last executing test programs:

4m34.443484554s ago: executing program 1 (id=395):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4})

4m34.132131189s ago: executing program 1 (id=400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
r3 = gettid()
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = io_uring_setup(0x22c6, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0x0, 0xfffffffc})
io_uring_enter(r4, 0x0, 0xc7, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

4m33.963743451s ago: executing program 1 (id=414):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x14, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x9, 0x94, 0x1, 0x31, @private0, @loopback, 0x1, 0x10, 0x4, 0x313b}})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000004c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r3, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x24004890)
getrlimit(0xb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007380011800c000100636f75"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4m33.766090874s ago: executing program 1 (id=411):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/locks\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10909d, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x21800, 0x0)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)

4m33.691141435s ago: executing program 1 (id=413):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000540)='./control\x00', 0x60)
rmdir(&(0x7f0000000040)='./control\x00')
fsopen(0x0, 0x47637ef35f911780)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xc810, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES8], 0x41, 0x1241, &(0x7f000001c240)="$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")
mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
openat$bsg(0xffffffffffffff9c, 0x0, 0x82440, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)
epoll_create1(0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r1, 0x5408, 0x0)
open(&(0x7f0000000300)='.\x00', 0x230100, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000400)=""/149, 0x95)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)

4m33.517582548s ago: executing program 1 (id=420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@union={0x2, 0x2, 0x0, 0x5, 0x1, 0x4c, [{0xa, 0x9, 0x3}, {0x4, 0x0, 0x7}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f00000007c0)=""/228, 0x40, 0xe4, 0x0, 0x0, 0x0, @void, @value}, 0x28) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r10}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

4m33.454379299s ago: executing program 32 (id=420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@union={0x2, 0x2, 0x0, 0x5, 0x1, 0x4c, [{0xa, 0x9, 0x3}, {0x4, 0x0, 0x7}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f00000007c0)=""/228, 0x40, 0xe4, 0x0, 0x0, 0x0, @void, @value}, 0x28) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r10}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

4m27.124333002s ago: executing program 2 (id=505):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045)
accept4(r2, 0x0, 0x0, 0x0)

4m27.076633503s ago: executing program 2 (id=507):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000ac0)={r5, 0x5}, &(0x7f0000000b00)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000aa"], 0x48)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)

4m26.806117696s ago: executing program 2 (id=512):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

4m26.670842558s ago: executing program 2 (id=514):
syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400303a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000cf69bc7526ffff3a00000000000000000000fc02000000000000000000000000000100000000000000"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x10, 0xa401)
mremap(&(0x7f00006b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x31, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000480)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000004c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {r3, r4+60000000}}, &(0x7f0000000580))
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000180), 0x3, 0x458, &(0x7f0000000a00)="$eJzs3EtsG0UfAPD/2nH69Zl8VXn0ARgKouKRNGkpPXABgcQBJCQ4lGNI0qrUbVATJFpVUBAqR1SJO+KIxAmJCye4IOipEhzhjpAqlEsLJ6O1d+NHnFfrxGn9+0mbzOyOPfP3ztizO3EC6Fvl9EcSsSMifo+IoXq2tUC5/uvW/KXJf+YvTSZRrb75d1Ird3P+0mReNH/c9jwzEFH4NIn9HeqdvXDxzESlMn0+y4/OnX1vdPbCxWdPn504NX1q+tz48eNHj4w9f2z8ua7EmcZ1c9+HMwf2vvr21dcnT1x955dv0iaWi/XjzXF0SXm5g09Uq12urrd2NqWTgR42hDUp1odplGrjfyiK0Th5Q/HKJ8s9dutGNBBYN9VqtXr/0ocvV4F7WBK9bgHQG/kHfXr9m28bNPXYFG68WL8ASuO+lW31IwNRyMqU2q5vu6kcEScu//tlusX63IcAAGjxQzr/eabT/K8QzfeFdmVrKMMR8f+I2B0RxyJiT0TcF1Er+0BEPLjG+tsXSRbPf3bdVlyrlc7/XsjWtlrnf/nsL4aLWW5nLf5ScvJ0Zfpw1rJDUdqS5seWqePHl3/9vOOBrIp8/pduaf35XDAr9NfAloioFhf2TE3MTdxx4JkbH0fsG+gUf7KwEpBExN6I2HebdZx+6usDSx0rrxj/MrqwzlT9KuLJ+vm/HG3x55Ll1ydH/xeV6cOjea9Y7Nr1K28sVf8dxd8F6fnf1rH/L8Q/nDSv186u8omvNZJX/visMaa/ay22cvxZ/2+S9v/B5K2WfR9MzM2dH4sYTF6rN7p5/3hbufFG+TT+Qwc7j//d0Xgl9kdE2okfioiHI+KR+LYWyaMR8VhEHFz8ClwfzBI/v/T4u7VEaXGhzXD+p9Z0/huJwWjf0zlRPPPT9y2VDq8l/vT8H62lDmV7VvP+t5p2raE3AwAAwF2tEBE7IimMLKQLhZGR+t/w74lthcrM7NzTJ2fePzdV/47AcJQK+Z2uoab7oWPZZX2eH2/LH8nuG39R3FrLj0zOVKZ6HTz0ue1LjP/Un8Vetw5Yd76vBf3L+If+ZfxD/zL+oX91GP/+twf0iU6f/x/1oB3Axmsb/5b9oI+4/of+ZfxD/zL+oS/Nbo2VvyR/7yd+2xzNuJsSUej+MydJ7+OSqCd6/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8FAAD//8TW6hM=")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
gettid()
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/234)
writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000d298cb2232c9855bfd10f04b", @ANYRES16=0x0, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x54f9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4020080}, 0x20000084)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x1, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x40810)
ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000180)={&(0x7f0000000000)=""/16, 0x10})

4m26.483035581s ago: executing program 2 (id=516):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004", 0x4d}], 0x1)

4m25.1987746s ago: executing program 2 (id=537):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x14, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x9, 0x94, 0x1, 0x31, @private0, @loopback, 0x1, 0x10, 0x4, 0x313b}})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000004c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r3, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x24004890)
getrlimit(0xb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007380011800c000100636f75"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4m25.19633903s ago: executing program 33 (id=537):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x14, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x9, 0x94, 0x1, 0x31, @private0, @loopback, 0x1, 0x10, 0x4, 0x313b}})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000004c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r3, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x24004890)
getrlimit(0xb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007380011800c000100636f75"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4m8.654710793s ago: executing program 5 (id=784):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)
setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000002c0), 0x4)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd304, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
ioctl$PERF_EVENT_IOC_ID(r3, 0x4008240b, &(0x7f00000013c0))
r5 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r8}, 0x18)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="1f03", 0x2}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(r2)

4m7.580342098s ago: executing program 5 (id=796):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES8=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

4m6.379997266s ago: executing program 5 (id=818):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

4m5.587900918s ago: executing program 5 (id=827):
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4m4.818826329s ago: executing program 5 (id=834):
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x8410b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0}, 0x1721, 0x0, 0x3, 0x1, 0x9, 0x4, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4m4.01899667s ago: executing program 5 (id=845):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = signalfd(r0, &(0x7f0000000040)={[0x2]}, 0x8)
pread64(r1, &(0x7f0000000080)=""/129, 0x81, 0x7fffffff)

4m4.000389351s ago: executing program 34 (id=845):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = signalfd(r0, &(0x7f0000000040)={[0x2]}, 0x8)
pread64(r1, &(0x7f0000000080)=""/129, 0x81, 0x7fffffff)

3.850734794s ago: executing program 3 (id=3881):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054) (async)
sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="2c00000018000902000000000000000002"], 0x2c}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @datasec={0xb, 0x3, 0x0, 0xf, 0x1, [{0x2, 0x3, 0x3}, {0x4, 0x2, 0x6}, {0x2, 0x7f, 0x3}], "df"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x1a, 0x2}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x4}]}, {0x0, [0x0]}}, &(0x7f00000000c0)=""/253, 0x8b, 0xfd, 0x1, 0x7, 0x10000, @value}, 0x28)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @multicast2}}}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @remote}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {0xfff3}}}, 0x24}}, 0x20040000)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xff, '\x00', r8, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$TUNSETOFFLOAD(r11, 0x5421, 0x110e22fff5)
mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/86) (async)
mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/86)

3.42989509s ago: executing program 3 (id=3883):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x6d62}}]}, 0x3, 0x469, &(0x7f0000000800)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
io_setup(0x4082, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

2.823229689s ago: executing program 3 (id=3889):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
shutdown(r4, 0x1)

2.532585813s ago: executing program 3 (id=3893):
r0 = socket(0xa, 0x2, 0x0)
connect$netlink(r0, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

2.367580305s ago: executing program 3 (id=3897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket(0x10, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESDEC=r5])
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

1.874326293s ago: executing program 6 (id=3907):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000824)
r2 = syz_open_dev$usbfs(&(0x7f0000000540), 0x1fc, 0x402)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc)
r4 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a050100000016001200bc00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x24000804)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
dup(r2)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

1.757219125s ago: executing program 6 (id=3909):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=")
eventfd(0x7)
r1 = io_uring_setup(0x758a, &(0x7f0000000140))
socket$qrtr(0x2a, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES16], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x40)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0)

1.531376908s ago: executing program 6 (id=3912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)) (fail_nth: 4)

1.435326729s ago: executing program 3 (id=3913):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20538, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x9, 0x1c, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff11000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r4, 0x4, 0x42400)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0x7ffff004)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r8, 0x1, 0x19, 0x0, &(0x7f0000000280))
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0)

1.135373234s ago: executing program 6 (id=3915):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000)

1.104771384s ago: executing program 6 (id=3917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xdc, 0xa, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x77}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x200040c1}, 0x4c0c0)
r1 = socket(0x10, 0x3, 0x0)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x23, 0x13, [@local, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x1, [{0x2, 0xa, "71b1afa25332eee6"}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0x7, [{@local, 0x81}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0x40}]}, @lsrr={0x83, 0x1b, 0xd6, [@remote, @broadcast, @loopback, @loopback, @loopback, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xb8}, 0x4008014)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
sendmsg$kcm(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)="dba5e12b3980a13a39fe460203dc0f8c1a8b658ba9ff1f8e1687bc5c3145da19587c139f2a14d63b23eaed", 0x2b}, {&(0x7f0000001280)="4648c3b686a3181ac40dbdda08e1ffdc44a51b58f4cdf15b403ffb8fb5be87de48899d92878cf6ac09ccbe70dd9943754411eaa7f1e69d8aa1b02cee43", 0x3d}, {&(0x7f00000012c0)="92a1138f81b25fc11a6e42f2d6bde11a09f4cc070ba586a1f805991904acb0f10895d518140bf41e7c5eb4f19273dd74d12a12", 0x33}], 0x3, &(0x7f0000001440)=[{0xb0, 0x10c, 0x4, "992c7f1f28bbe092080be515e3fdeb3dbcd47a67de58122e214037f09d13379b45ed980148ca4fbed5a23777a40d5aafda8fc1c9ec25ed37105877c1ca4c06121d122c135a80643dfc88410a1333c2cddf72bb20fc762c2739680db23666a0c8f060862b19134f424ca2186ac1c4bfb3806a626fc36d18d42d2d6150a2861756e57ade7c893c2ce4e2aaf887d0c17c60a9be66bb728cf9083ee1"}, {0x9d, 0x10c, 0x120, "e36a6d05c077e03cb7917f24133bf7630aaeb90a72f9b57cdaf9e6bcecfed40b0d3dc471fafa896efcc620431aea56aac391f83ea11eda9d6a4076c41701445c8bf83a35f1b0cae3fa6916c451"}], 0x110}, 0x20000081)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0x1, 0x4, 0x16, "001bf100eeff0000bec2000100000000002000"})
r9 = syz_open_pts(r8, 0x101)
r10 = dup3(r9, r8, 0x0)
write$UHID_INPUT(r10, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c)
sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0)
sysinfo(&(0x7f00000015c0)=""/13)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)

903.075027ms ago: executing program 4 (id=3923):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)

849.512018ms ago: executing program 4 (id=3925):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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")
eventfd(0x7)
r1 = io_uring_setup(0x758a, &(0x7f0000000140))
socket$qrtr(0x2a, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES16], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x40)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0)

781.444189ms ago: executing program 6 (id=3926):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

530.631883ms ago: executing program 7 (id=3928):
r0 = io_uring_setup(0x51d2, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x2, 0x3e0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20)

528.786383ms ago: executing program 4 (id=3929):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

466.830064ms ago: executing program 4 (id=3931):
syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_io_uring_setup(0x4f17, &(0x7f0000000840)={0x0, 0x4661, 0x200, 0x6, 0x288}, 0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x77, 0x0, r2, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r5}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x30000000, 0x3)
umount2(0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r11, @ANYBLOB="17edf20e6dfee62262f42738cf15b7280bc097438878a967082e55755d43eada55decf16f43f2b11e103622921be0851427b05d2dbb056fe2d4a4fdb5427e163726d8288e2872bfbd82498ca1722838100de0e2688452d2427cccd378ac64179463eb3406025ce45d5c32793309ad71b1f9c3fa48116b5641635664395b4f727a5de9667eb111921f474eacd9a3edea4e6ca25828fa85d63520f9a82c977421f"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='tcp_retransmit_synack\x00', r7, 0x0, 0x4}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x23, 0x2, 0x7ffffffff000)

446.590614ms ago: executing program 7 (id=3932):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

441.639074ms ago: executing program 0 (id=3933):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x6d62}}]}, 0x3, 0x469, &(0x7f0000000800)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, 0x0, 0x2000007ff)

370.823395ms ago: executing program 7 (id=3934):
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xe}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07003d879d3db728610000040000000800000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='-}]*\x00')
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x17)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r1, @ANYRESHEX=r6], &(0x7f0000000600)='GPL\x00', 0x0, 0x26, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r7, 0x0, 0x800000000000000}, 0x18)
remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0x3000, 0x100000c, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioperm(0x0, 0x4, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000300), &(0x7f00000003c0)='%-5lx  \x00'}, 0x20)

370.293555ms ago: executing program 4 (id=3935):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
ioperm(0x0, 0x44, 0x7)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x2800, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
pipe2(0x0, 0x4000)
gettid()
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x6a6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x1d6c, 0x18734, 0x20, 0x0, 0x0)

333.121005ms ago: executing program 0 (id=3936):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000007c0)=ANY=[], 0x8)

311.152956ms ago: executing program 7 (id=3937):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4)

262.897106ms ago: executing program 4 (id=3938):
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@seclabel}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x8, 0x0, 0x8000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0200000004000000080097bd370d2473f3cbec80ebc2d4d7000001000000800000004c19c2805be837f3e3945c5c0c17943b5f28df99fa3764a19c6fb9108f804654f235349b21ba127a423416acf9ae8cdab16f7b264fdcc3cbf5863bba82c52d49a03346d01bb1b4802b5c63e935ee5bf568d5287c6c428223593c1feae6f4c449b10ad8f4dfa6c69f796e6f5ab2083254de17ac", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="3e00000000000000b704000008000000850000e6940000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x2c060000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r0}, 0x18)
r3 = eventfd(0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x50)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0)
lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b69e020000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6be"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)
socket$unix(0x1, 0x2, 0x0)
iopl(0x3)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x3c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)

262.270076ms ago: executing program 7 (id=3939):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000)

242.110717ms ago: executing program 7 (id=3940):
unshare(0x20000600)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x200000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]})
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0xffc9)
tkill(r0, 0x33)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwrite64(r2, &(0x7f0000000080)='3', 0x1, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000004c0)={0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "4430f28aa57c6116", "a05cf400a65aece2e01bbac8a0463bd0b68f44f7bc9ca0407c3b3c986865ce6d", 'g3AV', "10ce81f9df884afa"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
unshare(0x20000400)
io_uring_setup(0x761, &(0x7f0000000300)={0x0, 0xbbc7, 0x2000, 0xfffffffd, 0x3b2})
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
mlock2(&(0x7f00006e3000/0x3000)=nil, 0x3000, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES32=0x1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xc}, {}, {0xf, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24000800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x29, 0x0, 0xf, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x0, 0x40}})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)

166.969578ms ago: executing program 0 (id=3941):
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000480)='w', 0x1}, {&(0x7f0000001440)="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", 0xc40}], 0x2, 0x4)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x45, 0xa, 0x2, 0x4, 0x0, [@empty, @remote, @local, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x41}]}, 0x58)
close(r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d80000000000c6070000000000169500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000080)={0x3ff, 0x7, 0x80, 0x7f, 0xfd, 0x6a, 0x14}, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r4, &(0x7f0000000340), 0x0}, 0x20)
connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000700)=';', 0x1}], 0x1}}], 0x1, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

132.127348ms ago: executing program 0 (id=3942):
r0 = io_uring_setup(0x51d2, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x2, 0x3e0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20)

56.8453ms ago: executing program 0 (id=3943):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000824)
syz_open_dev$usbfs(&(0x7f0000000540), 0x1fc, 0x402)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc)
r3 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a050100000016001200bc00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x24000804)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

0s ago: executing program 0 (id=3944):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

kernel console output (not intermixed with test programs):

.308058][T14862] R13: 0000000000000000 R14: 00007fbd8c4f5fa0 R15: 00007ffee4e83428
[  306.308123][T14862]  </TASK>
[  306.535770][T14704] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  306.545315][T14704] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  306.564496][T14704] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  306.654019][T14704] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.667809][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'.
[  306.676211][T14704] 8021q: adding VLAN 0 to HW filter on device team0
[  306.712099][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.719249][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.768171][  T180] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.775308][  T180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.801829][T14704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.812563][T14704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.983799][T14907] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3396'.
[  307.005378][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.029066][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3397'.
[  307.170675][T14938] ref_ctr_offset mismatch. inode: 0xc14 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0
[  307.299741][T14704] veth0_vlan: entered promiscuous mode
[  307.329104][T14704] veth1_vlan: entered promiscuous mode
[  307.344017][   T29] kauditd_printk_skb: 333 callbacks suppressed
[  307.344035][   T29] audit: type=1326 audit(2000000036.990:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.358579][T14704] veth0_macvtap: entered promiscuous mode
[  307.380832][T14959] 9pnet_fd: Insufficient options for proto=fd
[  307.401922][T14704] veth1_macvtap: entered promiscuous mode
[  307.411820][   T29] audit: type=1326 audit(2000000037.000:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.418583][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.435505][   T29] audit: type=1326 audit(2000000037.000:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.435559][   T29] audit: type=1326 audit(2000000037.000:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.435585][   T29] audit: type=1326 audit(2000000037.000:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.449263][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.466634][   T29] audit: type=1326 audit(2000000037.000:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.545003][   T29] audit: type=1326 audit(2000000037.030:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.568758][   T29] audit: type=1326 audit(2000000037.030:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.573039][T14704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.592451][   T29] audit: type=1326 audit(2000000037.030:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.601160][T14704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.624666][   T29] audit: type=1326 audit(2000000037.030:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548d25e929 code=0x7ffc0000
[  307.633449][T14704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.665791][T14704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.000183][T15007] loop3: detected capacity change from 0 to 1024
[  308.408957][T15014] lo speed is unknown, defaulting to 1000
[  308.472656][T15049] FAULT_INJECTION: forcing a failure.
[  308.472656][T15049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.486081][T15049] CPU: 1 UID: 0 PID: 15049 Comm: syz.3.3421 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  308.486131][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.486221][T15049] Call Trace:
[  308.486227][T15049]  <TASK>
[  308.486234][T15049]  __dump_stack+0x1d/0x30
[  308.486316][T15049]  dump_stack_lvl+0xe8/0x140
[  308.486341][T15049]  dump_stack+0x15/0x1b
[  308.486361][T15049]  should_fail_ex+0x265/0x280
[  308.486400][T15049]  should_fail+0xb/0x20
[  308.486440][T15049]  should_fail_usercopy+0x1a/0x20
[  308.486526][T15049]  _copy_from_iter+0xcf/0xe40
[  308.486552][T15049]  ? __build_skb_around+0x1a0/0x200
[  308.486663][T15049]  ? __alloc_skb+0x223/0x320
[  308.486703][T15049]  netlink_sendmsg+0x471/0x6b0
[  308.486727][T15049]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.486816][T15049]  __sock_sendmsg+0x142/0x180
[  308.486850][T15049]  ____sys_sendmsg+0x31e/0x4e0
[  308.486882][T15049]  ___sys_sendmsg+0x17b/0x1d0
[  308.486929][T15049]  __x64_sys_sendmsg+0xd4/0x160
[  308.487021][T15049]  x64_sys_call+0x2999/0x2fb0
[  308.487047][T15049]  do_syscall_64+0xd2/0x200
[  308.487100][T15049]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  308.487132][T15049]  ? clear_bhb_loop+0x40/0x90
[  308.487165][T15049]  ? clear_bhb_loop+0x40/0x90
[  308.487193][T15049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.487221][T15049] RIP: 0033:0x7fede7bde929
[  308.487240][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.487266][T15049] RSP: 002b:00007fede6247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.487284][T15049] RAX: ffffffffffffffda RBX: 00007fede7e05fa0 RCX: 00007fede7bde929
[  308.487296][T15049] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  308.487320][T15049] RBP: 00007fede6247090 R08: 0000000000000000 R09: 0000000000000000
[  308.487335][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.487352][T15049] R13: 0000000000000000 R14: 00007fede7e05fa0 R15: 00007fff84997e68
[  308.487377][T15049]  </TASK>
[  308.512613][T15044] infiniband syz!: set active
[  308.700612][T15058] vlan2: entered allmulticast mode
[  308.702457][T15044] infiniband syz!: added team_slave_0
[  308.722664][T15044] RDS/IB: syz!: added
[  308.728713][T15044] smc: adding ib device syz! with port count 1
[  308.735048][T15044] smc:    ib device syz! port 1 has pnetid 
[  308.763866][  T125] bridge_slave_1: left allmulticast mode
[  308.769579][  T125] bridge_slave_1: left promiscuous mode
[  308.775377][  T125] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.806177][  T125] bridge_slave_0: left allmulticast mode
[  308.811993][  T125] bridge_slave_0: left promiscuous mode
[  308.817743][  T125] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.893256][  T125] dvmrp1 (unregistering): left allmulticast mode
[  308.902987][ T3418] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  308.912018][  T125] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  309.014767][  T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.026362][  T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.035516][  T125] bond0 (unregistering): Released all slaves
[  309.044009][  T125] bond1 (unregistering): Released all slaves
[  309.080880][T15093] __nla_validate_parse: 3 callbacks suppressed
[  309.080897][T15093] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3431'.
[  309.133793][T15014] chnl_net:caif_netlink_parms(): no params data found
[  309.201628][T15101] loop3: detected capacity change from 0 to 512
[  309.208983][T15101] EXT4-fs: Ignoring removed nobh option
[  309.216368][T15099] loop6: detected capacity change from 0 to 1024
[  309.239906][T15101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  309.253821][T15099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.299383][T15101] EXT4-fs (loop3): 1 orphan inode deleted
[  309.305213][T15101] EXT4-fs (loop3): 1 truncate cleaned up
[  309.317989][T15099] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.343481][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'.
[  309.352412][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'.
[  309.362197][T15101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.373628][T15014] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.381293][T15014] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.394379][T15014] bridge_slave_0: entered allmulticast mode
[  309.403861][T15014] bridge_slave_0: entered promiscuous mode
[  309.411813][T15014] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.419023][T15014] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.426408][T15014] bridge_slave_1: entered allmulticast mode
[  309.433298][T15014] bridge_slave_1: entered promiscuous mode
[  309.470047][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.481105][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.512038][T15014] team0: Port device team_slave_0 added
[  309.527343][T15014] team0: Port device team_slave_1 added
[  309.562498][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.569563][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.595584][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.627324][   T37] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set
[  309.633700][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.648888][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.658602][   T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[  309.674976][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.687454][   T37] EXT4-fs (loop6): This should not happen!! Data will be lost
[  309.687454][   T37] 
[  309.706845][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.768471][T15101] EXT4-fs error (device loop3): ext4_lookup:1779: inode #2: comm syz.3.3434: bad inode number: 12
[  309.785825][T15014] hsr_slave_0: entered promiscuous mode
[  309.792101][T15014] hsr_slave_1: entered promiscuous mode
[  309.799896][T15101] EXT4-fs (loop3): Remounting filesystem read-only
[  309.800757][T15014] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.816828][T15014] Cannot create hsr debugfs directory
[  309.920131][T13595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.977778][T15136] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  310.030313][  T125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.047731][  T125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.064905][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'.
[  310.125684][  T125] team0 (unregistering): Port device team_slave_1 removed
[  310.139504][T15157] loop4: detected capacity change from 0 to 1024
[  310.146743][  T125] team0 (unregistering): Port device team_slave_0 removed
[  310.184382][T15157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.552170][T15014] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  310.561966][T15014] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  310.572815][T15014] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  310.582063][T15014] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  310.651464][T15014] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.667163][T15014] 8021q: adding VLAN 0 to HW filter on device team0
[  310.684999][  T180] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.692188][  T180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.711754][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.718997][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.739581][T15014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  310.831614][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.926978][T15152] syz.4.3439 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  310.941212][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.4.3439 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  310.941250][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.941267][T15152] Call Trace:
[  310.941273][T15152]  <TASK>
[  310.941280][T15152]  __dump_stack+0x1d/0x30
[  310.941342][T15152]  dump_stack_lvl+0xe8/0x140
[  310.941369][T15152]  dump_stack+0x15/0x1b
[  310.941392][T15152]  dump_header+0x81/0x220
[  310.941438][T15152]  oom_kill_process+0x334/0x3f0
[  310.941542][T15152]  out_of_memory+0x979/0xb80
[  310.941578][T15152]  try_charge_memcg+0x5e6/0x9e0
[  310.941666][T15152]  obj_cgroup_charge_pages+0xa6/0x150
[  310.941705][T15152]  __memcg_kmem_charge_page+0x9f/0x170
[  310.941814][T15152]  __alloc_frozen_pages_noprof+0x188/0x360
[  310.941867][T15152]  alloc_pages_mpol+0xb3/0x250
[  310.941911][T15152]  alloc_pages_noprof+0x90/0x130
[  310.942033][T15152]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  310.942089][T15152]  __kvmalloc_node_noprof+0x30f/0x4e0
[  310.942199][T15152]  ? ip_set_alloc+0x1f/0x30
[  310.942293][T15152]  ? ip_set_alloc+0x1f/0x30
[  310.942331][T15152]  ip_set_alloc+0x1f/0x30
[  310.942414][T15152]  hash_netiface_create+0x282/0x740
[  310.942450][T15152]  ? __pfx_hash_netiface_create+0x10/0x10
[  310.942485][T15152]  ip_set_create+0x3cc/0x960
[  310.942548][T15152]  ? __nla_parse+0x40/0x60
[  310.942575][T15152]  nfnetlink_rcv_msg+0x4c3/0x590
[  310.942619][T15152]  ? selinux_capable+0x1f9/0x270
[  310.942655][T15231] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3442'.
[  310.942653][T15152]  netlink_rcv_skb+0x120/0x220
[  310.942746][T15152]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  310.942796][T15152]  nfnetlink_rcv+0x16b/0x1690
[  310.942846][T15152]  ? __kfree_skb+0x109/0x150
[  310.942868][T15152]  ? nlmon_xmit+0x4f/0x60
[  310.942970][T15152]  ? consume_skb+0x49/0x150
[  310.943015][T15152]  ? nlmon_xmit+0x4f/0x60
[  310.943047][T15152]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  310.943079][T15152]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  310.943106][T15152]  ? __dev_queue_xmit+0x182/0x1fb0
[  310.943177][T15152]  ? chacha_block_generic+0x218/0x240
[  310.943208][T15152]  ? ref_tracker_free+0x37d/0x3e0
[  310.943261][T15152]  ? __netlink_deliver_tap+0x4dc/0x500
[  310.943322][T15152]  netlink_unicast+0x5a1/0x670
[  310.943389][T15152]  netlink_sendmsg+0x58b/0x6b0
[  310.943420][T15152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.943561][T15152]  __sock_sendmsg+0x142/0x180
[  310.943624][T15152]  ____sys_sendmsg+0x31e/0x4e0
[  310.943655][T15152]  ___sys_sendmsg+0x17b/0x1d0
[  310.943699][T15152]  __x64_sys_sendmsg+0xd4/0x160
[  310.943812][T15152]  x64_sys_call+0x2999/0x2fb0
[  310.943840][T15152]  do_syscall_64+0xd2/0x200
[  310.943867][T15152]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  310.943963][T15152]  ? clear_bhb_loop+0x40/0x90
[  310.943990][T15152]  ? clear_bhb_loop+0x40/0x90
[  310.944021][T15152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.944048][T15152] RIP: 0033:0x7fbd8c2ce929
[  310.944068][T15152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.944123][T15152] RSP: 002b:00007fbd8a937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.944150][T15152] RAX: ffffffffffffffda RBX: 00007fbd8c4f5fa0 RCX: 00007fbd8c2ce929
[  310.944202][T15152] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000009
[  310.944219][T15152] RBP: 00007fbd8c350b39 R08: 0000000000000000 R09: 0000000000000000
[  310.944237][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.944254][T15152] R13: 0000000000000000 R14: 00007fbd8c4f5fa0 R15: 00007ffee4e83428
[  310.944279][T15152]  </TASK>
[  310.944330][T15152] memory: usage 307200kB, limit 307200kB, failcnt 1389
[  311.297829][T15014] veth0_vlan: entered promiscuous mode
[  311.298343][T15152] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0
[  311.318872][T15152] kmem: usage 241812kB, limit 9007199254740988kB, failcnt 0
[  311.323548][T15014] veth1_vlan: entered promiscuous mode
[  311.326224][T15152] Memory cgroup stats for /syz4:
[  311.333691][T15152] cache 66945024
[  311.342233][T15152] rss 0
[  311.345406][T15152] shmem 0
[  311.348379][T15152] mapped_file 0
[  311.351873][T15152] dirty 0
[  311.355084][T15152] writeback 0
[  311.358457][T15152] workingset_refault_anon 690
[  311.363239][T15152] workingset_refault_file 11008
[  311.368114][T15152] swap 724992
[  311.371505][T15152] swapcached 8192
[  311.375302][T15152] pgpgin 309130
[  311.378781][T15152] pgpgout 292783
[  311.382351][T15152] pgfault 258937
[  311.386041][T15152] pgmajfault 320
[  311.389612][T15152] inactive_anon 4096
[  311.393633][T15152] active_anon 4096
[  311.394354][T15014] veth0_macvtap: entered promiscuous mode
[  311.397367][T15152] inactive_file 0
[  311.397378][T15152] active_file 12288
[  311.397386][T15152] unevictable 66936832
[  311.397393][T15152] hierarchical_memory_limit 314572800
[  311.406407][T15014] veth1_macvtap: entered promiscuous mode
[  311.406790][T15152] hierarchical_memsw_limit 9223372036854771712
[  311.416870][T15014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.420077][T15152] total_cache 66945024
[  311.420087][T15152] total_rss 0
[  311.420094][T15152] total_shmem 0
[  311.420100][T15152] total_mapped_file 0
[  311.420108][T15152] total_dirty 0
[  311.420114][T15152] total_writeback 0
[  311.433486][T15014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.439291][T15152] total_workingset_refault_anon 690
[  311.451565][T15014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.454219][T15152] total_workingset_refault_file 11008
[  311.457604][T15014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.461382][T15152] total_swap 724992
[  311.461421][T15152] total_swapcached 8192
[  311.461428][T15152] total_pgpgin 309130
[  311.461435][T15152] total_pgpgout 292783
[  311.461442][T15152] total_pgfault 258937
[  311.461449][T15152] total_pgmajfault 320
[  311.461459][T15152] total_inactive_anon 4096
[  311.468688][T15014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.473901][T15152] total_active_anon 4096
[  311.473914][T15152] total_inactive_file 0
[  311.473944][T15152] total_active_file 12288
[  311.473952][T15152] total_unevictable 66936832
[  311.473961][T15152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0
[  311.482647][T15014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.488028][T15152] ,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3439,pid=15150,uid=0
[  311.578085][T15152] Memory cgroup out of memory: Killed process 15150 (syz.4.3439) total-vm:93884kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  311.767257][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'.
[  311.776448][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3443'.
[  312.202522][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.282870][T15264] SELinux: failed to load policy
[  312.301317][T15335] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3452'.
[  312.354841][   T29] kauditd_printk_skb: 486 callbacks suppressed
[  312.354858][   T29] audit: type=1326 audit(2000000042.012:15108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.384761][   T29] audit: type=1326 audit(2000000042.012:15109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.408552][   T29] audit: type=1326 audit(2000000042.012:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.409320][T15287] usb usb8: usbfs: process 15287 (syz.3.3443) did not claim interface 0 before use
[  312.432465][   T29] audit: type=1326 audit(2000000042.012:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.451666][T15287] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[  312.465081][   T29] audit: type=1326 audit(2000000042.012:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.495750][   T29] audit: type=1326 audit(2000000042.022:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.519212][   T29] audit: type=1326 audit(2000000042.022:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.542782][   T29] audit: type=1326 audit(2000000042.022:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.566388][   T29] audit: type=1326 audit(2000000042.022:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.589951][   T29] audit: type=1326 audit(2000000042.022:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ff00000
[  312.682025][T15349] loop6: detected capacity change from 0 to 1024
[  312.691878][T15349] EXT4-fs: Ignoring removed bh option
[  312.697491][T15349] EXT4-fs: Ignoring removed nomblk_io_submit option
[  312.729133][T15354] FAULT_INJECTION: forcing a failure.
[  312.729133][T15354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.730982][T15349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.742348][T15354] CPU: 0 UID: 0 PID: 15354 Comm: syz.7.3458 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  312.742387][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  312.742424][T15354] Call Trace:
[  312.742432][T15354]  <TASK>
[  312.742444][T15354]  __dump_stack+0x1d/0x30
[  312.742473][T15354]  dump_stack_lvl+0xe8/0x140
[  312.742511][T15354]  dump_stack+0x15/0x1b
[  312.742572][T15354]  should_fail_ex+0x265/0x280
[  312.742621][T15354]  should_fail+0xb/0x20
[  312.742678][T15354]  should_fail_usercopy+0x1a/0x20
[  312.742706][T15354]  _copy_to_user+0x20/0xa0
[  312.742834][T15354]  io_register_resize_rings+0x3f6/0xac0
[  312.742866][T15354]  ? _parse_integer+0x27/0x40
[  312.742941][T15354]  ? kstrtoull+0x111/0x140
[  312.743055][T15354]  __se_sys_io_uring_register+0xa6d/0xeb0
[  312.743088][T15354]  ? fput+0x8f/0xc0
[  312.743168][T15354]  ? ksys_write+0x192/0x1a0
[  312.743198][T15354]  __x64_sys_io_uring_register+0x55/0x70
[  312.743229][T15354]  x64_sys_call+0xc91/0x2fb0
[  312.743259][T15354]  do_syscall_64+0xd2/0x200
[  312.743288][T15354]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  312.743397][T15354]  ? clear_bhb_loop+0x40/0x90
[  312.743428][T15354]  ? clear_bhb_loop+0x40/0x90
[  312.743460][T15354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.743489][T15354] RIP: 0033:0x7efdab3ee929
[  312.743576][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.743603][T15354] RSP: 002b:00007efda9a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  312.743633][T15354] RAX: ffffffffffffffda RBX: 00007efdab615fa0 RCX: 00007efdab3ee929
[  312.743651][T15354] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000006
[  312.743719][T15354] RBP: 00007efda9a57090 R08: 0000000000000000 R09: 0000000000000000
[  312.743737][T15354] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  312.743811][T15354] R13: 0000000000000000 R14: 00007efdab615fa0 R15: 00007ffed745d7e8
[  312.743839][T15354]  </TASK>
[  313.171214][T15366] syzkaller1: entered promiscuous mode
[  313.176821][T15366] syzkaller1: entered allmulticast mode
[  313.198192][T15366] No such timeout policy "syz1"
[  313.670332][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.698728][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3461'.
[  313.769346][T15371] loop6: detected capacity change from 0 to 1024
[  313.814217][T15371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.839218][T15371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.440430][T15370] syz.6.3461 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  314.454692][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.6.3461 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  314.454739][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  314.454837][T15370] Call Trace:
[  314.454843][T15370]  <TASK>
[  314.454850][T15370]  __dump_stack+0x1d/0x30
[  314.454937][T15370]  dump_stack_lvl+0xe8/0x140
[  314.455005][T15370]  dump_stack+0x15/0x1b
[  314.455031][T15370]  dump_header+0x81/0x220
[  314.455067][T15370]  oom_kill_process+0x334/0x3f0
[  314.455117][T15370]  out_of_memory+0x979/0xb80
[  314.455158][T15370]  try_charge_memcg+0x5e6/0x9e0
[  314.455195][T15370]  obj_cgroup_charge_pages+0xa6/0x150
[  314.455243][T15370]  __memcg_kmem_charge_page+0x9f/0x170
[  314.455371][T15370]  __alloc_frozen_pages_noprof+0x188/0x360
[  314.455417][T15370]  alloc_pages_mpol+0xb3/0x250
[  314.455460][T15370]  alloc_pages_noprof+0x90/0x130
[  314.455530][T15370]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  314.455589][T15370]  __kvmalloc_node_noprof+0x30f/0x4e0
[  314.455628][T15370]  ? ip_set_alloc+0x1f/0x30
[  314.455726][T15370]  ? ip_set_alloc+0x1f/0x30
[  314.455771][T15370]  ip_set_alloc+0x1f/0x30
[  314.455802][T15370]  hash_netiface_create+0x282/0x740
[  314.455873][T15370]  ? __pfx_hash_netiface_create+0x10/0x10
[  314.455963][T15370]  ip_set_create+0x3cc/0x960
[  314.456001][T15370]  ? __nla_parse+0x40/0x60
[  314.456031][T15370]  nfnetlink_rcv_msg+0x4c3/0x590
[  314.456139][T15370]  ? selinux_capable+0x1f9/0x270
[  314.456182][T15370]  netlink_rcv_skb+0x120/0x220
[  314.456203][T15370]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  314.456312][T15370]  nfnetlink_rcv+0x16b/0x1690
[  314.456349][T15370]  ? __kfree_skb+0x109/0x150
[  314.456366][T15370]  ? nlmon_xmit+0x4f/0x60
[  314.456388][T15370]  ? consume_skb+0x49/0x150
[  314.456484][T15370]  ? nlmon_xmit+0x4f/0x60
[  314.456514][T15370]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  314.456549][T15370]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  314.456573][T15370]  ? __dev_queue_xmit+0x182/0x1fb0
[  314.456593][T15370]  ? ref_tracker_free+0x37d/0x3e0
[  314.456675][T15370]  ? __netlink_deliver_tap+0x4dc/0x500
[  314.456775][T15370]  netlink_unicast+0x5a1/0x670
[  314.456823][T15370]  netlink_sendmsg+0x58b/0x6b0
[  314.456857][T15370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.456885][T15370]  __sock_sendmsg+0x142/0x180
[  314.457005][T15370]  ____sys_sendmsg+0x31e/0x4e0
[  314.457030][T15370]  ___sys_sendmsg+0x17b/0x1d0
[  314.457139][T15370]  __x64_sys_sendmsg+0xd4/0x160
[  314.457168][T15370]  x64_sys_call+0x2999/0x2fb0
[  314.457193][T15370]  do_syscall_64+0xd2/0x200
[  314.457216][T15370]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  314.457275][T15370]  ? clear_bhb_loop+0x40/0x90
[  314.457302][T15370]  ? clear_bhb_loop+0x40/0x90
[  314.457326][T15370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.457352][T15370] RIP: 0033:0x7f9f5a9ce929
[  314.457370][T15370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.457389][T15370] RSP: 002b:00007f9f59037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.457442][T15370] RAX: ffffffffffffffda RBX: 00007f9f5abf5fa0 RCX: 00007f9f5a9ce929
[  314.457456][T15370] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000009
[  314.457467][T15370] RBP: 00007f9f5aa50b39 R08: 0000000000000000 R09: 0000000000000000
[  314.457496][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.457507][T15370] R13: 0000000000000000 R14: 00007f9f5abf5fa0 R15: 00007ffe70b7cfd8
[  314.457531][T15370]  </TASK>
[  314.457547][T15370] memory: usage 307200kB, limit 307200kB, failcnt 866
[  314.804434][T15370] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[  314.812367][T15370] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  314.819686][T15370] Memory cgroup stats for /syz6:
[  314.820261][T15370] cache 0
[  314.828251][T15370] rss 0
[  314.831037][T15370] shmem 0
[  314.834128][T15370] mapped_file 0
[  314.837594][T15370] dirty 0
[  314.840581][T15370] writeback 0
[  314.843950][T15370] workingset_refault_anon 1530
[  314.848771][T15370] workingset_refault_file 34
[  314.853410][T15370] swap 208896
[  314.856786][T15370] swapcached 4096
[  314.860430][T15370] pgpgin 259621
[  314.864027][T15370] pgpgout 259620
[  314.867587][T15370] pgfault 329541
[  314.871151][T15370] pgmajfault 444
[  314.874806][T15370] inactive_anon 0
[  314.878451][T15370] active_anon 4096
[  314.882187][T15370] inactive_file 0
[  314.885954][T15370] active_file 0
[  314.889425][T15370] unevictable 0
[  314.892951][T15370] hierarchical_memory_limit 314572800
[  314.898392][T15370] hierarchical_memsw_limit 9223372036854771712
[  314.904575][T15370] total_cache 0
[  314.908079][T15370] total_rss 0
[  314.911373][T15370] total_shmem 0
[  314.914902][T15370] total_mapped_file 0
[  314.918902][T15370] total_dirty 0
[  314.922383][T15370] total_writeback 0
[  314.926297][T15370] total_workingset_refault_anon 1530
[  314.931605][T15370] total_workingset_refault_file 34
[  314.936756][T15370] total_swap 208896
[  314.940591][T15370] total_swapcached 4096
[  314.944776][T15370] total_pgpgin 259621
[  314.948838][T15370] total_pgpgout 259620
[  314.952935][T15370] total_pgfault 329541
[  314.957028][T15370] total_pgmajfault 444
[  314.961099][T15370] total_inactive_anon 0
[  314.965476][T15370] total_active_anon 4096
[  314.969729][T15370] total_inactive_file 0
[  314.973929][T15370] total_active_file 0
[  314.977959][T15370] total_unevictable 0
[  314.982030][T15370] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3461,pid=15369,uid=0
[  314.996800][T15370] Memory cgroup out of memory: Killed process 15369 (syz.6.3461) total-vm:93884kB, anon-rss:936kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  315.409404][T15390] lo speed is unknown, defaulting to 1000
[  315.492694][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3469'.
[  315.569076][T15390] chnl_net:caif_netlink_parms(): no params data found
[  315.597851][   T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.705531][   T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.747089][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3477'.
[  315.776009][T15390] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.783308][T15390] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.799879][T15390] bridge_slave_0: entered allmulticast mode
[  315.806896][T15390] bridge_slave_0: entered promiscuous mode
[  315.819832][T15390] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.827065][T15390] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.834523][T15390] bridge_slave_1: entered allmulticast mode
[  315.841162][T15390] bridge_slave_1: entered promiscuous mode
[  315.849824][   T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.864119][T15430] loop6: detected capacity change from 0 to 1024
[  315.944751][T15390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.955209][   T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.987354][T15430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.006205][T15430] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.020513][T15390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.104776][T15446] loop3: detected capacity change from 0 to 128
[  316.130776][T15446] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  316.138823][T15446] FAT-fs (loop3): Filesystem has been set read-only
[  316.150616][T15446] syz.3.3484: attempt to access beyond end of device
[  316.150616][T15446] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  316.166446][T15452] 9pnet_fd: Insufficient options for proto=fd
[  316.172717][T15448] 9pnet_fd: Insufficient options for proto=fd
[  316.180122][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3483'.
[  316.189481][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.196969][T15453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.202311][T15446] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  316.212076][T15446] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  316.220771][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.225952][T15455] syz.3.3484: attempt to access beyond end of device
[  316.225952][T15455] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  316.228296][T15453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.257263][T15455] syz.3.3484: attempt to access beyond end of device
[  316.257263][T15455] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  316.278288][T15455] syz.3.3484: attempt to access beyond end of device
[  316.278288][T15455] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  316.293658][T15455] syz.3.3484: attempt to access beyond end of device
[  316.293658][T15455] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  316.308401][T15390] team0: Port device team_slave_0 added
[  316.318932][T15390] team0: Port device team_slave_1 added
[  316.338192][T15446] netem: change failed
[  316.356843][T15390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.363893][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.389882][T15390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.446723][T15464] loop7: detected capacity change from 0 to 128
[  316.517668][   T37] bridge_slave_0: left allmulticast mode
[  316.523518][   T37] bridge_slave_0: left promiscuous mode
[  316.529201][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.542493][T15471] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  316.810779][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.826240][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.854336][   T37] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  316.863954][   T37] bond0 (unregistering): Released all slaves
[  316.890781][T15390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.897909][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.923944][T15390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.997789][T15510] netlink: 'syz.4.3496': attribute type 10 has an invalid length.
[  317.011039][T15390] hsr_slave_0: entered promiscuous mode
[  317.018596][T15390] hsr_slave_1: entered promiscuous mode
[  317.024684][T15390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.032340][T15390] Cannot create hsr debugfs directory
[  317.041708][T15510] team0: Port device dummy0 added
[  317.052561][   T37] batman_adv: batadv0: Removing interface: team0
[  317.062010][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.069737][T15510] netlink: 'syz.4.3496': attribute type 10 has an invalid length.
[  317.079610][   T37] veth1_vlan: left promiscuous mode
[  317.085745][   T37] veth0_vlan: left promiscuous mode
[  317.085980][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'.
[  317.155642][   T37] team0 (unregistering): Port device team_slave_1 removed
[  317.169852][   T37] team0 (unregistering): Port device team_slave_0 removed
[  317.183600][T15519] loop6: detected capacity change from 0 to 1024
[  317.241905][T15510] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  317.267198][T15510] team0: Failed to send options change via netlink (err -105)
[  317.277293][T15519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.291500][T15510] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  317.324403][T15510] team0: Port device dummy0 removed
[  317.333257][T15510] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  317.498864][T15543] loop7: detected capacity change from 0 to 128
[  317.633649][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3501'.
[  317.747055][T15558] loop7: detected capacity change from 0 to 1024
[  317.814830][T15558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.852153][T15558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.039294][T15390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  318.056318][T15390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  318.075606][T15390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  318.113715][T15390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  318.172286][T15390] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.194884][T15390] 8021q: adding VLAN 0 to HW filter on device team0
[  318.223528][  T180] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.230780][  T180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.260637][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.267791][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.428660][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.529067][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.644071][   T29] kauditd_printk_skb: 13398 callbacks suppressed
[  318.644087][   T29] audit: type=1326 audit(2000000048.312:28516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.674097][   T29] audit: type=1326 audit(2000000048.312:28517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.702648][T15390] veth0_vlan: entered promiscuous mode
[  318.711080][T15390] veth1_vlan: entered promiscuous mode
[  318.738719][T15390] veth0_macvtap: entered promiscuous mode
[  318.747834][T15390] veth1_macvtap: entered promiscuous mode
[  318.773020][   T29] audit: type=1326 audit(2000000048.312:28518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.796711][   T29] audit: type=1326 audit(2000000048.312:28519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd8c2ce963 code=0x7ffc0000
[  318.820249][   T29] audit: type=1326 audit(2000000048.312:28520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd8c2ce963 code=0x7ffc0000
[  318.843682][   T29] audit: type=1326 audit(2000000048.312:28521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.867308][   T29] audit: type=1326 audit(2000000048.312:28522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.890958][   T29] audit: type=1326 audit(2000000048.382:28523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.914620][   T29] audit: type=1326 audit(2000000048.382:28524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  318.938229][   T29] audit: type=1326 audit(2000000048.382:28525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15643 comm="syz.4.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbd8c2ce929 code=0x7ffc0000
[  319.012660][T15390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.034407][T15390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.056351][T15390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.065332][T15390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.074424][T15390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.083204][T15390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.097351][T15657] xt_hashlimit: max too large, truncated to 1048576
[  319.149178][T15663] netlink: 'syz.7.3519': attribute type 1 has an invalid length.
[  319.157064][T15663] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3519'.
[  319.220645][T15673] loop6: detected capacity change from 0 to 512
[  319.228679][T15673] EXT4-fs (loop6): orphan cleanup on readonly fs
[  319.237655][T15673] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.3517: bad orphan inode 13
[  319.300759][T15673] ext4_test_bit(bit=12, block=18) = 1
[  319.306300][T15673] is_bad_inode(inode)=0
[  319.310491][T15673] NEXT_ORPHAN(inode)=2130706432
[  319.315433][T15673] max_ino=32
[  319.318650][T15673] i_nlink=1
[  319.325889][T15673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  319.386804][T15673] random: crng reseeded on system resumption
[  319.397189][T15686] loop7: detected capacity change from 0 to 512
[  319.416044][T15686] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  319.440506][T15686] EXT4-fs (loop7): mount failed
[  319.621928][T15709] loop0: detected capacity change from 0 to 128
[  319.678373][T15708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  319.686371][T15708] FAT-fs (loop0): Filesystem has been set read-only
[  319.694559][T15708] syz.0.3529: attempt to access beyond end of device
[  319.694559][T15708] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  319.696593][T15711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3530'.
[  319.708344][T15708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  319.725215][T15708] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  319.736881][T15715] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in;
[  319.736881][T15715]    program syz.7.3532 not setting count and/or reply_len properly
[  319.758872][T15709] syz.0.3529: attempt to access beyond end of device
[  319.758872][T15709] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  319.772182][T15709] Buffer I/O error on dev loop0, logical block 2065, async page read
[  319.793164][T15709] syz.0.3529: attempt to access beyond end of device
[  319.793164][T15709] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  319.806621][T15709] Buffer I/O error on dev loop0, logical block 2066, async page read
[  319.817424][T15709] syz.0.3529: attempt to access beyond end of device
[  319.817424][T15709] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[  319.830983][T15709] Buffer I/O error on dev loop0, logical block 2067, async page read
[  319.846988][T15709] syz.0.3529: attempt to access beyond end of device
[  319.846988][T15709] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[  319.860447][T15709] Buffer I/O error on dev loop0, logical block 2068, async page read
[  319.869825][T15709] Buffer I/O error on dev loop0, logical block 2069, async page read
[  319.878220][T15709] Buffer I/O error on dev loop0, logical block 2070, async page read
[  319.893181][T15709] Buffer I/O error on dev loop0, logical block 2071, async page read
[  319.901407][T15709] Buffer I/O error on dev loop0, logical block 2072, async page read
[  319.912542][T15721] loop4: detected capacity change from 0 to 128
[  319.922533][T15721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  319.930445][T15721] FAT-fs (loop4): Filesystem has been set read-only
[  319.938671][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.948511][T15721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  319.956444][T15721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  319.995189][T15725] IPv6: Can't replace route, no match found
[  320.017613][T15725] loop6: detected capacity change from 0 to 512
[  320.019115][T15709] Buffer I/O error on dev loop0, logical block 2065, async page read
[  320.025284][T15725] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  320.035308][T15709] Buffer I/O error on dev loop0, logical block 2066, async page read
[  320.047713][T15725] EXT4-fs: error: could not find journal device path
[  320.073078][T15725] batman_adv: batadv0: Adding interface: dummy0
[  320.079422][T15725] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.105779][T15725] batman_adv: batadv0: Interface activated: dummy0
[  320.305881][T15750] loop0: detected capacity change from 0 to 512
[  320.347308][T15750] EXT4-fs: Ignoring removed nobh option
[  320.373435][T15750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  320.385025][T15758] xt_hashlimit: max too large, truncated to 1048576
[  320.395308][T15750] EXT4-fs (loop0): 1 orphan inode deleted
[  320.401271][T15750] EXT4-fs (loop0): 1 truncate cleaned up
[  320.417589][T15750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.538696][T15765] loop4: detected capacity change from 0 to 512
[  320.553347][T15765] EXT4-fs (loop4): orphan cleanup on readonly fs
[  320.560218][T15765] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.3547: bad orphan inode 13
[  320.602500][T15765] ext4_test_bit(bit=12, block=18) = 1
[  320.607981][T15765] is_bad_inode(inode)=0
[  320.612167][T15765] NEXT_ORPHAN(inode)=2130706432
[  320.617077][T15765] max_ino=32
[  320.620307][T15765] i_nlink=1
[  320.660895][T15765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.663287][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.694105][T15769] loop3: detected capacity change from 0 to 512
[  320.720191][T15765] random: crng reseeded on system resumption
[  320.812918][T15777] team0: Device macvtap1 is already an upper device of the team interface
[  320.860671][T15783] loop3: detected capacity change from 0 to 512
[  320.868194][T15783] EXT4-fs: Ignoring removed nobh option
[  320.874646][T15783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  320.911102][T15783] EXT4-fs (loop3): 1 orphan inode deleted
[  320.917046][T15783] EXT4-fs (loop3): 1 truncate cleaned up
[  320.961285][T15783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.073756][T13595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.115412][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3559'.
[  321.227848][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.316211][T15817] loop4: detected capacity change from 0 to 164
[  321.476391][T15826] loop4: detected capacity change from 0 to 512
[  321.498581][T15826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.513110][T15826] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.528483][T15826] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  321.550717][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.573713][T15836] FAULT_INJECTION: forcing a failure.
[  321.573713][T15836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.586875][T15836] CPU: 1 UID: 0 PID: 15836 Comm: syz.4.3574 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  321.586917][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.586932][T15836] Call Trace:
[  321.586953][T15836]  <TASK>
[  321.586962][T15836]  __dump_stack+0x1d/0x30
[  321.586988][T15836]  dump_stack_lvl+0xe8/0x140
[  321.587011][T15836]  dump_stack+0x15/0x1b
[  321.587104][T15836]  should_fail_ex+0x265/0x280
[  321.587148][T15836]  should_fail+0xb/0x20
[  321.587188][T15836]  should_fail_usercopy+0x1a/0x20
[  321.587213][T15836]  _copy_to_user+0x20/0xa0
[  321.587243][T15836]  simple_read_from_buffer+0xb5/0x130
[  321.587304][T15836]  proc_fail_nth_read+0x100/0x140
[  321.587386][T15836]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  321.587413][T15836]  vfs_read+0x19d/0x6f0
[  321.587431][T15836]  ? __rcu_read_unlock+0x4f/0x70
[  321.587454][T15836]  ? __fget_files+0x184/0x1c0
[  321.587499][T15836]  ? finish_task_switch+0xad/0x2b0
[  321.587525][T15836]  ksys_read+0xda/0x1a0
[  321.587545][T15836]  __x64_sys_read+0x40/0x50
[  321.587567][T15836]  x64_sys_call+0x2d77/0x2fb0
[  321.587652][T15836]  do_syscall_64+0xd2/0x200
[  321.587728][T15836]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  321.587759][T15836]  ? clear_bhb_loop+0x40/0x90
[  321.587785][T15836]  ? clear_bhb_loop+0x40/0x90
[  321.587813][T15836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.587913][T15836] RIP: 0033:0x7fbd8c2cd33c
[  321.587931][T15836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  321.587995][T15836] RSP: 002b:00007fbd8a937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  321.588015][T15836] RAX: ffffffffffffffda RBX: 00007fbd8c4f5fa0 RCX: 00007fbd8c2cd33c
[  321.588035][T15836] RDX: 000000000000000f RSI: 00007fbd8a9370a0 RDI: 0000000000000006
[  321.588047][T15836] RBP: 00007fbd8a937090 R08: 0000000000000000 R09: 0000000000000000
[  321.588057][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.588068][T15836] R13: 0000000000000000 R14: 00007fbd8c4f5fa0 R15: 00007ffee4e83428
[  321.588087][T15836]  </TASK>
[  321.928909][T15844] FAULT_INJECTION: forcing a failure.
[  321.928909][T15844] name failslab, interval 1, probability 0, space 0, times 0
[  321.941590][T15844] CPU: 1 UID: 0 PID: 15844 Comm: syz.7.3578 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  321.941671][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.941700][T15844] Call Trace:
[  321.941709][T15844]  <TASK>
[  321.941718][T15844]  __dump_stack+0x1d/0x30
[  321.941796][T15844]  dump_stack_lvl+0xe8/0x140
[  321.941815][T15844]  dump_stack+0x15/0x1b
[  321.941835][T15844]  should_fail_ex+0x265/0x280
[  321.941891][T15844]  ? request_threaded_irq+0x1ad/0x2c0
[  321.941931][T15844]  should_failslab+0x8c/0xb0
[  321.941953][T15844]  __kmalloc_cache_noprof+0x4c/0x320
[  321.942001][T15844]  ? __pfx_serial8250_interrupt+0x10/0x10
[  321.942041][T15844]  request_threaded_irq+0x1ad/0x2c0
[  321.942067][T15844]  ? __pfx_serial8250_interrupt+0x10/0x10
[  321.942114][T15844]  univ8250_setup_irq+0x28c/0x2e0
[  321.942144][T15844]  serial8250_do_startup+0xc6f/0x1eb0
[  321.942171][T15844]  serial8250_startup+0x41/0x50
[  321.942255][T15844]  uart_startup+0x465/0x8e0
[  321.942286][T15844]  uart_ioctl+0xc43/0xe40
[  321.942313][T15844]  ? do_vfs_ioctl+0x9df/0x11d0
[  321.942353][T15844]  ? tty_jobctrl_ioctl+0x29e/0x810
[  321.942478][T15844]  tty_ioctl+0x7de/0xb80
[  321.942516][T15844]  ? __pfx_tty_ioctl+0x10/0x10
[  321.942555][T15844]  __se_sys_ioctl+0xce/0x140
[  321.942660][T15844]  __x64_sys_ioctl+0x43/0x50
[  321.942697][T15844]  x64_sys_call+0x19a8/0x2fb0
[  321.942771][T15844]  do_syscall_64+0xd2/0x200
[  321.942832][T15844]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  321.942931][T15844]  ? clear_bhb_loop+0x40/0x90
[  321.942955][T15844]  ? clear_bhb_loop+0x40/0x90
[  321.942979][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.943002][T15844] RIP: 0033:0x7efdab3ee929
[  321.943018][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.943069][T15844] RSP: 002b:00007efda9a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.943092][T15844] RAX: ffffffffffffffda RBX: 00007efdab615fa0 RCX: 00007efdab3ee929
[  321.943106][T15844] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000007
[  321.943120][T15844] RBP: 00007efda9a57090 R08: 0000000000000000 R09: 0000000000000000
[  321.943135][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.943150][T15844] R13: 0000000000000000 R14: 00007efdab615fa0 R15: 00007ffed745d7e8
[  321.943241][T15844]  </TASK>
[  322.315539][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3584'.
[  322.551712][T15874] loop0: detected capacity change from 0 to 512
[  322.553086][T15874] ext4: Unknown parameter 'permit_directio'
[  322.770132][T15877] hub 1-0:1.0: USB hub found
[  322.794130][T15877] hub 1-0:1.0: 8 ports detected
[  323.072874][T15890] loop4: detected capacity change from 0 to 128
[  323.082443][T15890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  323.090366][T15890] FAT-fs (loop4): Filesystem has been set read-only
[  323.097243][T15890] bio_check_eod: 17 callbacks suppressed
[  323.097270][T15890] syz.4.3596: attempt to access beyond end of device
[  323.097270][T15890] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  323.117242][T15890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  323.125387][T15890] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  323.135028][T15890] syz.4.3596: attempt to access beyond end of device
[  323.135028][T15890] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.148505][T15890] syz.4.3596: attempt to access beyond end of device
[  323.148505][T15890] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.166321][T15890] syz.4.3596: attempt to access beyond end of device
[  323.166321][T15890] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.181249][T15890] syz.4.3596: attempt to access beyond end of device
[  323.181249][T15890] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.321056][T15902] loop4: detected capacity change from 0 to 2048
[  323.339799][T15902] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.355684][T15902] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.3600: iget: bad i_size value: 8796093031208
[  323.363194][T15901] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3601'.
[  323.508039][T15913] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3600'.
[  323.540756][T15902] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3600'.
[  323.596634][T15918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3606'.
[  323.606568][T15918] netlink: 'syz.0.3606': attribute type 1 has an invalid length.
[  323.614364][T15918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3606'.
[  323.624608][T13028] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  323.703853][T15924] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3609'.
[  323.713140][T15924] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3609'.
[  323.722240][T15924] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3609'.
[  323.753661][T15922] loop0: detected capacity change from 0 to 128
[  323.764853][T15922] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  323.772845][T15922] FAT-fs (loop0): Filesystem has been set read-only
[  323.779770][   T29] kauditd_printk_skb: 333 callbacks suppressed
[  323.779859][   T29] audit: type=1326 audit(2000000053.432:28858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  323.809822][   T29] audit: type=1326 audit(2000000053.432:28859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  323.835295][T15922] syz.0.3608: attempt to access beyond end of device
[  323.835295][T15922] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  323.851174][T15922] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  323.856943][   T29] audit: type=1326 audit(2000000053.442:28860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  323.859197][T15922] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  323.882793][   T29] audit: type=1326 audit(2000000053.452:28861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f5a9ce963 code=0x7ffc0000
[  323.882873][   T29] audit: type=1326 audit(2000000053.452:28862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f5a9ce963 code=0x7ffc0000
[  323.897664][T15922] syz.0.3608: attempt to access beyond end of device
[  323.897664][T15922] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.914109][   T29] audit: type=1326 audit(2000000053.452:28863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  323.939567][T15922] syz.0.3608: attempt to access beyond end of device
[  323.939567][T15922] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.950782][   T29] audit: type=1326 audit(2000000053.452:28864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  323.980559][T15922] syz.0.3608: attempt to access beyond end of device
[  323.980559][T15922] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  323.987593][   T29] audit: type=1326 audit(2000000053.452:28865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  324.013089][T15922] syz.0.3608: attempt to access beyond end of device
[  324.013089][T15922] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  324.024456][   T29] audit: type=1326 audit(2000000053.452:28866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  324.024496][   T29] audit: type=1326 audit(2000000053.452:28867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5a9ce929 code=0x7ffc0000
[  324.140760][T15934] loop7: detected capacity change from 0 to 1024
[  324.181214][T15934] EXT4-fs: Ignoring removed bh option
[  324.186717][T15934] EXT4-fs: Ignoring removed nomblk_io_submit option
[  324.286503][T15934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.320864][T15952] FAULT_INJECTION: forcing a failure.
[  324.320864][T15952] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  324.334665][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.4.3619 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  324.334701][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  324.334774][T15952] Call Trace:
[  324.334779][T15952]  <TASK>
[  324.334786][T15952]  __dump_stack+0x1d/0x30
[  324.334811][T15952]  dump_stack_lvl+0xe8/0x140
[  324.334832][T15952]  dump_stack+0x15/0x1b
[  324.334851][T15952]  should_fail_ex+0x265/0x280
[  324.334919][T15952]  should_fail_alloc_page+0xf2/0x100
[  324.334944][T15952]  __alloc_frozen_pages_noprof+0xff/0x360
[  324.335027][T15952]  alloc_pages_mpol+0xb3/0x250
[  324.335120][T15952]  alloc_pages_noprof+0x90/0x130
[  324.335153][T15952]  pte_alloc_one+0x2d/0x120
[  324.335177][T15952]  __do_fault+0x7b/0x200
[  324.335203][T15952]  handle_mm_fault+0xd69/0x2be0
[  324.335254][T15952]  ? check_vma_flags+0x26e/0x340
[  324.335283][T15952]  __get_user_pages+0x1036/0x1fb0
[  324.335324][T15952]  __gup_longterm_locked+0x9c9/0x1010
[  324.335360][T15952]  ? exc_page_fault+0x62/0xa0
[  324.335398][T15952]  ? ___slab_alloc+0x11b/0x900
[  324.335434][T15952]  ? should_fail_ex+0xdb/0x280
[  324.335555][T15952]  pin_user_pages_remote+0x7e/0xb0
[  324.335583][T15952]  process_vm_rw+0x484/0x950
[  324.335638][T15952]  __x64_sys_process_vm_writev+0x78/0x90
[  324.335710][T15952]  x64_sys_call+0xe80/0x2fb0
[  324.335729][T15952]  do_syscall_64+0xd2/0x200
[  324.335747][T15952]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  324.335770][T15952]  ? clear_bhb_loop+0x40/0x90
[  324.335790][T15952]  ? clear_bhb_loop+0x40/0x90
[  324.335874][T15952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.335961][T15952] RIP: 0033:0x7fbd8c2ce929
[  324.335975][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.335992][T15952] RSP: 002b:00007fbd8a916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  324.336009][T15952] RAX: ffffffffffffffda RBX: 00007fbd8c4f6080 RCX: 00007fbd8c2ce929
[  324.336020][T15952] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000017d
[  324.336086][T15952] RBP: 00007fbd8a916090 R08: 000000000000023a R09: 0000000000000000
[  324.336099][T15952] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[  324.336113][T15952] R13: 0000000000000000 R14: 00007fbd8c4f6080 R15: 00007ffee4e83428
[  324.336131][T15952]  </TASK>
[  324.595339][T15956] IPVS: Error joining to the multicast group
[  324.657046][T15964] loop6: detected capacity change from 0 to 128
[  324.705495][T15964] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  324.713531][T15964] FAT-fs (loop6): Filesystem has been set read-only
[  324.729640][T15964] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  324.729734][T15964] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  324.785152][T15969] hsr_slave_0: left promiscuous mode
[  324.799774][T15969] hsr_slave_1: left promiscuous mode
[  325.085605][T15014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.506357][   T10] IPVS: starting estimator thread 0...
[  325.531661][T16013] loop4: detected capacity change from 0 to 1024
[  325.613312][T16013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.625584][T16012] IPVS: using max 1776 ests per chain, 88800 per kthread
[  325.733941][T16013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.745973][T16041] SELinux:  Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped).
[  326.455093][T16082] netlink: 'syz.4.3662': attribute type 10 has an invalid length.
[  326.463167][T16082] __nla_validate_parse: 6 callbacks suppressed
[  326.463180][T16082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3662'.
[  326.466712][T16080] loop7: detected capacity change from 0 to 8192
[  326.493338][T16082] team0: Port device geneve1 added
[  326.689412][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'.
[  326.698792][T16090] usb usb8: usbfs: process 16090 (syz.4.3664) did not claim interface 0 before use
[  326.708224][T16090] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[  326.905044][T16111] loop0: detected capacity change from 0 to 512
[  326.915733][T16111] EXT4-fs: Ignoring removed nobh option
[  326.954726][T16111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  326.988968][T16111] EXT4-fs (loop0): 1 orphan inode deleted
[  326.994834][T16111] EXT4-fs (loop0): 1 truncate cleaned up
[  327.001250][T16111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.022085][T16117] loop6: detected capacity change from 0 to 512
[  327.029881][T16117] EXT4-fs: Ignoring removed nobh option
[  327.056876][T16117] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3670: corrupted inode contents
[  327.074560][T16117] EXT4-fs (loop6): Remounting filesystem read-only
[  327.081390][T16117] EXT4-fs (loop6): 1 truncate cleaned up
[  327.088091][T16117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.102340][  T180] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  327.113013][  T180] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  327.124207][T16117] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.135952][  T180] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  327.147174][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.178936][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.224297][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3672'.
[  327.305891][T16126] loop6: detected capacity change from 0 to 1024
[  327.356364][T16126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.462323][T16126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.511173][T16147] loop7: detected capacity change from 0 to 512
[  327.533985][T16147] EXT4-fs: Ignoring removed nobh option
[  327.576745][T16147] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  327.599230][T16147] EXT4-fs (loop7): 1 orphan inode deleted
[  327.605115][T16147] EXT4-fs (loop7): 1 truncate cleaned up
[  327.607163][T16159] FAULT_INJECTION: forcing a failure.
[  327.607163][T16159] name failslab, interval 1, probability 0, space 0, times 0
[  327.623502][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.0.3681 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  327.623538][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  327.623554][T16159] Call Trace:
[  327.623562][T16159]  <TASK>
[  327.623572][T16159]  __dump_stack+0x1d/0x30
[  327.623628][T16159]  dump_stack_lvl+0xe8/0x140
[  327.623653][T16159]  dump_stack+0x15/0x1b
[  327.623674][T16159]  should_fail_ex+0x265/0x280
[  327.623717][T16159]  should_failslab+0x8c/0xb0
[  327.623745][T16159]  kmem_cache_alloc_node_noprof+0x57/0x320
[  327.623842][T16159]  ? __alloc_skb+0x101/0x320
[  327.623880][T16159]  ? obj_cgroup_charge_account+0x122/0x1a0
[  327.623979][T16159]  __alloc_skb+0x101/0x320
[  327.624015][T16159]  ? perf_trace_kmem_cache_free+0x55/0x160
[  327.624041][T16159]  virtio_transport_alloc_skb+0x47/0x600
[  327.624080][T16159]  ? skb_free_head+0x87/0x150
[  327.624105][T16159]  ? kmem_cache_free+0xdf/0x300
[  327.624170][T16159]  ? strlen+0x19/0x40
[  327.624194][T16159]  ? perf_trace_kmem_cache_free+0x55/0x160
[  327.624233][T16159]  virtio_transport_send_pkt_info+0x434/0x860
[  327.624272][T16159]  virtio_transport_stream_dequeue+0x4bf/0x530
[  327.624321][T16159]  __vsock_connectible_recvmsg+0x50c/0x740
[  327.624357][T16159]  ? __pfx_autoremove_wake_function+0x10/0x10
[  327.624510][T16159]  vsock_connectible_recvmsg+0x80/0x90
[  327.624537][T16159]  ? __pfx_vsock_connectible_recvmsg+0x10/0x10
[  327.624651][T16159]  sock_recvmsg+0x139/0x170
[  327.624680][T16159]  ____sys_recvmsg+0xf5/0x280
[  327.624741][T16159]  ___sys_recvmsg+0x11f/0x370
[  327.624776][T16159]  __x64_sys_recvmsg+0xd1/0x160
[  327.624807][T16159]  x64_sys_call+0xf19/0x2fb0
[  327.624831][T16159]  do_syscall_64+0xd2/0x200
[  327.624856][T16159]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  327.624912][T16159]  ? clear_bhb_loop+0x40/0x90
[  327.624961][T16159]  ? clear_bhb_loop+0x40/0x90
[  327.624988][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.625014][T16159] RIP: 0033:0x7f4c2d02e929
[  327.625030][T16159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.625052][T16159] RSP: 002b:00007f4c2b697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  327.625075][T16159] RAX: ffffffffffffffda RBX: 00007f4c2d255fa0 RCX: 00007f4c2d02e929
[  327.625097][T16159] RDX: 000000004c2103a0 RSI: 0000200000000280 RDI: 0000000000000005
[  327.625111][T16159] RBP: 00007f4c2b697090 R08: 0000000000000000 R09: 0000000000000000
[  327.625125][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.625137][T16159] R13: 0000000000000000 R14: 00007f4c2d255fa0 R15: 00007fffb5690268
[  327.625154][T16159]  </TASK>
[  327.630162][T16147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.932990][T15014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.151888][T16175] FAULT_INJECTION: forcing a failure.
[  328.151888][T16175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.165096][T16175] CPU: 0 UID: 0 PID: 16175 Comm: syz.3.3687 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  328.165194][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  328.165208][T16175] Call Trace:
[  328.165216][T16175]  <TASK>
[  328.165225][T16175]  __dump_stack+0x1d/0x30
[  328.165311][T16175]  dump_stack_lvl+0xe8/0x140
[  328.165334][T16175]  dump_stack+0x15/0x1b
[  328.165355][T16175]  should_fail_ex+0x265/0x280
[  328.165410][T16175]  should_fail+0xb/0x20
[  328.165448][T16175]  should_fail_usercopy+0x1a/0x20
[  328.165472][T16175]  _copy_from_iter+0xcf/0xe40
[  328.165534][T16175]  ? __build_skb_around+0x1a0/0x200
[  328.165573][T16175]  ? __alloc_skb+0x223/0x320
[  328.165655][T16175]  netlink_sendmsg+0x471/0x6b0
[  328.165724][T16175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.165765][T16175]  __sock_sendmsg+0x142/0x180
[  328.165797][T16175]  ____sys_sendmsg+0x31e/0x4e0
[  328.165825][T16175]  ___sys_sendmsg+0x17b/0x1d0
[  328.165865][T16175]  __x64_sys_sendmsg+0xd4/0x160
[  328.165899][T16175]  x64_sys_call+0x2999/0x2fb0
[  328.165928][T16175]  do_syscall_64+0xd2/0x200
[  328.165985][T16175]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  328.166017][T16175]  ? clear_bhb_loop+0x40/0x90
[  328.166045][T16175]  ? clear_bhb_loop+0x40/0x90
[  328.166074][T16175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.166101][T16175] RIP: 0033:0x7fede7bde929
[  328.166184][T16175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.166204][T16175] RSP: 002b:00007fede6247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.166225][T16175] RAX: ffffffffffffffda RBX: 00007fede7e05fa0 RCX: 00007fede7bde929
[  328.166237][T16175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  328.166253][T16175] RBP: 00007fede6247090 R08: 0000000000000000 R09: 0000000000000000
[  328.166284][T16175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.166296][T16175] R13: 0000000000000000 R14: 00007fede7e05fa0 R15: 00007fff84997e68
[  328.166315][T16175]  </TASK>
[  328.446016][T16182] loop3: detected capacity change from 0 to 512
[  328.453747][T16182] EXT4-fs: Ignoring removed nobh option
[  328.460678][T16182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  328.495409][T16182] EXT4-fs (loop3): 1 orphan inode deleted
[  328.501221][T16182] EXT4-fs (loop3): 1 truncate cleaned up
[  328.540201][T16182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.619493][T16208] pim6reg: entered allmulticast mode
[  328.665067][T13595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.784462][   T29] kauditd_printk_skb: 245 callbacks suppressed
[  328.784476][   T29] audit: type=1400 audit(2000000058.452:29107): avc:  denied  { setcurrent } for  pid=16218 comm="syz.0.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  328.801307][T16221] loop7: detected capacity change from 0 to 128
[  328.810545][   T29] audit: type=1401 audit(2000000058.452:29108): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  328.841365][T16219] netlink: 5528 bytes leftover after parsing attributes in process `wg1'.
[  328.856800][T16219] team0 (unregistering): Port device team_slave_0 removed
[  328.873013][   T29] audit: type=1326 audit(2000000058.452:29109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efdab3ee9b7 code=0x7ffc0000
[  328.896111][   T29] audit: type=1326 audit(2000000058.452:29110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdab3ed290 code=0x7ffc0000
[  328.919183][   T29] audit: type=1326 audit(2000000058.452:29111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdab3ee52b code=0x7ffc0000
[  328.937174][T16221] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.942772][   T29] audit: type=1326 audit(2000000058.562:29112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efdab3ed58a code=0x7ffc0000
[  328.957392][T16221] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  328.977206][   T29] audit: type=1326 audit(2000000058.562:29113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efdab3ed58a code=0x7ffc0000
[  329.011454][T16219] team0 (unregistering): Port device team_slave_1 removed
[  329.031962][   T29] audit: type=1326 audit(2000000058.562:29114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efdab3ed197 code=0x7ffc0000
[  329.062389][   T29] audit: type=1326 audit(2000000058.562:29115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efdab3f00ca code=0x7ffc0000
[  329.149349][T16225] xt_hashlimit: max too large, truncated to 1048576
[  329.207736][T16226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.216314][T16226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.239765][   T29] audit: type=1326 audit(2000000058.762:29116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16220 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdab3ed290 code=0x7ffc0000
[  329.281741][T16230] loop3: detected capacity change from 0 to 512
[  329.293628][T16230] EXT4-fs (loop3): orphan cleanup on readonly fs
[  329.300992][T16230] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.3700: bad orphan inode 13
[  329.339642][T16229] loop0: detected capacity change from 0 to 128
[  329.351464][T16230] ext4_test_bit(bit=12, block=18) = 1
[  329.356948][T16230] is_bad_inode(inode)=0
[  329.361195][T16230] NEXT_ORPHAN(inode)=2130706432
[  329.366152][T16230] max_ino=32
[  329.369433][T16230] i_nlink=1
[  329.378206][T16230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  329.405429][T16230] random: crng reseeded on system resumption
[  329.461875][T16229] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  329.469868][T16229] FAT-fs (loop0): Filesystem has been set read-only
[  329.486677][T16229] bio_check_eod: 5 callbacks suppressed
[  329.486695][T16229] syz.0.3701: attempt to access beyond end of device
[  329.486695][T16229] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  329.543789][T16229] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  329.551921][T16229] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  329.564655][T16244] syz.0.3701: attempt to access beyond end of device
[  329.564655][T16244] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  329.593138][T16244] syz.0.3701: attempt to access beyond end of device
[  329.593138][T16244] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  329.633135][T16244] syz.0.3701: attempt to access beyond end of device
[  329.633135][T16244] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  329.653185][T16244] syz.0.3701: attempt to access beyond end of device
[  329.653185][T16244] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  329.818635][T15014] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.876370][T16271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3714' sets config #1
[  329.993640][T13595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.007971][T16286] loop0: detected capacity change from 0 to 512
[  330.022256][T16286] EXT4-fs: Ignoring removed i_version option
[  330.054621][T16286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  330.068732][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'.
[  330.088422][T16286] EXT4-fs (loop0): 1 truncate cleaned up
[  330.095390][T16286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.191919][T16301] loop7: detected capacity change from 0 to 1024
[  330.199599][T16300] IPv6: NLM_F_CREATE should be specified when creating new route
[  330.244795][T16301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.293123][T16310] FAULT_INJECTION: forcing a failure.
[  330.293123][T16310] name failslab, interval 1, probability 0, space 0, times 0
[  330.305897][T16310] CPU: 1 UID: 0 PID: 16310 Comm: syz.4.3728 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  330.305931][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.305955][T16310] Call Trace:
[  330.305964][T16310]  <TASK>
[  330.305971][T16310]  __dump_stack+0x1d/0x30
[  330.306036][T16310]  dump_stack_lvl+0xe8/0x140
[  330.306054][T16310]  dump_stack+0x15/0x1b
[  330.306070][T16310]  should_fail_ex+0x265/0x280
[  330.306116][T16310]  ? tls_set_sw_offload+0x284/0xba0
[  330.306178][T16310]  should_failslab+0x8c/0xb0
[  330.306233][T16310]  __kmalloc_cache_noprof+0x4c/0x320
[  330.306265][T16310]  tls_set_sw_offload+0x284/0xba0
[  330.306306][T16310]  ? tls_set_device_offload_rx+0x2a3/0x320
[  330.306394][T16310]  ? tls_setsockopt+0x640/0xce0
[  330.306492][T16310]  tls_setsockopt+0xa02/0xce0
[  330.306528][T16310]  sock_common_setsockopt+0x69/0x80
[  330.306567][T16310]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  330.306639][T16310]  __sys_setsockopt+0x184/0x200
[  330.306712][T16310]  __x64_sys_setsockopt+0x64/0x80
[  330.306736][T16310]  x64_sys_call+0x2bd5/0x2fb0
[  330.306840][T16310]  do_syscall_64+0xd2/0x200
[  330.306866][T16310]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  330.306904][T16310]  ? clear_bhb_loop+0x40/0x90
[  330.306957][T16310]  ? clear_bhb_loop+0x40/0x90
[  330.306979][T16310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.307041][T16310] RIP: 0033:0x7fbd8c2ce929
[  330.307059][T16310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.307152][T16310] RSP: 002b:00007fbd8a937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  330.307170][T16310] RAX: ffffffffffffffda RBX: 00007fbd8c4f5fa0 RCX: 00007fbd8c2ce929
[  330.307181][T16310] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003
[  330.307192][T16310] RBP: 00007fbd8a937090 R08: 0000000000000038 R09: 0000000000000000
[  330.307203][T16310] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  330.307216][T16310] R13: 0000000000000000 R14: 00007fbd8c4f5fa0 R15: 00007ffee4e83428
[  330.307261][T16310]  </TASK>
[  330.538978][T16313] lo speed is unknown, defaulting to 1000
[  330.546401][T16301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.701750][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'.
[  330.731235][T16313] lo speed is unknown, defaulting to 1000
[  330.764374][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.947296][T16334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  330.954592][T16334] IPv6: NLM_F_CREATE should be set when creating new route
[  330.961837][T16334] IPv6: NLM_F_CREATE should be set when creating new route
[  330.969086][T16334] IPv6: NLM_F_CREATE should be set when creating new route
[  331.040569][T16313] lo speed is unknown, defaulting to 1000
[  331.181225][T16343] loop6: detected capacity change from 0 to 8192
[  331.190150][T16343] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  331.283473][T16313] lo speed is unknown, defaulting to 1000
[  331.344903][T16356] lo speed is unknown, defaulting to 1000
[  331.381804][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3745'.
[  331.390895][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3745'.
[  331.498863][T16375] loop6: detected capacity change from 0 to 128
[  331.526823][T16375] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  331.534823][T16375] FAT-fs (loop6): Filesystem has been set read-only
[  331.562146][T16375] syz.6.3749: attempt to access beyond end of device
[  331.562146][T16375] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  331.577055][T16375] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  331.584946][T16375] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  331.612531][T16375] syz.6.3749: attempt to access beyond end of device
[  331.612531][T16375] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  331.657271][T16375] syz.6.3749: attempt to access beyond end of device
[  331.657271][T16375] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  331.696487][T16375] syz.6.3749: attempt to access beyond end of device
[  331.696487][T16375] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  331.765776][T16383] loop3: detected capacity change from 0 to 1024
[  331.782412][T16382] netem: change failed
[  331.843043][T16375] syz.6.3749: attempt to access beyond end of device
[  331.843043][T16375] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  331.888972][T16383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.980928][T16383] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.153475][T16405] loop4: detected capacity change from 0 to 1024
[  332.313291][T16405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.338877][T16405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.419301][T16411] 9pnet_fd: Insufficient options for proto=fd
[  332.958503][T16425] loop3: detected capacity change from 0 to 128
[  332.968165][T16427] netlink: 'syz.4.3763': attribute type 10 has an invalid length.
[  332.978083][T16427] batman_adv: batadv0: Adding interface: team0
[  332.984307][T16427] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.009642][T16427] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  333.013404][T16425] vfat: Unknown parameter '18446744073709551615'
[  333.104238][T16427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41232 sclass=netlink_route_socket pid=16427 comm=syz.4.3763
[  333.139166][T16431] block device autoloading is deprecated and will be removed.
[  333.152797][T16425] loop3: detected capacity change from 0 to 512
[  333.595183][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'.
[  333.595363][T16496] loop6: detected capacity change from 0 to 512
[  333.607882][T16497] macvtap1: entered allmulticast mode
[  333.616054][T16497] veth0_macvtap: entered allmulticast mode
[  333.623369][T16489] FAULT_INJECTION: forcing a failure.
[  333.623369][T16489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.636520][T16489] CPU: 0 UID: 0 PID: 16489 Comm: syz.7.3781 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  333.636606][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.636620][T16489] Call Trace:
[  333.636627][T16489]  <TASK>
[  333.636636][T16489]  __dump_stack+0x1d/0x30
[  333.636735][T16489]  dump_stack_lvl+0xe8/0x140
[  333.636754][T16489]  dump_stack+0x15/0x1b
[  333.636784][T16489]  should_fail_ex+0x265/0x280
[  333.636818][T16489]  should_fail+0xb/0x20
[  333.636880][T16489]  should_fail_usercopy+0x1a/0x20
[  333.636900][T16489]  _copy_from_user+0x1c/0xb0
[  333.636925][T16489]  snd_seq_ioctl+0x127/0x2e0
[  333.636990][T16489]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  333.637081][T16489]  __se_sys_ioctl+0xce/0x140
[  333.637112][T16489]  __x64_sys_ioctl+0x43/0x50
[  333.637148][T16489]  x64_sys_call+0x19a8/0x2fb0
[  333.637240][T16489]  do_syscall_64+0xd2/0x200
[  333.637261][T16489]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  333.637286][T16489]  ? clear_bhb_loop+0x40/0x90
[  333.637309][T16489]  ? clear_bhb_loop+0x40/0x90
[  333.637383][T16489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.637411][T16489] RIP: 0033:0x7efdab3ee929
[  333.637426][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.637444][T16489] RSP: 002b:00007efda9a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  333.637464][T16489] RAX: ffffffffffffffda RBX: 00007efdab615fa0 RCX: 00007efdab3ee929
[  333.637481][T16489] RDX: 00002000000005c0 RSI: 00000000c0a85320 RDI: 0000000000000004
[  333.637512][T16489] RBP: 00007efda9a57090 R08: 0000000000000000 R09: 0000000000000000
[  333.637545][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.637556][T16489] R13: 0000000000000000 R14: 00007efdab615fa0 R15: 00007ffed745d7e8
[  333.637577][T16489]  </TASK>
[  333.663189][T16496] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  333.674044][T16497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34642 sclass=netlink_route_socket pid=16497 comm=syz.4.3784
[  333.759891][T16496] EXT4-fs (loop6): 1 truncate cleaned up
[  333.875550][T16496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.926938][T16507] FAULT_INJECTION: forcing a failure.
[  333.926938][T16507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.940147][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.3.3785 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  333.940251][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.940268][T16507] Call Trace:
[  333.940277][T16507]  <TASK>
[  333.940287][T16507]  __dump_stack+0x1d/0x30
[  333.940511][T16507]  dump_stack_lvl+0xe8/0x140
[  333.940592][T16507]  dump_stack+0x15/0x1b
[  333.940612][T16507]  should_fail_ex+0x265/0x280
[  333.940653][T16507]  should_fail+0xb/0x20
[  333.940734][T16507]  should_fail_usercopy+0x1a/0x20
[  333.940800][T16507]  _copy_from_iter+0xcf/0xe40
[  333.940845][T16507]  ? __build_skb_around+0x1a0/0x200
[  333.940890][T16507]  ? __alloc_skb+0x223/0x320
[  333.940974][T16507]  netlink_sendmsg+0x471/0x6b0
[  333.941008][T16507]  ? __pfx_netlink_sendmsg+0x10/0x10
[  333.941040][T16507]  __sock_sendmsg+0x142/0x180
[  333.941115][T16507]  ____sys_sendmsg+0x31e/0x4e0
[  333.941146][T16507]  ___sys_sendmsg+0x17b/0x1d0
[  333.941254][T16507]  __x64_sys_sendmsg+0xd4/0x160
[  333.941296][T16507]  x64_sys_call+0x2999/0x2fb0
[  333.941325][T16507]  do_syscall_64+0xd2/0x200
[  333.941353][T16507]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  333.941403][T16507]  ? clear_bhb_loop+0x40/0x90
[  333.941431][T16507]  ? clear_bhb_loop+0x40/0x90
[  333.941463][T16507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.941490][T16507] RIP: 0033:0x7fede7bde929
[  333.941568][T16507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.941593][T16507] RSP: 002b:00007fede6247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.941618][T16507] RAX: ffffffffffffffda RBX: 00007fede7e05fa0 RCX: 00007fede7bde929
[  333.941633][T16507] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003
[  333.941645][T16507] RBP: 00007fede6247090 R08: 0000000000000000 R09: 0000000000000000
[  333.941668][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.941680][T16507] R13: 0000000000000000 R14: 00007fede7e05fa0 R15: 00007fff84997e68
[  333.941777][T16507]  </TASK>
[  334.005430][T16490] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3782'.
[  334.050290][T16520] netlink: 'syz.3.3787': attribute type 1 has an invalid length.
[  334.170253][   T29] kauditd_printk_skb: 367 callbacks suppressed
[  334.170277][   T29] audit: type=1326 audit(2000000063.832:29484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.0.3782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c2d02e929 code=0x0
[  334.224115][   T29] audit: type=1400 audit(2000000063.892:29485): avc:  denied  { append } for  pid=16526 comm="syz.4.3788" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  334.269873][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3786'.
[  334.282387][T16496] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.291066][   T29] audit: type=1400 audit(2000000063.912:29486): avc:  denied  { ioctl } for  pid=16526 comm="syz.4.3788" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  334.524319][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.826715][T16624] 9pnet_fd: Insufficient options for proto=fd
[  334.923573][   T29] audit: type=1326 audit(2000000064.562:29487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fede7bd58e7 code=0x7ffc0000
[  334.947187][   T29] audit: type=1326 audit(2000000064.562:29488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fede7b7ab19 code=0x7ffc0000
[  334.970852][   T29] audit: type=1326 audit(2000000064.562:29489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fede7bd58e7 code=0x7ffc0000
[  334.994538][   T29] audit: type=1326 audit(2000000064.562:29490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fede7b7ab19 code=0x7ffc0000
[  335.018040][   T29] audit: type=1326 audit(2000000064.562:29491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  335.041882][   T29] audit: type=1326 audit(2000000064.562:29492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  335.065505][   T29] audit: type=1326 audit(2000000064.572:29493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.3.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  335.336067][T16642] loop0: detected capacity change from 0 to 512
[  335.346441][T16642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  335.393412][T16642] EXT4-fs (loop0): 1 truncate cleaned up
[  335.400370][T16642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.415773][T16644] 9pnet_fd: Insufficient options for proto=fd
[  335.620575][T16652] IPv6: NLM_F_CREATE should be specified when creating new route
[  335.801966][T16658] loop6: detected capacity change from 0 to 512
[  335.883934][T16658] EXT4-fs: Ignoring removed nobh option
[  335.903426][T16658] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  335.925026][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.934652][T16658] EXT4-fs (loop6): 1 orphan inode deleted
[  335.940426][T16658] EXT4-fs (loop6): 1 truncate cleaned up
[  336.004604][T16658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.081577][T16675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3813'.
[  336.100587][T16678] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  336.110026][T16679] loop7: detected capacity change from 0 to 2048
[  336.117249][T16679] EXT4-fs: Ignoring removed bh option
[  336.127169][T16679] ext4: Unknown parameter 'subj_type'
[  336.176088][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.206051][T16679] loop7: detected capacity change from 0 to 1024
[  336.233183][T16679] ext4: Unknown parameter 'fsname'
[  336.447939][T16707] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3825'.
[  336.616511][T16722] 9pnet_fd: Insufficient options for proto=fd
[  336.855773][T16732] loop4: detected capacity change from 0 to 512
[  336.863633][T16732] EXT4-fs: Ignoring removed nobh option
[  336.910366][T16732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  336.965449][T16732] EXT4-fs (loop4): 1 orphan inode deleted
[  336.971260][T16732] EXT4-fs (loop4): 1 truncate cleaned up
[  337.039038][T16732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.168701][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.718771][T16780] loop3: detected capacity change from 0 to 512
[  337.730076][T16780] EXT4-fs: Ignoring removed oldalloc option
[  337.765599][T16780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  337.790235][T16780] EXT4-fs (loop3): orphan cleanup on readonly fs
[  337.799343][T16780] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3844: Failed to acquire dquot type 1
[  337.814751][T16785] loop6: detected capacity change from 0 to 512
[  337.825860][T16780] EXT4-fs (loop3): 1 truncate cleaned up
[  337.840480][T16780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  337.929946][T16785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.947826][T16780] tipc: New replicast peer: 255.255.255.255
[  337.953909][T16785] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  337.954072][T16780] tipc: Enabled bearer <udp:syz2>, priority 10
[  337.971759][T16785] syz.6.3848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  337.986363][T16785] CPU: 0 UID: 60928 PID: 16785 Comm: syz.6.3848 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  337.986462][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  337.986478][T16785] Call Trace:
[  337.986485][T16785]  <TASK>
[  337.986494][T16785]  __dump_stack+0x1d/0x30
[  337.986518][T16785]  dump_stack_lvl+0xe8/0x140
[  337.986614][T16785]  dump_stack+0x15/0x1b
[  337.986633][T16785]  warn_alloc+0x12b/0x1a0
[  337.986668][T16785]  ? update_curr+0x27f/0x320
[  337.986719][T16785]  __vmalloc_node_range_noprof+0x9c/0xe00
[  337.986757][T16785]  ? probe_sched_wakeup+0x85/0xa0
[  337.986789][T16785]  ? ttwu_do_activate+0x1cf/0x210
[  337.986865][T16785]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  337.986895][T16785]  ? __rcu_read_unlock+0x4f/0x70
[  337.986993][T16785]  ? avc_has_perm_noaudit+0x1b1/0x200
[  337.987028][T16785]  ? should_fail_ex+0x30/0x280
[  337.987100][T16785]  ? xskq_create+0x36/0xe0
[  337.987156][T16785]  vmalloc_user_noprof+0x7d/0xb0
[  337.987194][T16785]  ? xskq_create+0x80/0xe0
[  337.987224][T16785]  xskq_create+0x80/0xe0
[  337.987284][T16785]  xsk_init_queue+0x95/0xf0
[  337.987314][T16785]  xsk_setsockopt+0x35c/0x510
[  337.987341][T16785]  ? __pfx_xsk_setsockopt+0x10/0x10
[  337.987388][T16785]  __sys_setsockopt+0x184/0x200
[  337.987414][T16785]  __x64_sys_setsockopt+0x64/0x80
[  337.987435][T16785]  x64_sys_call+0x2bd5/0x2fb0
[  337.987457][T16785]  do_syscall_64+0xd2/0x200
[  337.987556][T16785]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  337.987601][T16785]  ? clear_bhb_loop+0x40/0x90
[  337.987682][T16785]  ? clear_bhb_loop+0x40/0x90
[  337.987710][T16785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.987812][T16785] RIP: 0033:0x7f9f5a9ce929
[  337.987832][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.987863][T16785] RSP: 002b:00007f9f59037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  337.987952][T16785] RAX: ffffffffffffffda RBX: 00007f9f5abf5fa0 RCX: 00007f9f5a9ce929
[  337.987968][T16785] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  337.987984][T16785] RBP: 00007f9f5aa50b39 R08: 0000000000000006 R09: 0000000000000000
[  337.987999][T16785] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.988014][T16785] R13: 0000000000000000 R14: 00007f9f5abf5fa0 R15: 00007ffe70b7cfd8
[  337.988036][T16785]  </TASK>
[  337.988045][T16785] Mem-Info:
[  338.227207][T16785] active_anon:20068 inactive_anon:10 isolated_anon:0
[  338.227207][T16785]  active_file:6042 inactive_file:2738 isolated_file:0
[  338.227207][T16785]  unevictable:16342 dirty:184 writeback:0
[  338.227207][T16785]  slab_reclaimable:3438 slab_unreclaimable:18847
[  338.227207][T16785]  mapped:31944 shmem:2673 pagetables:1687
[  338.227207][T16785]  sec_pagetables:0 bounce:0
[  338.227207][T16785]  kernel_misc_reclaimable:0
[  338.227207][T16785]  free:1864423 free_pcp:6494 free_cma:0
[  338.272720][T16785] Node 0 active_anon:82592kB inactive_anon:40kB active_file:24168kB inactive_file:10952kB unevictable:65368kB isolated(anon):0kB isolated(file):0kB mapped:130096kB dirty:736kB writeback:0kB shmem:13012kB writeback_tmp:0kB kernel_stack:5056kB pagetables:6748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  338.302116][T16785] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  338.330746][T16785] lowmem_reserve[]: 0 2882 7861 7861
[  338.336151][T16785] Node 0 DMA32 free:2947940kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951468kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  338.366623][T16785] lowmem_reserve[]: 0 0 4978 4978
[  338.371729][T16785] Node 0 Normal free:4494160kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82592kB inactive_anon:40kB active_file:24168kB inactive_file:10952kB unevictable:65368kB writepending:736kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:20396kB local_pcp:16628kB free_cma:0kB
[  338.404487][T16785] lowmem_reserve[]: 0 0 0 0
[  338.409145][T16785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  338.422134][T16785] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947940kB
[  338.438153][T16785] Node 0 Normal: 1313*4kB (UME) 2557*8kB (UME) 2656*16kB (UME) 2206*32kB (UME) 1046*64kB (UME) 627*128kB (UME) 762*256kB (UM) 618*512kB (UME) 526*1024kB (UME) 96*2048kB (U) 723*4096kB (UM) = 4494124kB
[  338.457995][T16785] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  338.467370][T16785] 28362 total pagecache pages
[  338.472058][T16785] 13 pages in swap cache
[  338.476479][T16785] Free swap  = 124772kB
[  338.480831][T16785] Total swap = 124996kB
[  338.485103][T16785] 2097051 pages RAM
[  338.488982][T16785] 0 pages HighMem/MovableOnly
[  338.493684][T16785] 80786 pages reserved
[  338.511284][T13595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.534584][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.552928][T16801] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  338.579336][T16807] loop3: detected capacity change from 0 to 1024
[  338.586207][T16807] EXT4-fs: Ignoring removed bh option
[  338.591651][T16807] EXT4-fs: Ignoring removed nomblk_io_submit option
[  338.657239][T16807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.700509][T16814] loop4: detected capacity change from 0 to 512
[  338.711567][T16814] EXT4-fs: Ignoring removed nobh option
[  338.726602][T16820] loop6: detected capacity change from 0 to 256
[  338.782169][T16814] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3858: corrupted inode contents
[  338.847844][T16814] EXT4-fs (loop4): Remounting filesystem read-only
[  338.869007][T16820] FAT-fs (loop6): Directory bread(block 64) failed
[  338.876446][T16820] FAT-fs (loop6): Directory bread(block 65) failed
[  338.876628][T16814] EXT4-fs (loop4): 1 truncate cleaned up
[  338.890082][T16835] netlink: 'syz.0.3865': attribute type 39 has an invalid length.
[  338.893424][T16814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.910488][T16568] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  338.912124][T16814] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.921080][T16568] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  338.932862][T16820] FAT-fs (loop6): Directory bread(block 66) failed
[  338.965175][T16568] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  338.971791][ T3569] tipc: Node number set to 718777161
[  338.983775][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.996481][T16820] FAT-fs (loop6): Directory bread(block 67) failed
[  339.005184][T16820] FAT-fs (loop6): Directory bread(block 68) failed
[  339.049243][T16820] FAT-fs (loop6): Directory bread(block 69) failed
[  339.056012][T16820] FAT-fs (loop6): Directory bread(block 70) failed
[  339.062818][T16820] FAT-fs (loop6): Directory bread(block 71) failed
[  339.078898][T16820] FAT-fs (loop6): Directory bread(block 72) failed
[  339.087289][T16820] FAT-fs (loop6): Directory bread(block 73) failed
[  339.388868][T16862] loop0: detected capacity change from 0 to 8192
[  339.426349][T16862] FAULT_INJECTION: forcing a failure.
[  339.426349][T16862] name failslab, interval 1, probability 0, space 0, times 0
[  339.439188][T16862] CPU: 1 UID: 0 PID: 16862 Comm: syz.0.3871 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  339.439237][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  339.439254][T16862] Call Trace:
[  339.439261][T16862]  <TASK>
[  339.439271][T16862]  __dump_stack+0x1d/0x30
[  339.439371][T16862]  dump_stack_lvl+0xe8/0x140
[  339.439396][T16862]  dump_stack+0x15/0x1b
[  339.439417][T16862]  should_fail_ex+0x265/0x280
[  339.439461][T16862]  should_failslab+0x8c/0xb0
[  339.439487][T16862]  kmem_cache_alloc_noprof+0x50/0x310
[  339.439569][T16862]  ? getname_flags+0x80/0x3b0
[  339.439636][T16862]  ? fput+0x8f/0xc0
[  339.439670][T16862]  getname_flags+0x80/0x3b0
[  339.439745][T16862]  __x64_sys_unlinkat+0x70/0xb0
[  339.439782][T16862]  x64_sys_call+0x2438/0x2fb0
[  339.439802][T16862]  do_syscall_64+0xd2/0x200
[  339.439822][T16862]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  339.439902][T16862]  ? clear_bhb_loop+0x40/0x90
[  339.439974][T16862]  ? clear_bhb_loop+0x40/0x90
[  339.440001][T16862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.440063][T16862] RIP: 0033:0x7f4c2d02e929
[  339.440078][T16862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.440095][T16862] RSP: 002b:00007f4c2b697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  339.440187][T16862] RAX: ffffffffffffffda RBX: 00007f4c2d255fa0 RCX: 00007f4c2d02e929
[  339.440203][T16862] RDX: 0000000000000200 RSI: 0000200000000080 RDI: 0000000000000004
[  339.440224][T16862] RBP: 00007f4c2b697090 R08: 0000000000000000 R09: 0000000000000000
[  339.440239][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.440254][T16862] R13: 0000000000000000 R14: 00007f4c2d255fa0 R15: 00007fffb5690268
[  339.440277][T16862]  </TASK>
[  339.818750][T16876] 9pnet_fd: Insufficient options for proto=fd
[  339.935987][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3881'.
[  339.958528][T16893] loop4: detected capacity change from 0 to 128
[  339.961351][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  339.961370][   T29] audit: type=1326 audit(2000000069.622:29655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.001915][T16889] dummy0: entered promiscuous mode
[  340.005445][T16893] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  340.007993][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'.
[  340.014997][T16893] FAT-fs (loop4): Filesystem has been set read-only
[  340.027601][   T29] audit: type=1326 audit(2000000069.662:29656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.036940][T16893] bio_check_eod: 1 callbacks suppressed
[  340.036970][T16893] syz.4.3882: attempt to access beyond end of device
[  340.036970][T16893] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  340.054195][   T29] audit: type=1326 audit(2000000069.662:29657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.060497][T16893] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  340.073431][   T29] audit: type=1326 audit(2000000069.662:29658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.073470][   T29] audit: type=1326 audit(2000000069.662:29659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.097172][T16893] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  340.104876][   T29] audit: type=1326 audit(2000000069.662:29660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.104945][   T29] audit: type=1326 audit(2000000069.662:29661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fede7bdd3df code=0x7ffc0000
[  340.195570][T16889] dummy0 (unregistering): left promiscuous mode
[  340.207081][   T29] audit: type=1326 audit(2000000069.662:29662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.233005][T16895] syz.6.3860: attempt to access beyond end of device
[  340.233005][T16895] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256
[  340.236935][   T29] audit: type=1326 audit(2000000069.662:29663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.274000][   T29] audit: type=1326 audit(2000000069.662:29664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.3.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede7bde929 code=0x7ffc0000
[  340.298417][T16896] syz.4.3882: attempt to access beyond end of device
[  340.298417][T16896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  340.327972][T16896] syz.4.3882: attempt to access beyond end of device
[  340.327972][T16896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  340.373829][T16896] syz.4.3882: attempt to access beyond end of device
[  340.373829][T16896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  340.396442][T16899] loop3: detected capacity change from 0 to 512
[  340.429927][T16893] netem: change failed
[  340.453044][T16896] syz.4.3882: attempt to access beyond end of device
[  340.453044][T16896] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  340.504048][T16902] loop4: detected capacity change from 0 to 1024
[  340.511476][T16902] EXT4-fs: Ignoring removed bh option
[  340.517008][T16902] EXT4-fs: Ignoring removed nomblk_io_submit option
[  340.598886][T16899] EXT4-fs: Ignoring removed nobh option
[  340.620735][T16905] loop0: detected capacity change from 0 to 512
[  340.641130][T16899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  340.641665][T16905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  340.694803][T16899] EXT4-fs (loop3): 1 orphan inode deleted
[  340.700597][T16899] EXT4-fs (loop3): 1 truncate cleaned up
[  340.744195][T16905] EXT4-fs (loop0): 1 truncate cleaned up
[  341.366001][T16930] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3894'.
[  341.642761][T16951] loop6: detected capacity change from 0 to 512
[  341.651651][T16942] 9pnet_fd: Insufficient options for proto=fd
[  341.658469][T16951] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  341.685985][T16954] loop7: detected capacity change from 0 to 1024
[  341.698083][T16954] EXT4-fs: Ignoring removed bh option
[  341.703672][T16954] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.721644][T16951] EXT4-fs (loop6): 1 truncate cleaned up
[  341.891061][T16977] loop4: detected capacity change from 0 to 512
[  341.897986][T16977] EXT4-fs: Ignoring removed nobh option
[  341.930886][T16977] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3906: corrupted inode contents
[  341.944876][T16977] EXT4-fs (loop4): Remounting filesystem read-only
[  341.952254][T16977] EXT4-fs (loop4): 1 truncate cleaned up
[  341.958576][T16977] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.969183][T16566] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  341.979782][T16566] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  341.991698][T16566] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  342.052315][T16983] loop6: detected capacity change from 0 to 512
[  342.069131][T16983] EXT4-fs: Ignoring removed nobh option
[  342.098234][T16983] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3909: corrupted inode contents
[  342.110717][T16983] EXT4-fs (loop6): Remounting filesystem read-only
[  342.137727][T16983] EXT4-fs (loop6): 1 truncate cleaned up
[  342.149301][T16983] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.160724][T16552] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  342.171347][T16552] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  342.187756][T16989] loop4: detected capacity change from 0 to 512
[  342.190637][T16552] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  342.206794][T16989] EXT4-fs: Ignoring removed nomblk_io_submit option
[  342.229522][T16989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  342.244050][T16989] EXT4-fs (loop4): 1 truncate cleaned up
[  342.260534][T16989] EXT4-fs mount: 13 callbacks suppressed
[  342.260563][T16989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.279411][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.330819][T16994] FAULT_INJECTION: forcing a failure.
[  342.330819][T16994] name failslab, interval 1, probability 0, space 0, times 0
[  342.343583][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.6.3912 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  342.343655][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  342.343669][T16994] Call Trace:
[  342.343677][T16994]  <TASK>
[  342.343685][T16994]  __dump_stack+0x1d/0x30
[  342.343704][T16994]  dump_stack_lvl+0xe8/0x140
[  342.343772][T16994]  dump_stack+0x15/0x1b
[  342.343792][T16994]  should_fail_ex+0x265/0x280
[  342.343830][T16994]  should_failslab+0x8c/0xb0
[  342.343854][T16994]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  342.343948][T16994]  ? sidtab_sid2str_get+0xa0/0x130
[  342.344026][T16994]  kmemdup_noprof+0x2b/0x70
[  342.344052][T16994]  sidtab_sid2str_get+0xa0/0x130
[  342.344140][T16994]  security_sid_to_context_core+0x1eb/0x2e0
[  342.344170][T16994]  security_sid_to_context+0x27/0x40
[  342.344196][T16994]  selinux_lsmprop_to_secctx+0x67/0xf0
[  342.344219][T16994]  security_lsmprop_to_secctx+0x43/0x80
[  342.344340][T16994]  audit_log_task_context+0x77/0x190
[  342.344384][T16994]  audit_log_task+0xf4/0x250
[  342.344436][T16994]  audit_seccomp+0x61/0x100
[  342.344531][T16994]  ? __seccomp_filter+0x68c/0x10d0
[  342.344558][T16994]  __seccomp_filter+0x69d/0x10d0
[  342.344588][T16994]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  342.344626][T16994]  ? vfs_write+0x75e/0x8e0
[  342.344666][T16994]  ? __rcu_read_unlock+0x4f/0x70
[  342.344690][T16994]  ? __fget_files+0x184/0x1c0
[  342.344768][T16994]  __secure_computing+0x82/0x150
[  342.344798][T16994]  syscall_trace_enter+0xcf/0x1e0
[  342.344882][T16994]  do_syscall_64+0xac/0x200
[  342.344911][T16994]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  342.345037][T16994]  ? clear_bhb_loop+0x40/0x90
[  342.345058][T16994]  ? clear_bhb_loop+0x40/0x90
[  342.345083][T16994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.345167][T16994] RIP: 0033:0x7f9f5a9ce929
[  342.345187][T16994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.345212][T16994] RSP: 002b:00007f9f59037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
[  342.345251][T16994] RAX: ffffffffffffffda RBX: 00007f9f5abf5fa0 RCX: 00007f9f5a9ce929
[  342.345269][T16994] RDX: 0000200000001500 RSI: 0000000000000021 RDI: 0000000000000106
[  342.345285][T16994] RBP: 00007f9f59037090 R08: 0000000000000000 R09: 0000000000000000
[  342.345301][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.345317][T16994] R13: 0000000000000000 R14: 00007f9f5abf5fa0 R15: 00007ffe70b7cfd8
[  342.345342][T16994]  </TASK>
[  342.650142][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.767729][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3913'.
[  342.891992][T17025] loop0: detected capacity change from 0 to 1024
[  342.908145][T15014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.923266][T17025] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  342.934297][T17025] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  342.957636][T17025] JBD2: no valid journal superblock found
[  342.963469][T17025] EXT4-fs (loop0): Could not load journal inode
[  342.986804][T17035] loop4: detected capacity change from 0 to 512
[  343.005671][T17035] EXT4-fs: Ignoring removed nobh option
[  343.045738][T17037] No such timeout policy "syz1"
[  343.050503][T17039] loop6: detected capacity change from 0 to 1024
[  343.059470][T17039] EXT4-fs: Ignoring removed bh option
[  343.065014][T17039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  343.082685][T17039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.085727][T17035] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3925: corrupted inode contents
[  343.137266][T17035] EXT4-fs (loop4): Remounting filesystem read-only
[  343.146452][T17035] EXT4-fs (loop4): 1 truncate cleaned up
[  343.152666][T17035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.171491][T16566] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  343.182216][T16566] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  343.193444][T17035] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.204003][T16566] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  343.264437][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.361402][T17057] loop0: detected capacity change from 0 to 512
[  343.371286][T17057] EXT4-fs: Ignoring removed nobh option
[  343.395118][T17057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  343.419646][T17057] EXT4-fs (loop0): 1 orphan inode deleted
[  343.425544][T17057] EXT4-fs (loop0): 1 truncate cleaned up
[  343.434848][T17057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.461894][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.522651][T17071] loop4: detected capacity change from 0 to 512
[  343.563871][T17071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  343.591106][T17077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3941'.
[  343.627346][T17071] EXT4-fs (loop4): 1 truncate cleaned up
[  343.637887][T17071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.883847][T17047] ==================================================================
[  343.892008][T17047] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode
[  343.900308][T17047] 
[  343.902652][T17047] write to 0xffff8881004e0a50 of 4 bytes by task 17039 on cpu 0:
[  343.910405][T17047]  writeback_single_inode+0x14a/0x3e0
[  343.915808][T17047]  sync_inode_metadata+0x5b/0x90
[  343.920777][T17047]  generic_buffers_fsync_noflush+0xd9/0x120
[  343.926752][T17047]  ext4_sync_file+0x1ab/0x690
[  343.931458][T17047]  vfs_fsync_range+0x10d/0x130
[  343.936251][T17047]  ext4_buffered_write_iter+0x34f/0x3c0
[  343.941818][T17047]  ext4_file_write_iter+0x383/0xf00
[  343.947053][T17047]  iter_file_splice_write+0x5f2/0x970
[  343.952444][T17047]  direct_splice_actor+0x156/0x2a0
[  343.957588][T17047]  splice_direct_to_actor+0x312/0x680
[  343.962983][T17047]  do_splice_direct+0xda/0x150
[  343.967769][T17047]  do_sendfile+0x380/0x650
[  343.972203][T17047]  __x64_sys_sendfile64+0x105/0x150
[  343.977448][T17047]  x64_sys_call+0xb39/0x2fb0
[  343.982053][T17047]  do_syscall_64+0xd2/0x200
[  343.986566][T17047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.992469][T17047] 
[  343.994800][T17047] read to 0xffff8881004e0a50 of 4 bytes by task 17047 on cpu 1:
[  344.002446][T17047]  __mark_inode_dirty+0x18e/0x760
[  344.007483][T17047]  mark_buffer_dirty+0x133/0x210
[  344.012446][T17047]  block_write_end+0x12e/0x210
[  344.017226][T17047]  ext4_write_end+0x13a/0x730
[  344.021929][T17047]  generic_perform_write+0x312/0x490
[  344.027252][T17047]  ext4_buffered_write_iter+0x1ee/0x3c0
[  344.032815][T17047]  ext4_file_write_iter+0x383/0xf00
[  344.038031][T17047]  iter_file_splice_write+0x5f2/0x970
[  344.043431][T17047]  direct_splice_actor+0x156/0x2a0
[  344.048585][T17047]  splice_direct_to_actor+0x312/0x680
[  344.054022][T17047]  do_splice_direct+0xda/0x150
[  344.058819][T17047]  do_sendfile+0x380/0x650
[  344.063265][T17047]  __x64_sys_sendfile64+0x105/0x150
[  344.068491][T17047]  x64_sys_call+0xb39/0x2fb0
[  344.073098][T17047]  do_syscall_64+0xd2/0x200
[  344.077614][T17047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.083525][T17047] 
[  344.085864][T17047] value changed: 0x00000008 -> 0x00000022
[  344.091591][T17047] 
[  344.093928][T17047] Reported by Kernel Concurrency Sanitizer on:
[  344.100087][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.6.3926 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  344.110885][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.120961][T17047] ==================================================================
[  344.142195][T13028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.204211][T14704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.443490][   T29] kauditd_printk_skb: 238 callbacks suppressed
[  345.443505][   T29] audit: type=1400 audit(2000000075.112:29884): avc:  denied  { egress } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  345.473465][   T29] audit: type=1400 audit(2000000075.112:29885): avc:  denied  { sendto } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1