T29658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9721'.
[  620.538872][T29677] loop5: detected capacity change from 0 to 128
[  620.552137][T29679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9729'.
[  620.562375][T29677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.570977][T29677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.604649][T29679] 9p: Unknown access argument „: -22
[  620.827956][   T29] kauditd_printk_skb: 436 callbacks suppressed
[  620.827988][   T29] audit: type=1400 audit(2000000476.473:31880): avc:  denied  { getopt } for  pid=29694 comm="syz.1.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  621.040964][   T29] audit: type=1326 audit(2000000476.683:31881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.082654][T29710] No such timeout policy "syz0"
[  621.098152][   T29] audit: type=1326 audit(2000000476.703:31882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.121824][   T29] audit: type=1326 audit(2000000476.703:31883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.145441][   T29] audit: type=1326 audit(2000000476.703:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.169157][   T29] audit: type=1326 audit(2000000476.703:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.192806][   T29] audit: type=1326 audit(2000000476.703:31886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.216447][   T29] audit: type=1326 audit(2000000476.703:31887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.240125][   T29] audit: type=1326 audit(2000000476.703:31888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.263695][   T29] audit: type=1326 audit(2000000476.703:31889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29707 comm="syz.2.9737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4a2d169 code=0x7ffc0000
[  621.311565][T29712] can: request_module (can-proto-0) failed.
[  621.732765][T29727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9745'.
[  621.781812][T29727] 9p: Unknown access argument „: -22
[  622.702209][T29768] loop0: detected capacity change from 0 to 2048
[  622.743074][T29768] syz.0.9762: attempt to access beyond end of device
[  622.743074][T29768] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  622.804982][T29770] __nla_validate_parse: 3 callbacks suppressed
[  622.805004][T29770] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9761'.
[  622.858655][T29771] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9761'.
[  622.895050][T29770] gretap0: entered promiscuous mode
[  622.902353][T29771] 0ªX¹¦D: renamed from gretap0
[  622.933426][T29771] 0ªX¹¦D: left promiscuous mode
[  622.938335][T29771] 0ªX¹¦D: entered allmulticast mode
[  622.944882][T29771] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  623.009091][T29773] program syz.0.9763 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  623.101378][T29775] can: request_module (can-proto-0) failed.
[  623.196426][T29778] loop0: detected capacity change from 0 to 2048
[  623.241440][T29780] netlink: 'syz.0.9766': attribute type 4 has an invalid length.
[  623.279680][T29780] netlink: 'syz.0.9766': attribute type 4 has an invalid length.
[  623.353601][T29783] loop0: detected capacity change from 0 to 256
[  623.418882][T29783] dummy0 speed is unknown, defaulting to 1000
[  623.617919][T29775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9764'.
[  623.695934][T29788] dummy0 speed is unknown, defaulting to 1000
[  623.933056][T29801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9773'.
[  623.999285][T29811] netlink: 'syz.2.9777': attribute type 4 has an invalid length.
[  624.041668][T29811] netlink: 'syz.2.9777': attribute type 4 has an invalid length.
[  624.379574][T29838] 9p: Unknown access argument „: -22
[  624.464881][T29844] netlink: 'syz.0.9789': attribute type 4 has an invalid length.
[  624.493380][T29844] netlink: 'syz.0.9789': attribute type 4 has an invalid length.
[  624.552724][T29847] can: request_module (can-proto-0) failed.
[  624.883680][T24590] block device autoloading is deprecated and will be removed.
[  624.899605][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9790'.
[  624.992841][T29874] ªªªªªª: renamed from veth0_to_hsr
[  625.019404][T29878] program syz.1.9800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  625.032956][T29876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9799'.
[  625.053167][T29876] netlink: 'syz.5.9799': attribute type 280 has an invalid length.
[  625.093638][T29883] program syz.1.9801 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  625.389257][T29909] program syz.1.9811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  625.469783][T29912] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9812'.
[  625.479648][T29911] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9812'.
[  625.732245][T29924] program syz.2.9815 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  625.798254][T29919] vhci_hcd: default hub control req: a100 v0000 i0000 l0
[  625.848211][   T29] kauditd_printk_skb: 238 callbacks suppressed
[  625.848227][   T29] audit: type=1400 audit(2000000481.493:32126): avc:  denied  { search } for  pid=29933 comm="syz.0.9820" name="/" dev="configfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  625.876906][   T29] audit: type=1400 audit(2000000481.493:32127): avc:  denied  { read } for  pid=29933 comm="syz.0.9820" name="/" dev="configfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  625.899192][   T29] audit: type=1400 audit(2000000481.493:32128): avc:  denied  { open } for  pid=29933 comm="syz.0.9820" path="/" dev="configfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  625.908244][T29936] loop0: detected capacity change from 0 to 1024
[  625.930831][T29936] EXT4-fs: Ignoring removed nobh option
[  625.936490][T29936] journal_path: Lookup failure for './bus'
[  625.942428][T29936] EXT4-fs: error: could not find journal device path
[  625.978283][T29940] loop5: detected capacity change from 0 to 512
[  625.994643][   T29] audit: type=1326 audit(2000000481.633:32129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.3.9822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46dd169 code=0x0
[  626.021157][T29940] EXT4-fs (loop5): orphan cleanup on readonly fs
[  626.030480][T29943] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9821'.
[  626.041449][T29943] netlink: 'syz.0.9821': attribute type 5 has an invalid length.
[  626.049212][T29943] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9821'.
[  626.061030][T29940] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9823: bg 0: block 248: padding at end of block bitmap is not set
[  626.090144][T29940] Quota error (device loop5): write_blk: dquota write failed
[  626.097589][T29940] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  626.107547][T29940] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.9823: Failed to acquire dquot type 1
[  626.118878][   T29] audit: type=1400 audit(2000000481.753:32130): avc:  denied  { mount } for  pid=29935 comm="syz.0.9821" name="/" dev="ramfs" ino=107101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  626.145719][T29940] EXT4-fs (loop5): 1 truncate cleaned up
[  626.160736][T29940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  626.233614][T29949] loop2: detected capacity change from 0 to 128
[  626.244033][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.337304][   T29] audit: type=1400 audit(2000000481.973:32131): avc:  denied  { tracepoint } for  pid=29958 comm="syz.5.9830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  626.518104][   T29] audit: type=1326 audit(2000000482.043:32132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29913 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7fc00000
[  626.602604][   T29] audit: type=1326 audit(2000000482.243:32133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29962 comm="syz.1.9832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c68fdd169 code=0x7ffc0000
[  626.731543][T29971] program syz.1.9835 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  626.937135][T29983] loop0: detected capacity change from 0 to 2048
[  626.990487][T29989] 9pnet_fd: Insufficient options for proto=fd
[  627.011657][T29989] loop5: detected capacity change from 0 to 1024
[  627.020629][T29989] 9pnet_fd: Insufficient options for proto=fd
[  627.123486][T29983] syz.0.9841: attempt to access beyond end of device
[  627.123486][T29983] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  627.253359][T30013] program syz.1.9850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.053926][T30135] macvlan2: entered promiscuous mode
[  628.059321][T30135] bridge0: entered promiscuous mode
[  628.069683][T30135] bridge0: port 3(macvlan2) entered blocking state
[  628.076366][T30135] bridge0: port 3(macvlan2) entered disabled state
[  628.085394][T30135] macvlan2: entered allmulticast mode
[  628.090833][T30135] bridge0: entered allmulticast mode
[  628.098552][T30135] macvlan2: left allmulticast mode
[  628.103725][T30135] bridge0: left allmulticast mode
[  628.115372][T30135] bridge0: left promiscuous mode
[  628.178831][T30149] program syz.5.9862 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.246727][T30160] vhci_hcd: invalid port number 15
[  628.252045][T30160] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  628.312172][T30168] loop2: detected capacity change from 0 to 512
[  628.336385][T30168] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  628.364767][T30168] EXT4-fs (loop2): orphan cleanup on readonly fs
[  628.373783][T30168] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9866: invalid indirect mapped block 256 (level 2)
[  628.395303][T30168] EXT4-fs (loop2): 2 truncates cleaned up
[  628.401636][T30168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  628.490171][T30180] __nla_validate_parse: 2 callbacks suppressed
[  628.490187][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9872'.
[  628.505398][T30180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9872'.
[  628.517288][T30180] FAULT_INJECTION: forcing a failure.
[  628.517288][T30180] name failslab, interval 1, probability 0, space 0, times 0
[  628.529926][T30180] CPU: 1 UID: 0 PID: 30180 Comm: syz.5.9872 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  628.529954][T30180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  628.529968][T30180] Call Trace:
[  628.529975][T30180]  <TASK>
[  628.529983][T30180]  dump_stack_lvl+0xf6/0x150
[  628.530001][T30180]  dump_stack+0x15/0x1a
[  628.530056][T30180]  should_fail_ex+0x261/0x270
[  628.530081][T30180]  should_failslab+0x8f/0xb0
[  628.530101][T30180]  __kvmalloc_node_noprof+0x12c/0x520
[  628.530126][T30180]  ? alloc_netdev_mqs+0xa5/0xab0
[  628.530143][T30180]  ? __pfx_wg_setup+0x10/0x10
[  628.530236][T30180]  alloc_netdev_mqs+0xa5/0xab0
[  628.530250][T30180]  ? snprintf+0x8c/0xb0
[  628.530270][T30180]  rtnl_create_link+0x232/0x720
[  628.530305][T30180]  rtnl_newlink_create+0x135/0x5e0
[  628.530379][T30180]  rtnl_newlink+0xeea/0x1280
[  628.530400][T30180]  ? perf_trace_buf_update+0xac/0xe0
[  628.530469][T30180]  ? perf_tp_event+0x9ca/0xa00
[  628.530487][T30180]  ? page_counter_cancel+0xec/0x1f0
[  628.530533][T30180]  ? __rcu_read_unlock+0x4e/0x70
[  628.530556][T30180]  ? __rcu_read_unlock+0x4e/0x70
[  628.530582][T30180]  ? avc_has_perm_noaudit+0x1cc/0x210
[  628.530609][T30180]  ? selinux_capable+0x1f9/0x260
[  628.530643][T30180]  ? security_capable+0x81/0x90
[  628.530730][T30180]  ? ns_capable+0x7d/0xb0
[  628.530755][T30180]  ? __pfx_rtnl_newlink+0x10/0x10
[  628.530843][T30180]  rtnetlink_rcv_msg+0x65a/0x740
[  628.530867][T30180]  ? avc_has_perm_noaudit+0x1cc/0x210
[  628.530899][T30180]  netlink_rcv_skb+0x12f/0x230
[  628.531001][T30180]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  628.531080][T30180]  rtnetlink_rcv+0x1c/0x30
[  628.531101][T30180]  netlink_unicast+0x605/0x6c0
[  628.531129][T30180]  netlink_sendmsg+0x609/0x720
[  628.531196][T30180]  ? __pfx_netlink_sendmsg+0x10/0x10
[  628.531219][T30180]  __sock_sendmsg+0x140/0x180
[  628.531241][T30180]  ____sys_sendmsg+0x350/0x4e0
[  628.531308][T30180]  __sys_sendmsg+0x1a0/0x240
[  628.531371][T30180]  __x64_sys_sendmsg+0x46/0x50
[  628.531393][T30180]  x64_sys_call+0x26f3/0x2e10
[  628.531415][T30180]  do_syscall_64+0xc9/0x1c0
[  628.531510][T30180]  ? clear_bhb_loop+0x25/0x80
[  628.531531][T30180]  ? clear_bhb_loop+0x25/0x80
[  628.531553][T30180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.531635][T30180] RIP: 0033:0x7f7979cfd169
[  628.531649][T30180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  628.531669][T30180] RSP: 002b:00007f7978367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.531703][T30180] RAX: ffffffffffffffda RBX: 00007f7979f15fa0 RCX: 00007f7979cfd169
[  628.531716][T30180] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  628.531784][T30180] RBP: 00007f7978367090 R08: 0000000000000000 R09: 0000000000000000
[  628.531793][T30180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.531803][T30180] R13: 0000000000000000 R14: 00007f7979f15fa0 R15: 00007ffc27d66008
[  628.531817][T30180]  </TASK>
[  628.895456][T30187] program syz.5.9874 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.924518][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9866'.
[  628.933479][T30168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9866'.
[  628.944892][T30191] No such timeout policy "syz0"
[  628.957003][T30189] bond1: entered promiscuous mode
[  628.962287][T30189] bond1: entered allmulticast mode
[  628.967657][T30189] 8021q: adding VLAN 0 to HW filter on device bond1
[  628.980009][T30189] bond1 (unregistering): Released all slaves
[  629.053826][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.218077][T30217] program syz.2.9885 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  629.265304][T30220] can: request_module (can-proto-0) failed.
[  629.511709][T30232] dummy0 speed is unknown, defaulting to 1000
[  629.572079][T30220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9886'.
[  629.861526][T30262] loop2: detected capacity change from 0 to 2048
[  629.896512][ T3376] IPVS: starting estimator thread 0...
[  629.923148][T30271] FAULT_INJECTION: forcing a failure.
[  629.923148][T30271] name failslab, interval 1, probability 0, space 0, times 0
[  629.935922][T30271] CPU: 1 UID: 0 PID: 30271 Comm: syz.1.9902 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  629.935956][T30271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  629.935972][T30271] Call Trace:
[  629.935979][T30271]  <TASK>
[  629.935988][T30271]  dump_stack_lvl+0xf6/0x150
[  629.936015][T30271]  dump_stack+0x15/0x1a
[  629.936034][T30271]  should_fail_ex+0x261/0x270
[  629.936060][T30271]  should_failslab+0x8f/0xb0
[  629.936081][T30271]  kmem_cache_alloc_noprof+0x59/0x340
[  629.936113][T30271]  ? alloc_empty_file+0x78/0x200
[  629.936144][T30271]  ? _raw_spin_unlock+0x26/0x50
[  629.936183][T30271]  alloc_empty_file+0x78/0x200
[  629.936230][T30271]  alloc_file_pseudo+0xcb/0x160
[  629.936267][T30271]  __shmem_file_setup+0x1bb/0x1f0
[  629.936297][T30271]  shmem_zero_setup+0x63/0xe0
[  629.936318][T30271]  mmap_region+0xebb/0x1630
[  629.936361][T30271]  do_mmap+0x9ef/0xc80
[  629.936404][T30271]  vm_mmap_pgoff+0x16d/0x2d0
[  629.936439][T30271]  ksys_mmap_pgoff+0xd0/0x340
[  629.936468][T30271]  ? fpregs_assert_state_consistent+0x83/0xa0
[  629.936498][T30271]  x64_sys_call+0x1945/0x2e10
[  629.936521][T30271]  do_syscall_64+0xc9/0x1c0
[  629.936546][T30271]  ? clear_bhb_loop+0x25/0x80
[  629.936570][T30271]  ? clear_bhb_loop+0x25/0x80
[  629.936594][T30271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.936617][T30271] RIP: 0033:0x7f0c68fdd169
[  629.936640][T30271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.936661][T30271] RSP: 002b:00007f0c6763f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  629.936681][T30271] RAX: ffffffffffffffda RBX: 00007f0c691f5fa0 RCX: 00007f0c68fdd169
[  629.936695][T30271] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000200000000000
[  629.936709][T30271] RBP: 00007f0c6763f090 R08: ffffffffffffffff R09: 0000000000000000
[  629.936723][T30271] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001
[  629.936737][T30271] R13: 0000000000000000 R14: 00007f0c691f5fa0 R15: 00007ffd3a104f58
[  629.936758][T30271]  </TASK>
[  629.967562][T30262] syz.2.9900: attempt to access beyond end of device
[  629.967562][T30262] loop2: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  630.037849][T30268] IPVS: using max 2448 ests per chain, 122400 per kthread
[  630.217159][T30283] program syz.1.9905 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  630.248141][T30285] ip6tnl0: Master is either lo or non-ether device
[  630.299211][T30285] loop5: detected capacity change from 0 to 1024
[  630.322731][T30285] EXT4-fs: Ignoring removed nobh option
[  630.328442][T30285] EXT4-fs: Ignoring removed bh option
[  630.353040][T30297] can: request_module (can-proto-0) failed.
[  630.380303][T30285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.441598][T30308] loop2: detected capacity change from 0 to 512
[  630.479939][T30308] EXT4-fs (loop2): orphan cleanup on readonly fs
[  630.486973][T30308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9913: bg 0: block 248: padding at end of block bitmap is not set
[  630.519542][T30308] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.9913: Failed to acquire dquot type 1
[  630.538239][T30308] EXT4-fs (loop2): 1 truncate cleaned up
[  630.545110][T30308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  630.560749][T30308] tipc: Started in network mode
[  630.565775][T30308] tipc: Node identity ac14140f, cluster identity 4711
[  630.572906][T30308] tipc: New replicast peer: 255.0.0.255
[  630.573715][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.578505][T30308] tipc: Enabled bearer <udp:ree>, priority 10
[  630.602457][T30313] loop0: detected capacity change from 0 to 1024
[  630.620153][T30313] EXT4-fs: Ignoring removed nobh option
[  630.625743][T30313] EXT4-fs: Ignoring removed bh option
[  630.631972][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.663007][T30313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.684336][T30321] program syz.2.9917 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  630.702549][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.714997][T30318] loop5: detected capacity change from 0 to 2048
[  630.781828][T30318] syz.5.9915: attempt to access beyond end of device
[  630.781828][T30318] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  630.864425][T30333] loop5: detected capacity change from 0 to 1024
[  630.914625][T30333] EXT4-fs: Ignoring removed nobh option
[  630.920287][T30333] EXT4-fs: Ignoring removed bh option
[  630.944294][T30341] program syz.0.9925 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  630.969272][T30333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.072645][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.097100][T30352] loop2: detected capacity change from 0 to 2048
[  631.188677][T30297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9910'.
[  631.213730][T30355] syz.2.9930: attempt to access beyond end of device
[  631.213730][T30355] loop2: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  631.243070][   T29] kauditd_printk_skb: 385 callbacks suppressed
[  631.243085][   T29] audit: type=1400 audit(2000000486.883:32517): avc:  denied  { mount } for  pid=30356 comm="syz.5.9932" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  631.321894][   T29] audit: type=1400 audit(2000000486.883:32518): avc:  denied  { read } for  pid=30356 comm="syz.5.9932" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  631.345485][   T29] audit: type=1400 audit(2000000486.883:32519): avc:  denied  { open } for  pid=30356 comm="syz.5.9932" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  631.369366][   T29] audit: type=1400 audit(2000000486.883:32520): avc:  denied  { ioctl } for  pid=30356 comm="syz.5.9932" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  631.394791][   T29] audit: type=1326 audit(2000000486.933:32521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.418472][   T29] audit: type=1326 audit(2000000486.933:32522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.442096][   T29] audit: type=1326 audit(2000000486.933:32523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.465898][   T29] audit: type=1326 audit(2000000486.933:32524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.489602][   T29] audit: type=1326 audit(2000000486.933:32525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.513307][   T29] audit: type=1326 audit(2000000486.933:32526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30361 comm="syz.0.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  631.548674][T30370] 9p: Unknown access argument „: -22
[  631.587458][T18821] tipc: Node number set to 2886997007
[  631.637448][T30383] loop5: detected capacity change from 0 to 512
[  631.656437][T30383] EXT4-fs (loop5): orphan cleanup on readonly fs
[  631.695607][T30383] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9942: bg 0: block 248: padding at end of block bitmap is not set
[  631.717997][T30383] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.9942: Failed to acquire dquot type 1
[  631.742072][T30383] EXT4-fs (loop5): 1 truncate cleaned up
[  631.767568][T30383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  631.865144][T30394] dummy0 speed is unknown, defaulting to 1000
[  631.890448][T30396] tipc: Enabling of bearer <udp:ree> rejected, already enabled
[  631.908738][T30393] syzkaller1: entered promiscuous mode
[  631.914401][T30393] syzkaller1: entered allmulticast mode
[  632.074548][T30403] FAULT_INJECTION: forcing a failure.
[  632.074548][T30403] name failslab, interval 1, probability 0, space 0, times 0
[  632.087273][T30403] CPU: 0 UID: 0 PID: 30403 Comm: syz.3.9948 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  632.087302][T30403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  632.087315][T30403] Call Trace:
[  632.087322][T30403]  <TASK>
[  632.087329][T30403]  dump_stack_lvl+0xf6/0x150
[  632.087351][T30403]  dump_stack+0x15/0x1a
[  632.087367][T30403]  should_fail_ex+0x261/0x270
[  632.087385][T30403]  should_failslab+0x8f/0xb0
[  632.087404][T30403]  kmem_cache_alloc_noprof+0x59/0x340
[  632.087436][T30403]  ? alloc_empty_file+0x78/0x200
[  632.087461][T30403]  ? _raw_spin_unlock+0x26/0x50
[  632.087496][T30403]  alloc_empty_file+0x78/0x200
[  632.087519][T30403]  alloc_file_pseudo+0xcb/0x160
[  632.087540][T30403]  __shmem_file_setup+0x1bb/0x1f0
[  632.087559][T30403]  shmem_zero_setup+0x63/0xe0
[  632.087582][T30403]  mmap_region+0xebb/0x1630
[  632.087626][T30403]  do_mmap+0x9ef/0xc80
[  632.087658][T30403]  vm_mmap_pgoff+0x16d/0x2d0
[  632.087695][T30403]  ksys_mmap_pgoff+0xd0/0x340
[  632.087713][T30403]  ? fpregs_assert_state_consistent+0x83/0xa0
[  632.087742][T30403]  x64_sys_call+0x1945/0x2e10
[  632.087758][T30403]  do_syscall_64+0xc9/0x1c0
[  632.087784][T30403]  ? clear_bhb_loop+0x25/0x80
[  632.087807][T30403]  ? clear_bhb_loop+0x25/0x80
[  632.087828][T30403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.087848][T30403] RIP: 0033:0x7fa3e46dd169
[  632.087860][T30403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  632.087875][T30403] RSP: 002b:00007fa3e2d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  632.087890][T30403] RAX: ffffffffffffffda RBX: 00007fa3e48f5fa0 RCX: 00007fa3e46dd169
[  632.087899][T30403] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000200000000000
[  632.087910][T30403] RBP: 00007fa3e2d47090 R08: ffffffffffffffff R09: 0000000000000000
[  632.087923][T30403] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001
[  632.087935][T30403] R13: 0000000000000000 R14: 00007fa3e48f5fa0 R15: 00007ffd4b5f6dc8
[  632.087953][T30403]  </TASK>
[  632.341312][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.467060][T30416] loop5: detected capacity change from 0 to 2048
[  632.540135][T30420] 9pnet_fd: Insufficient options for proto=fd
[  632.540578][T30425] loop0: detected capacity change from 0 to 2048
[  632.591688][T30416] syz.5.9953: attempt to access beyond end of device
[  632.591688][T30416] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  632.629752][T30429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.643659][T30431] netlink: 'syz.5.9959': attribute type 4 has an invalid length.
[  632.679790][T30429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.752258][T30429] team0: Port device netdevsim1 removed
[  632.761874][T30429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.795641][T30441] loop2: detected capacity change from 0 to 256
[  632.804697][T30441] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  632.830500][T30429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.855848][T30446] FAULT_INJECTION: forcing a failure.
[  632.855848][T30446] name failslab, interval 1, probability 0, space 0, times 0
[  632.868640][T30446] CPU: 0 UID: 0 PID: 30446 Comm: syz.2.9965 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  632.868671][T30446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  632.868685][T30446] Call Trace:
[  632.868693][T30446]  <TASK>
[  632.868701][T30446]  dump_stack_lvl+0xf6/0x150
[  632.868725][T30446]  dump_stack+0x15/0x1a
[  632.868826][T30446]  should_fail_ex+0x261/0x270
[  632.868850][T30446]  should_failslab+0x8f/0xb0
[  632.868870][T30446]  kmem_cache_alloc_noprof+0x59/0x340
[  632.868899][T30446]  ? audit_log_start+0x363/0x6d0
[  632.868918][T30446]  audit_log_start+0x363/0x6d0
[  632.868936][T30446]  ? audit_log_end+0x1d0/0x1e0
[  632.868956][T30446]  audit_seccomp+0x4b/0x130
[  632.869062][T30446]  __seccomp_filter+0x694/0x10e0
[  632.869098][T30446]  __secure_computing+0x7e/0x160
[  632.869123][T30446]  syscall_trace_enter+0xcf/0x1f0
[  632.869197][T30446]  ? fpregs_assert_state_consistent+0x83/0xa0
[  632.869231][T30446]  do_syscall_64+0xaa/0x1c0
[  632.869336][T30446]  ? clear_bhb_loop+0x25/0x80
[  632.869359][T30446]  ? clear_bhb_loop+0x25/0x80
[  632.869381][T30446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.869403][T30446] RIP: 0033:0x7fd0e4a2bb7c
[  632.869418][T30446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  632.869513][T30446] RSP: 002b:00007fd0e3097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  632.869533][T30446] RAX: ffffffffffffffda RBX: 00007fd0e4c45fa0 RCX: 00007fd0e4a2bb7c
[  632.869586][T30446] RDX: 000000000000000f RSI: 00007fd0e30970a0 RDI: 0000000000000006
[  632.869599][T30446] RBP: 00007fd0e3097090 R08: 0000000000000000 R09: 0000000000000000
[  632.869612][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.869624][T30446] R13: 0000000000000000 R14: 00007fd0e4c45fa0 R15: 00007ffd216f7488
[  632.869643][T30446]  </TASK>
[  633.096833][T30429] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.114180][T30429] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.128672][T30429] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.159680][T30429] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.170715][T30453] loop2: detected capacity change from 0 to 256
[  633.178821][T30453] vfat: Unknown parameter 'n|numtail'
[  633.188553][T30453] syz.2.9968: attempt to access beyond end of device
[  633.188553][T30453] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  633.218735][T30455] loop5: detected capacity change from 0 to 2048
[  633.312828][T30472] can: request_module (can-proto-0) failed.
[  633.323445][T30455] syz.5.9969: attempt to access beyond end of device
[  633.323445][T30455] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  633.577684][T30502] gre0: entered allmulticast mode
[  633.638521][T30510] 9p: Unknown access argument „: -22
[  633.659412][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9975'.
[  633.837989][T30522] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  633.856298][T30529] loop0: detected capacity change from 0 to 512
[  633.865544][ T3375] Process accounting resumed
[  633.899905][T30529] EXT4-fs (loop0): orphan cleanup on readonly fs
[  633.910645][T30533] loop2: detected capacity change from 0 to 512
[  633.917751][T30529] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9998: bg 0: block 248: padding at end of block bitmap is not set
[  633.935498][T30529] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.9998: Failed to acquire dquot type 1
[  633.951780][T30533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.965074][T30529] EXT4-fs (loop0): 1 truncate cleaned up
[  633.967752][T30533] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  633.973381][T30529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  634.013700][T30529] tipc: Started in network mode
[  634.018654][T30529] tipc: Node identity ac14140f, cluster identity 4711
[  634.035145][T30529] tipc: New replicast peer: 255.0.0.255
[  634.040798][T30529] tipc: Enabled bearer <udp:ree>, priority 10
[  634.110238][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.164574][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.244411][T30549] FAULT_INJECTION: forcing a failure.
[  634.244411][T30549] name failslab, interval 1, probability 0, space 0, times 0
[  634.257069][T30549] CPU: 0 UID: 0 PID: 30549 Comm: syz.0.10004 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  634.257119][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  634.257132][T30549] Call Trace:
[  634.257140][T30549]  <TASK>
[  634.257148][T30549]  dump_stack_lvl+0xf6/0x150
[  634.257172][T30549]  dump_stack+0x15/0x1a
[  634.257189][T30549]  should_fail_ex+0x261/0x270
[  634.257213][T30549]  should_failslab+0x8f/0xb0
[  634.257277][T30549]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[  634.257307][T30549]  ? avc_has_perm_noaudit+0x1cc/0x210
[  634.257337][T30549]  ? set_secret+0x99/0x240
[  634.257358][T30549]  ? should_fail_ex+0xd7/0x270
[  634.257381][T30549]  kmemdup_noprof+0x2b/0x70
[  634.257526][T30549]  set_secret+0x99/0x240
[  634.257547][T30549]  ceph_key_preparse+0x171/0x220
[  634.257571][T30549]  __key_create_or_update+0x2ad/0x780
[  634.257599][T30549]  key_create_or_update+0x42/0x60
[  634.257620][T30549]  __se_sys_add_key+0x2a1/0x330
[  634.257764][T30549]  ? fput+0x99/0xd0
[  634.257870][T30549]  __x64_sys_add_key+0x67/0x80
[  634.257896][T30549]  x64_sys_call+0x1f10/0x2e10
[  634.257918][T30549]  do_syscall_64+0xc9/0x1c0
[  634.257946][T30549]  ? clear_bhb_loop+0x25/0x80
[  634.257968][T30549]  ? clear_bhb_loop+0x25/0x80
[  634.258077][T30549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.258132][T30549] RIP: 0033:0x7ff6e4f5d169
[  634.258147][T30549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.258167][T30549] RSP: 002b:00007ff6e35bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  634.258186][T30549] RAX: ffffffffffffffda RBX: 00007ff6e5175fa0 RCX: 00007ff6e4f5d169
[  634.258200][T30549] RDX: 0000200000000bc0 RSI: 0000000000000000 RDI: 0000200000000040
[  634.258213][T30549] RBP: 00007ff6e35bf090 R08: 000000000afb65d8 R09: 0000000000000000
[  634.258226][T30549] R10: 000000000000012d R11: 0000000000000246 R12: 0000000000000001
[  634.258244][T30549] R13: 0000000000000000 R14: 00007ff6e5175fa0 R15: 00007ffff430ccd8
[  634.258309][T30549]  </TASK>
[  634.547619][T30555] FAULT_INJECTION: forcing a failure.
[  634.547619][T30555] name failslab, interval 1, probability 0, space 0, times 0
[  634.560363][T30555] CPU: 0 UID: 0 PID: 30555 Comm: syz.5.10006 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  634.560395][T30555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  634.560409][T30555] Call Trace:
[  634.560415][T30555]  <TASK>
[  634.560423][T30555]  dump_stack_lvl+0xf6/0x150
[  634.560463][T30555]  dump_stack+0x15/0x1a
[  634.560480][T30555]  should_fail_ex+0x261/0x270
[  634.560535][T30555]  should_failslab+0x8f/0xb0
[  634.560555][T30555]  __kvmalloc_node_noprof+0x12c/0x520
[  634.560584][T30555]  ? newary+0xf7/0x520
[  634.560654][T30555]  newary+0xf7/0x520
[  634.560680][T30555]  ipcget+0x338/0x500
[  634.560701][T30555]  __x64_sys_semget+0xfd/0x130
[  634.560728][T30555]  x64_sys_call+0x2793/0x2e10
[  634.560809][T30555]  do_syscall_64+0xc9/0x1c0
[  634.560836][T30555]  ? clear_bhb_loop+0x25/0x80
[  634.560938][T30555]  ? clear_bhb_loop+0x25/0x80
[  634.560960][T30555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.561001][T30555] RIP: 0033:0x7f7979cfd169
[  634.561016][T30555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.561036][T30555] RSP: 002b:00007f7978367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040
[  634.561056][T30555] RAX: ffffffffffffffda RBX: 00007f7979f15fa0 RCX: 00007f7979cfd169
[  634.561201][T30555] RDX: 0000000000000000 RSI: 0000004000000009 RDI: 0000000000000000
[  634.561214][T30555] RBP: 00007f7978367090 R08: 0000000000000000 R09: 0000000000000000
[  634.561227][T30555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.561240][T30555] R13: 0000000000000000 R14: 00007f7979f15fa0 R15: 00007ffc27d66008
[  634.561335][T30555]  </TASK>
[  634.770855][T30566] tipc: New replicast peer: 10.1.1.2
[  634.776222][T30566] tipc: Enabled bearer <udp:syz0>, priority 10
[  634.802491][T30570] program syz.1.10012 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  634.848038][T30578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10017'.
[  635.074758][T30595] program syz.2.10023 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  635.151423][T30599] FAULT_INJECTION: forcing a failure.
[  635.151423][T30599] name failslab, interval 1, probability 0, space 0, times 0
[  635.164073][T30599] CPU: 0 UID: 0 PID: 30599 Comm: syz.2.10026 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  635.164102][T30599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  635.164113][T30599] Call Trace:
[  635.164118][T30599]  <TASK>
[  635.164124][T30599]  dump_stack_lvl+0xf6/0x150
[  635.164149][T30599]  dump_stack+0x15/0x1a
[  635.164161][T30599]  should_fail_ex+0x261/0x270
[  635.164180][T30599]  should_failslab+0x8f/0xb0
[  635.164200][T30599]  kmem_cache_alloc_noprof+0x59/0x340
[  635.164224][T30599]  ? mas_alloc_nodes+0x1e3/0x490
[  635.164255][T30599]  mas_alloc_nodes+0x1e3/0x490
[  635.164286][T30599]  mas_preallocate+0x48d/0x6b0
[  635.164314][T30599]  __split_vma+0x24d/0x6a0
[  635.164338][T30599]  vma_modify+0x1a2/0x200
[  635.164359][T30599]  vma_modify_flags+0xf3/0x120
[  635.164386][T30599]  mprotect_fixup+0x323/0x600
[  635.164415][T30599]  do_mprotect_pkey+0x6ce/0x9a0
[  635.164438][T30599]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  635.164465][T30599]  __x64_sys_mprotect+0x48/0x60
[  635.164489][T30599]  x64_sys_call+0x272f/0x2e10
[  635.164505][T30599]  do_syscall_64+0xc9/0x1c0
[  635.164532][T30599]  ? clear_bhb_loop+0x25/0x80
[  635.164554][T30599]  ? clear_bhb_loop+0x25/0x80
[  635.164572][T30599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.164588][T30599] RIP: 0033:0x7fd0e4a2d169
[  635.164600][T30599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.164614][T30599] RSP: 002b:00007fd0e3097038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  635.164629][T30599] RAX: ffffffffffffffda RBX: 00007fd0e4c45fa0 RCX: 00007fd0e4a2d169
[  635.164639][T30599] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000
[  635.164651][T30599] RBP: 00007fd0e3097090 R08: 0000000000000000 R09: 0000000000000000
[  635.164661][T30599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.164669][T30599] R13: 0000000000000000 R14: 00007fd0e4c45fa0 R15: 00007ffd216f7488
[  635.164683][T30599]  </TASK>
[  635.436087][T30604] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  635.475632][T30604] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  635.497129][T30606] program syz.1.10028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  635.777282][ T3373] tipc: Node number set to 2886997007
[  635.788170][T30627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10034'.
[  635.797301][T30627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10034'.
[  635.834976][T30634] dns_resolver: Unsupported content type (2)
[  635.844630][ T3373] IPVS: starting estimator thread 0...
[  635.947393][T30637] IPVS: using max 2160 ests per chain, 108000 per kthread
[  635.971938][T30651] loop2: detected capacity change from 0 to 512
[  635.999506][T30651] EXT4-fs (loop2): orphan cleanup on readonly fs
[  636.019848][T30632] dummy0 speed is unknown, defaulting to 1000
[  636.021327][T30651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10042: bg 0: block 248: padding at end of block bitmap is not set
[  636.055567][T30656] loop5: detected capacity change from 0 to 2048
[  636.093201][T30651] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.10042: Failed to acquire dquot type 1
[  636.128604][T30651] EXT4-fs (loop2): 1 truncate cleaned up
[  636.139539][T30651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  636.368238][T30668] netlink: 'syz.0.10047': attribute type 4 has an invalid length.
[  636.396521][T30651] tipc: Enabling of bearer <udp:ree> rejected, already enabled
[  636.414613][T30670] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10048'.
[  636.443870][T30671] syz.5.10043: attempt to access beyond end of device
[  636.443870][T30671] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  636.480421][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.534640][   T29] kauditd_printk_skb: 541 callbacks suppressed
[  636.534655][   T29] audit: type=1400 audit(2000000492.173:33060): avc:  denied  { unmount } for  pid=28330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  636.614073][   T29] audit: type=1326 audit(2000000492.223:33061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.637862][   T29] audit: type=1326 audit(2000000492.223:33062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.661554][   T29] audit: type=1326 audit(2000000492.223:33063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.685375][   T29] audit: type=1326 audit(2000000492.223:33064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.709234][   T29] audit: type=1326 audit(2000000492.223:33065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.732940][   T29] audit: type=1326 audit(2000000492.223:33066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.756955][   T29] audit: type=1326 audit(2000000492.223:33067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.781017][   T29] audit: type=1326 audit(2000000492.233:33068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.804744][   T29] audit: type=1326 audit(2000000492.233:33069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30680 comm="syz.5.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7979cfd169 code=0x7ffc0000
[  636.916539][T30694] loop5: detected capacity change from 0 to 512
[  636.940643][T30694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  636.997006][T30704] loop2: detected capacity change from 0 to 2048
[  637.010375][T30694] EXT4-fs (loop5): 1 orphan inode deleted
[  637.016170][T30694] EXT4-fs (loop5): 1 truncate cleaned up
[  637.057530][T30694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.110590][T30704] syz.2.10060: attempt to access beyond end of device
[  637.110590][T30704] loop2: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  637.130187][ T4923] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.184321][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.198744][ T4923] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.260610][ T4923] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.303507][T30725] loop5: detected capacity change from 0 to 512
[  637.314719][T30725] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  637.339861][T30725] EXT4-fs (loop5): 1 truncate cleaned up
[  637.346666][ T4923] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.347694][T30725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.454051][ T4923] bridge_slave_1: left allmulticast mode
[  637.459746][ T4923] bridge_slave_1: left promiscuous mode
[  637.465460][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.479563][T30747] 9p: Unknown access argument „: -22
[  637.486664][ T4923] bridge_slave_0: left allmulticast mode
[  637.492419][ T4923] bridge_slave_0: left promiscuous mode
[  637.498222][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.679957][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.693306][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.708643][ T4923] bond0 (unregistering): Released all slaves
[  637.727418][T30748] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10072'.
[  637.739997][T30745] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10072'.
[  637.806479][T30716] dummy0 speed is unknown, defaulting to 1000
[  637.913022][T30757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10076'.
[  637.940765][T30751] loop0: detected capacity change from 0 to 4096
[  638.022125][T30751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  638.078270][ T4923] hsr_slave_0: left promiscuous mode
[  638.101029][ T4923] hsr_slave_1: left promiscuous mode
[  638.117828][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.125252][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.157749][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.165281][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.176952][T30725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.190640][ T4923] veth1_macvtap: left promiscuous mode
[  638.196123][ T4923] veth0_macvtap: left promiscuous mode
[  638.201744][ T4923] veth1_vlan: left promiscuous mode
[  638.206961][ T4923] veth0_vlan: left promiscuous mode
[  638.240107][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.362574][ T4923] team0 (unregistering): Port device team_slave_1 removed
[  638.381108][ T4923] team0 (unregistering): Port device team_slave_0 removed
[  638.439817][T30768] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.472740][T30716] chnl_net:caif_netlink_parms(): no params data found
[  638.534325][T30768] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.625020][T30768] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.653692][T30788] 9p: Unknown access argument „: -22
[  638.691513][T30716] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.698720][T30716] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.715168][T30716] bridge_slave_0: entered allmulticast mode
[  638.730243][T30716] bridge_slave_0: entered promiscuous mode
[  638.748637][T30768] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.760105][T30716] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.767167][T30716] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.793717][T30716] bridge_slave_1: entered allmulticast mode
[  638.808235][T30716] bridge_slave_1: entered promiscuous mode
[  638.828155][T30792] loop0: detected capacity change from 0 to 256
[  638.841432][T30792] msdos: Unknown parameter '»ÿ¸èäÓØûyûé/n'
[  638.858880][T30716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.877028][T30768] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.910698][T30799] loop2: detected capacity change from 0 to 512
[  638.918043][T30768] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.936424][T30801] loop0: detected capacity change from 0 to 1024
[  638.944452][T30716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.954595][T30801] EXT4-fs: Ignoring removed orlov option
[  638.956974][T30768] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.967296][T30801] EXT4-fs: Ignoring removed nomblk_io_submit option
[  638.984869][T30768] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.999357][T30799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.023026][T30801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.038652][T30716] team0: Port device team_slave_0 added
[  639.050643][T30799] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  639.068272][T30716] team0: Port device team_slave_1 added
[  639.102850][T30716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.109935][T30716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  639.135878][T30716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.147299][T30716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.154305][T30716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  639.154792][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.180242][T30716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.229960][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.270516][T30716] hsr_slave_0: entered promiscuous mode
[  639.276703][T30716] hsr_slave_1: entered promiscuous mode
[  639.285320][T30716] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  639.292937][T30716] Cannot create hsr debugfs directory
[  639.490324][T30827] Timeout policy `syz0' can only be used by L4 protocol number 33
[  639.594681][T30837] loop2: detected capacity change from 0 to 512
[  639.605393][T30833] loop0: detected capacity change from 0 to 2048
[  639.619963][T30833] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.10098: bad orphan inode 8192
[  639.655485][T30837] EXT4-fs (loop2): 1 orphan inode deleted
[  639.666279][T30833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.680851][ T4907] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:31: Failed to release dquot type 1
[  639.694545][T30837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.722473][T30837] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  639.746307][T30716] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  639.758049][T30716] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  639.783276][T30716] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  639.813848][T30716] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  639.896745][T30716] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.905474][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.934584][T30716] 8021q: adding VLAN 0 to HW filter on device team0
[  639.945822][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.952966][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.961862][T30851] 9p: Unknown access argument „: -22
[  639.984773][T30716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  639.995162][T30716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  640.012346][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.019461][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  640.133762][T30865] netlink: 'syz.5.10107': attribute type 4 has an invalid length.
[  640.147826][T30716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.207817][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.274169][T30869] __nla_validate_parse: 2 callbacks suppressed
[  640.274189][T30869] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10109'.
[  640.335193][T30869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10109'.
[  640.372516][T30716] veth0_vlan: entered promiscuous mode
[  640.392708][T30716] veth1_vlan: entered promiscuous mode
[  640.416469][T30716] veth0_macvtap: entered promiscuous mode
[  640.434834][T30716] veth1_macvtap: entered promiscuous mode
[  640.457908][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.468632][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.478550][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.489051][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.498952][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.510326][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.520354][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.530932][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.540819][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.551330][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.561247][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.571771][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.583022][T30716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.591397][T30885] dummy0 speed is unknown, defaulting to 1000
[  640.609873][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.620427][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.630253][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.640697][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.650540][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.661048][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.670923][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.681356][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.691264][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.701699][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.711525][T30716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.721987][T30716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.732797][T30716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.741305][T30716] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.750176][T30716] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.758899][T30716] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.767816][T30716] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.915517][T30905] 9pnet_fd: Insufficient options for proto=fd
[  640.930455][T30906] 9p: Unknown access argument „: -22
[  640.971120][T30911] netlink: 'syz.0.10118': attribute type 4 has an invalid length.
[  641.020239][T30920] futex_wake_op: syz.7.10122 tries to shift op by 32; fix this program
[  641.041337][T30921] program syz.5.10121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  641.095204][T30929] FAULT_INJECTION: forcing a failure.
[  641.095204][T30929] name failslab, interval 1, probability 0, space 0, times 0
[  641.107922][T30929] CPU: 1 UID: 0 PID: 30929 Comm: syz.5.10126 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  641.107953][T30929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  641.108046][T30929] Call Trace:
[  641.108054][T30929]  <TASK>
[  641.108062][T30929]  dump_stack_lvl+0xf6/0x150
[  641.108087][T30929]  dump_stack+0x15/0x1a
[  641.108105][T30929]  should_fail_ex+0x261/0x270
[  641.108131][T30929]  should_failslab+0x8f/0xb0
[  641.108180][T30929]  kmem_cache_alloc_noprof+0x59/0x340
[  641.108208][T30929]  ? security_inode_alloc+0x37/0x100
[  641.108243][T30929]  security_inode_alloc+0x37/0x100
[  641.108338][T30929]  inode_init_always_gfp+0x4a2/0x4f0
[  641.108356][T30929]  ? __pfx_proc_alloc_inode+0x10/0x10
[  641.108386][T30929]  alloc_inode+0x86/0x170
[  641.108473][T30929]  new_inode+0x1e/0xe0
[  641.108496][T30929]  proc_get_inode+0x1f/0x380
[  641.108518][T30929]  proc_lookup_de+0x19b/0x210
[  641.108541][T30929]  ? __pfx_proc_tgid_net_lookup+0x10/0x10
[  641.108564][T30929]  proc_tgid_net_lookup+0x42/0xc0
[  641.108590][T30929]  path_openat+0xd76/0x2000
[  641.108631][T30929]  do_filp_open+0x115/0x240
[  641.108778][T30929]  ? __pfx_kfree_link+0x10/0x10
[  641.108796][T30929]  do_sys_openat2+0xaa/0x110
[  641.108817][T30929]  __x64_sys_openat+0xf8/0x120
[  641.108844][T30929]  x64_sys_call+0x1ac/0x2e10
[  641.108864][T30929]  do_syscall_64+0xc9/0x1c0
[  641.108905][T30929]  ? clear_bhb_loop+0x25/0x80
[  641.108940][T30929]  ? clear_bhb_loop+0x25/0x80
[  641.108962][T30929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.109042][T30929] RIP: 0033:0x7f7979cfbad0
[  641.109058][T30929] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  641.109076][T30929] RSP: 002b:00007f7978366f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  641.109093][T30929] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7979cfbad0
[  641.109103][T30929] RDX: 0000000000000002 RSI: 00007f7978366fa0 RDI: 00000000ffffff9c
[  641.109112][T30929] RBP: 00007f7978366fa0 R08: 0000000000000000 R09: 0000000000000000
[  641.109122][T30929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  641.109131][T30929] R13: 0000000000000000 R14: 00007f7979f15fa0 R15: 00007ffc27d66008
[  641.109174][T30929]  </TASK>
[  641.482537][T30943] vlan0: entered allmulticast mode
[  641.588499][T30947] loop0: detected capacity change from 0 to 2048
[  641.650207][T30947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.740396][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.772052][T30957] netlink: 'syz.0.10134': attribute type 4 has an invalid length.
[  641.813123][T30960] program syz.5.10135 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  641.838877][   T29] kauditd_printk_skb: 431 callbacks suppressed
[  641.838893][   T29] audit: type=1400 audit(2000000497.483:33500): avc:  denied  { bind } for  pid=30934 comm="syz.7.10128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  641.865547][   T29] audit: type=1400 audit(2000000497.483:33501): avc:  denied  { setopt } for  pid=30934 comm="syz.7.10128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  642.093205][T30975] can: request_module (can-proto-0) failed.
[  642.119861][   T29] audit: type=1326 audit(2000000497.743:33502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  642.143616][   T29] audit: type=1326 audit(2000000497.743:33503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e4f5d169 code=0x7ffc0000
[  642.176746][T30983] program syz.0.10144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  642.222673][T30987] netlink: 'syz.0.10146': attribute type 4 has an invalid length.
[  642.309724][T30991] loop7: detected capacity change from 0 to 2048
[  642.359596][T30993] program syz.0.10148 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  642.453889][T30991]  loop7: unable to read partition table
[  642.468823][T30991] loop7: partition table beyond EOD, truncated
[  642.475039][T30991] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  642.534587][T31004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10142'.
[  642.646138][   T29] audit: type=1400 audit(2000000498.283:33504): avc:  denied  { read } for  pid=31010 comm="syz.2.10153" path="socket:[111751]" dev="sockfs" ino=111751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  642.684092][T31014] delete_channel: no stack
[  642.688564][T31014] delete_channel: no stack
[  642.694365][T31013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10154'.
[  642.726179][T31018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10155'.
[  642.742269][T31019] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  642.781565][T31018] syz_tun: entered promiscuous mode
[  642.820612][T31018] syz_tun: left promiscuous mode
[  642.846214][T31035] program syz.2.10159 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  642.899569][T31037] tipc: Enabling of bearer <udp:ree> rejected, already enabled
[  642.948549][T31043] program syz.1.10164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  642.961374][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10161'.
[  643.003797][T31052] FAULT_INJECTION: forcing a failure.
[  643.003797][T31052] name failslab, interval 1, probability 0, space 0, times 0
[  643.016541][T31052] CPU: 1 UID: 0 PID: 31052 Comm: syz.2.10166 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  643.016570][T31052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  643.016583][T31052] Call Trace:
[  643.016590][T31052]  <TASK>
[  643.016598][T31052]  dump_stack_lvl+0xf6/0x150
[  643.016681][T31052]  dump_stack+0x15/0x1a
[  643.016697][T31052]  should_fail_ex+0x261/0x270
[  643.016722][T31052]  should_failslab+0x8f/0xb0
[  643.016744][T31052]  kmem_cache_alloc_lru_noprof+0x5e/0x330
[  643.016771][T31052]  ? __d_alloc+0x3d/0x350
[  643.016800][T31052]  __d_alloc+0x3d/0x350
[  643.016828][T31052]  d_alloc_pseudo+0x1e/0x80
[  643.016872][T31052]  alloc_file_pseudo+0x75/0x160
[  643.016902][T31052]  aio_setup_ring+0x13a/0x730
[  643.016930][T31052]  ioctx_alloc+0x2b2/0x4c0
[  643.016954][T31052]  __se_sys_io_setup+0x6b/0x1b0
[  643.016975][T31052]  __x64_sys_io_setup+0x31/0x40
[  643.017009][T31052]  x64_sys_call+0x2b35/0x2e10
[  643.017031][T31052]  do_syscall_64+0xc9/0x1c0
[  643.017059][T31052]  ? clear_bhb_loop+0x25/0x80
[  643.017082][T31052]  ? clear_bhb_loop+0x25/0x80
[  643.017104][T31052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.017229][T31052] RIP: 0033:0x7fd0e4a2d169
[  643.017245][T31052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  643.017261][T31052] RSP: 002b:00007fd0e3097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  643.017280][T31052] RAX: ffffffffffffffda RBX: 00007fd0e4c45fa0 RCX: 00007fd0e4a2d169
[  643.017293][T31052] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004
[  643.017306][T31052] RBP: 00007fd0e3097090 R08: 0000000000000000 R09: 0000000000000000
[  643.017375][T31052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.017410][T31052] R13: 0000000000000000 R14: 00007fd0e4c45fa0 R15: 00007ffd216f7488
[  643.017430][T31052]  </TASK>
[  643.229391][T31058] can: request_module (can-proto-0) failed.
[  643.244960][   T29] audit: type=1400 audit(2000000498.873:33505): avc:  denied  { getopt } for  pid=31040 comm="syz.7.10161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  643.309074][T31064] loop0: detected capacity change from 0 to 1024
[  643.317323][T31064] EXT4-fs: Ignoring removed nobh option
[  643.322976][T31064] EXT4-fs: Ignoring removed bh option
[  643.362104][T31064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.507778][T31064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10170'.
[  643.531421][T31078] program syz.7.10172 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  643.575970][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.587701][T31083] Cannot find set identified by id 65534 to match
[  643.599618][T31083] tmpfs: Bad value for 'mpol'
[  643.600774][   T29] audit: type=1400 audit(2000000499.243:33506): avc:  denied  { mounton } for  pid=31082 comm="syz.2.10174" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  643.648188][T31087] loop2: detected capacity change from 0 to 128
[  643.667712][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10167'.
[  643.772602][T31097] loop2: detected capacity change from 0 to 2048
[  643.810128][T31103] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  643.833240][T31097] EXT4-fs (loop2): failed to initialize system zone (-117)
[  643.841647][T31097] EXT4-fs (loop2): mount failed
[  644.009404][T31094] loop5: detected capacity change from 0 to 4096
[  644.021545][T31094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.215521][   T29] audit: type=1326 audit(2000000499.843:33507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.7.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b2bd169 code=0x7ffc0000
[  644.239296][   T29] audit: type=1326 audit(2000000499.843:33508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.7.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b2bd169 code=0x7ffc0000
[  644.263042][   T29] audit: type=1326 audit(2000000499.843:33509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.7.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d2b2bd169 code=0x7ffc0000
[  644.424292][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.464717][T31124] program syz.7.10187 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  644.502637][T31128] loop7: detected capacity change from 0 to 2048
[  644.712034][T31146] FAULT_INJECTION: forcing a failure.
[  644.712034][T31146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.725160][T31146] CPU: 0 UID: 0 PID: 31146 Comm: syz.5.10194 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  644.725191][T31146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  644.725205][T31146] Call Trace:
[  644.725212][T31146]  <TASK>
[  644.725220][T31146]  dump_stack_lvl+0xf6/0x150
[  644.725263][T31146]  dump_stack+0x15/0x1a
[  644.725283][T31146]  should_fail_ex+0x261/0x270
[  644.725394][T31146]  should_fail+0xb/0x10
[  644.725470][T31146]  should_fail_usercopy+0x1a/0x20
[  644.725554][T31146]  _copy_from_user+0x1c/0xa0
[  644.725601][T31146]  move_addr_to_kernel+0x8c/0x130
[  644.725700][T31146]  copy_msghdr_from_user+0x280/0x2b0
[  644.725730][T31146]  __sys_sendmsg+0x141/0x240
[  644.725849][T31146]  __x64_sys_sendmsg+0x46/0x50
[  644.725871][T31146]  x64_sys_call+0x26f3/0x2e10
[  644.725923][T31146]  do_syscall_64+0xc9/0x1c0
[  644.725949][T31146]  ? clear_bhb_loop+0x25/0x80
[  644.725968][T31146]  ? clear_bhb_loop+0x25/0x80
[  644.725994][T31146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.726019][T31146] RIP: 0033:0x7f7979cfd169
[  644.726103][T31146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  644.726122][T31146] RSP: 002b:00007f7978367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.726145][T31146] RAX: ffffffffffffffda RBX: 00007f7979f15fa0 RCX: 00007f7979cfd169
[  644.726161][T31146] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000007
[  644.726176][T31146] RBP: 00007f7978367090 R08: 0000000000000000 R09: 0000000000000000
[  644.726191][T31146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.726206][T31146] R13: 0000000000000000 R14: 00007f7979f15fa0 R15: 00007ffc27d66008
[  644.726228][T31146]  </TASK>
[  644.903315][T31152] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10197'.
[  644.920570][T31149] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10197'.
[  645.071809][T31166] program syz.0.10199 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  645.207228][T31173] 9p: Unknown access argument „: -22
[  645.468809][T31184] loop5: detected capacity change from 0 to 4096
[  645.498751][T31184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.719735][T31196] netlink: 'syz.0.10213': attribute type 4 has an invalid length.
[  645.782286][T31198] loop2: detected capacity change from 0 to 4096
[  645.796832][T27009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.826897][T31198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.872855][T31205] loop0: detected capacity change from 0 to 1024
[  645.891828][T31205] EXT4-fs: Ignoring removed bh option
[  645.927715][T31198] dvmrp5: entered allmulticast mode
[  645.937534][T31198] dvmrp5: left allmulticast mode
[  645.954745][T31205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.983687][T31220] __nla_validate_parse: 2 callbacks suppressed
[  645.983703][T31220] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10222'.
[  646.040329][T31221] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  646.076223][T31198] ext4: Unknown parameter ''
[  646.120230][T29152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.188547][T31233] loop5: detected capacity change from 0 to 2048
[  646.217896][T31230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31230 comm=syz.1.10226
[  646.228234][T31238] loop7: detected capacity change from 0 to 512
[  646.246287][T31238] ext3: Unknown parameter 'nodelalloc"journal_async_commit'
[  646.319682][T31246] No such timeout policy "syz0"
[  646.340647][T27256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.342228][T31243] syz.5.10227: attempt to access beyond end of device
[  646.342228][T31243] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048
[  646.374863][T31245] ==================================================================
[  646.383044][T31245] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll
[  646.390088][T31245] 
[  646.392413][T31245] read-write to 0xffff88811a824b86 of 2 bytes by task 31249 on cpu 0:
[  646.400572][T31245]  __tipc_sendstream+0x7c0/0xb10
[  646.405548][T31245]  tipc_sendstream+0x3e/0x60
[  646.410164][T31245]  __sock_sendmsg+0x140/0x180
[  646.414857][T31245]  sock_write_iter+0x186/0x1c0
[  646.419623][T31245]  vfs_write+0x79b/0x950
[  646.423869][T31245]  ksys_write+0xeb/0x1b0
[  646.428116][T31245]  __x64_sys_write+0x42/0x50
[  646.432706][T31245]  x64_sys_call+0x2a45/0x2e10
[  646.437377][T31245]  do_syscall_64+0xc9/0x1c0
[  646.441883][T31245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.447784][T31245] 
[  646.450097][T31245] read to 0xffff88811a824b86 of 2 bytes by task 31245 on cpu 1:
[  646.457716][T31245]  tipc_poll+0x1f6/0x360
[  646.461960][T31245]  sock_poll+0x22d/0x250
[  646.466201][T31245]  io_poll_task_func+0x147/0xa80
[  646.471149][T31245]  io_handle_tw_list+0xe5/0x210
[  646.476003][T31245]  tctx_task_work_run+0x6e/0x1c0
[  646.480942][T31245]  tctx_task_work+0x44/0x80
[  646.485443][T31245]  task_work_run+0x13c/0x1b0
[  646.490037][T31245]  get_signal+0xe81/0x1000
[  646.494454][T31245]  arch_do_signal_or_restart+0x9a/0x4b0
[  646.500003][T31245]  syscall_exit_to_user_mode+0x62/0x120
[  646.505550][T31245]  do_syscall_64+0xd6/0x1c0
[  646.510060][T31245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.515951][T31245] 
[  646.518268][T31245] value changed: 0x0186 -> 0x01c7
[  646.523276][T31245] 
[  646.525590][T31245] Reported by Kernel Concurrency Sanitizer on:
[  646.531740][T31245] CPU: 1 UID: 0 PID: 31245 Comm: syz.1.10230 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  646.543970][T31245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  646.554024][T31245] ==================================================================
[  646.629598][T31255] FAULT_INJECTION: forcing a failure.
[  646.629598][T31255] name failslab, interval 1, probability 0, space 0, times 0
[  646.642321][T31255] CPU: 1 UID: 0 PID: 31255 Comm: syz.0.10232 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
[  646.642387][T31255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  646.642397][T31255] Call Trace:
[  646.642402][T31255]  <TASK>
[  646.642407][T31255]  dump_stack_lvl+0xf6/0x150
[  646.642426][T31255]  dump_stack+0x15/0x1a
[  646.642438][T31255]  should_fail_ex+0x261/0x270
[  646.642456][T31255]  should_failslab+0x8f/0xb0
[  646.642552][T31255]  kmem_cache_alloc_noprof+0x59/0x340
[  646.642578][T31255]  ? security_inode_alloc+0x37/0x100
[  646.642612][T31255]  security_inode_alloc+0x37/0x100
[  646.642644][T31255]  inode_init_always_gfp+0x4a2/0x4f0
[  646.642729][T31255]  ? __pfx_sock_alloc_inode+0x10/0x10
[  646.642808][T31255]  alloc_inode+0x86/0x170
[  646.642822][T31255]  __sock_create+0x12b/0x5a0
[  646.642893][T31255]  __sys_socket+0xb3/0x240
[  646.642921][T31255]  __x64_sys_socket+0x3f/0x50
[  646.642968][T31255]  x64_sys_call+0x28f1/0x2e10
[  646.642990][T31255]  do_syscall_64+0xc9/0x1c0
[  646.643017][T31255]  ? clear_bhb_loop+0x25/0x80
[  646.643034][T31255]  ? clear_bhb_loop+0x25/0x80
[  646.643051][T31255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.643138][T31255] RIP: 0033:0x7ff6e4f5d169
[  646.643154][T31255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  646.643175][T31255] RSP: 002b:00007ff6e35bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  646.643210][T31255] RAX: ffffffffffffffda RBX: 00007ff6e5175fa0 RCX: 00007ff6e4f5d169
[  646.643226][T31255] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a
[  646.643236][T31255] RBP: 00007ff6e35bf090 R08: 0000000000000000 R09: 0000000000000000
[  646.643246][T31255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.643256][T31255] R13: 0000000000000000 R14: 00007ff6e5175fa0 R15: 00007ffff430ccd8
[  646.643272][T31255]  </TASK>
[  646.643281][T31255] socket: no more sockets
[  648.000704][   T29] kauditd_printk_skb: 132 callbacks suppressed
[  648.000719][   T29] audit: type=1400 audit(2000000503.643:33642): avc:  denied  { read } for  pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  648.029111][   T29] audit: type=1400 audit(2000000503.643:33643): avc:  denied  { search } for  pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  648.050817][   T29] audit: type=1400 audit(2000000503.643:33644): avc:  denied  { append } for  pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  648.073218][   T29] audit: type=1400 audit(2000000503.643:33645): avc:  denied  { open } for  pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  648.095923][   T29] audit: type=1400 audit(2000000503.643:33646): avc:  denied  { getattr } for  pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1