last executing test programs:

5m0.240608604s ago: executing program 3 (id=6072):
socket$nl_generic(0x10, 0x3, 0x10)
getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=<r0=>0x0)
fchown(0xffffffffffffffff, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timerfd_gettime(0xffffffffffffffff, 0x0)

5m0.203768574s ago: executing program 3 (id=6073):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m56.976103229s ago: executing program 3 (id=6096):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
linkat(r2, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffc, 0x1, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/178}, &(0x7f0000000580)="4773117a74fbc2d09cd5a68b33d3be999e07700836fff8dd8b91911d0c2b0c24c79e46446732238dc813f6de142e479c17fbb62893a7591b7e34fcb07b96309699181f62c76e1d8c84df4fcf5f855cfb87534046073979cefd81721a9c696464dca7713ce2da90705f35d6c618f519427a2fd756a00086127b075aee7a5615c00881bd7a6601e3e609b7da2b2478f4f3e582c4e3330900000000000000e28736e8d0c1bbd9ec37f6c7", 0x0, 0x1ff, 0x0, 0x0, 0x0})
write$qrtrtun(r2, &(0x7f0000000880)="3a3370aca00d7d3a4b59ccbd2f4c5cf0727e2ec4a73c556cf215341f56009c23007959c9e570a5e52d2519cc185c7019ca3e9da5a7403ff5aa7db4f162da98d4555a860bda595466cd15677fe2b436eb25880b34e0c3006b08f8a072a13f3faa33536ee4e7a38a3750893eb2f308ae4d404d01ac761dcbb06f320f3efe77ed6af479b2f5bbeb0c6a0a23bea6ec31cecbecbcc6f27133757cab80461de4546bee01b3e3b14b7af20458277a72ed5ad82feefca81ffcd7b5f4c13fdc4b7e11f245820d12e381caf7c0f1ec9d55decff8666f43439f96fa0c0f24076c75110c9d028893daddd5ac0a0b996074100c12aa", 0xef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', 0x0)
write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$nl_route(0x10, 0x3, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xa020, 0x0, 0x0, 0x0, 0xd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

4m56.949240829s ago: executing program 3 (id=6097):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x58}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
rt_sigqueueinfo(0x0, 0x3d, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
r2 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
fallocate(r2, 0x10, 0x2, 0x7000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x18, 0x0, 0x2})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x1e, 0x805, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r10}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x3b0, 0x3a8, 0x3a8, 0x3b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
connect$tipc(r7, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10)
close(r7)

4m56.855551571s ago: executing program 3 (id=6098):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0x71}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10)
r1 = epoll_create1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ppoll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0)

4m56.385188637s ago: executing program 3 (id=6104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

4m56.358171857s ago: executing program 32 (id=6104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

17.073648356s ago: executing program 2 (id=11374):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x9}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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")
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, 0x0, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

16.968152717s ago: executing program 2 (id=11376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
pread64(r2, 0x0, 0x0, 0x4)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00040000000000003003000000010000850000000c000000b7000000100000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
r6 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$unlink(0x9, r7, r6)
keyctl$unlink(0x9, r7, r6)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

16.951392297s ago: executing program 2 (id=11379):
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000002280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x141, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0067f2bc46"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
close(r2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x80}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r1}, 0x4)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c0003801800038014000100", @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="be7e45a7bf254eb9604b017e2d2752751a6081605e6b1ba6ccad4249fcaa679a73d75b6717b3d299ff651e8562d710378a904ef535d5e1d46a66a2158f88ce8d314033a3b0d91be60cc8e736b250486f8e9a7b6a418cd52ba6d0ce677c2690299ecf4d7b218df63e4d5dbe7fc4facc72338d81714fb5fec7841ef460f2bb22d0206b105ebe5c6194c3ddba261bb3e62158b92cffeca2243b6cb1c61e275005f7ef8eec3e048ac0f435ea338c68d0d16e51441a28fdca7fab2a7a0207e43f7808feaa9b3125a26920ab7a10e5ee9820775038212fad0f66f6479a3baac3e6015d7b"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioperm(0x0, 0x7, 0x7)
rseq(0x0, 0x0, 0x1f00, 0x0)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000057b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010028bd7000000000000a008004ff000001000000000000000000000500190005000000"], 0x38}}, 0x0)

16.873362878s ago: executing program 2 (id=11382):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180))
personality(0x40000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r0=>0xee00}}, './file0\x00'})
fchown(0xffffffffffffffff, 0x0, r0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)

16.639282062s ago: executing program 2 (id=11387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00'], 0x28}}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18c, r3, 0xfe12482fe0801d67, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x800000000000007}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x188, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xfffffffffffffff2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x64}, {0xc, 0x90, 0xfb1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xa5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x7}}]}, 0x188}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8000)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
io_setup(0x4, &(0x7f0000000340))

16.404782285s ago: executing program 2 (id=11391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00040000000000003003000000010000850000000c000000b700000010000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

16.404636165s ago: executing program 33 (id=11391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00040000000000003003000000010000850000000c000000b700000010000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

16.07612839s ago: executing program 1 (id=11400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
pread64(r2, 0x0, 0x0, 0x4)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00040000000000003003000000010000850000000c000000b7000000100000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
r6 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$unlink(0x9, r7, r6)
keyctl$unlink(0x9, r7, r6)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

16.053059s ago: executing program 1 (id=11401):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0274206000000ff9782062f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
fsmount(r2, 0x1, 0x1)

16.004004891s ago: executing program 1 (id=11402):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0274206000000ff9782062f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.0033731s ago: executing program 1 (id=11403):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180))
personality(0x40000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r0=>0xee00}}, './file0\x00'})
fchown(0xffffffffffffffff, 0x0, r0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)

15.798141423s ago: executing program 1 (id=11406):
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000002280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x141, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0067f2bc46"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
close(r2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x80}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r1}, 0x4)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c0003801800038014000100", @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="be7e45a7bf254eb9604b017e2d2752751a6081605e6b1ba6ccad4249fcaa679a73d75b6717b3d299ff651e8562d710378a904ef535d5e1d46a66a2158f88ce8d314033a3b0d91be60cc8e736b250486f8e9a7b6a418cd52ba6d0ce677c2690299ecf4d7b218df63e4d5dbe7fc4facc72338d81714fb5fec7841ef460f2bb22d0206b105ebe5c6194c3ddba261bb3e62158b92cffeca2243b6cb1c61e275005f7ef8eec3e048ac0f435ea338c68d0d16e51441a28fdca7fab2a7a0207e43f7808feaa9b3125a26920ab7a10e5ee9820775038212fad0f66f6479a3baac3e6015d7b"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioperm(0x0, 0x7, 0x7)
rseq(0x0, 0x0, 0x1f00, 0x0)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000057b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010028bd7000000000000a008004ff000001000000000000000000000500190005000000"], 0x38}}, 0x0)

15.389947139s ago: executing program 1 (id=11416):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=<r2=>0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 32)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000005c0)={r7, 0x11, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @random="f8b827fcbfd5"}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

15.361402869s ago: executing program 34 (id=11416):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=<r2=>0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777ba450c79428b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d578617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) (async, rerun: 32)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 32)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000005c0)={r7, 0x11, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @random="f8b827fcbfd5"}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

10.454827487s ago: executing program 4 (id=11480):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x140, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x12c, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2a, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xd0, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x6, 0x7, 0x1f31, 0xfffffff5}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

10.427064777s ago: executing program 4 (id=11481):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")

10.359738478s ago: executing program 4 (id=11482):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x10000, &(0x7f0000000340)={[{@acl}, {@barrier}, {@barrier_val}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0xbb4f}}, {@resuid}, {@orlov}, {@nogrpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f00000012c0)="$eJzs3d9rW2UfAPDvSZPuR/e+62CM9/VCBrtwMpeurT8mCM5L0eFA72doszKaLqNJx1oHbhfuxhsZgogD8Q/w3svhP+BfMdDBkFH0QoTISU/arE3atUtJZj4fONvz5JyT53zznO/T5+QkJIChdTL9Jxfx/4j4Kok42rYuH9nKk2vbrT65NZMuSTQaH/+eRJI91to+yf4fyyr/i4ifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTr2uN4DrfbKydLf2elQlzYtOFkDxobJEm/D4A9GcnyvBDpGHA0RrKsB/79Po+IxppcAxgySTP/xzbGAWBItOYBrWv7Hl0HvzAev7d2AdSMfbQ9/vzaeyNxsHltdHg1eerKKL3eHe9B+2kbP/12/166xPbvQxzaoQ6wK7fvRMS5fH7r+J9k49/enWu+eby9zW0M298f6KcH6fzntU7zv9z6/Cc6zH/GOuTuXuyc/7lHPWimq3T+907H+e/60DU+ktX+05zzFZIrVyvlcxHx34g4HYUDaX27+znnVx82uq1rn/+lS9p+ay6YHcej/IGn95kt1UsRMfo8cbc8vhPxUr5T/Ml6/ycd+j99PS49/VTZfLSwpY0T5fsvd2t/5/j3V+OHiFc69v/GHa1k+/uTE83zYaJ1Vmz1x90Tv3Rrv9/xp/1/ePv4x5P2+7W13bfx/cG/yt3W7fX8H00+aZZbSXCzVK8vTkaMJh826wfbH5/a2LdVb22fxn/61PbjX6fzPz3ZP33G+O8ev9t100Ho/9ld9f/uCw8/+Oy7bu0/W/+/3iydzh7Jxr/OsnPlWQ/weV8/AAAAAAAAGCS5iDgSSa64Xs7lisW1z3ccj8O5SrVWP3OlunRtNprflR2PQq51p/to2+chJrPPw7bqU5vq0xFxLCK+HjnUrBdnqpXZfgcPAAAAAAAAAAAAAAAAAAAAA2Ksy/f/U7+O9PvogH3X/GGDA/0+CqAfOv3kf9Je6cUvPQEDqVP+A8NB/sOQGpH/MMy65L9hAYaARIfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6dJYfXJrJq3P3lhemq/eODtbrs0XF5ZmijPVxevFuWp1rlIuzlQXdnq+SrV6fXIqlm5O1Mu1+kRteeXyQnXpWv3y1YXSXPlyubCxaW5/IwMAAAAAAAAAAAAAAAAAAIAXR215Zb5UqZQXFboW3o2BOIz9DHDNnnbPD0oUCl0Kd7Lu3d1efRyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTfwIAAP//HRYtow==")
r1 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r1)
chdir(&(0x7f0000000100)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa4)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000200)='rxrpc_rtt_rx\x00', 0xffffffffffffffff, 0x0, 0x40}, 0xffffffe1)

10.292723439s ago: executing program 4 (id=11484):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180))
personality(0x40000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r1=>0xee00}}, './file0\x00'})
fchown(0xffffffffffffffff, 0x0, r1)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x1000f4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x0, 0xd, 0x4000000000000020)
syz_open_dev$vcsu(&(0x7f0000000540), 0x2, 0x440800)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x24004044)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
clock_adjtime(0x0, &(0x7f0000000340)={0x8, 0x6, 0x180000000000000, 0x5, 0x9, 0x8, 0x7, 0xffffffffffffffff, 0x100000001, 0x6, 0x9, 0xffffffffffffffff, 0x7, 0x277c, 0x8, 0x9, 0x23c0, 0x6, 0x9, 0x2, 0xffff, 0x9, 0x6bad, 0x8, 0x0, 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)

10.134637351s ago: executing program 4 (id=11487):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = signalfd4(r0, &(0x7f0000000040)={[0xf]}, 0x8, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r2, 0x0, 0x40)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xffffffffffffff02)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010100000000000000002b0000000800030028c94a8ec702dca87e9b1fb3e8315bb9553eb61a120303902301c33d353b44becbf12f1a3f6395630a085747336d85fde1b573d871efc8d94b7e4d0bf553bb0a695d770b6ea2a011352a283b06de6547b840c67089f2d21b527b28e0db8ae2912cc94657a7d167896a8a", @ANYRES32=0x0, @ANYBLOB="0c0099000100010009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
futex_waitv(&(0x7f00000003c0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000600)={0xa0000013})
ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x81}], 0x1f, 0x0, 0x0, 0x0)
close_range(r3, r4, 0x0)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.885608045s ago: executing program 4 (id=11494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)

9.859408145s ago: executing program 35 (id=11494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)

3.589108921s ago: executing program 0 (id=11599):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
getresgid(0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x1115c34, &(0x7f00000007c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030301030303030303030301030302c666c7573682c6e74732c646f74732c6769643d000000", @ANYBLOB="32dd8cde6e96f0d13a8368ad766b947ac5b74be61c4018505e5cc7ebe0bf24cdc8ed6abdc586fbcb78be1fba59bdb332c3a2ffb21f39a66f518993ebf9f4fd8620a2d3aa47e18e5e6573fc474831302c1351c00d650398f1f970100269f2241c257c896235aaeb94ba6fd7606a56171e63703c1312834bfa82b73f094eac2eb0cccc2b52b7", @ANYBLOB="00006b746769643d0092", @ANYBLOB="8cc1b1f35c2369a8de9da9f61719675d2a99ff2da50c3b2d9566ff9554c899569e65994fcae34f8b94ed31273854df6163c63b325eeec05e00f9bbbe0cd13b7a5df78c7522496d45a1719bdeaaf3e237904994e7676b316d08e88cf973eb24ea6de316b4fecdcb35d3581bb3d78303", @ANYRES8], 0x1, 0x206, &(0x7f0000000c80)="$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")
clock_gettime(0x0, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
pselect6(0x40, &(0x7f0000000040)={0xdc, 0x0, 0x56, 0x5, 0xffffffff, 0x1ff, 0x6}, &(0x7f0000000080)={0x9, 0x6, 0x1, 0x1, 0x2, 0x10000, 0x0, 0x9}, &(0x7f0000000100)={0x2, 0x8, 0x5, 0x6, 0x5, 0x5, 0x4, 0x5}, &(0x7f0000000300)={r2, r3+10000000}, &(0x7f0000000380)={&(0x7f0000000400)={[0xfffffffffffffffb]}, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.199362876s ago: executing program 0 (id=11605):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020206318f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x4d, 0x1, 0x6}]})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)

3.150417537s ago: executing program 0 (id=11606):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r1 = epoll_create1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ppoll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0)

2.554295655s ago: executing program 6 (id=11610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={<r5=>0x0, 0x5, 0x80, 0x60b9}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0xb5}, 0x8)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r7=>r3, 0x0, 0x31, 0x0, 0x10001, 0x20, @dev={0xfe, 0x80, '\x00', 0x20}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x100a0, 0xacfb, 0x6}})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0x1d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x1, 0x2, 0x4, 0x0, 0x7, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0x8d}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7cd, 0x0, 0x0, 0x0, 0x6}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x2d, &(0x7f0000000340)=""/45, 0x41100, 0xd, '\x00', r7, @fallback=0x9, r4, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x5fb, 0xb5}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f00000005c0)=[r4, r0, r0, r4, r0], &(0x7f0000000600)=[{0x4, 0x2, 0x7, 0x8}, {0x0, 0x5, 0x4, 0x6}, {0x4, 0x1, 0x4, 0x8}, {0x5, 0x3, 0x3, 0xc}, {0x0, 0x1, 0x1, 0x8}], 0x10, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)

2.478339026s ago: executing program 6 (id=11611):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.254607019s ago: executing program 0 (id=11614):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = timerfd_create(0x7, 0x0)
timerfd_gettime(r0, 0x0) (fail_nth: 1)

1.970584853s ago: executing program 0 (id=11615):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xa525, 0xe, 0x62, {0x0, 0x101}, 0x0, 0x8000000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000952216dffd200b815f9d1313974c19df6db84e60b55ce36645f4b467797a3df66c2ae721b79a5e141aaf490fd4f619d431544cc9780e11355ed619ae5c58f6a49410db4aa57697047a3539f25f414a9e30f493df75d67bd024ecf44b194f874e0c3c20755322ff898f21a0fa5f6bcb8898612a502c8f294577294fdb5b635cfd473c9bf7d6df1edd555b2b4b0e65c284f2193ef799d565099471b3eeb6f9de52e3dfa0a0c8fc07b6ff6b13aeac205e533a2f9cc4e903c38c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000130000000000000000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001b0100137e374ce9ff0f80437d6bca26565338cfe9e9ef6b2e977da100a343deb8202e610ea12d35072d71aee458197fec3364133a3f0dd8acb05505877700f4fa30e2d7e367badea0529530852b8d7c3a849f8a185f510740085e5df5462e369fa14f6acedf3701018eab0e267c9a0d5f282e1ec45f970d9d1562ca90fed55e8eb4970ed5a2c6fa92796b9ed67dfc7d685b85f273d7513f17c5e596f37747d8bef7d32d6135a731c5609eea75f461c080bb7c4df7c4d5fab0c2c9c71ad220645dd37d5e3c1e71549d73d8106000f7"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040), 0x10)
listen(r7, 0x0)
r8 = socket(0x28, 0x5, 0xfffffffc)
connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="06", 0x40000}], 0x2}}], 0x1, 0x890)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4ca, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10)

1.748686426s ago: executing program 0 (id=11618):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x10000, &(0x7f0000000340)={[{@acl}, {@barrier}, {@barrier_val}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0xbb4f}}, {@resuid}, {@orlov}, {@nogrpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f00000012c0)="$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")
r1 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r1)
chdir(&(0x7f0000000100)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), 0x0}, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa4)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/70}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000200)='rxrpc_rtt_rx\x00', 0xffffffffffffffff, 0x0, 0x40}, 0xffffffe1)

1.45347854s ago: executing program 6 (id=11625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r6, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x4c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r2])
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r7, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
write$UHID_DESTROY(r7, &(0x7f0000000200), 0x4)

1.204160954s ago: executing program 5 (id=11629):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x70, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa68}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfc5d}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18120000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r7}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x410, 0xe8, 0x1f8, 0xe8, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @local, 0xff, 0xff000000, 0x2, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x7c00, 0x8, 0x3, 0x3, 0x40, 'veth1_to_bond\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random='\'wqOc3', @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xf, 0x1, 0x7, 0x0, 0x0, "2f88bc8590ddd72b89f2f1d7f29df8dfc4300e7971aa499db98046803f52aceeef7438a357ef3608622ffdfbd67d8f9fa94400393b88a859b736d862c56d7081"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mq_notify(0xffffffffffffffff, 0x0)
r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r8, 0xa, 0x13)
fcntl$setlease(r8, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000440)='./file0\x00', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40)

1.076921875s ago: executing program 8 (id=11631):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020206318f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x4d, 0x1, 0x6}]})
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
acct(&(0x7f00000001c0)='./file0\x00')

1.048230565s ago: executing program 8 (id=11632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
close(0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})

993.141866ms ago: executing program 8 (id=11633):
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000002280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x141, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0067f2bc46"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
close(r2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x80}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r1}, 0x4)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001", @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="be7e45a7bf254eb9604b017e2d2752751a6081605e6b1ba6ccad4249fcaa679a73d75b6717b3d299ff651e8562d710378a904ef535d5e1d46a66a2158f88ce8d314033a3b0d91be60cc8e736b250486f8e9a7b6a418cd52ba6d0ce677c2690299ecf4d7b218df63e4d5dbe7fc4facc72338d81714fb5fec7841ef460f2bb22d0206b105ebe5c6194c3ddba261bb3e62158b92cffeca2243b6cb1c61e275005f7ef8eec3e048ac0f435ea338c68d0d16e51441a28fdca7fab2a7a0207e43f7808feaa9b3125a26920ab7a10e5ee9820775038212fad0f66f6479a3baac3e6015d7b"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioperm(0x0, 0x7, 0x7)
rseq(0x0, 0x0, 0x1f00, 0x0)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, 0x0, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010028bd7000000000000a008004ff000001000000000000000000000500190005000000"], 0x38}}, 0x0)

868.577828ms ago: executing program 8 (id=11634):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

827.436588ms ago: executing program 8 (id=11635):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

481.110144ms ago: executing program 6 (id=11639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)

395.027425ms ago: executing program 6 (id=11640):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)

290.661976ms ago: executing program 7 (id=11642):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020206318f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x4d, 0x1, 0x6}]})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)

289.916956ms ago: executing program 6 (id=11643):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)

250.723877ms ago: executing program 7 (id=11644):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="e0c405f0fdbe0ce7430ab4c75c89ec85a89f13061dd78d5f6b05fcb857a69f446b6f73b4b3f34cd8b99f696c911b6dbcd51f594d8a2c3571b8f04b539e0a79c5f8a277ad132274a66649883ecf2d8b4abd7af5e874bcc33e4889417e0013f81589a79664a4", 0x65}], 0x1}, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

225.150877ms ago: executing program 7 (id=11645):
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
r0 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x206541, 0x98)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x0)
flock(r0, 0x5)
flock(r0, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000005140)=ANY=[@ANYBLOB="0aebddfc38f21667f9ffff040000000200000007000300000000000a928c77d0993d700aafd7535bc6591913e41ea726870beaaddd16d476f10174ddb784bd", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27, @ANYBLOB="57701574051569bfde4d9140170a89ed5e6f63ade3b93c89571449da7f946133dad55726d1749b6c0007246e07c8e17a6ba927bba6d2864b63ea00c0adf1d2ec5284bb740275c439b8e3ccc9ba05c8d427e923fc6f1ec0574796420485182985c1e5cdda672e1ddb9891280f628c0cfa7ab71eb0ca2277b1ee5d3341296bdbe01bb1591cc8b03be95a1723ff54d6919d763919041b9763bce264688283ba89fd8cbf56b2c1e6967314d3e015f347025bda6be3f5152885dd7841f75c6c9083be926dea3b2b916b9a51c56a8770def9753b08fcd0d35d1381df0c48a7c022ed7d4e83266d4152d48510ff6faefcc895a09e0abe381a9f7bbb77ed2c78a7d9a2c7b6abf90fb7fe526f9df56c5bd8cf9e61b6e85decb6abccb9cc1eb6bd3b8de709ff12ad64dea8a0ad9daf845a689f11ac3a8eff020f765c488f11d57c42bd2166ebfff3565f38d97e3f8b3887dfe50ccceb390e0aed495866685e5fd8ec33b2c32aa3777ab25a6b2bad77ae1a774012bd8fa3a73d6eaad784f02267cd2d12647a126ef1eeeee0c30ac9a4223f35b7a27e6d62800f2a81c6971082250ca7e29332fc682a627746f2281fc761f9c3038e3178a7ff85441dc80ac46f8c990c3abbfb380274899cfe0bcddd328d1cb90e2c9a3d951ddee20fc139115a682449f83a81866f98ef4f34950b8b597ab2752f6ceb75a782b7d79966c5d2b0595e4d8be0e7052922e484f2750cf588bd96068ca23e9ef5559c1947c3758b5ca4395a5f7f309143c1d9812178abd06ed9776a4a9beeb8f37a5afe7bd39c68c5c234c7750d224e4169ac5a8708f057f6d4c83f13569bde274915054d3be726b7294160e5b4643d01ad1420560937b4fa9f77e3762111338d515b33efe4c340f7512dafd974ec93e7ca78b10916d78b14906f960f8dcf23392a98c0752b26f4c964cf3108a3f50329d78385efbb7f7bdc4bdf116fb6ba1b20649981379d39bf62cce612ed885017468266b362f9609ced7fef26193535b356b33fab14aff92a1073b78894ee484c96b2e68f1df81c503459bdfada95b1baa073b386b2f07870f3dcfe6cfe2df8aacb59439e6d0c7a99b2c54da64fe7bb52e81e380d0acfee4dece42926894b34ac8830812d84e1143bf6e4141853d5ba388d14943794a358b719169a9a57c8e971de60bbacd200e49cd774befc5d15ac2c0d79834bd54380dd836f7ca1e1db0d46d836001357bdd9dc93130210fe466b4c9bed63bfed10d5566ab7db04ca7f2123e1f22f03d49c8172c551bacdc085ae7b93e9d9ef0e51a5e96091d32cb77678cf168f89d099f36bb12c5044b53ed58f2e1234c4ccde5523dedbb43813c433e05e939a17f4ec634bb16e7c442724aa17f3be83f1118be6e98303bbac018a9347a4a445a2206e1e789e4c4fa86e2b135caacca6dc6855b5089e7540009f8e0c9219e402eaf979db103fd2eda001fb30a5a0aa519e616678d1ea254cd288614a1fbec772bb3619d7ac20db099d38532488cac9671390efbdf36fa41b2d0d52d45b2ad17c63c9cca02fb131cb8bc906423d90f39637541298d395f636c149dd451bd64ff2fe75c1e138089b197509432079029c744f48d7cd483580cc6d61902fd8ae0e756f853798e1442fe22125a0b938149e3bf1abd770054734f9192fdbe2d3f0e43f4461f7fea99cbd28d0e78253549f182b94d60c811a22db6db12a6aa21291dc27541bd516091d7d5297ae34d5676eafeece07d8b0a442029b2b1d9b113effbd3735fb276271fe147251bb8f5ab680ce3c05174c951341031c81b112201785814f2bcc23d530e5ea555270564828b27d7e832297b39b720bb8008d894b48ec221104005bc715be691472ecbd97fd7671071ed0e51301bc93929131269b701e7cb0f731890b0e28c8621607a2038ffb9d840316b94411238d2f388af6ffed09ea3734a5618d31865b43dc1131989804f487ff0845af2f24edc540ff5478cc02331da2d429ec093f1995e4c0374b6865c2a2ac04298f4ffa5aca7c78ee892a17755ae8c3acbc0dddbbf3f67645870ee16a678a19a478dc2d0b3acab2c2909a2cd6193fec93e55ead35dd7eaf71d5eead7f40e6412bab6c74d45857622e56f94860dff2a2a45a226993bd68eca2498cd1e89726444ccd4bd18fe79f09310729cc10580c9f0ab7463f9248d2bf86a24e29b9461c0a2146b30b99236817a336a6bc4d95727085e26409ef4fdf2538a13f0670132290e6454a18791616fd7f043ca2bc13278cee5db14e0c3c01bc4583463dc559184de691aa8469c801a414351c74fe887e7df1c984e3102d3134bb9ca0975a88989b1e327757d32ecb3e5c51565f76b0be18e0f1cf0b2d8afd9323dc43966a46ad92921c5bae5a47a23695927539e2266c78a5584081c6e69383bb2c1a1eadacaffa5c805103137d3dd3bb605d5ed368dd4bfbdc81774681430dd23c9236a1266117badc1bde79a33f0edf4984fc23eec51eda0df09c57f67ef71b676a9883518bca13a9a25663acec44ce763a70102df91e42f66909fa60ce225c86a741f8a52e182124da22ad43723c6298332a500e61f2202b64305e31d19ded0aa456aa1c9d4b20292567a51b6d7b3676a0fd3ea60e49f257435f8bcbd2a55735850adec22b7322019fb56b8eed14dd5c08c78df0263b22177695d9bb3857ed3de89af282aa15308d3c8f9c11babb7f0389c2a85f88f46233f0e16b461a88d55ac7c8679480a42be1ae639ebfbc242f94fbc0466177369da0442310714f4539258e12bee63c25bdb67ccdb1ff718a83a9350556e15210888d07ad47f08e6e6c536452e6d37023fb2a016e3d878098869f3ec55443fa8b03c41c35745e64765947af479fcff2efad29084a66d46f6c80467edff26b15378620875d4a592331cbdd57a4d89b469d971f237544c41290b2f7b37d5b3892c2fe7fd210ff2cf3e3115046b36a374f8d9e8da03989b59400f3e65205369dbe41a64393b9240e070fc4c247899564ea5b173e29d3462ad404ad80029563ea61352b684132fd3d4e74b62b86c20ea9fb4882d52210b841d2dc8e94f9352f64f230f894962bdf7c36f25dbf0afad6caef6f39ad4c6af78243998d12fc84db8e216f01dd30bba09f7c02a775d1c0195eae5ec84825adec1215637b55998c9a3c632eef429a8dfbe2332d272340908dee7c714200e4dadb122feabfc3b3da02a4ec5015cb352ff93a1ba474c935a90b02d58da85e73777c1794fa09cf80926d0b489748eeabce31fa572a989b642c8ca16672b8d8249ada872ddf91283c2b0cb6e7427a18976af787d2e5cd442e54a3bd4f4d9f195e4cb33f3ad32d954d69a130552a9a8e29f72f08acaf685e7ed657c167d2eb4899f6661152d686ff3358b68e832d5281472433144c318a54c2fa3b9103825a058bef766f79b00cea56d7d06f9c1b73e60681418adfbfe633eaa452cdb0135a1dfc3b464df76c69fdbc48a0e514e2c77d0cd736ca279acf121cda4606024370a1929c498eb3595eb03d5fb1409ad0753fddff69256a02a163f08b0e455293bb2bd2369eb59eb230b1e6e9f016e3dfa533e15021f59b0444878b1a6f83491832c32fd3eeb65f4a3970897c0a8339732eed8283e8cb5dce1f97e13e78a931064ec4bc5ccea385dbd4cea0bb0ddfb1ef00bf856b8b69f59932f57b22ff7dd9e26c7b87d4f1771f58840c0a82989e485211bb4ed2aa17b5941adcdcec3994200354a2d990cb9f742df6e63e70426df9eef272a6e44f89421db3dea30cf3fd2b1a4c75f78be845a5ff293dd11d33cd5401022d158a1b6a538b00539dc10e20fd3aa914209036d68bd2a639392141100e5756edd721494d5cbc2fb18751ad8b412c20f05053020bced41bd1a880c5a83c2eacb2d490da97026a84e4724b08ac881ca6984f95403c01f8969a991ff001754a285256b1b3d4a8fb723babbdb4df851c8df19ed9d2658f2916400b66a991f24af5637fcf736ab806bf0b31a3dab9e101bc539a6f96fe2fd824b9247c7bdbd82048e851b73f01d0acff145e2eaa8a51f4efe49a607dba53b45ce6d07dc7ebceeeada2aa800f0d1c9421bab515846e2bf0b18432cbea3e11be639b6f4af8812c68f1ff710a8b23ca0dc85b12cb12a9dfb1c6170d816b7d68d446f00ab0c2da3fa633e3e0ee13bb2b7343579274db821af31b6079c9ca553d81214ebd3ff2644a97c8d30b5098e285f331251091e3a9e3fa9ff0e43d329b24e3bb62093ee030b894ad681483684f3d5828ddcce312c92a973337a14a0054470f54dbbb42bba5c8fc03ad19912020fce82c813eebeca115d068258d9cfeab4011f92e834ba3c8c24d999ac9d4a3faff5e3c331b516dacd463ec88ffc85e27c417b7fd6ae3e3758957419a5204950001d03b144532c2cd6f934b1a1fef6cddb4015ee6fd4e448d6af627d135bb5619bf983be7004001100301b2dc7699376e575605aa37c099bde259de34081b96470d315645dae7f329877b2dae5c3fae10ff9edb691620aac398df714b8299ea60169bcac112092d9cbdac21bab8d1663313b07f4dd92b1323d52caf6a3323e07fea585dfd3bf6d412679e3aa163d7ef0c0f7bda6f9552fedc97d56d46d434c675b9d8c15f6ffd3b0c4b050aa4f4fdc90d4e6696fafbffb166cb2dc449c2bcb553df4863f29cca62b8df7210233d4f67abf2a22265a380fcfbf86bbd3f46d7ea5b676fc2808030d6e5f5e23deaeecbe071ce1b2fe4b4e1f9aada8115c018da60609248fb294873906b9130f0902f934097f9986bd4343534381798e5a1ccd3c315d8263c09a3b12ecaa9f8e8c5aa0820e542d6d9464eaad1f35bf96431ace904f0751761364d12797bbf9eac78a49e19c61f31ea7ac255c2cb49cf647f659b417ebdfeb23a97c0abfcb787c40cac00533e1473819b3fdaf4fb8b6a4ecc3bc7df82c7346b34635e993e1487b0e2351d62f23e4ef3cc483378007b599dacaceefaba1ad8d6ec3aa8fcde8e5eed7bc73fb12f49ffc8cb0f31d77ab27ee8ea9207b8f48092be296fd681cb5ae68d3d128c12f2d4009721318e2eac4fa8451c74d532ed9e24c732f68629dff6985ca17c78730f3f23d2cbbe61618f79a24b526e561a1dcaf7f8fbc8c6aa24410eb8b60b192ea770e724b76b0318596795dd092250b33c7f2519aabf21d7490880bd733ecb7e0426d155bf54477af1184393b19a4e0220437e0af498bc56a557478264fa0a11c8072c14cc1a308703d20038ff7d399e1b975b452fac8422325f95ea836fd278f57f1be4b089dc4d15f2df58fac7021913d64f5b82db40eaf8fc3e47c465723636d8cddfa2f5fd1b7b97f2bcb9fdcc656f249494cdb43b5dff7ba907f9ec5bfff958f541ec0de56c94bd00aa6f14b2a0c8ca14c1dad53cce9427d338a0bcf83bcca500e0985482f957f70950c060f30cfd4a32fed21705a1964b8a4aa8f363e2416978935d85f563c1b563de30d543ed2ce7008241c8fa6dac9483473f503763698461f2f3fa7a2c755105577b73c06c0df0d3d9c081cebbf7cb78b81b598afba6dfa28bbd2bbb1ccfb5c6c0034b2926e674e852d6f02b2c6fd4552e817d7ac0d13b7363bed5916631276c089b3e5a6ba31102565d3faa9c1833c2916892bed098b302307965e1bc3aca4536b65732e7511bbc248862b8a7f70edba50302e8e85ce9b096aa2cac3445f2616ff3ae6a62ab4e3a032db46e78da1a446b6057179285a00e0e56237707a7cfe0286d952dd9bcf80b30d9adb8e2241c820c566f68f0b43b4baf00b4", @ANYRES16], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18)
futex(&(0x7f0000000300), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x9201fffe)
msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="efffffffff1be1c2"], 0x8, 0x800)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

224.498917ms ago: executing program 5 (id=11646):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})

183.850447ms ago: executing program 7 (id=11647):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
timer_settime(0x0, 0x0, 0x0, 0x0)

165.334747ms ago: executing program 7 (id=11648):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20111, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x93ddb14f97d524e6, 0x5dd5, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000210800000087de5b4d80000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioprio_set$pid(0x2, 0x0, 0x0)
io_setup(0x4, &(0x7f00000001c0)=<r7=>0x0)
r8 = eventfd2(0x0, 0x0)
open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000010000008f000000000000001855ead1878ac21fc8fa57721c275b2c767d65215bfb9a170824603057dd33eaad615f4f6daf9efe0a1a25b96ad2f04c65856484d656310b6f"], 0x20000)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r10}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x850, 0x30, 0x12f, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0xe, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x100, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x8000000, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8e, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x80000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000e, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x377, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5fbb, 0x0, 0x0, 0x1, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x3, 0x7fff, 0xfd8, 0x7fffffff, 0x5, 0xffffffff, 0x803, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x401, 0x3, 0x6, 0x1, 0xfa, 0x4, 0x6, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0xfffffffd, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x8, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x9, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x9b43, 0x0, 0x4, 0x8, 0x8, 0xffffffff, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0xfffffffd, 0xfffffffe, 0x7, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x9dc5, 0x7, 0xfbfffff7, 0x2, 0x400, 0x8, 0x0, 0x8, 0xffffffff, 0x9, 0xa, 0xa, 0x9, 0x5, 0x5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0x1000, 0x1, 0xa, 0xa, 0x7, 0x80000001, 0x82, 0x52e, 0x1, 0x1, 0x0, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x9, 0xc2a, 0xff, 0x100, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0xfffffffd, 0x20, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0xfffffffe, 0x80, 0xa, 0xd, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x40007, 0x65fe, 0x9, 0x6, 0x4, 0x0, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x320, 0x2, 0x3, 0x6, 0x9, 0x7, 0x3, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0)
io_submit(r7, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x20, 0x1, 0x1a5, r8, 0x0, 0x0, 0x1, 0x0, 0x1, r8}])
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000180)=0x5219, 0x4)
process_madvise(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000100)}, {&(0x7f0000000440)="0eaf0fa4c808bba0f8d2a0a9b0d44eb13a6089f711bcd51ba4f26a1ae64bf750cb340982d058bf43328aaa3202ed83938eaede59538fcdd9b1605339ed6f1f83973dc16cb2382ccb8c31c407d0cbf190cf04fe87cc6e9c3fdb07c116257c24e3c83e280361f4af7d7d69e378b47c3b4dfab0c30f8b6f4b9a33eb3276f85165b6d6ca1674606fc899498ab068f4858c59d55fbba7f91ae7f464d05734d82a3825f5", 0xa1}, {&(0x7f0000000500)="bd9e162faae415427eea08b55881de249561d025a3f9def8ffb08f8780e80f04bc11f728b749fb0e42e015185ea456d9c650fa475e54300e3eb8d0ff50a97223684e1202952b0375330df30cf17176875dd3e534084f7638c3af2b41b56d3e4718b8fe146866393ed05cf193301b3c9e9dbfeaca74", 0x75}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000700)="12edc4e5a8a4a73ca803264feebfa3c321b0d7faf7a35837d08bbd39fa9454a17c4177bbeb2db04876f0f74df220dbc8d54417d41443d19d328ca3924c20749feea560a2155b36b4e73395f210c6c27fe83a56c7e39c668905565b44b12cdb2ccf8880d6e85c4120b313bce3d0f343e74e04994a158dbf0961e7c72ff4bdebbb51a5c9d17f23d2c59ef7a66e923380ae55c3073c85a8bcdfe6b4d3eb6dd5aaf16abea7b1507c", 0xa6}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f00000007c0)}], 0x7, 0x13, 0x0)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000c0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x7)

161.241908ms ago: executing program 8 (id=11649):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)

98.638219ms ago: executing program 5 (id=11650):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_settime(0x0, 0x0, 0x0, 0x0)

97.496429ms ago: executing program 7 (id=11651):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007733337edc1cc8e1b1bb5fd8ef4650efb9568ce4ebab1209824ffe627ef0a5e25c47fbe044e0c5f808f604be85f358ec929800a5451b30751473bcc4a621f0e1fe711f0f98d32d62a56ca87f920fafa249a9ad4b73d6fdff9b01030adadc2c2d5cd1dd64d208e5063e97460d9b90f286abab52e095f58f88773c27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x81, 0x6, 0x8})

56.239469ms ago: executing program 5 (id=11652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)

37.473589ms ago: executing program 5 (id=11653):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)

0s ago: executing program 5 (id=11654):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="e0c405f0fdbe0ce7430ab4c75c89ec85a89f13061dd78d5f6b05fcb857a69f446b6f73b4b3f34cd8b99f696c911b6dbcd51f594d8a2c3571b8f04b539e0a79c5f8a277ad132274a66649883ecf2d8b4abd7af5e874bcc33e4889417e0013f81589a79664a4", 0x65}], 0x1}, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

sy
[  846.914336][ T2393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.046831][ T2406] x_tables: duplicate underflow at hook 1
[  847.117336][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.124758][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.125755][   T29] kauditd_printk_skb: 189 callbacks suppressed
[  847.125772][   T29] audit: type=1326 audit(1746504471.183:21651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.156032][ T2409] bridge0: entered allmulticast mode
[  847.168153][   T29] audit: type=1326 audit(1746504471.223:21652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.201847][   T29] audit: type=1326 audit(1746504471.223:21653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2408 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  847.225829][   T29] audit: type=1326 audit(1746504471.223:21654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2408 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  847.249500][   T29] audit: type=1326 audit(1746504471.253:21655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.273393][   T29] audit: type=1326 audit(1746504471.253:21656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.286174][ T2413] bridge_slave_1: left allmulticast mode
[  847.297004][   T29] audit: type=1326 audit(1746504471.253:21657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.302643][ T2413] bridge_slave_1: left promiscuous mode
[  847.332163][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.342616][   T29] audit: type=1326 audit(1746504471.333:21658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.366504][   T29] audit: type=1326 audit(1746504471.333:21659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.390225][   T29] audit: type=1326 audit(1746504471.333:21660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2411 comm="syz.1.10988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  847.414215][ T2413] bridge_slave_0: left promiscuous mode
[  847.420115][ T2413] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.429655][ T2395] xt_CT: You must specify a L4 protocol and not use inversions on it
[  847.634828][ T2423] loop1: detected capacity change from 0 to 2048
[  847.641405][ T2420] Falling back ldisc for ttyS3.
[  847.672236][ T2425] loop5: detected capacity change from 0 to 2048
[  847.707776][ T2425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.744420][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.904456][ T2440] loop1: detected capacity change from 0 to 2048
[  848.026238][ T2440]  loop1: p1 < > p4
[  848.030943][ T2440] loop1: p4 size 8388608 extends beyond EOD, truncated
[  848.116383][ T2451] xt_CT: You must specify a L4 protocol and not use inversions on it
[  848.251702][ T2453] loop4: detected capacity change from 0 to 1024
[  848.293645][ T2453] EXT4-fs: Ignoring removed orlov option
[  848.324591][ T2455] loop1: detected capacity change from 0 to 2048
[  848.341472][ T2453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.398432][ T2455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.412987][ T2453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11003: bg 0: block 88: padding at end of block bitmap is not set
[  848.600125][T29696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.769623][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.908862][ T2484] FAULT_INJECTION: forcing a failure.
[  848.908862][ T2484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  848.922093][ T2484] CPU: 1 UID: 0 PID: 2484 Comm: syz.2.11015 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  848.922129][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  848.922146][ T2484] Call Trace:
[  848.922154][ T2484]  <TASK>
[  848.922163][ T2484]  __dump_stack+0x1d/0x30
[  848.922190][ T2484]  dump_stack_lvl+0xe8/0x140
[  848.922310][ T2484]  dump_stack+0x15/0x1b
[  848.922331][ T2484]  should_fail_ex+0x265/0x280
[  848.922371][ T2484]  should_fail+0xb/0x20
[  848.922477][ T2484]  should_fail_usercopy+0x1a/0x20
[  848.922500][ T2484]  _copy_from_user+0x1c/0xb0
[  848.922526][ T2484]  __sys_bpf+0x178/0x790
[  848.922570][ T2484]  __x64_sys_bpf+0x41/0x50
[  848.922602][ T2484]  x64_sys_call+0x2478/0x2fb0
[  848.922711][ T2484]  do_syscall_64+0xd0/0x1a0
[  848.922739][ T2484]  ? clear_bhb_loop+0x25/0x80
[  848.922766][ T2484]  ? clear_bhb_loop+0x25/0x80
[  848.922863][ T2484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.922889][ T2484] RIP: 0033:0x7f89e048e969
[  848.922908][ T2484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  848.922930][ T2484] RSP: 002b:00007f89deaf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  848.922976][ T2484] RAX: ffffffffffffffda RBX: 00007f89e06b5fa0 RCX: 00007f89e048e969
[  848.922992][ T2484] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 0100000000000000
[  848.923090][ T2484] RBP: 00007f89deaf7090 R08: 0000000000000000 R09: 0000000000000000
[  848.923107][ T2484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  848.923122][ T2484] R13: 0000000000000000 R14: 00007f89e06b5fa0 R15: 00007ffc83d0d688
[  848.923224][ T2484]  </TASK>
[  849.416525][ T2513] xt_CT: You must specify a L4 protocol and not use inversions on it
[  849.572854][ T2519] serio: Serial port ptm0
[  849.638337][ T2515] loop1: detected capacity change from 0 to 2048
[  849.726334][ T2515]  loop1: p1 < > p4
[  849.731663][ T2515] loop1: p4 size 8388608 extends beyond EOD, truncated
[  849.836934][ T2535] loop1: detected capacity change from 0 to 512
[  849.853262][ T2530] loop5: detected capacity change from 0 to 2048
[  849.897409][ T2535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  849.931180][ T2535] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  850.000920][ T2545] tipc: Started in network mode
[  850.005883][ T2545] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  850.036464][ T2553] serio: Serial port ptm0
[  850.041258][ T2545] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  850.049723][ T2545] tipc: Enabled bearer <udp:syz1>, priority 10
[  850.064250][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.143072][ T2563] loop5: detected capacity change from 0 to 2048
[  850.169498][ T2563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  850.294116][ T2572] loop1: detected capacity change from 0 to 2048
[  850.305550][ T2571] x_tables: duplicate underflow at hook 1
[  850.339599][ T2572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  850.495099][ T2587] x_tables: duplicate underflow at hook 1
[  850.854208][ T2581] loop0: detected capacity change from 0 to 2048
[  850.856239][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.861279][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.931153][ T2592] serio: Serial port ptm0
[  850.948105][ T2589] loop5: detected capacity change from 0 to 8192
[  851.007585][ T2602] loop1: detected capacity change from 0 to 2048
[  851.037488][ T2602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  851.071450][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.090546][ T2613] loop5: detected capacity change from 0 to 2048
[  851.162616][ T2613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  851.175028][ T3380] tipc: Node number set to 1
[  851.206201][ T2629] loop4: detected capacity change from 0 to 512
[  851.246449][ T2629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  851.270830][ T2632] loop1: detected capacity change from 0 to 2048
[  851.296650][ T2629] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  851.349108][ T2632]  loop1: p1 < > p4
[  851.354063][ T2632] loop1: p4 size 8388608 extends beyond EOD, truncated
[  851.411622][T29696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.512247][ T2644] x_tables: duplicate underflow at hook 1
[  851.590430][ T2651] serio: Serial port ptm1
[  851.674542][ T2654] loop1: detected capacity change from 0 to 2048
[  851.682732][ T6871] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  851.687481][ T2654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  851.699386][ T6871] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  851.722090][ T6871] EXT4-fs (loop5): This should not happen!! Data will be lost
[  851.722090][ T6871] 
[  851.731811][ T6871] EXT4-fs (loop5): Total free blocks count 0
[  851.737971][ T6871] EXT4-fs (loop5): Free/Dirty block details
[  851.743969][ T6871] EXT4-fs (loop5): free_blocks=2415919504
[  851.749880][ T6871] EXT4-fs (loop5): dirty_blocks=16400
[  851.755447][ T6871] EXT4-fs (loop5): Block reservation details
[  851.761583][ T6871] EXT4-fs (loop5): i_reserved_data_blocks=1025
[  851.769487][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.785262][ T4047] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  851.808876][ T2658] loop1: detected capacity change from 0 to 256
[  851.861796][ T2660] loop1: detected capacity change from 0 to 512
[  851.892239][ T2660] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  851.926578][ T2660] EXT4-fs (loop1): orphan cleanup on readonly fs
[  851.942415][ T2660] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.11073: Failed to acquire dquot type 1
[  851.986145][ T2660] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11073: bg 0: block 40: padding at end of block bitmap is not set
[  852.000883][ T2660] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  852.011117][ T2660] EXT4-fs (loop1): 1 truncate cleaned up
[  852.026896][ T2660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  852.043446][ T2660] netlink: 'syz.1.11073': attribute type 10 has an invalid length.
[  852.061049][ T2660] batman_adv: batadv0: Adding interface: team0
[  852.067428][ T2660] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  852.092720][ T2660] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  852.103624][ T2660] netlink: 'syz.1.11073': attribute type 10 has an invalid length.
[  852.111603][ T2660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11073'.
[  852.121484][ T2660] team0: entered promiscuous mode
[  852.126720][ T2660] team_slave_0: entered promiscuous mode
[  852.132476][ T2660] team_slave_1: entered promiscuous mode
[  852.140412][ T2660] 8021q: adding VLAN 0 to HW filter on device team0
[  852.141239][ T2669] xt_CT: You must specify a L4 protocol and not use inversions on it
[  852.155831][ T2660] batman_adv: batadv0: Interface activated: team0
[  852.162329][ T2660] batman_adv: batadv0: Interface deactivated: team0
[  852.169137][ T2660] batman_adv: batadv0: Removing interface: team0
[  852.182829][   T29] kauditd_printk_skb: 164 callbacks suppressed
[  852.182847][   T29] audit: type=1326 audit(1746504476.233:21823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.212864][   T29] audit: type=1326 audit(1746504476.233:21824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.236520][   T29] audit: type=1326 audit(1746504476.233:21825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.260054][   T29] audit: type=1326 audit(1746504476.233:21826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.283830][   T29] audit: type=1326 audit(1746504476.233:21827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.307652][   T29] audit: type=1326 audit(1746504476.233:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.331306][   T29] audit: type=1326 audit(1746504476.233:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.355030][   T29] audit: type=1326 audit(1746504476.233:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.379104][ T2660] bridge0: port 3(team0) entered blocking state
[  852.385530][ T2660] bridge0: port 3(team0) entered disabled state
[  852.391953][ T2680] loop2: detected capacity change from 0 to 2048
[  852.392697][ T2660] team0: entered allmulticast mode
[  852.403612][ T2660] team_slave_0: entered allmulticast mode
[  852.409573][ T2660] team_slave_1: entered allmulticast mode
[  852.420611][ T2660] bridge0: port 3(team0) entered blocking state
[  852.427050][ T2660] bridge0: port 3(team0) entered forwarding state
[  852.465148][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.483896][ T2684] loop4: detected capacity change from 0 to 512
[  852.492001][ T2684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  852.524942][ T2684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  852.541852][ T2691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11081'.
[  852.545436][ T2684] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.550972][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11081'.
[  852.581892][ T2684] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.11080: corrupted xattr block 32: bad e_name length
[  852.605090][ T2693] loop1: detected capacity change from 0 to 2048
[  852.605629][ T2672] Falling back ldisc for ttyS3.
[  852.616615][   T29] audit: type=1326 audit(1746504476.673:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.640756][   T29] audit: type=1326 audit(1746504476.673:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.2.11077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e048e969 code=0x7ffc0000
[  852.653550][ T2684] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  852.674106][ T2684] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.11080: corrupted xattr block 32: bad e_name length
[  852.707559][ T2700] loop2: detected capacity change from 0 to 512
[  852.716711][ T2684] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  852.726280][ T2684] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.11080: corrupted xattr block 32: bad e_name length
[  852.726844][ T2700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  852.782962][ T2705] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  852.812172][ T2700] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  852.889158][T29915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.059341][ T2723] netlink: 116 bytes leftover after parsing attributes in process `syz.2.11091'.
[  853.141155][ T2733] loop2: detected capacity change from 0 to 2048
[  853.157141][ T2733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  853.186729][ T2731] Falling back ldisc for ttyS3.
[  853.196457][ T2738] loop0: detected capacity change from 0 to 2048
[  853.323129][T29696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.402243][ T2751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11101'.
[  853.411913][ T2751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11101'.
[  853.503996][ T2759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11104'.
[  853.513462][ T2759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11104'.
[  853.522604][ T2759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11104'.
[  853.588922][ T2761] loop0: detected capacity change from 0 to 1024
[  853.604669][ T2761] EXT4-fs: Ignoring removed orlov option
[  853.616035][ T2761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  853.635859][ T2761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11105: bg 0: block 88: padding at end of block bitmap is not set
[  853.694125][ T6871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  853.709497][ T6871] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  853.722115][ T6871] EXT4-fs (loop2): This should not happen!! Data will be lost
[  853.722115][ T6871] 
[  853.731976][ T6871] EXT4-fs (loop2): Total free blocks count 0
[  853.734028][ T2769] loop1: detected capacity change from 0 to 2048
[  853.738001][ T6871] EXT4-fs (loop2): Free/Dirty block details
[  853.738018][ T6871] EXT4-fs (loop2): free_blocks=2415919504
[  853.748772][ T2767] xt_CT: You must specify a L4 protocol and not use inversions on it
[  853.750399][ T6871] EXT4-fs (loop2): dirty_blocks=16400
[  853.769730][ T6871] EXT4-fs (loop2): Block reservation details
[  853.775732][ T6871] EXT4-fs (loop2): i_reserved_data_blocks=1025
[  853.793653][T28089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.799394][ T4047] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  853.856850][ T2769]  loop1: p1 < > p4
[  853.961309][ T2769] loop1: p4 size 8388608 extends beyond EOD, truncated
[  854.159371][ T2786] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11116'.
[  854.176478][ T2791] serio: Serial port ptm0
[  854.252698][ T2798] loop0: detected capacity change from 0 to 2048
[  854.287694][ T2802] loop2: detected capacity change from 0 to 2048
[  854.295786][ T2798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.323631][T28089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.363012][ T2806] loop0: detected capacity change from 0 to 2048
[  854.396719][ T2810] loop2: detected capacity change from 0 to 2048
[  854.416055][ T2806]  loop0: p1 < > p4
[  854.435111][ T2806] loop0: p4 size 8388608 extends beyond EOD, truncated
[  854.658356][ T2828] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  854.705403][ T2837] loop5: detected capacity change from 0 to 2048
[  854.713976][ T2839] loop2: detected capacity change from 0 to 2048
[  854.723449][ T2841] loop0: detected capacity change from 0 to 256
[  854.723472][ T2837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.778598][ T2839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.810370][ T2853] serio: Serial port ptm0
[  854.822074][T29915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.936208][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.974243][ T2865] loop5: detected capacity change from 0 to 2048
[  855.005473][ T2865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.050337][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.082612][ T2875] loop5: detected capacity change from 0 to 256
[  855.111479][ T2877] loop5: detected capacity change from 0 to 512
[  855.120662][ T2877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  855.134667][ T2877] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  855.156340][ T2880] loop0: detected capacity change from 0 to 2048
[  855.171464][ T2882] loop2: detected capacity change from 0 to 2048
[  855.181796][ T2880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.198380][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.198652][ T2882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.238680][T29915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.255873][ T2888] Falling back ldisc for ttyS3.
[  855.273377][ T2888] loop5: detected capacity change from 0 to 2048
[  855.284234][ T2890] loop2: detected capacity change from 0 to 2048
[  855.309682][ T2890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.371853][ T2897] x_tables: duplicate underflow at hook 1
[  855.381710][T28089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.394354][ T2899] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  855.436046][ T2903] loop0: detected capacity change from 0 to 2048
[  855.458422][ T2903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.473208][ T2910] loop1: detected capacity change from 0 to 256
[  855.493360][T28089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.512263][ T2912] serio: Serial port ptm1
[  855.711274][ T2938] loop1: detected capacity change from 0 to 1024
[  855.717808][ T2931] Falling back ldisc for ttyS3.
[  855.723314][ T2938] EXT4-fs: Ignoring removed orlov option
[  855.740139][ T2931] loop4: detected capacity change from 0 to 2048
[  855.750203][ T2938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.768921][ T2938] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11170: bg 0: block 88: padding at end of block bitmap is not set
[  855.795095][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.843915][ T2944] loop4: detected capacity change from 0 to 2048
[  855.859899][ T2944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.886915][ T2948] loop1: detected capacity change from 0 to 2048
[  855.937124][ T2948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.125477][T29915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.136524][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.258778][ T2964] loop5: detected capacity change from 0 to 2048
[  856.287028][ T2964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.318386][ T2967] loop1: detected capacity change from 0 to 512
[  856.333284][   T55] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  856.349693][   T55] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  856.350639][ T2967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  856.362235][   T55] EXT4-fs (loop4): This should not happen!! Data will be lost
[  856.362235][   T55] 
[  856.362257][   T55] EXT4-fs (loop4): Total free blocks count 0
[  856.362273][   T55] EXT4-fs (loop4): Free/Dirty block details
[  856.362295][   T55] EXT4-fs (loop4): free_blocks=2415919504
[  856.362311][   T55] EXT4-fs (loop4): dirty_blocks=16400
[  856.362324][   T55] EXT4-fs (loop4): Block reservation details
[  856.362337][   T55] EXT4-fs (loop4): i_reserved_data_blocks=1025
[  856.424223][ T2967] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  856.439621][ T6871] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  856.456301][ T2979] Falling back ldisc for ttyS3.
[  856.462496][ T2980] x_tables: duplicate underflow at hook 1
[  856.481284][ T2981] loop2: detected capacity change from 0 to 2048
[  856.517225][T29345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.602599][ T2989] loop2: detected capacity change from 0 to 2048
[  856.627489][ T2989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.656050][ T2998] x_tables: duplicate underflow at hook 1
[  856.664585][ T3000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  856.702467][ T3002] loop4: detected capacity change from 0 to 2048
[  856.735654][ T3007] loop0: detected capacity change from 0 to 1024
[  856.735718][ T3002]  loop4: p1 < > p4
[  856.746878][ T3007] EXT4-fs: Ignoring removed orlov option
[  856.747362][ T3002] loop4: p4 size 8388608 extends beyond EOD, truncated
[  856.764788][ T3007] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11191: bg 0: block 88: padding at end of block bitmap is not set
[  856.804829][ T3012] loop2: detected capacity change from 0 to 2048
[  856.865070][ T3016] loop0: detected capacity change from 0 to 256
[  856.935675][ T3025] Falling back ldisc for ttyS3.
[  856.977829][ T3025] loop2: detected capacity change from 0 to 2048
[  857.138250][ T3049] serio: Serial port ptm0
[  857.144886][ T3051] __nla_validate_parse: 32 callbacks suppressed
[  857.144901][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.160442][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.169571][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.225135][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.234336][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.243409][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.254564][ T3056] loop4: detected capacity change from 0 to 256
[  857.271418][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.280621][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.289704][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11206'.
[  857.326504][   T29] kauditd_printk_skb: 1315 callbacks suppressed
[  857.326524][   T29] audit: type=1326 audit(1746504481.383:23148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.4.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb449e969 code=0x7ffc0000
[  857.362142][   T29] audit: type=1326 audit(1746504481.413:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.4.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f7fb449e969 code=0x7ffc0000
[  857.385904][   T29] audit: type=1326 audit(1746504481.413:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3060 comm="syz.4.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb449e969 code=0x7ffc0000
[  857.424675][ T3069] loop5: detected capacity change from 0 to 512
[  857.433678][ T3069] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  857.490597][ T3073] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  857.557513][   T29] audit: type=1326 audit(1746504481.613:23151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.583156][   T29] audit: type=1326 audit(1746504481.613:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.606818][   T29] audit: type=1326 audit(1746504481.633:23153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.630989][   T29] audit: type=1326 audit(1746504481.633:23154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.654785][   T29] audit: type=1326 audit(1746504481.633:23155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.669326][ T3087] loop5: detected capacity change from 0 to 2048
[  857.678399][   T29] audit: type=1326 audit(1746504481.633:23156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.708474][   T29] audit: type=1326 audit(1746504481.633:23157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.1.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  857.749538][ T3090] loop2: detected capacity change from 0 to 256
[  857.791784][ T3093] loop1: detected capacity change from 0 to 512
[  857.811666][ T3093] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  857.874267][ T3100] loop2: detected capacity change from 0 to 512
[  857.900642][ T3100] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  857.919745][ T3102] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  858.018581][ T3120] x_tables: duplicate underflow at hook 1
[  858.050294][ T3119] loop4: detected capacity change from 0 to 2048
[  858.069483][ T3123] loop5: detected capacity change from 0 to 256
[  858.079312][ T3125] loop2: detected capacity change from 0 to 2048
[  858.125750][ T3125] x_tables: duplicate underflow at hook 1
[  858.184414][ T3139] loop5: detected capacity change from 0 to 2048
[  858.310204][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11245'.
[  858.320184][ T3156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  858.360909][ T3162] loop2: detected capacity change from 0 to 512
[  858.396464][ T3162] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  858.579053][ T3177] loop4: detected capacity change from 0 to 2048
[  858.618302][ T3180] loop2: detected capacity change from 0 to 2048
[  858.704199][ T3189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  858.707261][ T3191] loop0: detected capacity change from 0 to 512
[  858.731371][ T3191] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  858.793341][ T3194] loop2: detected capacity change from 0 to 2048
[  858.975554][ T3210] xt_CT: You must specify a L4 protocol and not use inversions on it
[  858.998720][ T3211] loop1: detected capacity change from 0 to 512
[  859.088214][ T3211] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  859.393600][ T3214] loop0: detected capacity change from 0 to 2048
[  859.868661][ T3242] loop0: detected capacity change from 0 to 2048
[  859.880533][ T3241] loop2: detected capacity change from 0 to 8192
[  860.019934][ T3242] x_tables: duplicate underflow at hook 1
[  860.232164][ T3250] loop2: detected capacity change from 0 to 512
[  860.253781][ T3255] loop0: detected capacity change from 0 to 512
[  860.262687][ T3250] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  860.276706][ T3255] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  860.392793][ T3262] loop4: detected capacity change from 0 to 256
[  860.411345][ T3267] loop1: detected capacity change from 0 to 1024
[  860.444157][ T3267] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.493006][ T3267] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set
[  860.560799][ T3278] loop5: detected capacity change from 0 to 2048
[  860.578703][ T3267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[  860.591428][ T3267] EXT4-fs (loop1): This should not happen!! Data will be lost
[  860.591428][ T3267] 
[  860.634860][ T3262] syz.4.11285: attempt to access beyond end of device
[  860.634860][ T3262] loop4: rw=2049, sector=256, nr_sectors = 288 limit=256
[  860.650630][ T3280] loop0: detected capacity change from 0 to 8192
[  860.658663][ T3262] syz.4.11285: attempt to access beyond end of device
[  860.658663][ T3262] loop4: rw=2049, sector=608, nr_sectors = 320 limit=256
[  860.673196][ T3262] syz.4.11285: attempt to access beyond end of device
[  860.673196][ T3262] loop4: rw=2049, sector=960, nr_sectors = 64 limit=256
[  860.688901][ T3262] syz.4.11285: attempt to access beyond end of device
[  860.688901][ T3262] loop4: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  860.727427][ T3278] x_tables: duplicate underflow at hook 1
[  860.815394][ T3290] FAULT_INJECTION: forcing a failure.
[  860.815394][ T3290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  860.824763][ T3289] loop1: detected capacity change from 0 to 2048
[  860.828499][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: syz.0.11291 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  860.828527][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  860.828539][ T3290] Call Trace:
[  860.828546][ T3290]  <TASK>
[  860.828555][ T3290]  __dump_stack+0x1d/0x30
[  860.828614][ T3290]  dump_stack_lvl+0xe8/0x140
[  860.828641][ T3290]  dump_stack+0x15/0x1b
[  860.828665][ T3290]  should_fail_ex+0x265/0x280
[  860.828787][ T3290]  should_fail+0xb/0x20
[  860.828824][ T3290]  should_fail_usercopy+0x1a/0x20
[  860.828849][ T3290]  _copy_from_user+0x1c/0xb0
[  860.828889][ T3290]  sctp_getsockopt_asconf_supported+0x71/0x350
[  860.828934][ T3290]  sctp_getsockopt+0x964/0xaa0
[  860.829048][ T3290]  sock_common_getsockopt+0x5d/0x70
[  860.829108][ T3290]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  860.829143][ T3290]  do_sock_getsockopt+0x1fd/0x240
[  860.829196][ T3290]  __x64_sys_getsockopt+0x11e/0x1a0
[  860.829309][ T3290]  x64_sys_call+0x12aa/0x2fb0
[  860.829337][ T3290]  do_syscall_64+0xd0/0x1a0
[  860.829366][ T3290]  ? clear_bhb_loop+0x25/0x80
[  860.829445][ T3290]  ? clear_bhb_loop+0x25/0x80
[  860.829505][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.829532][ T3290] RIP: 0033:0x7fa735ade969
[  860.829629][ T3290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  860.829652][ T3290] RSP: 002b:00007fa734147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  860.829678][ T3290] RAX: ffffffffffffffda RBX: 00007fa735d05fa0 RCX: 00007fa735ade969
[  860.829694][ T3290] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000003
[  860.829710][ T3290] RBP: 00007fa734147090 R08: 0000200000001080 R09: 0000000000000000
[  860.829727][ T3290] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  860.829756][ T3290] R13: 0000000000000000 R14: 00007fa735d05fa0 R15: 00007ffca6fb1c18
[  860.829836][ T3290]  </TASK>
[  860.896981][ T3293] loop5: detected capacity change from 0 to 1024
[  861.046668][ T3293] EXT4-fs: Ignoring removed orlov option
[  861.091657][ T3306] loop4: detected capacity change from 0 to 512
[  861.107753][ T3306] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  861.209796][ T3293] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11292: bg 0: block 88: padding at end of block bitmap is not set
[  861.213161][ T3320] loop0: detected capacity change from 0 to 2048
[  861.285120][ T3320] x_tables: duplicate underflow at hook 1
[  861.298271][ T3325] loop4: detected capacity change from 0 to 8192
[  861.373599][ T3331] loop1: detected capacity change from 0 to 2048
[  861.443866][ T3350] loop4: detected capacity change from 0 to 1024
[  861.450396][ T3352] loop0: detected capacity change from 0 to 2048
[  861.453649][ T3350] EXT4-fs: Ignoring removed orlov option
[  861.496983][ T3350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11313: bg 0: block 88: padding at end of block bitmap is not set
[  861.528675][ T3362] loop5: detected capacity change from 0 to 8192
[  861.561364][ T3368] loop1: detected capacity change from 0 to 1024
[  861.569306][ T3368] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  861.580261][ T3368] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  861.616145][ T3368] JBD2: no valid journal superblock found
[  861.621936][ T3368] EXT4-fs (loop1): Could not load journal inode
[  861.662564][ T3383] loop5: detected capacity change from 0 to 1024
[  861.669554][ T3383] EXT4-fs: Ignoring removed orlov option
[  861.676194][ T3368] netlink: 'syz.1.11320': attribute type 13 has an invalid length.
[  861.708617][ T3383] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11324: bg 0: block 88: padding at end of block bitmap is not set
[  861.756874][ T3396] loop2: detected capacity change from 0 to 512
[  861.776621][ T3396] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  861.784411][ T3399] FAULT_INJECTION: forcing a failure.
[  861.784411][ T3399] name failslab, interval 1, probability 0, space 0, times 0
[  861.799851][ T3399] CPU: 1 UID: 0 PID: 3399 Comm: syz.1.11329 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  861.799887][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  861.799904][ T3399] Call Trace:
[  861.799912][ T3399]  <TASK>
[  861.799921][ T3399]  __dump_stack+0x1d/0x30
[  861.799948][ T3399]  dump_stack_lvl+0xe8/0x140
[  861.799967][ T3399]  dump_stack+0x15/0x1b
[  861.800032][ T3399]  should_fail_ex+0x265/0x280
[  861.800065][ T3399]  should_failslab+0x8c/0xb0
[  861.800094][ T3399]  kmem_cache_alloc_node_noprof+0x57/0x320
[  861.800202][ T3399]  ? __alloc_skb+0x101/0x320
[  861.800237][ T3399]  __alloc_skb+0x101/0x320
[  861.800277][ T3399]  netlink_alloc_large_skb+0xba/0xf0
[  861.800377][ T3399]  netlink_sendmsg+0x3cf/0x6b0
[  861.800422][ T3399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.800464][ T3399]  __sock_sendmsg+0x142/0x180
[  861.800525][ T3399]  ____sys_sendmsg+0x31e/0x4e0
[  861.800554][ T3399]  ___sys_sendmsg+0x17b/0x1d0
[  861.800596][ T3399]  __x64_sys_sendmsg+0xd4/0x160
[  861.800740][ T3399]  x64_sys_call+0x2999/0x2fb0
[  861.800773][ T3399]  do_syscall_64+0xd0/0x1a0
[  861.800827][ T3399]  ? clear_bhb_loop+0x25/0x80
[  861.800854][ T3399]  ? clear_bhb_loop+0x25/0x80
[  861.800874][ T3399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.800894][ T3399] RIP: 0033:0x7f115a21e969
[  861.800914][ T3399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  861.800939][ T3399] RSP: 002b:00007f1158887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  861.800960][ T3399] RAX: ffffffffffffffda RBX: 00007f115a445fa0 RCX: 00007f115a21e969
[  861.800973][ T3399] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  861.801019][ T3399] RBP: 00007f1158887090 R08: 0000000000000000 R09: 0000000000000000
[  861.801036][ T3399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.801051][ T3399] R13: 0000000000000000 R14: 00007f115a445fa0 R15: 00007ffceadade98
[  861.801073][ T3399]  </TASK>
[  862.036889][ T3407] loop1: detected capacity change from 0 to 1024
[  862.043780][ T3407] EXT4-fs: Ignoring removed orlov option
[  862.084363][ T3411] loop2: detected capacity change from 0 to 2048
[  862.094695][ T3407] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11332: bg 0: block 88: padding at end of block bitmap is not set
[  862.109305][ T3415] loop4: detected capacity change from 0 to 2048
[  862.210621][ T3434] loop1: detected capacity change from 0 to 2048
[  862.235571][ T3439] __nla_validate_parse: 2 callbacks suppressed
[  862.235607][ T3439] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11343'.
[  862.250050][ T3441] loop4: detected capacity change from 0 to 512
[  862.255785][ T3434]  loop1: p1 < > p4
[  862.261678][ T3434] loop1: p4 size 8388608 extends beyond EOD, truncated
[  862.288219][ T3441] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  862.378916][ T3454] loop1: detected capacity change from 0 to 1024
[  862.385847][ T3454] EXT4-fs: Ignoring removed orlov option
[  862.391270][   T29] kauditd_printk_skb: 130 callbacks suppressed
[  862.391289][   T29] audit: type=1326 audit(1746504486.413:23288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.410634][ T3454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11350: bg 0: block 88: padding at end of block bitmap is not set
[  862.421413][   T29] audit: type=1326 audit(1746504486.413:23289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.459316][   T29] audit: type=1326 audit(1746504486.413:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.482910][   T29] audit: type=1326 audit(1746504486.413:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.502184][ T3458] xt_CT: You must specify a L4 protocol and not use inversions on it
[  862.506829][   T29] audit: type=1326 audit(1746504486.413:23292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.538356][   T29] audit: type=1326 audit(1746504486.413:23293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.562074][   T29] audit: type=1326 audit(1746504486.413:23294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.585647][   T29] audit: type=1326 audit(1746504486.413:23295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.609414][   T29] audit: type=1326 audit(1746504486.413:23296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.633107][   T29] audit: type=1326 audit(1746504486.413:23297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.1.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115a21e969 code=0x7ffc0000
[  862.674507][ T3461] loop1: detected capacity change from 0 to 512
[  862.683730][ T3461] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.11351: corrupted in-inode xattr: invalid ea_ino
[  862.697991][ T3461] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.11351: couldn't read orphan inode 15 (err -117)
[  862.743099][ T3465] loop0: detected capacity change from 0 to 2048
[  862.768541][ T3473] serio: Serial port ptm1
[  862.788735][ T3479] x_tables: duplicate underflow at hook 1
[  862.878040][ T3485] loop4: detected capacity change from 0 to 2048
[  862.972142][ T3495] loop4: detected capacity change from 0 to 2048
[  863.005919][ T3495]  loop4: p1 < > p4
[  863.010430][ T3495] loop4: p4 size 8388608 extends beyond EOD, truncated
[  863.230909][ T3504] loop2: detected capacity change from 0 to 512
[  863.240148][ T3504] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  863.324180][ T3507] xt_CT: You must specify a L4 protocol and not use inversions on it
[  863.671353][ T3512] serio: Serial port ptm0
[  863.686517][ T3513] loop2: detected capacity change from 0 to 2048
[  863.695598][ T3515] loop0: detected capacity change from 0 to 2048
[  863.771182][ T3531] loop2: detected capacity change from 0 to 512
[  863.778050][ T3531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  863.788187][ T3531] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.11374: bad orphan inode 11
[  863.798869][ T3531] ext4_test_bit(bit=10, block=4) = 1
[  863.804216][ T3531] is_bad_inode(inode)=0
[  863.808426][ T3531] NEXT_ORPHAN(inode)=2080374784
[  863.813299][ T3531] max_ino=32
[  863.816559][ T3531] i_nlink=0
[  863.819895][ T3531] EXT4-fs (loop2): 1 truncate cleaned up
[  863.877316][ T3541] x_tables: duplicate underflow at hook 1
[  863.898222][ T3545] loop2: detected capacity change from 0 to 512
[  863.917333][ T3545] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  863.973305][ T3552] loop0: detected capacity change from 0 to 2048
[  863.992716][ T3554] loop2: detected capacity change from 0 to 256
[  864.019113][ T3560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.027732][ T3560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.050150][ T3560] loop4: detected capacity change from 0 to 512
[  864.077457][ T3562] loop0: detected capacity change from 0 to 8192
[  864.090927][ T3554] syz.2.11382: attempt to access beyond end of device
[  864.090927][ T3554] loop2: rw=2049, sector=256, nr_sectors = 288 limit=256
[  864.105702][ T3554] syz.2.11382: attempt to access beyond end of device
[  864.105702][ T3554] loop2: rw=2049, sector=608, nr_sectors = 320 limit=256
[  864.119823][ T3554] syz.2.11382: attempt to access beyond end of device
[  864.119823][ T3554] loop2: rw=2049, sector=960, nr_sectors = 64 limit=256
[  864.135367][ T3554] syz.2.11382: attempt to access beyond end of device
[  864.135367][ T3554] loop2: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  864.158486][ T3565] loop0: detected capacity change from 0 to 1024
[  864.165258][ T3565] EXT4-fs: Ignoring removed orlov option
[  864.179552][ T3565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11386: bg 0: block 88: padding at end of block bitmap is not set
[  864.198155][T29915] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  864.205946][T29915] FAT-fs (loop2): Filesystem has been set read-only
[  864.213839][T29915] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  864.372611][ T4047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.378726][ T3574] loop0: detected capacity change from 0 to 2048
[  864.428460][ T4047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.443908][ T3579] loop0: detected capacity change from 0 to 512
[  864.464901][ T3579] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  864.490109][ T4047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.528561][ T4047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.536107][ T3591] loop0: detected capacity change from 0 to 512
[  864.547577][ T3591] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  864.654092][ T3602] loop0: detected capacity change from 0 to 1024
[  864.662303][ T3602] EXT4-fs: Ignoring removed orlov option
[  864.671100][ T4047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  864.681620][ T4047] bond_slave_0: left promiscuous mode
[  864.683198][ T3602] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11398: bg 0: block 88: padding at end of block bitmap is not set
[  864.703847][ T4047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  864.712804][ T4047] bond_slave_1: left promiscuous mode
[  864.719147][ T4047] bond0 (unregistering): Released all slaves
[  864.728209][ T4047] bond1 (unregistering): Released all slaves
[  864.739607][ T3580] chnl_net:caif_netlink_parms(): no params data found
[  864.762022][ T3599] loop4: detected capacity change from 0 to 2048
[  864.796093][ T4047] hsr_slave_0: left promiscuous mode
[  864.801909][ T4047] hsr_slave_1: left promiscuous mode
[  864.807628][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  864.815097][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  864.822859][ T3605] Falling back ldisc for ttyS3.
[  864.836301][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  864.843744][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  864.855012][ T4047] veth1_macvtap: left promiscuous mode
[  864.864000][ T4047] veth0_macvtap: left promiscuous mode
[  864.868924][ T3618] serio: Serial port ptm0
[  864.870296][ T4047] veth1_vlan: left promiscuous mode
[  864.881128][ T4047] veth0_vlan: left promiscuous mode
[  864.887813][ T3617] loop1: detected capacity change from 0 to 256
[  864.951727][ T3617] syz.1.11403: attempt to access beyond end of device
[  864.951727][ T3617] loop1: rw=2049, sector=256, nr_sectors = 288 limit=256
[  864.965982][ T4047] team0 (unregistering): Port device team_slave_1 removed
[  864.967269][ T3617] syz.1.11403: attempt to access beyond end of device
[  864.967269][ T3617] loop1: rw=2049, sector=608, nr_sectors = 320 limit=256
[  864.996819][ T3622] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  865.000226][ T4047] team0 (unregistering): Port device team_slave_0 removed
[  865.038795][T29345] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  865.046608][T29345] FAT-fs (loop1): Filesystem has been set read-only
[  865.053680][T29345] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  865.140131][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[  865.147369][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.161022][ T3580] bridge_slave_0: entered allmulticast mode
[  865.174385][ T3580] bridge_slave_0: entered promiscuous mode
[  865.181737][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  865.188882][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.196228][ T3580] bridge_slave_1: entered allmulticast mode
[  865.202818][ T3580] bridge_slave_1: entered promiscuous mode
[  865.217632][ T3638] loop0: detected capacity change from 0 to 2048
[  865.229796][ T3580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.240649][ T3580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.270783][ T3580] team0: Port device team_slave_0 added
[  865.281505][ T3580] team0: Port device team_slave_1 added
[  865.308740][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.315888][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.337905][ T3650] loop5: detected capacity change from 0 to 1024
[  865.341915][ T3580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.359644][ T3650] EXT4-fs: Ignoring removed orlov option
[  865.361945][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.372350][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.372659][ T3651] loop4: detected capacity change from 0 to 2048
[  865.398304][ T3580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  865.406393][ T3650] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11415: bg 0: block 88: padding at end of block bitmap is not set
[  865.452420][ T3580] hsr_slave_0: entered promiscuous mode
[  865.458876][ T3580] hsr_slave_1: entered promiscuous mode
[  865.464853][ T3580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  865.509091][ T3580] Cannot create hsr debugfs directory
[  865.521957][ T3662] FAULT_INJECTION: forcing a failure.
[  865.521957][ T3662] name failslab, interval 1, probability 0, space 0, times 0
[  865.534757][ T3662] CPU: 1 UID: 0 PID: 3662 Comm: syz.0.11419 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  865.534829][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  865.534901][ T3662] Call Trace:
[  865.534910][ T3662]  <TASK>
[  865.534920][ T3662]  __dump_stack+0x1d/0x30
[  865.534947][ T3662]  dump_stack_lvl+0xe8/0x140
[  865.534973][ T3662]  dump_stack+0x15/0x1b
[  865.534995][ T3662]  should_fail_ex+0x265/0x280
[  865.535064][ T3662]  should_failslab+0x8c/0xb0
[  865.535153][ T3662]  kmem_cache_alloc_node_noprof+0x57/0x320
[  865.535191][ T3662]  ? __alloc_skb+0x101/0x320
[  865.535223][ T3662]  __alloc_skb+0x101/0x320
[  865.535305][ T3662]  netlink_alloc_large_skb+0xba/0xf0
[  865.535402][ T3662]  netlink_sendmsg+0x3cf/0x6b0
[  865.535465][ T3662]  ? __pfx_netlink_sendmsg+0x10/0x10
[  865.535559][ T3662]  __sock_sendmsg+0x142/0x180
[  865.535587][ T3662]  ____sys_sendmsg+0x31e/0x4e0
[  865.535609][ T3662]  ___sys_sendmsg+0x17b/0x1d0
[  865.535704][ T3662]  __x64_sys_sendmsg+0xd4/0x160
[  865.535726][ T3662]  x64_sys_call+0x2999/0x2fb0
[  865.535749][ T3662]  do_syscall_64+0xd0/0x1a0
[  865.535811][ T3662]  ? clear_bhb_loop+0x25/0x80
[  865.535861][ T3662]  ? clear_bhb_loop+0x25/0x80
[  865.535881][ T3662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.535954][ T3662] RIP: 0033:0x7fa735ade969
[  865.535970][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  865.535988][ T3662] RSP: 002b:00007fa734147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  865.536006][ T3662] RAX: ffffffffffffffda RBX: 00007fa735d05fa0 RCX: 00007fa735ade969
[  865.536093][ T3662] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  865.536105][ T3662] RBP: 00007fa734147090 R08: 0000000000000000 R09: 0000000000000000
[  865.536117][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  865.536161][ T3662] R13: 0000000000000000 R14: 00007fa735d05fa0 R15: 00007ffca6fb1c18
[  865.536180][ T3662]  </TASK>
[  865.799146][ T4047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.817733][ T3684] loop0: detected capacity change from 0 to 2048
[  865.833348][ T3686] loop4: detected capacity change from 0 to 512
[  865.854708][ T3686] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  865.865894][ T4047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.926782][ T3699] loop4: detected capacity change from 0 to 1024
[  865.933520][ T3699] EXT4-fs: Ignoring removed orlov option
[  865.944310][ T4047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.945808][ T3699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11429: bg 0: block 88: padding at end of block bitmap is not set
[  865.978766][ T3702] loop5: detected capacity change from 0 to 2048
[  865.995758][ T3695] Falling back ldisc for ttyS3.
[  866.006621][ T3704] netlink: 'syz.0.11431': attribute type 4 has an invalid length.
[  866.014577][ T3704] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11431'.
[  866.045914][ T3580] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  866.059946][ T3580] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  866.068951][ T3713] FAULT_INJECTION: forcing a failure.
[  866.068951][ T3713] name failslab, interval 1, probability 0, space 0, times 0
[  866.081698][ T3713] CPU: 0 UID: 0 PID: 3713 Comm: syz.4.11430 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  866.081735][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  866.081752][ T3713] Call Trace:
[  866.081761][ T3713]  <TASK>
[  866.081770][ T3713]  __dump_stack+0x1d/0x30
[  866.081820][ T3713]  dump_stack_lvl+0xe8/0x140
[  866.081842][ T3713]  dump_stack+0x15/0x1b
[  866.081939][ T3713]  should_fail_ex+0x265/0x280
[  866.081971][ T3713]  should_failslab+0x8c/0xb0
[  866.082004][ T3713]  kmem_cache_alloc_node_noprof+0x57/0x320
[  866.082070][ T3713]  ? __alloc_skb+0x101/0x320
[  866.082103][ T3713]  __alloc_skb+0x101/0x320
[  866.082199][ T3713]  netlink_alloc_large_skb+0xba/0xf0
[  866.082289][ T3713]  netlink_sendmsg+0x3cf/0x6b0
[  866.082331][ T3713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.082363][ T3713]  __sock_sendmsg+0x142/0x180
[  866.082389][ T3713]  ____sys_sendmsg+0x31e/0x4e0
[  866.082489][ T3713]  ___sys_sendmsg+0x17b/0x1d0
[  866.082521][ T3713]  __x64_sys_sendmsg+0xd4/0x160
[  866.082545][ T3713]  x64_sys_call+0x2999/0x2fb0
[  866.082631][ T3713]  do_syscall_64+0xd0/0x1a0
[  866.082693][ T3713]  ? clear_bhb_loop+0x25/0x80
[  866.082775][ T3713]  ? clear_bhb_loop+0x25/0x80
[  866.082797][ T3713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.082885][ T3713] RIP: 0033:0x7f7fb449e969
[  866.082900][ T3713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  866.082990][ T3713] RSP: 002b:00007f7fb2ae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  866.083009][ T3713] RAX: ffffffffffffffda RBX: 00007f7fb46c6080 RCX: 00007f7fb449e969
[  866.083021][ T3713] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  866.083087][ T3713] RBP: 00007f7fb2ae6090 R08: 0000000000000000 R09: 0000000000000000
[  866.083099][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  866.083111][ T3713] R13: 0000000000000001 R14: 00007f7fb46c6080 R15: 00007ffe1ba78878
[  866.083129][ T3713]  </TASK>
[  866.286300][ T3580] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  866.313883][ T3580] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  866.326140][ T3664] chnl_net:caif_netlink_parms(): no params data found
[  866.339253][ T4047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.386808][ T3726] loop5: detected capacity change from 0 to 1024
[  866.393593][ T3726] EXT4-fs: Ignoring removed orlov option
[  866.394144][ T3722] x_tables: duplicate underflow at hook 1
[  866.429104][ T3726] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11437: bg 0: block 88: padding at end of block bitmap is not set
[  866.443825][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.451129][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.452120][ T3735] loop0: detected capacity change from 0 to 1024
[  866.459189][ T3664] bridge_slave_0: entered allmulticast mode
[  866.467444][ T3735] EXT4-fs: Ignoring removed orlov option
[  866.471474][ T3664] bridge_slave_0: entered promiscuous mode
[  866.497206][ T4047] team0: left allmulticast mode
[  866.502554][ T4047] team_slave_0: left allmulticast mode
[  866.508100][ T4047] team_slave_1: left allmulticast mode
[  866.510041][ T3735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11439: bg 0: block 88: padding at end of block bitmap is not set
[  866.513770][ T4047] bridge0: port 3(team0) entered disabled state
[  866.537287][ T4047] bridge_slave_1: left allmulticast mode
[  866.543067][ T4047] bridge_slave_1: left promiscuous mode
[  866.548858][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.559050][ T4047] bridge_slave_0: left promiscuous mode
[  866.564761][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.697616][ T4047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.706499][ T4047] bond_slave_0: left promiscuous mode
[  866.713305][ T4047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.722191][ T4047] bond_slave_1: left promiscuous mode
[  866.780600][ T3747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  866.906257][ T4047] bond0 (unregistering): Released all slaves
[  866.945722][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.952872][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.961975][ T3664] bridge_slave_1: entered allmulticast mode
[  866.970887][ T3664] bridge_slave_1: entered promiscuous mode
[  867.004280][ T3664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.051140][ T4047] hsr_slave_0: left promiscuous mode
[  867.059155][ T4047] hsr_slave_1: left promiscuous mode
[  867.064900][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  867.072472][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.084667][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  867.092151][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.093072][ T3749] FAULT_INJECTION: forcing a failure.
[  867.093072][ T3749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.112505][ T3749] CPU: 1 UID: 0 PID: 3749 Comm: syz.0.11443 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  867.112530][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  867.112578][ T3749] Call Trace:
[  867.112584][ T3749]  <TASK>
[  867.112591][ T3749]  __dump_stack+0x1d/0x30
[  867.112637][ T3749]  dump_stack_lvl+0xe8/0x140
[  867.112654][ T3749]  dump_stack+0x15/0x1b
[  867.112668][ T3749]  should_fail_ex+0x265/0x280
[  867.112698][ T3749]  should_fail+0xb/0x20
[  867.112724][ T3749]  should_fail_usercopy+0x1a/0x20
[  867.112740][ T3749]  _copy_from_user+0x1c/0xb0
[  867.112759][ T3749]  sctp_getsockopt_local_addrs+0x85/0x930
[  867.112855][ T3749]  ? avc_has_perm+0xd3/0x150
[  867.112887][ T3749]  ? selinux_socket_getsockopt+0x175/0x1b0
[  867.112910][ T3749]  sctp_getsockopt+0x631/0xaa0
[  867.112938][ T3749]  sock_common_getsockopt+0x5d/0x70
[  867.112992][ T3749]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  867.113090][ T3749]  do_sock_getsockopt+0x1fd/0x240
[  867.113180][ T3749]  __x64_sys_getsockopt+0x11e/0x1a0
[  867.113213][ T3749]  x64_sys_call+0x12aa/0x2fb0
[  867.113232][ T3749]  do_syscall_64+0xd0/0x1a0
[  867.113252][ T3749]  ? clear_bhb_loop+0x25/0x80
[  867.113338][ T3749]  ? clear_bhb_loop+0x25/0x80
[  867.113357][ T3749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.113375][ T3749] RIP: 0033:0x7fa735ade969
[  867.113388][ T3749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  867.113441][ T3749] RSP: 002b:00007fa734147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  867.113533][ T3749] RAX: ffffffffffffffda RBX: 00007fa735d05fa0 RCX: 00007fa735ade969
[  867.113543][ T3749] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003
[  867.113554][ T3749] RBP: 00007fa734147090 R08: 0000200000000100 R09: 0000000000000000
[  867.113564][ T3749] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  867.113575][ T3749] R13: 0000000000000000 R14: 00007fa735d05fa0 R15: 00007ffca6fb1c18
[  867.113591][ T3749]  </TASK>
[  867.331067][ T4047] veth1_macvtap: left promiscuous mode
[  867.337640][ T4047] veth0_macvtap: left promiscuous mode
[  867.343736][ T4047] veth1_vlan: left promiscuous mode
[  867.349359][ T4047] veth0_vlan: left promiscuous mode
[  867.414918][ T4047] team_slave_1 (unregistering): left promiscuous mode
[  867.424428][ T4047] team0 (unregistering): Port device team_slave_1 removed
[  867.434709][ T4047] team_slave_0 (unregistering): left promiscuous mode
[  867.445048][ T4047] team0 (unregistering): Port device team_slave_0 removed
[  867.490055][ T3664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  867.518736][ T3580] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.526925][ T3664] team0: Port device team_slave_0 added
[  867.535151][ T3664] team0: Port device team_slave_1 added
[  867.546181][ T3580] 8021q: adding VLAN 0 to HW filter on device team0
[  867.570418][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.577549][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.578887][ T3764] loop4: detected capacity change from 0 to 1024
[  867.603554][ T3664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.604737][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.627969][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.637146][ T3764] EXT4-fs: Ignoring removed orlov option
[  867.653975][ T3664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.681841][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.689028][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.703620][ T3764] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11450: bg 0: block 88: padding at end of block bitmap is not set
[  867.705981][ T3664] hsr_slave_0: entered promiscuous mode
[  867.725544][ T3664] hsr_slave_1: entered promiscuous mode
[  867.733444][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.740565][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.755664][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  867.755680][   T29] audit: type=1400 audit(1746504491.813:23546): avc:  denied  { egress } for  pid=3381 comm="kworker/0:4" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  867.793209][   T29] audit: type=1400 audit(1746504491.813:23547): avc:  denied  { sendto } for  pid=3381 comm="kworker/0:4" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  867.793860][ T3580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  867.826221][ T3580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  867.880015][ T3777] netlink: 'syz.4.11452': attribute type 5 has an invalid length.
[  867.909399][ T3580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.939398][ T3664] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  867.950414][ T3664] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  867.962800][ T3664] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  867.970912][ T4047] IPVS: stop unused estimator thread 0...
[  867.972760][ T3664] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  868.031182][ T3664] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.046216][ T3664] 8021q: adding VLAN 0 to HW filter on device team0
[  868.057985][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.065135][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.075241][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.082409][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.107524][ T3580] veth0_vlan: entered promiscuous mode
[  868.118816][ T3580] veth1_vlan: entered promiscuous mode
[  868.142900][ T3580] veth0_macvtap: entered promiscuous mode
[  868.150897][ T3580] veth1_macvtap: entered promiscuous mode
[  868.162728][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.173346][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.183222][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.193786][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.203647][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.214082][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.225366][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.239051][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.249608][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.259565][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.270156][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.280511][ T3580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.291094][ T3580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.302425][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.316129][ T3664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  868.325391][ T3580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.334166][ T3580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.342923][ T3580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.351747][ T3580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.420895][   T29] audit: type=1400 audit(1746504492.473:23548): avc:  denied  { mounton } for  pid=3580 comm="syz-executor" path="/root/syzkaller.q6gUWI/syz-tmp" dev="sda1" ino=1983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  868.448925][   T29] audit: type=1400 audit(1746504492.503:23549): avc:  denied  { mount } for  pid=3580 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  868.471345][   T29] audit: type=1400 audit(1746504492.503:23550): avc:  denied  { mount } for  pid=3580 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  868.487736][ T3807] loop5: detected capacity change from 0 to 2048
[  868.493466][   T29] audit: type=1400 audit(1746504492.503:23551): avc:  denied  { mounton } for  pid=3580 comm="syz-executor" path="/root/syzkaller.q6gUWI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  868.507160][ T3813] xt_CT: You must specify a L4 protocol and not use inversions on it
[  868.526596][   T29] audit: type=1400 audit(1746504492.503:23552): avc:  denied  { mounton } for  pid=3580 comm="syz-executor" path="/root/syzkaller.q6gUWI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=135463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  868.536542][   T29] audit: type=1400 audit(1746504492.583:23553): avc:  denied  { mounton } for  pid=3580 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  868.586108][   T29] audit: type=1400 audit(1746504492.583:23554): avc:  denied  { mount } for  pid=3580 comm="syz-executor" name="/" dev="gadgetfs" ino=3729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  868.601869][ T3664] veth0_vlan: entered promiscuous mode
[  868.619701][ T3664] veth1_vlan: entered promiscuous mode
[  868.626246][ T3807]  loop5: p1 < > p4
[  868.631288][ T3807] loop5: p4 size 8388608 extends beyond EOD, truncated
[  868.637700][ T3818] loop6: detected capacity change from 0 to 2048
[  868.664279][ T3664] veth0_macvtap: entered promiscuous mode
[  868.677091][ T3664] veth1_macvtap: entered promiscuous mode
[  868.687778][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.698278][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.708172][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.718707][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.728561][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.739031][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.749133][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.759655][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.771175][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.779485][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.790434][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.800305][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.810996][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.817212][   T29] audit: type=1326 audit(1746504492.853:23555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.5.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  868.820831][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.820846][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.820862][ T3664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.875757][ T3664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.931499][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.944710][ T3664] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.953497][ T3664] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.962283][ T3664] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.971073][ T3664] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  869.048634][ T3834] loop5: detected capacity change from 0 to 512
[  869.092093][ T3834] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  869.222447][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11464'.
[  869.231727][ T3844] IPVS: Error joining to the multicast group
[  869.544270][ T3857] bond0: entered promiscuous mode
[  869.549558][ T3857] bond_slave_0: entered promiscuous mode
[  869.555399][ T3857] bond_slave_1: entered promiscuous mode
[  869.603326][ T3863] loop5: detected capacity change from 0 to 2048
[  869.699955][ T3867] openvswitch: netlink: Message has 6 unknown bytes.
[  869.743556][   T55] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  869.778047][   T23] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  869.785600][   T23] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  869.789256][   T55] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  869.793147][   T23] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  869.805803][   T55] EXT4-fs (loop6): This should not happen!! Data will be lost
[  869.805803][   T55] 
[  869.826334][   T55] EXT4-fs (loop6): Total free blocks count 0
[  869.832363][   T55] EXT4-fs (loop6): Free/Dirty block details
[  869.836966][   T23] hid-generic 0000:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  869.838513][   T55] EXT4-fs (loop6): free_blocks=2415919504
[  869.853677][   T55] EXT4-fs (loop6): dirty_blocks=16400
[  869.859145][   T55] EXT4-fs (loop6): Block reservation details
[  869.865215][   T55] EXT4-fs (loop6): i_reserved_data_blocks=1025
[  869.904157][   T55] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  869.917144][   T55] EXT4-fs (loop6): This should not happen!! Data will be lost
[  869.917144][   T55] 
[  869.980788][ T3878] loop0: detected capacity change from 0 to 512
[  869.990218][ T3878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  869.999993][ T3879] loop5: detected capacity change from 0 to 512
[  870.008915][ T3879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  870.018750][ T3878] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  870.032330][ T3879] EXT4-fs (loop5): orphan cleanup on readonly fs
[  870.048144][ T3878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11475: corrupted xattr block 32: bad e_name length
[  870.091512][ T3884] loop4: detected capacity change from 0 to 1024
[  870.100889][ T3878] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  870.110818][ T3884] EXT4-fs: Ignoring removed orlov option
[  870.111446][ T3879] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11474: bg 0: block 248: padding at end of block bitmap is not set
[  870.118454][ T3878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11475: corrupted xattr block 32: bad e_name length
[  870.135761][ T3879] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.11474: Failed to acquire dquot type 1
[  870.156928][ T3879] EXT4-fs (loop5): 1 truncate cleaned up
[  870.157677][ T3878] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  870.183576][ T3884] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11476: bg 0: block 88: padding at end of block bitmap is not set
[  870.198525][ T3878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11475: corrupted xattr block 32: bad e_name length
[  870.267919][ T3898] loop4: detected capacity change from 0 to 1024
[  870.274842][ T3898] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  870.285808][ T3898] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  870.296659][ T3898] JBD2: no valid journal superblock found
[  870.302459][ T3898] EXT4-fs (loop4): Could not load journal inode
[  870.320423][ T3898] loop4: detected capacity change from 0 to 1024
[  870.330341][ T3898] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.11478: Failed to acquire dquot type 0
[  870.342488][ T3898] EXT4-fs (loop4): 1 truncate cleaned up
[  870.360012][ T3898] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  870.420468][ T3904] loop4: detected capacity change from 0 to 2048
[  870.488584][ T3906] loop4: detected capacity change from 0 to 1024
[  870.495633][ T3906] EXT4-fs: Ignoring removed orlov option
[  870.513795][ T3906] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11482: bg 0: block 88: padding at end of block bitmap is not set
[  870.558167][ T3912] loop4: detected capacity change from 0 to 256
[  870.596108][ T3914] Falling back ldisc for ttyS3.
[  870.611514][ T3914] loop7: detected capacity change from 0 to 2048
[  870.618108][ T3912] bio_check_eod: 2 callbacks suppressed
[  870.618124][ T3912] syz.4.11484: attempt to access beyond end of device
[  870.618124][ T3912] loop4: rw=2049, sector=256, nr_sectors = 288 limit=256
[  870.639257][ T3912] syz.4.11484: attempt to access beyond end of device
[  870.639257][ T3912] loop4: rw=2049, sector=608, nr_sectors = 320 limit=256
[  870.653661][ T3912] syz.4.11484: attempt to access beyond end of device
[  870.653661][ T3912] loop4: rw=2049, sector=960, nr_sectors = 64 limit=256
[  870.668768][ T3912] syz.4.11484: attempt to access beyond end of device
[  870.668768][ T3912] loop4: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  870.702179][T29696] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  870.709843][T29696] FAT-fs (loop4): Filesystem has been set read-only
[  870.718133][T29696] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  870.838679][ T3928] loop0: detected capacity change from 0 to 512
[  870.841897][ T3927] loop7: detected capacity change from 0 to 2048
[  870.846429][ T3928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  870.867907][ T3928] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  870.884734][ T3928] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11491: corrupted xattr block 32: bad e_name length
[  870.899604][ T3928] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  870.908831][ T3928] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11491: corrupted xattr block 32: bad e_name length
[  870.922899][ T3928] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  870.932029][ T3928] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11491: corrupted xattr block 32: bad e_name length
[  870.946883][ T2377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.000288][ T2377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.076431][ T3941] Falling back ldisc for ttyS3.
[  871.082122][ T2377] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.106621][ T3941] loop7: detected capacity change from 0 to 2048
[  871.129376][ T2377] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.188695][ T3956] loop5: detected capacity change from 0 to 512
[  871.200022][ T3956] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  871.291004][ T2377] bridge_slave_1: left allmulticast mode
[  871.296880][ T2377] bridge_slave_1: left promiscuous mode
[  871.302719][ T2377] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.306729][ T3968] loop7: detected capacity change from 0 to 1024
[  871.317279][ T2377] bridge_slave_0: left promiscuous mode
[  871.317734][ T3968] EXT4-fs: Ignoring removed orlov option
[  871.322937][ T2377] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.335344][ T3968] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.11505: bg 0: block 88: padding at end of block bitmap is not set
[  871.417143][ T3975] loop7: detected capacity change from 0 to 2048
[  871.430138][ T2377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  871.439082][ T2377] bond_slave_0: left promiscuous mode
[  871.446307][ T2377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  871.455451][ T2377] bond_slave_1: left promiscuous mode
[  871.461765][ T2377] bond0 (unregistering): Released all slaves
[  871.475510][ T3971] wg2: entered promiscuous mode
[  871.480448][ T3971] wg2: entered allmulticast mode
[  871.480638][ T3979] loop7: detected capacity change from 0 to 512
[  871.500038][ T3979] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  871.510396][ T3939] chnl_net:caif_netlink_parms(): no params data found
[  871.557884][ T2377] hsr_slave_0: left promiscuous mode
[  871.563574][ T2377] hsr_slave_1: left promiscuous mode
[  871.573696][ T2377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.581284][ T3987] loop6: detected capacity change from 0 to 2048
[  871.581300][ T2377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.595242][ T2377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.602742][ T2377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.613467][ T2377] veth1_macvtap: left promiscuous mode
[  871.623232][ T2377] veth0_macvtap: left promiscuous mode
[  871.630511][ T2377] veth1_vlan: left promiscuous mode
[  871.636647][ T2377] veth0_vlan: left promiscuous mode
[  871.655708][ T3992] loop6: detected capacity change from 0 to 2048
[  871.716095][ T2377] team0 (unregistering): Port device team_slave_1 removed
[  871.744007][ T2377] team0 (unregistering): Port device team_slave_0 removed
[  871.751538][ T4004] serio: Serial port ptm0
[  871.768473][ T4006] loop6: detected capacity change from 0 to 2048
[  871.808286][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.815446][ T3939] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.825955][ T3939] bridge_slave_0: entered allmulticast mode
[  871.833011][ T3939] bridge_slave_0: entered promiscuous mode
[  871.834725][ T4006] x_tables: duplicate underflow at hook 1
[  871.840178][ T3939] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.851825][ T3939] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.859029][ T3939] bridge_slave_1: entered allmulticast mode
[  871.865985][ T3939] bridge_slave_1: entered promiscuous mode
[  871.896959][ T4012] loop7: detected capacity change from 0 to 256
[  871.913092][ T3939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.929619][ T3939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.969208][ T3939] team0: Port device team_slave_0 added
[  871.981215][ T3939] team0: Port device team_slave_1 added
[  871.982422][ T4012] syz.7.11516: attempt to access beyond end of device
[  871.982422][ T4012] loop7: rw=2049, sector=256, nr_sectors = 288 limit=256
[  872.004324][ T4012] syz.7.11516: attempt to access beyond end of device
[  872.004324][ T4012] loop7: rw=2049, sector=608, nr_sectors = 320 limit=256
[  872.020836][ T4012] syz.7.11516: attempt to access beyond end of device
[  872.020836][ T4012] loop7: rw=2049, sector=960, nr_sectors = 64 limit=256
[  872.039560][ T4012] syz.7.11516: attempt to access beyond end of device
[  872.039560][ T4012] loop7: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  872.055091][ T3939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.062190][ T3939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  872.088233][ T3939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.091087][ T3939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.106074][ T3939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  872.132677][ T3939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.132956][ T4024] loop6: detected capacity change from 0 to 2048
[  872.165931][ T3939] hsr_slave_0: entered promiscuous mode
[  872.174321][ T3939] hsr_slave_1: entered promiscuous mode
[  872.180805][ T3939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  872.191995][ T4026] loop0: detected capacity change from 0 to 512
[  872.198339][ T3939] Cannot create hsr debugfs directory
[  872.207001][ T4026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  872.242774][ T4026] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  872.292583][ T4026] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11522: corrupted xattr block 32: bad e_name length
[  872.308463][ T4026] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  872.320657][ T4026] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11522: corrupted xattr block 32: bad e_name length
[  872.328905][ T4041] loop6: detected capacity change from 0 to 2048
[  872.339340][ T4026] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  872.351195][ T4026] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.11522: corrupted xattr block 32: bad e_name length
[  872.376883][ T4041] x_tables: duplicate underflow at hook 1
[  872.391950][ T3939] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  872.401486][ T3939] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  872.415828][ T3939] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  872.435509][ T3939] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  872.458023][ T4051] loop6: detected capacity change from 0 to 1024
[  872.464855][ T4051] EXT4-fs: Ignoring removed orlov option
[  872.482538][ T3939] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.489673][ T3939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.497069][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.504138][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.511618][ T4050] loop7: detected capacity change from 0 to 8192
[  872.537873][ T4051] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11528: bg 0: block 88: padding at end of block bitmap is not set
[  872.556657][ T3939] 8021q: adding VLAN 0 to HW filter on device bond0
[  872.564115][ T4053] 9pnet_fd: Insufficient options for proto=fd
[  872.570931][ T4053] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  872.581773][ T4053] SELinux: failed to load policy
[  872.593966][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.608258][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.632052][ T3939] 8021q: adding VLAN 0 to HW filter on device team0
[  872.650649][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.657930][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.666849][ T4057] loop5: detected capacity change from 0 to 2048
[  872.688519][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.695803][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.709889][ T3939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  872.792385][ T4069] loop7: detected capacity change from 0 to 2048
[  872.804023][ T3939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.851569][ T4075] xt_CT: You must specify a L4 protocol and not use inversions on it
[  872.926996][ T4078] loop5: detected capacity change from 0 to 2048
[  873.131613][ T4078] x_tables: duplicate underflow at hook 1
[  873.405422][   T29] kauditd_printk_skb: 244 callbacks suppressed
[  873.405438][   T29] audit: type=1326 audit(1746504497.453:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.517729][ T4099] serio: Serial port ptm0
[  873.532006][ T4101] loop5: detected capacity change from 0 to 1024
[  873.538857][ T3939] veth0_vlan: entered promiscuous mode
[  873.546622][   T29] audit: type=1326 audit(1746504497.493:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.555861][ T4101] EXT4-fs: Ignoring removed orlov option
[  873.570805][   T29] audit: type=1326 audit(1746504497.493:23798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.591840][ T4103] loop6: detected capacity change from 0 to 2048
[  873.600529][   T29] audit: type=1326 audit(1746504497.493:23799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.630637][   T29] audit: type=1326 audit(1746504497.493:23800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.654348][   T29] audit: type=1326 audit(1746504497.493:23801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.683352][   T29] audit: type=1326 audit(1746504497.493:23802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.707308][   T29] audit: type=1326 audit(1746504497.493:23803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.731553][   T29] audit: type=1326 audit(1746504497.493:23804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.755588][   T29] audit: type=1326 audit(1746504497.493:23805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.5.11540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3efdb1e969 code=0x7ffc0000
[  873.762275][ T4101] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11542: bg 0: block 88: padding at end of block bitmap is not set
[  873.804764][   T51] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  873.805552][ T3939] veth1_vlan: entered promiscuous mode
[  873.825242][   T51] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  873.836206][ T4103]  loop6: p1 < > p4
[  873.837916][   T51] EXT4-fs (loop7): This should not happen!! Data will be lost
[  873.837916][   T51] 
[  873.850242][ T3939] veth0_macvtap: entered promiscuous mode
[  873.851299][   T51] EXT4-fs (loop7): Total free blocks count 0
[  873.857678][ T4103] loop6: p4 size 8388608 extends beyond EOD, 
[  873.862960][   T51] EXT4-fs (loop7): Free/Dirty block details
[  873.862979][   T51] EXT4-fs (loop7): free_blocks=2415919504
[  873.869080][ T4103] truncated
[  873.870979][ T3939] veth1_macvtap: entered promiscuous mode
[  873.874973][   T51] EXT4-fs (loop7): dirty_blocks=11152
[  873.886964][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.889861][   T51] EXT4-fs (loop7): Block reservation details
[  873.895118][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.905547][   T51] EXT4-fs (loop7): i_reserved_data_blocks=697
[  873.927597][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.938086][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.948099][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.953014][   T51] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  873.958908][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.958956][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  873.958974][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  873.984410][ T3939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  873.993072][   T51] EXT4-fs (loop7): This should not happen!! Data will be lost
[  873.993072][   T51] 
[  874.011794][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.031010][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.041151][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.051857][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.061747][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.072412][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.082278][ T3939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  874.092776][ T3939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.113387][ T3939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.154963][ T3939] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.163899][ T3939] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.172703][ T3939] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.181526][ T3939] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  874.248203][ T4121] loop8: detected capacity change from 0 to 256
[  874.288336][ T4124] loop8: detected capacity change from 0 to 2048
[  874.383097][ T4128] loop5: detected capacity change from 0 to 1024
[  874.390066][ T4128] EXT4-fs: Ignoring removed orlov option
[  874.424161][ T4128] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11553: bg 0: block 88: padding at end of block bitmap is not set
[  874.540705][ T4135] loop5: detected capacity change from 0 to 2048
[  874.542371][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11544'.
[  874.556737][ T4137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  874.631380][ T4143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  874.704308][ T4144] bpf: Bad value for 'defcontext'
[  874.764157][ T4142] loop7: detected capacity change from 0 to 2048
[  874.901345][ T4147] loop0: detected capacity change from 0 to 8192
[  874.981555][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11558'.
[  875.000225][ T4150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  875.015891][ T4135] x_tables: duplicate underflow at hook 1
[  875.057694][ T4155] loop0: detected capacity change from 0 to 512
[  875.074204][ T4159] loop7: detected capacity change from 0 to 512
[  875.084404][ T4159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  875.108653][ T4155] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  875.124503][ T4159] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.141793][ T4159] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.11560: corrupted xattr block 32: bad e_name length
[  875.172438][ T4159] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  875.191645][ T4159] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.11560: corrupted xattr block 32: bad e_name length
[  875.233964][ T4159] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  875.243164][ T4159] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.11560: corrupted xattr block 32: bad e_name length
[  875.348273][ T4175] loop8: detected capacity change from 0 to 2048
[  875.367163][ T4173] loop6: detected capacity change from 0 to 2048
[  875.407071][ T4173]  loop6: p1 < > p4
[  875.412033][ T4173] loop6: p4 size 8388608 extends beyond EOD, truncated
[  875.487153][ T4183] loop8: detected capacity change from 0 to 512
[  875.494541][ T4183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  875.505271][ T4183] EXT4-fs (loop8): orphan cleanup on readonly fs
[  875.512247][ T4183] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11569: bg 0: block 248: padding at end of block bitmap is not set
[  875.523619][ T4185] loop6: detected capacity change from 0 to 512
[  875.528434][ T4183] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.11569: Failed to acquire dquot type 1
[  875.547216][ T4183] EXT4-fs (loop8): 1 truncate cleaned up
[  875.553774][ T4185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  875.575204][ T4185] EXT4-fs (loop6): orphan cleanup on readonly fs
[  875.585815][ T4185] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11570: bg 0: block 248: padding at end of block bitmap is not set
[  875.601033][ T4185] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.11570: Failed to acquire dquot type 1
[  875.601815][ T4185] EXT4-fs (loop6): 1 truncate cleaned up
[  875.682384][ T4194] loop8: detected capacity change from 0 to 2048
[  875.717725][ T3381] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  875.725225][ T3381] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  875.732707][ T3381] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  875.756173][ T3381] hid-generic 0000:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  875.786383][ T4201] loop0: detected capacity change from 0 to 2048
[  875.914685][ T3664] EXT4-fs unmount: 168 callbacks suppressed
[  875.914705][ T3664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.988177][ T3939] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.075903][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11583'.
[  876.090971][ T4222] xt_CT: You must specify a L4 protocol and not use inversions on it
[  876.209809][ T4218] loop7: detected capacity change from 0 to 2048
[  876.249273][ T4230] loop0: detected capacity change from 0 to 256
[  876.256510][ T4223] Falling back ldisc for ttyS3.
[  876.267920][ T4232] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  876.479748][ T4230] syz.0.11587: attempt to access beyond end of device
[  876.479748][ T4230] loop0: rw=2049, sector=256, nr_sectors = 288 limit=256
[  876.505760][ T4230] syz.0.11587: attempt to access beyond end of device
[  876.505760][ T4230] loop0: rw=2049, sector=608, nr_sectors = 320 limit=256
[  876.533493][ T4230] syz.0.11587: attempt to access beyond end of device
[  876.533493][ T4230] loop0: rw=2049, sector=960, nr_sectors = 64 limit=256
[  876.572293][ T4241] loop6: detected capacity change from 0 to 512
[  876.586164][ T4241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  876.601721][ T4230] syz.0.11587: attempt to access beyond end of device
[  876.601721][ T4230] loop0: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  876.625445][ T4241] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  876.733300][ T4245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11590'.
[  876.778588][ T4246] loop0: detected capacity change from 0 to 256
[  876.790942][ T3580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.926763][ T4254] loop5: detected capacity change from 0 to 2048
[  876.939577][ T4246] syz.0.11591: attempt to access beyond end of device
[  876.939577][ T4246] loop0: rw=2049, sector=256, nr_sectors = 288 limit=256
[  876.966608][ T4257] loop6: detected capacity change from 0 to 2048
[  876.973956][ T4246] syz.0.11591: attempt to access beyond end of device
[  876.973956][ T4246] loop0: rw=2049, sector=608, nr_sectors = 320 limit=256
[  876.996345][ T4254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  877.010400][ T4246] syz.0.11591: attempt to access beyond end of device
[  877.010400][ T4246] loop0: rw=2049, sector=960, nr_sectors = 64 limit=256
[  877.037715][ T4246] syz.0.11591: attempt to access beyond end of device
[  877.037715][ T4246] loop0: rw=2049, sector=1056, nr_sectors = 1380 limit=256
[  877.054037][ T4257]  loop6: p1 < > p4
[  877.059137][ T4254] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  877.070594][ T4257] loop6: p4 size 8388608 extends beyond EOD, truncated
[  877.149835][ T4254] EXT4-fs error (device loop5): ext4_lookup:1789: inode #14: comm syz.5.11594: invalid fast symlink length 39
[  877.187797][ T4254] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.11594: path /465/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  877.208914][ T4262] loop6: detected capacity change from 0 to 2048
[  877.246669][ T4262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  877.270472][ T4262] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  877.292136][ T4270] loop0: detected capacity change from 0 to 256
[  877.295145][ T4272] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  877.305880][ T4262] FAULT_INJECTION: forcing a failure.
[  877.305880][ T4262] name failslab, interval 1, probability 0, space 0, times 0
[  877.319408][ T4262] CPU: 1 UID: 0 PID: 4262 Comm: syz.6.11596 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  877.319444][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  877.319461][ T4262] Call Trace:
[  877.319540][ T4262]  <TASK>
[  877.319550][ T4262]  __dump_stack+0x1d/0x30
[  877.319576][ T4262]  dump_stack_lvl+0xe8/0x140
[  877.319600][ T4262]  dump_stack+0x15/0x1b
[  877.319621][ T4262]  should_fail_ex+0x265/0x280
[  877.319759][ T4262]  should_failslab+0x8c/0xb0
[  877.319791][ T4262]  kmem_cache_alloc_noprof+0x50/0x310
[  877.319898][ T4262]  ? __es_insert_extent+0x508/0xee0
[  877.319932][ T4262]  __es_insert_extent+0x508/0xee0
[  877.320038][ T4262]  ? should_fail_ex+0x30/0x280
[  877.320073][ T4262]  ? xas_load+0x413/0x430
[  877.320165][ T4262]  ? __rcu_read_unlock+0x4f/0x70
[  877.320189][ T4262]  ext4_es_cache_extent+0x276/0x370
[  877.320245][ T4262]  ext4_find_extent+0x336/0x7a0
[  877.320268][ T4262]  ext4_ext_map_blocks+0x115/0x3620
[  877.320299][ T4262]  ? selinux_file_open+0x31c/0x370
[  877.320344][ T4262]  ext4_map_query_blocks+0x71/0x170
[  877.320391][ T4262]  ext4_map_blocks+0x24c/0xd00
[  877.320421][ T4262]  ? _parse_integer_limit+0x170/0x190
[  877.320494][ T4262]  ? _parse_integer+0x27/0x40
[  877.320589][ T4262]  ext4_readdir+0x5e9/0x1d40
[  877.320650][ T4262]  iterate_dir+0x111/0x330
[  877.320722][ T4262]  ? mutex_lock+0xd/0x30
[  877.320754][ T4262]  __se_sys_getdents64+0x88/0x1b0
[  877.320806][ T4262]  ? __pfx_filldir64+0x10/0x10
[  877.320836][ T4262]  __x64_sys_getdents64+0x43/0x50
[  877.320865][ T4262]  x64_sys_call+0x1302/0x2fb0
[  877.320892][ T4262]  do_syscall_64+0xd0/0x1a0
[  877.320978][ T4262]  ? clear_bhb_loop+0x25/0x80
[  877.320998][ T4262]  ? clear_bhb_loop+0x25/0x80
[  877.321026][ T4262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.321051][ T4262] RIP: 0033:0x7f17f189e969
[  877.321137][ T4262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  877.321154][ T4262] RSP: 002b:00007f17eff07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  877.321174][ T4262] RAX: ffffffffffffffda RBX: 00007f17f1ac5fa0 RCX: 00007f17f189e969
[  877.321185][ T4262] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000004
[  877.321197][ T4262] RBP: 00007f17eff07090 R08: 0000000000000000 R09: 0000000000000000
[  877.321214][ T4262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  877.321225][ T4262] R13: 0000000000000000 R14: 00007f17f1ac5fa0 R15: 00007ffcdf424638
[  877.321256][ T4262]  </TASK>
[  877.584227][ T4262] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz.6.11596: path /37/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  877.619448][ T4279] x_tables: duplicate underflow at hook 1
[  877.621990][ T3580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.639566][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.778729][ T4285] xt_CT: You must specify a L4 protocol and not use inversions on it
[  877.853123][ T4293] 9pnet_fd: Insufficient options for proto=fd
[  877.860272][ T4293] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  877.872008][ T4293] SELinux: failed to load policy
[  877.911018][ T4294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  878.283935][ T4302] loop5: detected capacity change from 0 to 512
[  878.291090][ T4302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  878.291774][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11610'.
[  878.307672][ T4302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  878.309314][ T4304] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  878.321964][ T4302] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  878.474505][ T4311] loop8: detected capacity change from 0 to 256
[  878.594906][ T4314] loop7: detected capacity change from 0 to 8192
[  878.609773][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  878.609790][   T29] audit: type=1326 audit(1746504502.663:24002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa735ade969 code=0x7ffc0000
[  878.610515][ T4316] FAULT_INJECTION: forcing a failure.
[  878.610515][ T4316] name failslab, interval 1, probability 0, space 0, times 0
[  878.616351][   T29] audit: type=1326 audit(1746504502.663:24003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa735ade969 code=0x7ffc0000
[  878.639808][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.0.11614 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  878.639865][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  878.639883][ T4316] Call Trace:
[  878.639892][ T4316]  <TASK>
[  878.639902][ T4316]  __dump_stack+0x1d/0x30
[  878.639931][ T4316]  dump_stack_lvl+0xe8/0x140
[  878.639980][ T4316]  dump_stack+0x15/0x1b
[  878.640001][ T4316]  should_fail_ex+0x265/0x280
[  878.640043][ T4316]  should_failslab+0x8c/0xb0
[  878.640081][ T4316]  kmem_cache_alloc_noprof+0x50/0x310
[  878.640138][ T4316]  ? audit_log_start+0x365/0x6c0
[  878.640178][ T4316]  audit_log_start+0x365/0x6c0
[  878.640220][ T4316]  audit_seccomp+0x48/0x100
[  878.640287][ T4316]  ? __seccomp_filter+0x68c/0x10d0
[  878.640314][ T4316]  __seccomp_filter+0x69d/0x10d0
[  878.640343][ T4316]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  878.640376][ T4316]  ? vfs_write+0x75e/0x8d0
[  878.640481][ T4316]  ? __rcu_read_unlock+0x4f/0x70
[  878.640509][ T4316]  ? __fget_files+0x184/0x1c0
[  878.640547][ T4316]  __secure_computing+0x82/0x150
[  878.640571][ T4316]  syscall_trace_enter+0xcf/0x1e0
[  878.640663][ T4316]  do_syscall_64+0xaa/0x1a0
[  878.640692][ T4316]  ? clear_bhb_loop+0x25/0x80
[  878.640720][ T4316]  ? clear_bhb_loop+0x25/0x80
[  878.640748][ T4316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.640814][ T4316] RIP: 0033:0x7fa735ade969
[  878.640834][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  878.640932][ T4316] RSP: 002b:00007fa734147038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f
[  878.641029][ T4316] RAX: ffffffffffffffda RBX: 00007fa735d05fa0 RCX: 00007fa735ade969
[  878.641046][ T4316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  878.641062][ T4316] RBP: 00007fa734147090 R08: 0000000000000000 R09: 0000000000000000
[  878.641123][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.641205][ T4316] R13: 0000000000000000 R14: 00007fa735d05fa0 R15: 00007ffca6fb1c18
[  878.641304][ T4316]  </TASK>
[  878.641315][ T4316] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  878.652464][   T29] audit: type=1326 audit(1746504502.663:24004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa735ade969 code=0x7ffc0000
[  878.676270][ T4316] audit: out of memory in audit_log_start
[  878.713194][ T4311] syz.8.11612: attempt to access beyond end of device
[  878.713194][ T4311] loop8: rw=2049, sector=256, nr_sectors = 288 limit=256
[  878.714249][   T29] audit: type=1326 audit(1746504502.663:24005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa735ade969 code=0x7ffc0000
[  878.719488][ T4311] syz.8.11612: attempt to access beyond end of device
[  878.719488][ T4311] loop8: rw=2049, sector=608, nr_sectors = 320 limit=256
[  878.723111][   T29] audit: type=1326 audit(1746504502.663:24006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa735add2d0 code=0x7ffc0000
[  878.994532][   T29] audit: type=1326 audit(1746504502.663:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa735add41f code=0x7ffc0000
[  879.018097][   T29] audit: type=1326 audit(1746504502.733:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.8.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeb85e969 code=0x7ffc0000
[  879.041835][   T29] audit: type=1326 audit(1746504502.733:24009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.8.11612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeb85e969 code=0x7ffc0000
[  879.073179][ T4322] loop0: detected capacity change from 0 to 1024
[  879.083108][ T4322] EXT4-fs: Ignoring removed orlov option
[  879.091951][ T4322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  879.133832][T29578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.147277][ T4328] loop7: detected capacity change from 0 to 256
[  879.183256][ T4322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11618: bg 0: block 88: padding at end of block bitmap is not set
[  879.231857][T28089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.336058][   T23] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  879.343599][   T23] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  879.351092][   T23] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[  879.364244][   T23] hid-generic 0000:0004:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  879.393146][ T4343] openvswitch: netlink: Message has 6 unknown bytes.
[  879.485731][ T3447] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  879.493222][ T3447] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  879.500802][ T3447] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[  879.522428][ T3447] hid-generic 0000:0004:0000.000B: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  879.554111][ T4047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.612344][ T4047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.637584][ T4344] chnl_net:caif_netlink_parms(): no params data found
[  879.681704][ T4047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.687522][ T4369] loop8: detected capacity change from 0 to 256
[  879.698945][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.706092][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.713853][ T4344] bridge_slave_0: entered allmulticast mode
[  879.720910][ T4344] bridge_slave_0: entered promiscuous mode
[  879.728139][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.735350][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.742808][ T4344] bridge_slave_1: entered allmulticast mode
[  879.749529][ T4344] bridge_slave_1: entered promiscuous mode
[  879.759215][ T4047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.787440][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.797966][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.820332][ T4344] team0: Port device team_slave_0 added
[  879.829116][ T4344] team0: Port device team_slave_1 added
[  879.852465][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.853389][ T4378] loop8: detected capacity change from 0 to 512
[  879.859502][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.891838][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  879.893816][ T4378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  879.916545][ T4378] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  879.919727][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.933856][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.959837][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.971450][ T3939] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.027063][ T4047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  880.038977][ T4047] bond_slave_0: left promiscuous mode
[  880.045985][ T4047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  880.055079][ T4047] bond_slave_1: left promiscuous mode
[  880.061530][ T4047] bond0 (unregistering): Released all slaves
[  880.070687][ T4047] bond1 (unregistering): Released all slaves
[  880.105447][ T4344] hsr_slave_0: entered promiscuous mode
[  880.111805][ T4344] hsr_slave_1: entered promiscuous mode
[  880.118094][ T4344] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  880.126187][ T4344] Cannot create hsr debugfs directory
[  880.145392][ T4047] hsr_slave_0: left promiscuous mode
[  880.151374][ T4047] hsr_slave_1: left promiscuous mode
[  880.157172][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  880.164599][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  880.172465][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.180081][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.190660][ T4047] veth1_macvtap: left promiscuous mode
[  880.196797][ T4047] veth0_macvtap: left promiscuous mode
[  880.202469][ T4047] veth1_vlan: left promiscuous mode
[  880.207859][ T4047] veth0_vlan: left promiscuous mode
[  880.254424][ T4391] loop7: detected capacity change from 0 to 2048
[  880.268268][ T4391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.287690][ T4047] team0 (unregistering): Port device team_slave_1 removed
[  880.298549][ T4047] team0 (unregistering): Port device team_slave_0 removed
[  880.462667][ T3664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.500159][ T4399] bond0: entered promiscuous mode
[  880.505394][ T4399] bond_slave_0: entered promiscuous mode
[  880.511326][ T4399] bond_slave_1: entered promiscuous mode
[  880.624870][ T4404] loop6: detected capacity change from 0 to 2048
[  880.649868][ T4404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.697683][ T4420] loop8: detected capacity change from 0 to 2048
[  880.741870][ T4420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.852769][ T4431] loop7: detected capacity change from 0 to 2048
[  880.859940][ T4432] ==================================================================
[  880.868069][ T4432] BUG: KCSAN: data-race in copy_page_from_iter_atomic / pagecache_isize_extended
[  880.877228][ T4432] 
[  880.879569][ T4432] read to 0xffff88811d47e000 of 2048 bytes by task 37 on cpu 0:
[  880.887312][ T4432]  copy_page_from_iter_atomic+0x77f/0xff0
[  880.893066][ T4432]  generic_perform_write+0x2c2/0x490
[  880.898385][ T4432]  shmem_file_write_iter+0xc5/0xf0
[  880.903540][ T4432]  lo_rw_aio+0x5f7/0x7c0
[  880.907818][ T4432]  loop_process_work+0x52d/0xa60
[  880.912796][ T4432]  loop_workfn+0x31/0x40
[  880.917075][ T4432]  process_scheduled_works+0x4cb/0x9d0
[  880.922576][ T4432]  worker_thread+0x582/0x770
[  880.927206][ T4432]  kthread+0x486/0x510
[  880.931312][ T4432]  ret_from_fork+0x4b/0x60
[  880.935756][ T4432]  ret_from_fork_asm+0x1a/0x30
[  880.940538][ T4432] 
[  880.942880][ T4432] write to 0xffff88811d47e018 of 4072 bytes by task 4432 on cpu 1:
[  880.950979][ T4432]  pagecache_isize_extended+0x26f/0x340
[  880.956574][ T4432]  ext4_alloc_file_blocks+0x4ad/0x720
[  880.961985][ T4432]  ext4_fallocate+0x2b8/0x660
[  880.966702][ T4432]  vfs_fallocate+0x410/0x450
[  880.971337][ T4432]  __x64_sys_fallocate+0x7a/0xd0
[  880.976314][ T4432]  x64_sys_call+0x2b88/0x2fb0
[  880.981021][ T4432]  do_syscall_64+0xd0/0x1a0
[  880.985556][ T4432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.991472][ T4432] 
[  880.993814][ T4432] Reported by Kernel Concurrency Sanitizer on:
[  880.999980][ T4432] CPU: 1 UID: 0 PID: 4432 Comm: syz.8.11649 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) 
[  881.012503][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  881.022590][ T4432] ==================================================================
[  881.032690][ T4424] Falling back ldisc for ttyS3.
[  881.123568][ T3939] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.149885][ T4344] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  881.159015][ T4344] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  881.177108][ T4344] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  881.185871][ T4344] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  881.227703][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.240502][ T4344] 8021q: adding VLAN 0 to HW filter on device team0
[  881.251609][T32114] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.258828][T32114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.271634][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.278740][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.352841][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  881.409911][ T3580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.421880][ T4344] veth0_vlan: entered promiscuous mode
[  881.430099][ T4344] veth1_vlan: entered promiscuous mode
[  881.446508][ T4344] veth0_macvtap: entered promiscuous mode
[  881.454017][ T4344] veth1_macvtap: entered promiscuous mode
[  881.464420][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  881.474905][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.484831][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  881.495337][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.505146][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  881.515615][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.525580][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  881.536055][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.547219][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.558891][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  881.569385][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.579283][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  881.589831][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.599780][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  881.610207][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.620029][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  881.630475][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  881.641311][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.651787][ T4344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.660636][ T4344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  881.669485][ T4344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  881.678449][ T4344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0