last executing test programs:

3m58.824444179s ago: executing program 3 (id=206):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b"], 0xd6)

3m58.701094011s ago: executing program 3 (id=207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}})
futex(&(0x7f0000004000), 0x9, 0x0, 0x0, &(0x7f0000004000), 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket(0x2a, 0x4, 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000380)=0xbf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdfdf250900020073797a32000000000800410072786500140033006c6f000000000000000000000000000049fa7fdde99d1681a57b41f7f3a3007601314c393c60"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048010)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

3m57.729010395s ago: executing program 3 (id=237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)

3m57.700040395s ago: executing program 3 (id=239):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61703d6f66662c73686f776173736f632c756e686964652c696f636861727365743d6d616363726f617469616e6cd569643d", @ANYRESHEX=0x0, @ANYBLOB=',session=0x0000000000000009,overriderockperm,map=off,norock,nojoliet,session=0x000000000000001a,hide,check=strict,\x00'], 0x4, 0xa00, &(0x7f0000000dc0)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x25dfdbfd, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x0, 0xffffffff}, {0x3, 0x4, 0x20, 0x1000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r7, r7, 0x0, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000}, 0x18)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_open_procfs$namespace(r9, &(0x7f0000000100)='ns/pid\x00')
r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r12 = fcntl$dupfd(r11, 0x0, r11)
write$sndseq(r12, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {}, {}, @raw32}, {0x3, 0x0, 0x0, 0x0, @tick=0x7, {0x0, 0xa}, {}, @ext={0x0, 0x0}}], 0x38)

3m57.38236163s ago: executing program 3 (id=248):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x100a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x335, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x38d, 0x7}, 0x8000, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xc, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

3m57.263018411s ago: executing program 3 (id=249):
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8, 0x43920, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x80, 0x9}, 0x7412, 0x100000001, 0x4, 0x3, 0x1, 0x0, 0xfffc, 0x0, 0x2, 0x0, 0xffffffffffffe21d}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000000801020000000000000000030000070900010073797a3000000000050003000600000006000240600400004400048008000440000003e508000440c09fc302080004400000000308000340000000400800044000000001080002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r7 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @tracing=0x19, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r9 = dup2(r7, r7)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f00000019c0)={@private1={0xfc, 0x1, '\x00', 0x8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x40000, 0x40, 0x3, 0x100, 0x4, 0xc8002f})

3m57.244031301s ago: executing program 32 (id=249):
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8, 0x43920, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x80, 0x9}, 0x7412, 0x100000001, 0x4, 0x3, 0x1, 0x0, 0xfffc, 0x0, 0x2, 0x0, 0xffffffffffffe21d}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000000801020000000000000000030000070900010073797a3000000000050003000600000006000240600400004400048008000440000003e508000440c09fc302080004400000000308000340000000400800044000000001080002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r7 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @tracing=0x19, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r9 = dup2(r7, r7)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f00000019c0)={@private1={0xfc, 0x1, '\x00', 0x8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x40000, 0x40, 0x3, 0x100, 0x4, 0xc8002f})

3m26.56574747s ago: executing program 5 (id=699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = semget$private(0x0, 0x20000000102, 0x0)
semop(r1, &(0x7f0000000380)=[{0x2, 0xffff, 0x1000}], 0x1)
unshare(0x20000400)
r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x2}, 0x0)
semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x7ffd}, {}], 0x2, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000780)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180"], 0x94}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="318300000000000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4008841)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaffe5", 0x5a, 0x4044000, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$nl_generic(0x10, 0x3, 0x10)

3m25.706468252s ago: executing program 5 (id=713):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd97c4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095", @ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_procfs(r0, &(0x7f00000002c0)='pagemap\x00')
read$char_usb(r2, &(0x7f0000000380)=""/46, 0x2e)

3m25.467136506s ago: executing program 5 (id=720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="200012800800010067747000140002", @ANYRES32=r1], 0x48}}, 0x0)

3m25.406233657s ago: executing program 5 (id=722):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0xfff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
sendfile(r0, r1, &(0x7f0000000040)=0x100000000, 0x60b3)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0200aaaaaabb080600010800060400010180c200ffffff"], 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x400, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0xc, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5, 0x4, 0x3, 0x6, 0x7, 0x9, 0x7fffffff, 0xa6, 0x2, 0x1, 0x43f, 0x3, 0x9, 0x6d, 0x1000, 0x8, 0x7, 0x20e, 0x7f, 0x2, 0x0, 0x4, 0x4b7, 0xd7, 0x10000, 0x7, 0x8, 0x92af, 0x2, 0x312, 0x0, 0x8, 0x9, 0x2, 0x4, 0x1000000, 0x1, 0x7, 0x15, 0x1a62, 0xf, 0x0, 0xffffffff, 0x2, 0x4ffd, 0x4, 0x9, 0xfffffffe, 0x7, 0x5, 0x0, 0x7fff, 0xfff, 0x0, 0xfffffffe, 0x8, 0x1, 0x3, 0x7, 0x2, 0xd, 0x2d5, 0x2, 0x4, 0x6, 0x7f, 0xfc, 0x6, 0x2, 0x1, 0x2, 0x9, 0x10000, 0x8, 0x2, 0x1, 0x4089, 0x800, 0x40, 0x3, 0x80, 0xf93d, 0x9, 0x5, 0x0, 0x8, 0x6, 0x7, 0x5, 0x9, 0x9, 0x1, 0x3de, 0x5, 0xa, 0x9, 0x5, 0x8, 0x2b2e, 0x0, 0x40, 0x4, 0x7, 0x1ff, 0xcba3, 0xceb, 0x7f, 0x6, 0x0, 0x8001, 0x3, 0xffffffff, 0x4, 0x6, 0x1, 0x7, 0x1, 0x81, 0xfffffffb, 0x3c0e, 0x6da3, 0x3586, 0x5, 0x0, 0x9c, 0x7f, 0x4, 0x27c, 0x1, 0x1, 0x0, 0x6, 0xbd70, 0x9, 0x11d1, 0x12, 0x2, 0x0, 0xfffffc01, 0x3ff, 0x32, 0x3, 0x2, 0x9, 0x800, 0x8, 0x800, 0x100, 0x2, 0x40, 0x9, 0xfcfd, 0xffffffff, 0xff, 0x1, 0x0, 0x5, 0x6, 0x1, 0x0, 0x5, 0x4, 0xb4, 0xb3, 0x2d3d3f8f, 0x3, 0x2, 0x1, 0x6, 0x1000, 0x80000000, 0x21dfc31f, 0x653, 0x6, 0x0, 0x39fb, 0x7, 0x7, 0xde, 0xd, 0xfffffffa, 0x80000001, 0x4, 0x6, 0x1ed, 0x6, 0x40, 0x1, 0x5, 0xfff, 0x3, 0x9, 0xa, 0xb6, 0x0, 0x5a20, 0x9, 0x8001, 0xb, 0x7, 0xfffffffb, 0x9, 0x2, 0x2, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x3, 0x5, 0x7ff, 0x1, 0xc, 0x2, 0x2, 0x5, 0x8, 0x4, 0x10000, 0x5, 0x7, 0x1, 0x0, 0x0, 0x6, 0x4e29, 0x80000000, 0x0, 0x10001, 0x5, 0xfffffffe, 0x400, 0x3b, 0x8000, 0x1, 0x5, 0x2, 0x8, 0xfffffffd, 0x9, 0xe, 0x9, 0xb8000000, 0x1ce7, 0x7fff, 0x401, 0x2, 0x6, 0x3, 0xfffffffc, 0x4, 0x4, 0x0, 0xffff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8, 0x0, 0x81}, 0x18)
r9 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r9], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r12}, 0x10)
r13 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r13, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r13, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x33}}], 0x30, 0x4000000}, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10)
r14 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r14, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r14, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])

3m25.320725758s ago: executing program 5 (id=724):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff06, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c)

3m25.108365731s ago: executing program 5 (id=730):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000feffffff8af8ff00000000b7080000000002007b8af00100000000000080000000000007010000f8ffffffbfa410000000000007040000f0b70200000800000018230000", @ANYRES32=<r3=>r2, @ANYBLOB="0000000000000000a704d36e188900008500ef"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYRES32=<r7=>r5, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x8b, &(0x7f0000000e00)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, {0x18, 0x4, 0x1, 0x2, 0x8, 0x67, 0x6, 0xf1, 0x73, 0x5, @remote, @dev={0xac, 0x14, 0x14, 0x43}, {[@generic={0x44, 0x5, "0ffdb9"}, @generic={0x44, 0x4, "b782"}, @lsrr={0x83, 0x7, 0xbf, [@local]}, @timestamp_prespec={0x44, 0x3c, 0xca, 0x3, 0x6, [{@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x7}, {@multicast1, 0x9}, {@empty, 0x7}, {@broadcast, 0xfffffffb}, {@multicast2, 0x5}, {@empty, 0x480}]}]}}, "92"}}}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001880)=@newtaction={0x78, 0x12, 0xbf68af9d17701201, 0x0, 0x25dfdbfd, {0x7}, [{0x4}, {0x60, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_pedit={0x30, 0x9, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="020006009e5d510e0def6dfed5244fdde02dc3d8e7b63e00090455ebb9065bbb6b239d005ea6da0913a6e896d1f3ffc54e3db36ce1108345fae6ccaef3883db8d23bff5dcb1b575b8ecd8356f3df56f966472002090064f612e51fb742608859847339b361be77928c9da645516754886883da3a4db447f8040a3ac3756aa8bdfe73e865a8741f108601e4f5c32f0641fad318cc9bbf76fd51dadf211668a2f3adbe7bb59eb041ea71898660004ce657b2f6f8407c416c21c6a9951ba3af3b946fb70007997090c9652dd3b5d8fd97333660370328c959c229b5fda3e4353f8b88bf415c6d00", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x64, 0x0)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="020000000100010000000000040000000000000008000000", @ANYRES64=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r7, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000bfa200000000000007020000f8ffffffb703000000f3ff00b70400000000000085000000570000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc), 0x3, 0x1ff, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

3m25.093631921s ago: executing program 33 (id=730):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000feffffff8af8ff00000000b7080000000002007b8af00100000000000080000000000007010000f8ffffffbfa410000000000007040000f0b70200000800000018230000", @ANYRES32=<r3=>r2, @ANYBLOB="0000000000000000a704d36e188900008500ef"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYRES32=<r7=>r5, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x8b, &(0x7f0000000e00)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, {0x18, 0x4, 0x1, 0x2, 0x8, 0x67, 0x6, 0xf1, 0x73, 0x5, @remote, @dev={0xac, 0x14, 0x14, 0x43}, {[@generic={0x44, 0x5, "0ffdb9"}, @generic={0x44, 0x4, "b782"}, @lsrr={0x83, 0x7, 0xbf, [@local]}, @timestamp_prespec={0x44, 0x3c, 0xca, 0x3, 0x6, [{@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x7}, {@multicast1, 0x9}, {@empty, 0x7}, {@broadcast, 0xfffffffb}, {@multicast2, 0x5}, {@empty, 0x480}]}]}}, "92"}}}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001880)=@newtaction={0x78, 0x12, 0xbf68af9d17701201, 0x0, 0x25dfdbfd, {0x7}, [{0x4}, {0x60, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_pedit={0x30, 0x9, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x78}}, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="020006009e5d510e0def6dfed5244fdde02dc3d8e7b63e00090455ebb9065bbb6b239d005ea6da0913a6e896d1f3ffc54e3db36ce1108345fae6ccaef3883db8d23bff5dcb1b575b8ecd8356f3df56f966472002090064f612e51fb742608859847339b361be77928c9da645516754886883da3a4db447f8040a3ac3756aa8bdfe73e865a8741f108601e4f5c32f0641fad318cc9bbf76fd51dadf211668a2f3adbe7bb59eb041ea71898660004ce657b2f6f8407c416c21c6a9951ba3af3b946fb70007997090c9652dd3b5d8fd97333660370328c959c229b5fda3e4353f8b88bf415c6d00", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x64, 0x0)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="020000000100010000000000040000000000000008000000", @ANYRES64=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r7, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000bfa200000000000007020000f8ffffffb703000000f3ff00b70400000000000085000000570000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc), 0x3, 0x1ff, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1m34.36266704s ago: executing program 0 (id=2575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)

1m34.328586841s ago: executing program 0 (id=2578):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000000008040341d0a00000000000001923109040000010300000009210000000122ecfcd0e24568ab6e00"/54], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c)
r2 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
epoll_create1(0x0)
pidfd_getfd(r5, r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

1m33.488554873s ago: executing program 0 (id=2596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)

1m33.390478645s ago: executing program 0 (id=2597):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed88c0, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001480)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000e00000000000000fdffffffffffffff00000000000000000300000000020000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000090000000000000000000000000000000500000000000000"])
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
mount(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)=',$$\x00')
r5 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r5)
syz_open_procfs(0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bcc)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x3920e, 0xffffffffffffffff, 0x5, 0x3, 0x75, 0x6})
read(0xffffffffffffffff, &(0x7f0000000340)=""/110, 0x6e)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
fcntl$setstatus(r8, 0x4, 0x800)
waitid$P_PIDFD(0x3, r8, 0x0, 0x8, 0x0)
write$UHID_INPUT(r2, 0x0, 0xfdfc)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x404c080)
write(r0, 0x0, 0x0)

1m32.98656691s ago: executing program 0 (id=2601):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="186a0000000200"/16, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000540)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/86, 0x56}, {&(0x7f0000000800)=""/254, 0xfe}], 0x2, &(0x7f0000000980)=""/243, 0xf3}, 0x6}, {{&(0x7f0000000700)=@tipc=@id, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/199, 0xc7}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/199, 0xc7}, {&(0x7f0000000a80)=""/92, 0x5c}], 0x5, &(0x7f0000001040)=""/137, 0x89}, 0x8001}, {{&(0x7f0000001100)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001180)=""/161, 0xa1}], 0x1, &(0x7f0000001240)=""/116, 0x74}, 0x6}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000012c0)=""/134, 0x86}, {&(0x7f0000001440)=""/190, 0xbe}, {&(0x7f0000001500)=""/250, 0xfa}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001600)=""/252, 0xfc}], 0x5, &(0x7f0000001780)=""/107, 0x6b}, 0x1}], 0x4, 0x1, &(0x7f0000000640)={0x0, 0x3938700})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

1m32.122519353s ago: executing program 0 (id=2614):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={<r1=>0x0}, &(0x7f0000000880)=0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r1}, 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x8, 0x7, 0xb}, &(0x7f0000000080)=0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000009000000f8ffffffffffff7f08020100", @ANYRES32=0x1, @ANYBLOB="ba170000cdc30000000033bd0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300000000000000110000000000800000000000", @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180013bdb37f2b77f96e0000000000206949254b88d900000000d206c40cb520b561b3c909a5362105ae", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TIOCGRS485(r6, 0x5418, &(0x7f0000000200))
syslog(0x2, &(0x7f0000000480)=""/89, 0x59)
r7 = timerfd_create(0x8, 0x80000)
timerfd_settime(r7, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
clock_gettime(0x1, &(0x7f0000000180)={<r8=>0x0, <r9=>0x0})
timerfd_settime(r5, 0x3, &(0x7f0000000000)={{}, {r8, r9+60000000}}, 0x0)

1m32.121680913s ago: executing program 34 (id=2614):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={<r1=>0x0}, &(0x7f0000000880)=0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r1}, 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x8, 0x7, 0xb}, &(0x7f0000000080)=0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000009000000f8ffffffffffff7f08020100", @ANYRES32=0x1, @ANYBLOB="ba170000cdc30000000033bd0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300000000000000110000000000800000000000", @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180013bdb37f2b77f96e0000000000206949254b88d900000000d206c40cb520b561b3c909a5362105ae", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TIOCGRS485(r6, 0x5418, &(0x7f0000000200))
syslog(0x2, &(0x7f0000000480)=""/89, 0x59)
r7 = timerfd_create(0x8, 0x80000)
timerfd_settime(r7, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
clock_gettime(0x1, &(0x7f0000000180)={<r8=>0x0, <r9=>0x0})
timerfd_settime(r5, 0x3, &(0x7f0000000000)={{}, {r8, r9+60000000}}, 0x0)

2.730309941s ago: executing program 6 (id=3963):
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8, 0x43920, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x80, 0x9}, 0x7412, 0x100000001, 0x4, 0x3, 0x1, 0x0, 0xfffc, 0x0, 0x2, 0x0, 0xffffffffffffe21d}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000000801020000000000000000030000070900010073797a3000000000050003000600000006000240600400004400048008000440000003e508000440c09fc302080004400000000308000340000000400800044000000001080002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r8 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @tracing=0x19, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r9}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r8, r8)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f00000019c0)={@private1={0xfc, 0x1, '\x00', 0x8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x40000, 0x40, 0x3, 0x100, 0x4, 0xc8002f})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

1.917659573s ago: executing program 7 (id=3972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)

1.811067605s ago: executing program 6 (id=3975):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='@f-%-*\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
brk(0x400000ffc020)

1.780578425s ago: executing program 6 (id=3976):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')
readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/95, 0x5f)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x0, 0x2d, 0x0, 0x0, 0x7, 0x10000, @value}, 0x28)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000300), 0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='net/igmp6\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$UHID_CREATE2(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$P9_RSTATFS(r4, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x284, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x48}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x39}, 0x61}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80, @private0, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @private0, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0xeb8f}}}}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "d907dafe62003b7ea48198b47eab0773fb4bd1a6ec6c434b3dccbe"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a6940edd6a632ee3e48c7d8b8ea7ae5d85d2f0c26de9a3c0a2e553bbb1da1c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8eda}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7359}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)

1.739894836s ago: executing program 7 (id=3978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}})
futex(&(0x7f0000004000), 0x9, 0x0, 0x0, &(0x7f0000004000), 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket(0x2a, 0x4, 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000380)=0xbf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdfdf250900020073797a32000000000800410072786500140033006c6f000000000000000000000000000049fa7fdde99d1681a57b41f7f3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048010)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

1.243631493s ago: executing program 1 (id=3984):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xca, 0x100000000}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x5073, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000380)={[], [{@euid_gt={'euid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x2f}}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x44}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)

1.176772593s ago: executing program 1 (id=3985):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_gettime(0x0, &(0x7f0000000580))

1.118061484s ago: executing program 1 (id=3986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}})
futex(&(0x7f0000004000), 0x9, 0x0, 0x0, &(0x7f0000004000), 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket(0x2a, 0x4, 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000380)=0xbf, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdfdf250900020073797a32000000000800410072786500140033006c6f000000000000000000000000000049fa7fdde99d1681a57b41f7f3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048010)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

863.409478ms ago: executing program 4 (id=3987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000006000040000000000007000000850000008900000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x6)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x4, 0x4, 0x40000009, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_io_uring_setup(0x6db4, &(0x7f0000000080)={0x0, 0x8ac7, 0x40, 0x3, 0x7f}, &(0x7f0000000140), &(0x7f0000000200))

854.821108ms ago: executing program 7 (id=3988):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x400004, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000800)={'tunl0\x00', <r7=>0x0, 0x8000, 0x7800, 0x5, 0x8, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x32}, {[@lsrr={0x83, 0x23, 0xa1, [@broadcast, @remote, @empty, @private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @broadcast]}, @lsrr={0x83, 0x2b, 0x94, [@loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty, @rand_addr=0x64010101]}, @generic={0x82, 0xd, "f93b0b25c035e97ede7237"}, @timestamp_addr={0x44, 0x34, 0x24, 0x1, 0x9, [{@multicast1, 0x7}, {@rand_addr=0x64010101, 0x226}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0xff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@rand_addr=0x64010102, 0xc}]}, @end, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000900)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', <r8=>0x0, 0x700, 0x8, 0x4, 0x1, {{0x6, 0x4, 0x1, 0x26, 0x18, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@noop]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000b00)={0x108, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010)
sendfile(r6, r5, 0x0, 0x7ffff000)
fallocate(r4, 0x0, 0x0, 0x1001f0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffff7ffffe9}, 0x18)

788.164499ms ago: executing program 4 (id=3989):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@delchain={0xa4, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xa, 0xb}, {0x5, 0xb}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4cf}, @filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1edf}]}}]}, 0xa4}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket$caif_stream(0x25, 0x1, 0x4)
recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x2e)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, &(0x7f0000000040)={0x60, 0x11, 0x8001, 0xfffd}, 0x8, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0})
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {}, 0x6})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

752.549189ms ago: executing program 2 (id=3991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x2c060000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)

663.862271ms ago: executing program 4 (id=3992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x6, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX])
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x100, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0)

631.209151ms ago: executing program 2 (id=3993):
chdir(&(0x7f0000000040)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x301000, 0x14)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000000c0))

556.777702ms ago: executing program 7 (id=3994):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa94, 0x400)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)

426.212934ms ago: executing program 7 (id=3995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x6, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x100, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x48}}, 0x0)

393.787894ms ago: executing program 4 (id=3996):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@delchain={0xa4, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xa, 0xb}, {0x5, 0xb}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4cf}, @filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1edf}]}}]}, 0xa4}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket$caif_stream(0x25, 0x1, 0x4)
recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x2e)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, &(0x7f0000000040)={0x60, 0x11, 0x8001, 0xfffd}, 0x8, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0})
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {}, 0x6})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

280.017166ms ago: executing program 2 (id=3997):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)

267.194186ms ago: executing program 7 (id=3998):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\)-\xad\x00')
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='-)-}@^%,@%\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)="b429538e848febabe4d22f083089b0818da0087cda7a61ba95be955a5f", &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r9, r10}, 0xc)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)

235.888777ms ago: executing program 1 (id=3999):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)

230.778967ms ago: executing program 6 (id=4000):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

147.561348ms ago: executing program 6 (id=4001):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
close(r4)

146.552708ms ago: executing program 1 (id=4002):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xca, 0x100000000}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x5073, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000380)={[], [{@euid_gt={'euid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x2f}}]}, 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS")
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x44}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)

119.301629ms ago: executing program 4 (id=4003):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_gettime(0x0, &(0x7f0000000580))

104.103578ms ago: executing program 2 (id=4004):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)

69.109279ms ago: executing program 6 (id=4005):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\)-\xad\x00')
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)="b429538e848febabe4d22f083089b0818da0087cda7a61ba95be955a5f", &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r9, r10}, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xfc, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)

68.49368ms ago: executing program 4 (id=4006):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x400004, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000800)={'tunl0\x00', <r7=>0x0, 0x8000, 0x7800, 0x5, 0x8, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x32}, {[@lsrr={0x83, 0x23, 0xa1, [@broadcast, @remote, @empty, @private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @broadcast]}, @lsrr={0x83, 0x2b, 0x94, [@loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty, @rand_addr=0x64010101]}, @generic={0x82, 0xd, "f93b0b25c035e97ede7237"}, @timestamp_addr={0x44, 0x34, 0x24, 0x1, 0x9, [{@multicast1, 0x7}, {@rand_addr=0x64010101, 0x226}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0xff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@rand_addr=0x64010102, 0xc}]}, @end, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000900)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', <r8=>0x0, 0x700, 0x8, 0x4, 0x1, {{0x6, 0x4, 0x1, 0x26, 0x18, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@noop]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000b00)={0x108, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010)
sendfile(r6, r5, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffff7ffffe9}, 0x18)

38.83482ms ago: executing program 2 (id=4007):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)

2.54489ms ago: executing program 1 (id=4008):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000008c0)={[], [{@fowner_gt}, {@appraise_type}, {@subj_role}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, 'va\x8c\xaf\xed\xa20\r\xb4t\x00\x00\xf7\xd0\\\x05\a\xcb\xd0\xd1\x93db\x01\xc2/\xb2j,`\bR\xf8\xcf\xc1\x9a`\xcfT\xa8\x0e\x8d-\x1b\xcfgU\xf5F\x1ahQ\f\xff\xd1\x14\xb1z\xa9?\xe7\xef\xdf\xcd\xf8\xee.\x827\xdf\xc8\xc41z\x86}[\x95yJ4\xab\xd0\xa6L\r\xf4.\xc6[\xe7\x9a\x19i%=\xa82m]\x9c\x82\xca\xa1\xd5\xfdq\x85\x927\x01\x0e\xde\xd8J\xdf\xf9!\x84\xc4k!\xfaPO#\xe78\xb6\xc4\xc4\xf5S\x02\x02#\x95\xa0\x01\xfc:3\x8d\xd6\x041,\x9fA\x11\xd4\x9c,\xdf\xa1R\x14\x80cYv#\xcd\xd5'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_lt}, {@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}, 0x1, 0x561, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x20605)

0s ago: executing program 2 (id=4009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX])
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x100, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

000-0000-0000-0000-000000000000.
[  264.886333][T13998] loop2: detected capacity change from 0 to 512
[  264.893350][T13998] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  264.895617][T14000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3605'.
[  264.923187][T13998] EXT4-fs (loop2): 1 truncate cleaned up
[  264.936600][T13998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.966523][T13998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3606: bg 0: block 256: padding at end of block bitmap is not set
[  264.984644][T13998] EXT4-fs (loop2): Remounting filesystem read-only
[  265.020799][T14008] siw: device registration error -23
[  265.039870][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3605'.
[  265.077775][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.161235][T14010] loop6: detected capacity change from 0 to 512
[  265.186403][T14010] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  265.213650][T14012] 9pnet_fd: Insufficient options for proto=fd
[  265.223083][T14010] netlink: 'syz.6.3609': attribute type 27 has an invalid length.
[  265.248998][T14010] macvtap3: left promiscuous mode
[  265.254123][T14010] macvtap3: left allmulticast mode
[  265.410343][T14018] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  265.417892][T14018] vhci_hcd: invalid port number 253
[  265.423234][T14018] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  265.515807][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3614'.
[  265.698997][T14037] loop7: detected capacity change from 0 to 512
[  265.706493][T14037] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  265.721610][T14037] EXT4-fs (loop7): 1 truncate cleaned up
[  265.727903][T14037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.747132][T14037] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3619: bg 0: block 256: padding at end of block bitmap is not set
[  265.765155][T14037] EXT4-fs (loop7): Remounting filesystem read-only
[  265.802265][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.382020][T14065] loop6: detected capacity change from 0 to 512
[  266.389092][T14065] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  266.466466][T14067] siw: device registration error -23
[  266.533017][T14065] EXT4-fs (loop6): 1 truncate cleaned up
[  266.562423][T14065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.627873][T14065] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3630: bg 0: block 256: padding at end of block bitmap is not set
[  266.676515][T14065] EXT4-fs (loop6): Remounting filesystem read-only
[  266.768758][ T5990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.794444][T14069] bridge0: port 3(macsec1) entered blocking state
[  266.801048][T14069] bridge0: port 3(macsec1) entered disabled state
[  266.812880][T14069] macsec1: entered allmulticast mode
[  266.818213][T14069] bridge0: entered allmulticast mode
[  266.827388][T14069] macsec1: left allmulticast mode
[  266.832505][T14069] bridge0: left allmulticast mode
[  266.867593][T14074] loop7: detected capacity change from 0 to 128
[  266.890759][T14074] bio_check_eod: 24 callbacks suppressed
[  266.890779][T14074] syz.7.3633: attempt to access beyond end of device
[  266.890779][T14074] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  266.910081][T14074] syz.7.3633: attempt to access beyond end of device
[  266.910081][T14074] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  266.923767][T14074] syz.7.3633: attempt to access beyond end of device
[  266.923767][T14074] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  266.937298][T14074] syz.7.3633: attempt to access beyond end of device
[  266.937298][T14074] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128
[  266.949491][T14078] loop6: detected capacity change from 0 to 512
[  266.953590][T14074] syz.7.3633: attempt to access beyond end of device
[  266.953590][T14074] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128
[  266.973507][T14074] syz.7.3633: attempt to access beyond end of device
[  266.973507][T14074] loop7: rw=2049, sector=313, nr_sectors = 8 limit=128
[  266.987045][T14074] syz.7.3633: attempt to access beyond end of device
[  266.987045][T14074] loop7: rw=2049, sector=329, nr_sectors = 8 limit=128
[  266.988032][T14078] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.3635: casefold flag without casefold feature
[  267.003545][T14074] syz.7.3633: attempt to access beyond end of device
[  267.003545][T14074] loop7: rw=2049, sector=345, nr_sectors = 8 limit=128
[  267.027487][T14074] syz.7.3633: attempt to access beyond end of device
[  267.027487][T14074] loop7: rw=2049, sector=361, nr_sectors = 8 limit=128
[  267.029338][T14078] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.3635: couldn't read orphan inode 15 (err -117)
[  267.042785][T14074] syz.7.3633: attempt to access beyond end of device
[  267.042785][T14074] loop7: rw=2049, sector=377, nr_sectors = 8 limit=128
[  267.071792][T14078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.219607][ T5990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.274730][T14087] loop6: detected capacity change from 0 to 1024
[  267.296358][T14087] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  267.311899][T14091] loop7: detected capacity change from 0 to 128
[  267.507108][T14112] bridge0: port 1(macsec1) entered blocking state
[  267.513711][T14112] bridge0: port 1(macsec1) entered disabled state
[  267.522936][T14112] macsec1: entered allmulticast mode
[  267.528266][T14112] bridge0: entered allmulticast mode
[  267.535110][T14112] macsec1: left allmulticast mode
[  267.540355][T14112] bridge0: left allmulticast mode
[  267.547609][T14114] loop6: detected capacity change from 0 to 2048
[  267.781139][T14127] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  267.798875][T14127] vhci_hcd: invalid port number 253
[  267.804141][T14127] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  267.990117][T14143] loop2: detected capacity change from 0 to 512
[  267.998416][T14128] lo speed is unknown, defaulting to 1000
[  268.011477][T11158] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  268.022537][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  268.022565][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.022609][T11158] Call Trace:
[  268.022616][T11158]  <TASK>
[  268.022624][T11158]  dump_stack_lvl+0xf6/0x150
[  268.022653][T11158]  dump_stack+0x15/0x1a
[  268.022678][T11158]  dump_header+0x83/0x2d0
[  268.022706][T11158]  oom_kill_process+0x341/0x4c0
[  268.022740][T11158]  out_of_memory+0x9d1/0xc20
[  268.022771][T11158]  mem_cgroup_out_of_memory+0x13f/0x190
[  268.022840][T11158]  try_charge_memcg+0x5a3/0x820
[  268.022892][T11158]  charge_memcg+0x50/0xc0
[  268.022972][T11158]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  268.023035][T11158]  __read_swap_cache_async+0x242/0x490
[  268.023064][T11158]  swap_cluster_readahead+0x27f/0x400
[  268.023100][T11158]  swapin_readahead+0xe6/0x6f0
[  268.023180][T11158]  ? swap_cache_get_folio+0x77/0x210
[  268.023202][T11158]  do_swap_page+0x31c/0x2510
[  268.023235][T11158]  ? schedule+0x5f/0xd0
[  268.023348][T11158]  ? hrtimer_start_range_ns+0x6d3/0x730
[  268.023381][T11158]  ? hrtimer_try_to_cancel+0x1d3/0x1e0
[  268.023406][T11158]  ? __rcu_read_lock+0x36/0x50
[  268.023433][T11158]  ? __pfx_default_wake_function+0x10/0x10
[  268.023504][T11158]  handle_mm_fault+0x8f9/0x2b30
[  268.023574][T11158]  exc_page_fault+0x3b9/0x650
[  268.023612][T11158]  asm_exc_page_fault+0x26/0x30
[  268.023658][T11158] RIP: 0033:0x7fef0b3bf9e5
[  268.023672][T11158] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  268.023703][T11158] RSP: 002b:00007ffdacec0e68 EFLAGS: 00010246
[  268.023721][T11158] RAX: 0000000000000000 RBX: 00000000000001b0 RCX: 00007fef0b3bf9e3
[  268.023736][T11158] RDX: 00007ffdacec0e80 RSI: 0000000000000000 RDI: 0000000000000000
[  268.023802][T11158] RBP: 00007ffdacec0eec R08: 00000000366e7b69 R09: 0000000000000000
[  268.023815][T11158] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  268.023830][T11158] R13: 00000000000927c0 R14: 00000000000414d0 R15: 00007ffdacec0f40
[  268.023855][T11158]  </TASK>
[  268.023863][T11158] memory: usage 307200kB, limit 307200kB, failcnt 153
[  268.152166][T14143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.156875][T11158] memory+swap: usage 292976kB, limit 9007199254740988kB, failcnt 0
[  268.156949][T11158] kmem: usage 292724kB, limit 9007199254740988kB, failcnt 0
[  268.156963][T11158] Memory cgroup stats for /syz7:
[  268.299972][T14143] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.328481][T11158] cache 0
[  268.331484][T11158] rss 57344
[  268.334774][T11158] shmem 0
[  268.337823][T11158] mapped_file 0
[  268.341468][T11158] dirty 0
[  268.344460][T11158] writeback 8192
[  268.348010][T11158] workingset_refault_anon 26
[  268.352686][T11158] workingset_refault_file 0
[  268.357192][T11158] swap 102400
[  268.360500][T11158] swapcached 73728
[  268.364224][T11158] pgpgin 72669
[  268.367596][T11158] pgpgout 72649
[  268.371089][T11158] pgfault 82820
[  268.374551][T11158] pgmajfault 11
[  268.378005][T11158] inactive_anon 12288
[  268.378979][T14128] chnl_net:caif_netlink_parms(): no params data found
[  268.382056][T11158] active_anon 69632
[  268.392641][T11158] inactive_file 0
[  268.396496][T11158] active_file 0
[  268.399982][T11158] unevictable 0
[  268.403451][T11158] hierarchical_memory_limit 314572800
[  268.408837][T11158] hierarchical_memsw_limit 9223372036854771712
[  268.415015][T11158] total_cache 0
[  268.418489][T11158] total_rss 57344
[  268.422140][T11158] total_shmem 0
[  268.425600][T11158] total_mapped_file 0
[  268.429603][T11158] total_dirty 0
[  268.433054][T11158] total_writeback 8192
[  268.437120][T11158] total_workingset_refault_anon 26
[  268.442246][T11158] total_workingset_refault_file 0
[  268.447360][T11158] total_swap 102400
[  268.451188][T11158] total_swapcached 73728
[  268.455510][T11158] total_pgpgin 72669
[  268.459439][T11158] total_pgpgout 72649
[  268.463479][T11158] total_pgfault 82820
[  268.467484][T11158] total_pgmajfault 11
[  268.471530][T11158] total_inactive_anon 12288
[  268.476043][T11158] total_active_anon 69632
[  268.480430][T11158] total_inactive_file 0
[  268.484585][T11158] total_active_file 0
[  268.488565][T11158] total_unevictable 0
[  268.492642][T11158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3647,pid=14105,uid=0
[  268.507403][T11158] Memory cgroup out of memory: Killed process 14105 (syz.7.3647) total-vm:93588kB, anon-rss:1044kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  268.554736][T14143] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.3655: corrupted inode contents
[  268.572208][T14158] bridge0: port 3(macsec1) entered blocking state
[  268.578868][T14158] bridge0: port 3(macsec1) entered disabled state
[  268.588977][T14143] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.3655: mark_inode_dirty error
[  268.589405][T14158] macsec1: entered allmulticast mode
[  268.589423][T14158] bridge0: entered allmulticast mode
[  268.616620][T14158] macsec1: left allmulticast mode
[  268.621793][T14158] bridge0: left allmulticast mode
[  268.622462][T14143] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.3655: corrupted inode contents
[  268.641975][T14143] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3655: mark_inode_dirty error
[  268.680073][T14128] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.687168][T14128] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.694419][T14128] bridge_slave_0: entered allmulticast mode
[  268.695740][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.701456][T14128] bridge_slave_0: entered promiscuous mode
[  268.716957][T14128] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.724089][T14128] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.731520][T14128] bridge_slave_1: entered allmulticast mode
[  268.738087][T14128] bridge_slave_1: entered promiscuous mode
[  268.769828][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.783707][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.799798][T14171] loop1: detected capacity change from 0 to 1024
[  268.809602][T14171] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  268.824205][T14128] team0: Port device team_slave_0 added
[  268.831045][T14128] team0: Port device team_slave_1 added
[  268.852852][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.855818][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.859868][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.868316][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.894194][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.927439][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.927452][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.927475][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.027182][T14128] hsr_slave_0: entered promiscuous mode
[  269.036867][T14128] hsr_slave_1: entered promiscuous mode
[  269.045407][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.056169][T14128] Cannot create hsr debugfs directory
[  269.183646][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3669'.
[  269.286459][T14128] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  269.295590][T14128] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  269.304716][T14128] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  269.313374][T14128] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  269.353304][T14128] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.367392][T14128] 8021q: adding VLAN 0 to HW filter on device team0
[  269.377459][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.384576][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.396808][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.403871][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.469999][T14128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.574922][T14128] veth0_vlan: entered promiscuous mode
[  269.583318][T14128] veth1_vlan: entered promiscuous mode
[  269.602794][T14128] veth0_macvtap: entered promiscuous mode
[  269.610595][T14128] veth1_macvtap: entered promiscuous mode
[  269.622435][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.632930][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.642927][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.653378][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.664539][T14128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.676480][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.687067][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.696942][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.707546][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.718619][T14128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.729309][T14128] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.738048][T14128] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.746821][T14128] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.755591][T14128] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.790833][   T29] kauditd_printk_skb: 393 callbacks suppressed
[  269.790849][   T29] audit: type=1400 audit(2000000068.100:37858): avc:  denied  { write } for  pid=14128 comm="syz-executor" name="pids.max" dev="cgroup2" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpreaper_exec_t:s0"
[  269.824691][   T29] audit: type=1400 audit(2000000068.100:37859): avc:  denied  { open } for  pid=14128 comm="syz-executor" path="/syzcgroup/unified/syz6/pids.max" dev="cgroup2" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpreaper_exec_t:s0"
[  269.872864][T14204] loop6: detected capacity change from 0 to 512
[  269.883688][T14204] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  269.892940][T14204] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  269.905509][T14204] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  269.914825][T14204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  269.923877][T14204] System zones: 0-2, 18-18, 34-34
[  269.933289][T14204] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  269.948256][T14204] EXT4-fs (loop6): 1 truncate cleaned up
[  269.955613][T14206] loop1: detected capacity change from 0 to 512
[  269.957712][T14204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.988192][T14206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.002947][T14206] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.024174][T14206] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.3670: corrupted inode contents
[  270.036613][T14206] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.3670: mark_inode_dirty error
[  270.050583][T14206] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.3670: corrupted inode contents
[  270.063417][T14206] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3670: mark_inode_dirty error
[  270.092615][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.155074][T14128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.185521][T14217] loop6: detected capacity change from 0 to 1024
[  270.194514][T14217] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  270.252030][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3673'.
[  270.293584][T14222] bridge0: entered promiscuous mode
[  270.300344][T14222] bridge0: port 3(macsec1) entered blocking state
[  270.306877][T14222] bridge0: port 3(macsec1) entered disabled state
[  270.314030][T14222] macsec1: entered allmulticast mode
[  270.319376][T14222] bridge0: entered allmulticast mode
[  270.325444][T14222] macsec1: left allmulticast mode
[  270.330559][T14222] bridge0: left allmulticast mode
[  270.336349][T14222] bridge0: left promiscuous mode
[  270.525139][T14212] syz.1.3671 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  270.536341][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.1.3671 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  270.536369][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  270.536383][T14212] Call Trace:
[  270.536389][T14212]  <TASK>
[  270.536398][T14212]  dump_stack_lvl+0xf6/0x150
[  270.536461][T14212]  dump_stack+0x15/0x1a
[  270.536476][T14212]  dump_header+0x83/0x2d0
[  270.536509][T14212]  oom_kill_process+0x341/0x4c0
[  270.536545][T14212]  out_of_memory+0x9d1/0xc20
[  270.536596][T14212]  mem_cgroup_out_of_memory+0x13f/0x190
[  270.536626][T14212]  try_charge_memcg+0x5a3/0x820
[  270.536734][T14212]  charge_memcg+0x50/0xc0
[  270.536751][T14212]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  270.536823][T14212]  __read_swap_cache_async+0x242/0x490
[  270.536850][T14212]  swap_cluster_readahead+0x27f/0x400
[  270.536897][T14212]  swapin_readahead+0xe6/0x6f0
[  270.536923][T14212]  ? __lruvec_stat_mod_folio+0xde/0x120
[  270.536988][T14212]  ? swap_cache_get_folio+0x77/0x210
[  270.537008][T14212]  do_swap_page+0x31c/0x2510
[  270.537041][T14212]  ? __rcu_read_lock+0x36/0x50
[  270.537068][T14212]  ? __pfx_default_wake_function+0x10/0x10
[  270.537096][T14212]  handle_mm_fault+0x8f9/0x2b30
[  270.537153][T14212]  exc_page_fault+0x3b9/0x650
[  270.537183][T14212]  asm_exc_page_fault+0x26/0x30
[  270.537268][T14212] RIP: 0033:0x7fd4e12a3bcc
[  270.537283][T14212] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00
[  270.537302][T14212] RSP: 002b:00007ffd375af850 EFLAGS: 00010206
[  270.537318][T14212] RAX: 0000000000000000 RBX: 00007fd4e15e5fa0 RCX: 0000000000000000
[  270.537330][T14212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555593438808
[  270.537341][T14212] RBP: 00007fd4e15e7ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  270.537380][T14212] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000042254
[  270.537392][T14212] R13: 00007ffd375af940 R14: ffffffffffffffff R15: 00007ffd375af960
[  270.537413][T14212]  </TASK>
[  270.537432][T14212] memory: usage 307200kB, limit 307200kB, failcnt 323
[  270.747248][T14212] memory+swap: usage 91048kB, limit 9007199254740988kB, failcnt 0
[  270.755138][T14212] kmem: usage 84672kB, limit 9007199254740988kB, failcnt 0
[  270.762481][T14212] Memory cgroup stats for /syz1:
[  270.763370][T14212] cache 0
[  270.771417][T14212] rss 4096
[  270.774466][T14212] shmem 0
[  270.777583][T14212] mapped_file 0
[  270.781088][T14212] dirty 0
[  270.784062][T14212] writeback 12288
[  270.787748][T14212] workingset_refault_anon 48
[  270.792431][T14212] workingset_refault_file 72
[  270.797045][T14212] swap 172032
[  270.800413][T14212] swapcached 16384
[  270.804150][T14212] pgpgin 263240
[  270.807643][T14212] pgpgout 263236
[  270.811263][T14212] pgfault 287815
[  270.814911][T14212] pgmajfault 39
[  270.818394][T14212] inactive_anon 16384
[  270.822444][T14212] active_anon 0
[  270.825970][T14212] inactive_file 0
[  270.829642][T14212] active_file 0
[  270.833155][T14212] unevictable 0
[  270.836635][T14212] hierarchical_memory_limit 314572800
[  270.842121][T14212] hierarchical_memsw_limit 9223372036854771712
[  270.848358][T14212] total_cache 0
[  270.851837][T14212] total_rss 4096
[  270.855391][T14212] total_shmem 0
[  270.859025][T14212] total_mapped_file 0
[  270.863034][T14212] total_dirty 0
[  270.866525][T14212] total_writeback 12288
[  270.870778][T14212] total_workingset_refault_anon 48
[  270.875917][T14212] total_workingset_refault_file 72
[  270.881083][T14212] total_swap 172032
[  270.884916][T14212] total_swapcached 16384
[  270.889168][T14212] total_pgpgin 263240
[  270.893219][T14212] total_pgpgout 263236
[  270.897405][T14212] total_pgfault 287815
[  270.901572][T14212] total_pgmajfault 39
[  270.905611][T14212] total_inactive_anon 16384
[  270.910167][T14212] total_active_anon 0
[  270.914187][T14212] total_inactive_file 0
[  270.918361][T14212] total_active_file 0
[  270.922391][T14212] total_unevictable 0
[  270.926402][T14212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3671,pid=14212,uid=0
[  270.941172][T14212] Memory cgroup out of memory: Killed process 14212 (syz.1.3671) total-vm:93588kB, anon-rss:1044kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  271.014131][T14230] loop1: detected capacity change from 0 to 128
[  271.049332][   T29] audit: type=1326 audit(2000000069.350:37860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.073803][   T29] audit: type=1326 audit(2000000069.360:37861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.079933][T14232] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  271.097397][   T29] audit: type=1326 audit(2000000069.360:37862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.097471][   T29] audit: type=1326 audit(2000000069.360:37863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.108065][T14232] vhci_hcd: invalid port number 253
[  271.128337][   T29] audit: type=1326 audit(2000000069.360:37864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.128379][   T29] audit: type=1326 audit(2000000069.360:37865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.128489][   T29] audit: type=1326 audit(2000000069.360:37866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.128521][   T29] audit: type=1326 audit(2000000069.360:37867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.1.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  271.152274][T14232] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  271.342791][T14241] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3680'.
[  271.383744][T14245] loop6: detected capacity change from 0 to 512
[  271.398489][T14245] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  271.423051][T14245] EXT4-fs (loop6): 1 truncate cleaned up
[  271.432131][T14245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3683: bg 0: block 256: padding at end of block bitmap is not set
[  271.448037][T14245] EXT4-fs (loop6): Remounting filesystem read-only
[  271.494037][T14257] loop6: detected capacity change from 0 to 1024
[  271.494967][T14257] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  271.535986][T14260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.536095][T14260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.594734][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.603484][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.613049][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3689'.
[  271.622029][T14261] vxcan1: entered promiscuous mode
[  271.627131][T14261] vxcan1: entered allmulticast mode
[  271.855691][T14267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3692'.
[  271.930438][T14271] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  271.937897][T14271] vhci_hcd: invalid port number 253
[  271.943263][T14271] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  272.051457][T14276] loop2: detected capacity change from 0 to 512
[  272.057950][T14276] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  272.069097][T14276] netlink: 'syz.2.3695': attribute type 27 has an invalid length.
[  272.115576][T14282] loop2: detected capacity change from 0 to 512
[  272.123106][T14282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  272.135341][T14282] EXT4-fs (loop2): 1 truncate cleaned up
[  272.145104][T14282] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3698: bg 0: block 256: padding at end of block bitmap is not set
[  272.161120][T14282] EXT4-fs (loop2): Remounting filesystem read-only
[  272.226531][T14296] loop2: detected capacity change from 0 to 128
[  272.253238][T14296] bio_check_eod: 41 callbacks suppressed
[  272.253256][T14296] syz.2.3703: attempt to access beyond end of device
[  272.253256][T14296] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  272.253389][T14296] syz.2.3703: attempt to access beyond end of device
[  272.253389][T14296] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  272.253544][T14296] syz.2.3703: attempt to access beyond end of device
[  272.253544][T14296] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  272.253588][T14296] syz.2.3703: attempt to access beyond end of device
[  272.253588][T14296] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  272.262586][T14296] syz.2.3703: attempt to access beyond end of device
[  272.262586][T14296] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  272.345287][T14296] syz.2.3703: attempt to access beyond end of device
[  272.345287][T14296] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128
[  272.359953][T14296] syz.2.3703: attempt to access beyond end of device
[  272.359953][T14296] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128
[  272.370770][T14301] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  272.373994][T14296] syz.2.3703: attempt to access beyond end of device
[  272.373994][T14296] loop2: rw=2049, sector=345, nr_sectors = 8 limit=128
[  272.384000][T14301] vhci_hcd: invalid port number 253
[  272.394202][T14296] syz.2.3703: attempt to access beyond end of device
[  272.394202][T14296] loop2: rw=2049, sector=361, nr_sectors = 8 limit=128
[  272.394247][T14296] syz.2.3703: attempt to access beyond end of device
[  272.394247][T14296] loop2: rw=2049, sector=377, nr_sectors = 8 limit=128
[  272.426799][T14301] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  272.488214][T14308] loop2: detected capacity change from 0 to 512
[  272.522489][T14308] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.548751][T14312] loop1: detected capacity change from 0 to 512
[  272.555695][T14312] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  272.566899][T14312] netlink: 'syz.1.3708': attribute type 27 has an invalid length.
[  272.632575][T14315] loop1: detected capacity change from 0 to 8192
[  272.763909][T14327] loop2: detected capacity change from 0 to 512
[  272.775766][T14327] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.3714: casefold flag without casefold feature
[  272.789045][T14327] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3714: couldn't read orphan inode 15 (err -117)
[  272.859759][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3718'.
[  272.891728][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3716'.
[  272.900864][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3716'.
[  272.909990][T14341] loop2: detected capacity change from 0 to 2048
[  272.919027][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3716'.
[  272.928051][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3716'.
[  273.686494][T14349] bridge0: port 3(macsec1) entered blocking state
[  273.688829][T14351] loop7: detected capacity change from 0 to 512
[  273.693018][T14349] bridge0: port 3(macsec1) entered disabled state
[  273.706019][T14349] macsec1: entered allmulticast mode
[  273.708397][T14351] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.3721: casefold flag without casefold feature
[  273.711444][T14349] bridge0: entered allmulticast mode
[  273.732871][T14349] macsec1: left allmulticast mode
[  273.738016][T14349] bridge0: left allmulticast mode
[  273.749131][T14351] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.3721: couldn't read orphan inode 15 (err -117)
[  273.943906][T14364] loop2: detected capacity change from 0 to 128
[  273.958452][T14367] loop7: detected capacity change from 0 to 512
[  273.966620][T14367] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.3729: casefold flag without casefold feature
[  273.980004][T14367] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.3729: couldn't read orphan inode 15 (err -117)
[  274.031943][T14373] loop2: detected capacity change from 0 to 2048
[  274.091841][T14381] bridge0: port 3(macsec1) entered blocking state
[  274.098514][T14381] bridge0: port 3(macsec1) entered disabled state
[  274.105284][T14381] macsec1: entered allmulticast mode
[  274.110625][T14381] bridge0: entered allmulticast mode
[  274.116589][T14381] macsec1: left allmulticast mode
[  274.121698][T14381] bridge0: left allmulticast mode
[  274.296221][T14387] loop7: detected capacity change from 0 to 512
[  274.312759][T14387] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.325279][T14387] __nla_validate_parse: 2 callbacks suppressed
[  274.325297][T14387] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3736'.
[  274.340786][T14387] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3736'.
[  274.468696][T14396] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3739'.
[  274.503123][T14398] loop7: detected capacity change from 0 to 512
[  274.510578][T14398] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  274.580288][T14402] binfmt_misc: register: failed to install interpreter file ./file0/file0
[  274.591962][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3742'.
[  274.743833][T14410] loop7: detected capacity change from 0 to 1024
[  274.751275][T14410] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  274.848434][T14415] bridge0: port 3(macsec1) entered blocking state
[  274.855002][T14415] bridge0: port 3(macsec1) entered disabled state
[  274.876916][T14417] loop1: detected capacity change from 0 to 128
[  274.891693][T14417] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  274.912128][T14415] macsec1: entered allmulticast mode
[  274.917565][T14415] bridge0: entered allmulticast mode
[  274.929883][T14417] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  274.939282][T14415] macsec1: left allmulticast mode
[  274.944434][T14415] bridge0: left allmulticast mode
[  275.024153][T14423] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3750'.
[  275.042799][T14425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  275.057880][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.073313][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.088174][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.098164][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.115491][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3751'.
[  275.128095][T14427] macvtap1: entered promiscuous mode
[  275.128656][T14429] loop7: detected capacity change from 0 to 512
[  275.133422][T14427] batadv0: entered promiscuous mode
[  275.133510][T14427] macvtap1: entered allmulticast mode
[  275.133523][T14427] batadv0: entered allmulticast mode
[  275.140577][T14429] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  275.149073][T14427] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  275.173777][T14430] batadv0: left allmulticast mode
[  275.178845][T14430] batadv0: left promiscuous mode
[  275.215076][T14432] loop4: detected capacity change from 0 to 2048
[  275.245819][   T29] kauditd_printk_skb: 291 callbacks suppressed
[  275.245833][   T29] audit: type=1326 audit(2000000073.550:38159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.299260][   T29] audit: type=1326 audit(2000000073.580:38160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.322997][   T29] audit: type=1326 audit(2000000073.580:38161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.346657][   T29] audit: type=1326 audit(2000000073.580:38162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.370322][   T29] audit: type=1326 audit(2000000073.580:38163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.394022][   T29] audit: type=1326 audit(2000000073.580:38164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.417670][   T29] audit: type=1326 audit(2000000073.580:38165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.441421][   T29] audit: type=1326 audit(2000000073.580:38166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.465061][   T29] audit: type=1326 audit(2000000073.580:38167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.488707][   T29] audit: type=1326 audit(2000000073.580:38168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.7.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef0b38d169 code=0x7ffc0000
[  275.547201][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'.
[  275.571235][T14444] bridge0: entered promiscuous mode
[  275.578308][T14444] bridge0: port 3(macsec1) entered blocking state
[  275.584867][T14444] bridge0: port 3(macsec1) entered disabled state
[  275.592003][T14446] FAULT_INJECTION: forcing a failure.
[  275.592003][T14446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.595735][T14444] macsec1: entered allmulticast mode
[  275.605256][T14446] CPU: 1 UID: 0 PID: 14446 Comm: syz.4.3758 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  275.605291][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  275.605358][T14446] Call Trace:
[  275.605365][T14446]  <TASK>
[  275.605375][T14446]  dump_stack_lvl+0xf6/0x150
[  275.605406][T14446]  dump_stack+0x15/0x1a
[  275.605426][T14446]  should_fail_ex+0x261/0x270
[  275.605503][T14446]  should_fail+0xb/0x10
[  275.605526][T14446]  should_fail_usercopy+0x1a/0x20
[  275.605555][T14446]  _copy_from_user+0x1c/0xa0
[  275.605668][T14446]  memdup_user+0x6b/0xd0
[  275.605697][T14446]  strndup_user+0x68/0xa0
[  275.605761][T14446]  __se_sys_mount+0x98/0x2e0
[  275.605797][T14446]  ? fput+0x99/0xd0
[  275.605818][T14446]  ? ksys_write+0x180/0x1b0
[  275.605876][T14446]  __x64_sys_mount+0x67/0x80
[  275.605912][T14446]  x64_sys_call+0xd11/0x2e10
[  275.605989][T14446]  do_syscall_64+0xc9/0x1c0
[  275.606016][T14446]  ? clear_bhb_loop+0x25/0x80
[  275.606042][T14446]  ? clear_bhb_loop+0x25/0x80
[  275.606068][T14446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.606094][T14446] RIP: 0033:0x7fb1c307d169
[  275.606137][T14446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.606193][T14446] RSP: 002b:00007fb1c16e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  275.606216][T14446] RAX: ffffffffffffffda RBX: 00007fb1c3295fa0 RCX: 00007fb1c307d169
[  275.606231][T14446] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000940
[  275.606246][T14446] RBP: 00007fb1c16e7090 R08: 0000200000000300 R09: 0000000000000000
[  275.606261][T14446] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001
[  275.606276][T14446] R13: 0000000000000000 R14: 00007fb1c3295fa0 R15: 00007ffe1d97e738
[  275.606327][T14446]  </TASK>
[  275.793393][T14444] bridge0: entered allmulticast mode
[  275.799555][T14444] macsec1: left allmulticast mode
[  275.804612][T14444] bridge0: left allmulticast mode
[  275.810437][T14444] bridge0: left promiscuous mode
[  275.843389][T14458] veth0: entered promiscuous mode
[  275.857303][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'.
[  275.867741][T14458] veth0 (unregistering): left promiscuous mode
[  275.913268][T14467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.913432][T14467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.050029][T14468] lo speed is unknown, defaulting to 1000
[  276.125723][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  276.261493][T14494] loop6: detected capacity change from 0 to 512
[  276.304648][T14494] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  276.337464][T14494] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3774: corrupted inode contents
[  276.355384][T14494] EXT4-fs error (device loop6): ext4_dirty_inode:6086: inode #2: comm syz.6.3774: mark_inode_dirty error
[  276.376128][T14494] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3774: corrupted inode contents
[  276.392212][T14494] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.3774: mark_inode_dirty error
[  276.484935][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3778'.
[  276.499700][T14510] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.562606][T14510] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.611522][T14497] syz.2.3776 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  276.622783][T14497] CPU: 0 UID: 0 PID: 14497 Comm: syz.2.3776 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  276.622815][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  276.622829][T14497] Call Trace:
[  276.622835][T14497]  <TASK>
[  276.622842][T14497]  dump_stack_lvl+0xf6/0x150
[  276.622865][T14497]  dump_stack+0x15/0x1a
[  276.622963][T14497]  dump_header+0x83/0x2d0
[  276.622999][T14497]  oom_kill_process+0x341/0x4c0
[  276.623065][T14497]  out_of_memory+0x9d1/0xc20
[  276.623095][T14497]  mem_cgroup_out_of_memory+0x13f/0x190
[  276.623159][T14497]  try_charge_memcg+0x5a3/0x820
[  276.623205][T14497]  charge_memcg+0x50/0xc0
[  276.623251][T14497]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  276.623331][T14497]  __read_swap_cache_async+0x242/0x490
[  276.623356][T14497]  swap_cluster_readahead+0x27f/0x400
[  276.623388][T14497]  swapin_readahead+0xe6/0x6f0
[  276.623417][T14497]  ? swap_cache_get_folio+0x77/0x210
[  276.623438][T14497]  do_swap_page+0x31c/0x2510
[  276.623488][T14497]  ? schedule+0x5f/0xd0
[  276.623516][T14497]  ? hrtimer_start_range_ns+0x6d3/0x730
[  276.623549][T14497]  ? hrtimer_try_to_cancel+0x1d3/0x1e0
[  276.623642][T14497]  ? __rcu_read_lock+0x36/0x50
[  276.623669][T14497]  ? __pfx_default_wake_function+0x10/0x10
[  276.623707][T14497]  handle_mm_fault+0x8f9/0x2b30
[  276.623748][T14497]  exc_page_fault+0x3b9/0x650
[  276.623778][T14497]  asm_exc_page_fault+0x26/0x30
[  276.623799][T14497] RIP: 0033:0x7f56409afa28
[  276.623814][T14497] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  276.623832][T14497] RSP: 002b:00007ffd823e0940 EFLAGS: 00010293
[  276.623897][T14497] RAX: 0000000000000000 RBX: 00007f5640b95fa0 RCX: 00007f56409afa25
[  276.623909][T14497] RDX: 00007ffd823e0980 RSI: 0000000000000000 RDI: 0000000000000000
[  276.623922][T14497] RBP: 00007f5640b97ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  276.623936][T14497] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000043a50
[  276.623949][T14497] R13: 00007ffd823e0aa0 R14: ffffffffffffffff R15: 00007ffd823e0ac0
[  276.623972][T14497]  </TASK>
[  276.623979][T14497] memory: usage 307200kB, limit 307200kB, failcnt 3091
[  276.842401][T14497] memory+swap: usage 123072kB, limit 9007199254740988kB, failcnt 0
[  276.850331][T14497] kmem: usage 113880kB, limit 9007199254740988kB, failcnt 0
[  276.857639][T14497] Memory cgroup stats for /syz2:
[  276.859239][T14497] cache 0
[  276.867143][T14497] rss 0
[  276.869935][T14497] shmem 0
[  276.872869][T14497] mapped_file 0
[  276.876325][T14497] dirty 0
[  276.879317][T14497] writeback 0
[  276.882603][T14497] workingset_refault_anon 26
[  276.887193][T14497] workingset_refault_file 132
[  276.891901][T14497] swap 188416
[  276.895241][T14497] swapcached 4096
[  276.898918][T14497] pgpgin 302867
[  276.902434][T14497] pgpgout 302865
[  276.906011][T14497] pgfault 323037
[  276.909567][T14497] pgmajfault 29
[  276.913035][T14497] inactive_anon 0
[  276.916749][T14497] active_anon 4096
[  276.916897][T14514] loop1: detected capacity change from 0 to 512
[  276.920515][T14497] inactive_file 0
[  276.920526][T14497] active_file 4096
[  276.920536][T14497] unevictable 0
[  276.930564][T14514] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  276.934142][T14497] hierarchical_memory_limit 314572800
[  276.934155][T14497] hierarchical_memsw_limit 9223372036854771712
[  276.934167][T14497] total_cache 0
[  276.961374][T14497] total_rss 0
[  276.964659][T14497] total_shmem 0
[  276.968120][T14497] total_mapped_file 0
[  276.972119][T14497] total_dirty 0
[  276.975577][T14497] total_writeback 0
[  276.979506][T14497] total_workingset_refault_anon 26
[  276.984618][T14497] total_workingset_refault_file 132
[  276.989902][T14497] total_swap 188416
[  276.993727][T14497] total_swapcached 4096
[  276.997905][T14497] total_pgpgin 302867
[  277.001902][T14497] total_pgpgout 302865
[  277.006047][T14497] total_pgfault 323037
[  277.010130][T14497] total_pgmajfault 29
[  277.014130][T14497] total_inactive_anon 0
[  277.018277][T14497] total_active_anon 4096
[  277.022614][T14497] total_inactive_file 0
[  277.026762][T14497] total_active_file 4096
[  277.031056][T14497] total_unevictable 0
[  277.035078][T14497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3776,pid=14497,uid=0
[  277.049823][T14497] Memory cgroup out of memory: Killed process 14497 (syz.2.3776) total-vm:93588kB, anon-rss:916kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  277.068371][T14510] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.122605][T14510] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.160426][T14518] loop1: detected capacity change from 0 to 512
[  277.167026][T14518] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  277.177231][T14518] netlink: 'syz.1.3781': attribute type 27 has an invalid length.
[  277.183418][T14510] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.197897][T14510] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.206758][T14518] macvtap1: left promiscuous mode
[  277.211961][T14518] macvtap1: left allmulticast mode
[  277.222009][T14510] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.233494][T14510] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.388822][T14536] SELinux:  policydb magic number 0x6f6d656d does not match expected magic number 0xf97cff8c
[  277.402232][T14536] SELinux: failed to load policy
[  277.538674][T14549] loop6: detected capacity change from 0 to 512
[  277.545497][T14549] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  277.881912][T14574] bridge0: entered promiscuous mode
[  277.888515][T14574] bridge0: port 3(macsec1) entered blocking state
[  277.895235][T14574] bridge0: port 3(macsec1) entered disabled state
[  277.902158][T14574] macsec1: entered allmulticast mode
[  277.907613][T14574] bridge0: entered allmulticast mode
[  277.914146][T14574] macsec1: left allmulticast mode
[  277.919321][T14574] bridge0: left allmulticast mode
[  277.925006][T14574] bridge0: left promiscuous mode
[  278.520579][T14581] bridge0: entered promiscuous mode
[  278.527726][T14581] bridge0: port 3(macsec1) entered blocking state
[  278.534292][T14581] bridge0: port 3(macsec1) entered disabled state
[  278.541142][T14581] macsec1: entered allmulticast mode
[  278.546448][T14581] bridge0: entered allmulticast mode
[  278.552411][T14581] macsec1: left allmulticast mode
[  278.557435][T14581] bridge0: left allmulticast mode
[  278.563112][T14581] bridge0: left promiscuous mode
[  278.763395][T14594] FAULT_INJECTION: forcing a failure.
[  278.763395][T14594] name failslab, interval 1, probability 0, space 0, times 0
[  278.765798][T14592] loop6: detected capacity change from 0 to 1024
[  278.776242][T14594] CPU: 0 UID: 0 PID: 14594 Comm: syz.2.3808 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  278.776342][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  278.776359][T14594] Call Trace:
[  278.776370][T14594]  <TASK>
[  278.776454][T14594]  dump_stack_lvl+0xf6/0x150
[  278.776500][T14594]  dump_stack+0x15/0x1a
[  278.776546][T14594]  should_fail_ex+0x261/0x270
[  278.776595][T14594]  should_failslab+0x8f/0xb0
[  278.776631][T14594]  kmem_cache_alloc_lru_noprof+0x5e/0x330
[  278.776719][T14594]  ? __d_alloc+0x3d/0x350
[  278.776746][T14594]  __d_alloc+0x3d/0x350
[  278.776771][T14594]  d_alloc_parallel+0x57/0xcb0
[  278.776812][T14594]  ? avc_has_perm_noaudit+0x1cc/0x210
[  278.776892][T14594]  ? lockref_get_not_dead+0x120/0x1c0
[  278.776983][T14594]  ? down_read+0x173/0x4c0
[  278.777009][T14594]  __lookup_slow+0x8f/0x280
[  278.777037][T14594]  lookup_slow+0x3c/0x60
[  278.777062][T14594]  link_path_walk+0x666/0x840
[  278.777106][T14594]  path_openat+0x1b4/0x2000
[  278.777140][T14594]  ? selinux_file_open+0x356/0x3c0
[  278.777174][T14594]  do_filp_open+0x115/0x240
[  278.777232][T14594]  do_open_execat+0xd5/0x280
[  278.777264][T14594]  open_exec+0x3d/0x60
[  278.777296][T14594]  bm_register_write+0x878/0xb70
[  278.777372][T14594]  ? __pfx_bm_register_write+0x10/0x10
[  278.777415][T14594]  vfs_write+0x295/0x950
[  278.777445][T14594]  ? putname+0xe1/0x100
[  278.777559][T14594]  ? __fget_files+0x186/0x1c0
[  278.777602][T14594]  ksys_write+0xeb/0x1b0
[  278.777634][T14594]  __x64_sys_write+0x42/0x50
[  278.777675][T14594]  x64_sys_call+0x2a45/0x2e10
[  278.777705][T14594]  do_syscall_64+0xc9/0x1c0
[  278.777734][T14594]  ? clear_bhb_loop+0x25/0x80
[  278.777802][T14594]  ? clear_bhb_loop+0x25/0x80
[  278.777830][T14594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.777858][T14594] RIP: 0033:0x7f564097d169
[  278.777916][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.777939][T14594] RSP: 002b:00007f563efe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  278.777963][T14594] RAX: ffffffffffffffda RBX: 00007f5640b95fa0 RCX: 00007f564097d169
[  278.777980][T14594] RDX: 000000000000002f RSI: 0000200000000040 RDI: 0000000000000004
[  278.777995][T14594] RBP: 00007f563efe7090 R08: 0000000000000000 R09: 0000000000000000
[  278.778021][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.778036][T14594] R13: 0000000000000000 R14: 00007f5640b95fa0 R15: 00007ffd823e0848
[  278.778095][T14594]  </TASK>
[  278.792033][T14594] binfmt_misc: register: failed to install interpreter file ./file0/file0
[  278.806680][T14592] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  279.208518][T14606] loop4: detected capacity change from 0 to 128
[  279.254603][T14606] bio_check_eod: 24 callbacks suppressed
[  279.254620][T14606] syz.4.3813: attempt to access beyond end of device
[  279.254620][T14606] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  279.289173][T14610] loop6: detected capacity change from 0 to 128
[  279.311971][T14610] syz.6.3814: attempt to access beyond end of device
[  279.311971][T14610] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128
[  279.333957][T14606] syz.4.3813: attempt to access beyond end of device
[  279.333957][T14606] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  279.409319][T14610] syz.6.3814: attempt to access beyond end of device
[  279.409319][T14610] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128
[  279.422898][T14606] syz.4.3813: attempt to access beyond end of device
[  279.422898][T14606] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  279.448086][T14610] syz.6.3814: attempt to access beyond end of device
[  279.448086][T14610] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128
[  279.463659][T14606] syz.4.3813: attempt to access beyond end of device
[  279.463659][T14606] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[  279.473083][T14610] syz.6.3814: attempt to access beyond end of device
[  279.473083][T14610] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128
[  279.495134][T14610] syz.6.3814: attempt to access beyond end of device
[  279.495134][T14610] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128
[  279.508628][T14610] syz.6.3814: attempt to access beyond end of device
[  279.508628][T14610] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128
[  280.291884][T14629] __nla_validate_parse: 4 callbacks suppressed
[  280.291899][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3820'.
[  280.825444][T14598] lo speed is unknown, defaulting to 1000
[  280.827067][T14633] loop4: detected capacity change from 0 to 1024
[  280.838433][T14633] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  280.884402][T14636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.896111][T14636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.921423][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.931194][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.985530][T14638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.996798][T14638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.017690][T14642] loop6: detected capacity change from 0 to 2048
[  281.026654][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'.
[  281.047110][T14642] EXT4-fs mount: 22 callbacks suppressed
[  281.047125][T14642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.082626][T14646] 9pnet: Could not find request transport: 0xffffffffffffffff
[  281.344485][T14128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.372654][   T29] kauditd_printk_skb: 417 callbacks suppressed
[  281.372671][   T29] audit: type=1400 audit(2000000079.680:38584): avc:  denied  { execute } for  pid=14657 comm="syz.7.3830" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  281.375194][T14658] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3830'.
[  281.407944][   T29] audit: type=1326 audit(2000000079.720:38585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.6.3831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472432d169 code=0x0
[  281.446986][   T29] audit: type=1400 audit(2000000079.750:38586): avc:  denied  { kexec_image_load } for  pid=14657 comm="syz.7.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  281.498352][T14663] bridge0: port 3(macsec1) entered blocking state
[  281.505010][T14663] bridge0: port 3(macsec1) entered disabled state
[  281.511769][T14663] macsec1: entered allmulticast mode
[  281.517068][T14663] bridge0: entered allmulticast mode
[  281.522968][T14663] macsec1: left allmulticast mode
[  281.528046][T14663] bridge0: left allmulticast mode
[  281.547291][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.556267][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.571108][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.578992][T14667] loop7: detected capacity change from 0 to 1024
[  281.580073][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.595093][T14667] EXT4-fs: Ignoring removed orlov option
[  281.595305][T14665] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.601048][T14667] EXT4-fs: Ignoring removed nomblk_io_submit option
[  281.616433][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3831'.
[  281.637399][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3834'.
[  281.665888][T14667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.695296][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.724473][   T29] audit: type=1400 audit(2000000080.020:38587): avc:  denied  { bind } for  pid=14666 comm="syz.7.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  281.745177][   T29] audit: type=1400 audit(2000000080.020:38588): avc:  denied  { setopt } for  pid=14666 comm="syz.7.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  281.745213][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.777796][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.786450][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.799353][T14680] macvtap1: entered promiscuous mode
[  281.804671][T14680] batadv0: entered promiscuous mode
[  281.810123][T14680] macvtap1: entered allmulticast mode
[  281.815580][T14680] batadv0: entered allmulticast mode
[  281.821523][T14680] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  281.842838][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.855673][T14680] batadv0: left allmulticast mode
[  281.860767][T14680] batadv0: left promiscuous mode
[  282.120634][T12725] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  282.131728][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  282.131755][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  282.131768][T12725] Call Trace:
[  282.131777][T12725]  <TASK>
[  282.131786][T12725]  dump_stack_lvl+0xf6/0x150
[  282.131815][T12725]  dump_stack+0x15/0x1a
[  282.131877][T12725]  dump_header+0x83/0x2d0
[  282.131933][T12725]  oom_kill_process+0x341/0x4c0
[  282.131970][T12725]  out_of_memory+0x9d1/0xc20
[  282.132007][T12725]  mem_cgroup_out_of_memory+0x13f/0x190
[  282.132036][T12725]  try_charge_memcg+0x5a3/0x820
[  282.132141][T12725]  charge_memcg+0x50/0xc0
[  282.132166][T12725]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  282.132196][T12725]  __read_swap_cache_async+0x242/0x490
[  282.132227][T12725]  swap_cluster_readahead+0x27f/0x400
[  282.132261][T12725]  swapin_readahead+0xe6/0x6f0
[  282.132308][T12725]  ? swap_cache_get_folio+0x77/0x210
[  282.132332][T12725]  do_swap_page+0x31c/0x2510
[  282.132365][T12725]  ? schedule+0x5f/0xd0
[  282.132395][T12725]  ? hrtimer_start_range_ns+0x6d3/0x730
[  282.132425][T12725]  ? hrtimer_try_to_cancel+0x1d3/0x1e0
[  282.132512][T12725]  ? __rcu_read_lock+0x36/0x50
[  282.132595][T12725]  ? __pfx_default_wake_function+0x10/0x10
[  282.132706][T12725]  handle_mm_fault+0x8f9/0x2b30
[  282.132753][T12725]  exc_page_fault+0x3b9/0x650
[  282.132785][T12725]  asm_exc_page_fault+0x26/0x30
[  282.132803][T12725] RIP: 0033:0x7f56409af9e5
[  282.132826][T12725] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  282.132848][T12725] RSP: 002b:00007ffd823e0b88 EFLAGS: 00010246
[  282.132918][T12725] RAX: 0000000000000000 RBX: 000000000000013d RCX: 00007f56409af9e3
[  282.132983][T12725] RDX: 00007ffd823e0ba0 RSI: 0000000000000000 RDI: 0000000000000000
[  282.132998][T12725] RBP: 00007ffd823e0c0c R08: 0000000003d380ab R09: 0000000000000000
[  282.133012][T12725] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  282.133026][T12725] R13: 00000000000927c0 R14: 0000000000044cb1 R15: 00007ffd823e0c60
[  282.133049][T12725]  </TASK>
[  282.133057][T12725] memory: usage 307200kB, limit 307200kB, failcnt 3356
[  282.351270][T12725] memory+swap: usage 52636kB, limit 9007199254740988kB, failcnt 0
[  282.359093][T12725] kmem: usage 40252kB, limit 9007199254740988kB, failcnt 0
[  282.366346][T12725] Memory cgroup stats for /syz2:
[  282.371732][T12725] cache 0
[  282.379651][T12725] rss 28672
[  282.382792][T12725] shmem 0
[  282.385745][T12725] mapped_file 0
[  282.389257][T12725] dirty 0
[  282.392203][T12725] writeback 4096
[  282.395807][T12725] workingset_refault_anon 56
[  282.400426][T12725] workingset_refault_file 213
[  282.405110][T12725] swap 172032
[  282.408403][T12725] swapcached 28672
[  282.412170][T12725] pgpgin 306143
[  282.415622][T12725] pgpgout 306135
[  282.419239][T12725] pgfault 326702
[  282.422813][T12725] pgmajfault 54
[  282.426279][T12725] inactive_anon 4096
[  282.430295][T12725] active_anon 24576
[  282.434116][T12725] inactive_file 4096
[  282.438027][T12725] active_file 0
[  282.441513][T12725] unevictable 0
[  282.445006][T12725] hierarchical_memory_limit 314572800
[  282.450432][T12725] hierarchical_memsw_limit 9223372036854771712
[  282.456624][T12725] total_cache 0
[  282.460115][T12725] total_rss 28672
[  282.463752][T12725] total_shmem 0
[  282.467264][T12725] total_mapped_file 0
[  282.471299][T12725] total_dirty 0
[  282.474769][T12725] total_writeback 4096
[  282.478902][T12725] total_workingset_refault_anon 56
[  282.484076][T12725] total_workingset_refault_file 213
[  282.489322][   T29] audit: type=1400 audit(2000000080.800:38589): avc:  denied  { setopt } for  pid=14691 comm="syz.6.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  282.489335][T12725] total_swap 172032
[  282.512861][T12725] total_swapcached 28672
[  282.517117][T12725] total_pgpgin 306143
[  282.521130][T12725] total_pgpgout 306135
[  282.525279][T12725] total_pgfault 326702
[  282.529429][T12725] total_pgmajfault 54
[  282.533485][T12725] total_inactive_anon 4096
[  282.537907][T12725] total_active_anon 24576
[  282.542291][T12725] total_inactive_file 4096
[  282.546718][T12725] total_active_file 0
[  282.550843][T12725] total_unevictable 0
[  282.554881][T12725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3835,pid=14670,uid=0
[  282.569655][T12725] Memory cgroup out of memory: Killed process 14670 (syz.2.3835) total-vm:93720kB, anon-rss:912kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  282.646453][T14702] 9pnet: Could not find request transport: 0xffffffffffffffff
[  282.665473][T14708] loop7: detected capacity change from 0 to 128
[  282.774945][T14719] loop7: detected capacity change from 0 to 512
[  282.785883][T14719] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  282.838626][T14717] loop2: detected capacity change from 0 to 512
[  282.886167][T14719] EXT4-fs (loop7): 1 truncate cleaned up
[  282.896159][T14719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.926889][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.972585][T14722] loop6: detected capacity change from 0 to 512
[  283.015884][T14717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.036574][T14717] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  283.065028][T14722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.106941][T14722] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  283.127729][T14717] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.3849: corrupted inode contents
[  283.156018][T14722] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3851: corrupted inode contents
[  283.172427][T14717] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.3849: mark_inode_dirty error
[  283.186638][T14722] EXT4-fs error (device loop6): ext4_dirty_inode:6086: inode #2: comm syz.6.3851: mark_inode_dirty error
[  283.205297][T14717] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.3849: corrupted inode contents
[  283.221651][T14722] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3851: corrupted inode contents
[  283.245444][T14717] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3849: mark_inode_dirty error
[  283.259723][T14722] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.3851: mark_inode_dirty error
[  283.297544][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.326428][T14697] syz.4.3842 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  283.337563][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.4.3842 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  283.337594][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  283.337609][T14697] Call Trace:
[  283.337616][T14697]  <TASK>
[  283.337623][T14697]  dump_stack_lvl+0xf6/0x150
[  283.337645][T14697]  dump_stack+0x15/0x1a
[  283.337659][T14697]  dump_header+0x83/0x2d0
[  283.337700][T14697]  oom_kill_process+0x341/0x4c0
[  283.337754][T14697]  out_of_memory+0x9d1/0xc20
[  283.337790][T14697]  mem_cgroup_out_of_memory+0x13f/0x190
[  283.337846][T14697]  try_charge_memcg+0x5a3/0x820
[  283.337889][T14697]  charge_memcg+0x50/0xc0
[  283.337911][T14697]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  283.337958][T14697]  __read_swap_cache_async+0x242/0x490
[  283.337980][T14697]  swap_cluster_readahead+0x38b/0x400
[  283.338004][T14697]  swapin_readahead+0xe6/0x6f0
[  283.338029][T14697]  ? __rcu_read_unlock+0x34/0x70
[  283.338126][T14697]  ? swap_cache_get_folio+0x77/0x210
[  283.338149][T14697]  do_swap_page+0x31c/0x2510
[  283.338181][T14697]  ? __rcu_read_lock+0x36/0x50
[  283.338207][T14697]  ? __pfx_default_wake_function+0x10/0x10
[  283.338302][T14697]  handle_mm_fault+0x8f9/0x2b30
[  283.338340][T14697]  exc_page_fault+0x3b9/0x650
[  283.338384][T14697]  asm_exc_page_fault+0x26/0x30
[  283.338403][T14697] RIP: 0033:0x7fb1c30a4f90
[  283.338418][T14697] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[  283.338447][T14697] RSP: 002b:00007ffe1d97e828 EFLAGS: 00010246
[  283.338462][T14697] RAX: 0000000000000000 RBX: 00007fb1c3295fa0 RCX: 00007fb1c30afa25
[  283.338474][T14697] RDX: 00007ffe1d97e870 RSI: 0000000000000000 RDI: 0000000000000000
[  283.338487][T14697] RBP: 00007fb1c3297ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  283.338501][T14697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000045312
[  283.338514][T14697] R13: 00007ffe1d97e990 R14: ffffffffffffffff R15: 00007ffe1d97e9b0
[  283.338534][T14697]  </TASK>
[  283.338541][T14697] memory: usage 307200kB, limit 307200kB, failcnt 10842
[  283.461511][T14740] loop2: detected capacity change from 0 to 1024
[  283.466233][T14697] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  283.560838][T14697] kmem: usage 263252kB, limit 9007199254740988kB, failcnt 0
[  283.568230][T14697] Memory cgroup stats for /syz4:
[  283.570647][T14740] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  283.575179][T14697] cache 0
[  283.575998][T14128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.584314][T14697] rss 0
[  283.584324][T14697] shmem 0
[  283.584331][T14697] mapped_file 0
[  283.584340][T14697] dirty 0
[  283.608719][T14697] writeback 0
[  283.612033][T14697] workingset_refault_anon 10
[  283.616613][T14697] workingset_refault_file 3
[  283.621143][T14697] swap 188416
[  283.624438][T14697] swapcached 4096
[  283.628078][T14697] pgpgin 273892
[  283.631580][T14697] pgpgout 273889
[  283.635152][T14697] pgfault 294244
[  283.638735][T14697] pgmajfault 13
[  283.642229][T14697] inactive_anon 4096
[  283.646137][T14697] active_anon 0
[  283.649693][T14697] inactive_file 8192
[  283.653933][T14697] active_file 0
[  283.657609][T14697] unevictable 0
[  283.661094][T14697] hierarchical_memory_limit 314572800
[  283.666541][T14697] hierarchical_memsw_limit 9223372036854771712
[  283.672789][T14697] total_cache 0
[  283.676257][T14697] total_rss 0
[  283.679654][T14697] total_shmem 0
[  283.683155][T14697] total_mapped_file 0
[  283.687241][T14697] total_dirty 0
[  283.690763][T14697] total_writeback 0
[  283.694633][T14697] total_workingset_refault_anon 10
[  283.699779][T14697] total_workingset_refault_file 3
[  283.704813][T14697] total_swap 188416
[  283.708632][T14697] total_swapcached 4096
[  283.712840][T14697] total_pgpgin 273892
[  283.716885][T14697] total_pgpgout 273889
[  283.721021][T14697] total_pgfault 294244
[  283.725095][T14697] total_pgmajfault 13
[  283.729090][T14697] total_inactive_anon 4096
[  283.733575][T14697] total_active_anon 0
[  283.737564][T14697] total_inactive_file 8192
[  283.742086][T14697] total_active_file 0
[  283.746125][T14697] total_unevictable 0
[  283.750239][T14697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3842,pid=14697,uid=0
[  283.765072][T14697] Memory cgroup out of memory: Killed process 14697 (syz.4.3842) total-vm:93588kB, anon-rss:916kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  283.934477][T14753] loop2: detected capacity change from 0 to 128
[  284.039116][T14758] loop1: detected capacity change from 0 to 512
[  284.047834][T14758] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  284.071056][   T29] audit: type=1326 audit(2000000082.380:38590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.2.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  284.094915][   T29] audit: type=1326 audit(2000000082.380:38591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.2.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  284.118581][   T29] audit: type=1326 audit(2000000082.380:38592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.2.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  284.142179][   T29] audit: type=1326 audit(2000000082.380:38593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.2.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  284.177667][T14758] EXT4-fs (loop1): 1 truncate cleaned up
[  284.183840][T14758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.221542][T14767] loop4: detected capacity change from 0 to 512
[  284.318351][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.383452][T14767] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  284.392636][T14767] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  284.426846][T14767] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  284.426984][T14767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  284.427018][T14767] System zones: 0-2, 18-18, 34-34
[  284.427425][T14767] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  284.427836][T14767] EXT4-fs (loop4): 1 truncate cleaned up
[  284.428268][T14767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.443928][T14774] loop7: detected capacity change from 0 to 2048
[  284.505625][T14774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.675432][T11553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.723053][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.775554][T14790] loop4: detected capacity change from 0 to 2048
[  284.785724][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.795151][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.808947][T14790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.103802][T11553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.139037][T14806] loop4: detected capacity change from 0 to 2048
[  285.170216][T14806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.369511][T14799] syz.2.3872 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  285.380598][T14799] CPU: 0 UID: 0 PID: 14799 Comm: syz.2.3872 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  285.380632][T14799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  285.380659][T14799] Call Trace:
[  285.380668][T14799]  <TASK>
[  285.380678][T14799]  dump_stack_lvl+0xf6/0x150
[  285.380705][T14799]  dump_stack+0x15/0x1a
[  285.380723][T14799]  dump_header+0x83/0x2d0
[  285.380752][T14799]  oom_kill_process+0x341/0x4c0
[  285.380780][T14799]  out_of_memory+0x9d1/0xc20
[  285.380883][T14799]  mem_cgroup_out_of_memory+0x13f/0x190
[  285.380944][T14799]  try_charge_memcg+0x5a3/0x820
[  285.381042][T14799]  charge_memcg+0x50/0xc0
[  285.381068][T14799]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  285.381099][T14799]  __read_swap_cache_async+0x242/0x490
[  285.381197][T14799]  swap_cluster_readahead+0x27f/0x400
[  285.381231][T14799]  swapin_readahead+0xe6/0x6f0
[  285.381329][T14799]  ? swap_cache_get_folio+0x77/0x210
[  285.381406][T14799]  do_swap_page+0x31c/0x2510
[  285.381437][T14799]  ? schedule+0x5f/0xd0
[  285.381477][T14799]  ? hrtimer_start_range_ns+0x6d3/0x730
[  285.381512][T14799]  ? hrtimer_try_to_cancel+0x1d3/0x1e0
[  285.381545][T14799]  ? __rcu_read_lock+0x36/0x50
[  285.381589][T14799]  ? __pfx_default_wake_function+0x10/0x10
[  285.381678][T14799]  handle_mm_fault+0x8f9/0x2b30
[  285.381724][T14799]  exc_page_fault+0x3b9/0x650
[  285.381762][T14799]  asm_exc_page_fault+0x26/0x30
[  285.381844][T14799] RIP: 0033:0x7f56409afa28
[  285.381862][T14799] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  285.381892][T14799] RSP: 002b:00007ffd823e0940 EFLAGS: 00010293
[  285.381910][T14799] RAX: 0000000000000000 RBX: 00007f5640b95fa0 RCX: 00007f56409afa25
[  285.381925][T14799] RDX: 00007ffd823e0980 RSI: 0000000000000000 RDI: 0000000000000000
[  285.381939][T14799] RBP: 00007f5640b97ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  285.381951][T14799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000045c4c
[  285.381961][T14799] R13: 00007ffd823e0aa0 R14: ffffffffffffffff R15: 00007ffd823e0ac0
[  285.381978][T14799]  </TASK>
[  285.382024][T14799] memory: usage 307200kB, limit 307200kB, failcnt 3515
[  285.599569][T14799] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  285.607504][T14799] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0
[  285.614820][T14799] Memory cgroup stats for /syz2:
[  285.651610][T14799] cache 73728
[  285.660043][T14799] rss 0
[  285.662809][T14799] shmem 0
[  285.665748][T14799] mapped_file 73728
[  285.669584][T14799] dirty 0
[  285.672541][T14799] writeback 0
[  285.675820][T14799] workingset_refault_anon 95
[  285.680453][T14799] workingset_refault_file 277
[  285.685138][T14799] swap 192512
[  285.688422][T14799] swapcached 0
[  285.691836][T14799] pgpgin 306890
[  285.695309][T14799] pgpgout 306871
[  285.698860][T14799] pgfault 327846
[  285.702434][T14799] pgmajfault 68
[  285.705952][T14799] inactive_anon 0
[  285.709602][T14799] active_anon 0
[  285.713067][T14799] inactive_file 0
[  285.716766][T14799] active_file 0
[  285.720374][T14799] unevictable 0
[  285.723951][T14799] hierarchical_memory_limit 314572800
[  285.729390][T14799] hierarchical_memsw_limit 9223372036854771712
[  285.735662][T14799] total_cache 73728
[  285.739625][T14799] total_rss 0
[  285.742918][T14799] total_shmem 0
[  285.746376][T14799] total_mapped_file 73728
[  285.750756][T14799] total_dirty 0
[  285.754228][T14799] total_writeback 0
[  285.758082][T14799] total_workingset_refault_anon 95
[  285.763315][T14799] total_workingset_refault_file 277
[  285.768519][T14799] total_swap 192512
[  285.772373][T14799] total_swapcached 0
[  285.776310][T14799] total_pgpgin 306890
[  285.780295][T14799] total_pgpgout 306871
[  285.784412][T14799] total_pgfault 327846
[  285.788481][T14799] total_pgmajfault 68
[  285.792507][T14799] total_inactive_anon 0
[  285.796661][T14799] total_active_anon 0
[  285.800677][T14799] total_inactive_file 0
[  285.804835][T14799] total_active_file 0
[  285.808809][T14799] total_unevictable 0
[  285.812869][T14799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3872,pid=14799,uid=0
[  285.827599][T14799] Memory cgroup out of memory: Killed process 14799 (syz.2.3872) total-vm:93588kB, anon-rss:916kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  286.083965][T14822] FAULT_INJECTION: forcing a failure.
[  286.083965][T14822] name failslab, interval 1, probability 0, space 0, times 0
[  286.096710][T14822] CPU: 1 UID: 0 PID: 14822 Comm: syz.1.3878 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  286.096761][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  286.096775][T14822] Call Trace:
[  286.096783][T14822]  <TASK>
[  286.096798][T14822]  dump_stack_lvl+0xf6/0x150
[  286.096818][T14822]  dump_stack+0x15/0x1a
[  286.096832][T14822]  should_fail_ex+0x261/0x270
[  286.096859][T14822]  should_failslab+0x8f/0xb0
[  286.096909][T14822]  __kmalloc_cache_noprof+0x55/0x320
[  286.096941][T14822]  ? tcf_pedit_init+0x447/0x920
[  286.096991][T14822]  tcf_pedit_init+0x447/0x920
[  286.097023][T14822]  ? should_fail_ex+0xd7/0x270
[  286.097051][T14822]  tcf_action_init_1+0x34b/0x4c0
[  286.097080][T14822]  tcf_action_init+0x1ce/0x620
[  286.097212][T14822]  tc_ctl_action+0x2be/0x880
[  286.097255][T14822]  ? __pfx_tc_ctl_action+0x10/0x10
[  286.097283][T14822]  rtnetlink_rcv_msg+0x6b7/0x740
[  286.097314][T14822]  ? avc_has_perm_noaudit+0x1cc/0x210
[  286.097388][T14822]  netlink_rcv_skb+0x12f/0x230
[  286.097420][T14822]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  286.097447][T14822]  rtnetlink_rcv+0x1c/0x30
[  286.097469][T14822]  netlink_unicast+0x605/0x6c0
[  286.097548][T14822]  netlink_sendmsg+0x609/0x720
[  286.097570][T14822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.097596][T14822]  __sock_sendmsg+0x140/0x180
[  286.097637][T14822]  ____sys_sendmsg+0x350/0x4e0
[  286.097673][T14822]  __sys_sendmsg+0x1a0/0x240
[  286.097759][T14822]  __x64_sys_sendmsg+0x46/0x50
[  286.097820][T14822]  x64_sys_call+0x26f3/0x2e10
[  286.097845][T14822]  do_syscall_64+0xc9/0x1c0
[  286.097866][T14822]  ? clear_bhb_loop+0x25/0x80
[  286.097884][T14822]  ? clear_bhb_loop+0x25/0x80
[  286.097903][T14822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.097926][T14822] RIP: 0033:0x7fd4e13cd169
[  286.097960][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.097980][T14822] RSP: 002b:00007fd4dfa37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.097999][T14822] RAX: ffffffffffffffda RBX: 00007fd4e15e5fa0 RCX: 00007fd4e13cd169
[  286.098009][T14822] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  286.098019][T14822] RBP: 00007fd4dfa37090 R08: 0000000000000000 R09: 0000000000000000
[  286.098029][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.098039][T14822] R13: 0000000000000000 R14: 00007fd4e15e5fa0 R15: 00007ffd375af6e8
[  286.098057][T14822]  </TASK>
[  286.098719][T11553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.374525][T14825] __nla_validate_parse: 11 callbacks suppressed
[  286.374549][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3880'.
[  286.408695][T14833] loop7: detected capacity change from 0 to 128
[  286.431914][T14831] loop2: detected capacity change from 0 to 2048
[  286.444600][T14833] loop7: detected capacity change from 0 to 128
[  286.452429][T14831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.477170][T14841] loop4: detected capacity change from 0 to 512
[  286.483796][T14841] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  286.499092][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3884'.
[  286.521458][T14833] loop7: detected capacity change from 0 to 128
[  286.567493][T14833] loop7: detected capacity change from 0 to 128
[  286.576496][T14833] loop7: detected capacity change from 0 to 128
[  286.597298][T14833] loop7: detected capacity change from 0 to 128
[  286.605369][T14833] loop7: detected capacity change from 0 to 128
[  286.662404][   T29] kauditd_printk_skb: 76 callbacks suppressed
[  286.662424][   T29] audit: type=1326 audit(2000000084.940:38670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  286.692313][   T29] audit: type=1326 audit(2000000084.940:38671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e13cd169 code=0x7ffc0000
[  286.720137][T14833] loop7: detected capacity change from 0 to 128
[  286.727946][T14833] loop7: detected capacity change from 0 to 128
[  286.735328][T14833] loop7: detected capacity change from 0 to 128
[  286.742964][T14833] loop7: detected capacity change from 0 to 128
[  286.750677][T14833] loop7: detected capacity change from 0 to 128
[  286.758261][T14833] loop7: detected capacity change from 0 to 128
[  286.765875][T14833] loop7: detected capacity change from 0 to 128
[  286.773469][T14833] loop7: detected capacity change from 0 to 128
[  286.791361][T14833] loop7: detected capacity change from 0 to 128
[  286.816689][T14833] loop7: detected capacity change from 0 to 128
[  286.827098][T14833] loop7: detected capacity change from 0 to 128
[  286.835899][T14833] loop7: detected capacity change from 0 to 128
[  286.843699][T14833] loop7: detected capacity change from 0 to 128
[  286.851756][T14833] loop7: detected capacity change from 0 to 128
[  286.859577][T14833] loop7: detected capacity change from 0 to 128
[  286.867422][T14833] loop7: detected capacity change from 0 to 128
[  286.875349][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.884504][T14833] loop7: detected capacity change from 0 to 128
[  286.893020][T14833] loop7: detected capacity change from 0 to 128
[  286.900916][T14833] loop7: detected capacity change from 0 to 128
[  286.908567][T14833] loop7: detected capacity change from 0 to 128
[  286.916640][T14833] loop7: detected capacity change from 0 to 128
[  286.925013][T14833] loop7: detected capacity change from 0 to 128
[  286.933085][T14833] loop7: detected capacity change from 0 to 128
[  286.940912][T14833] loop7: detected capacity change from 0 to 128
[  286.948588][T14833] loop7: detected capacity change from 0 to 128
[  286.958804][T14833] loop7: detected capacity change from 0 to 128
[  286.967076][T14833] loop7: detected capacity change from 0 to 128
[  286.975266][T14833] loop7: detected capacity change from 0 to 128
[  287.022733][T14833] loop7: detected capacity change from 0 to 128
[  287.037077][T14833] loop7: detected capacity change from 0 to 128
[  287.073288][T14833] loop7: detected capacity change from 0 to 128
[  287.081375][T14833] loop7: detected capacity change from 0 to 128
[  287.088973][T14833] loop7: detected capacity change from 0 to 128
[  287.092644][T14855] FAULT_INJECTION: forcing a failure.
[  287.092644][T14855] name failslab, interval 1, probability 0, space 0, times 0
[  287.108036][T14833] loop7: detected capacity change from 0 to 128
[  287.107997][T14855] CPU: 0 UID: 0 PID: 14855 Comm: syz.2.3889 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  287.108081][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  287.108092][T14855] Call Trace:
[  287.108099][T14855]  <TASK>
[  287.108108][T14855]  dump_stack_lvl+0xf6/0x150
[  287.108137][T14855]  dump_stack+0x15/0x1a
[  287.108157][T14855]  should_fail_ex+0x261/0x270
[  287.108257][T14855]  should_failslab+0x8f/0xb0
[  287.108294][T14855]  kmem_cache_alloc_noprof+0x59/0x340
[  287.108352][T14855]  ? getname_kernel+0x3d/0x1f0
[  287.108393][T14855]  getname_kernel+0x3d/0x1f0
[  287.108430][T14855]  kern_path+0x21/0x130
[  287.108519][T14855]  create_local_trace_uprobe+0x57/0x300
[  287.108559][T14855]  perf_uprobe_init+0xc2/0x140
[  287.108587][T14855]  perf_uprobe_event_init+0xe2/0x140
[  287.108634][T14855]  perf_try_init_event+0xcd/0x530
[  287.108663][T14855]  ? perf_event_alloc+0xab7/0x1680
[  287.108698][T14855]  perf_event_alloc+0xac2/0x1680
[  287.108739][T14855]  __se_sys_perf_event_open+0x5be/0x2220
[  287.108826][T14855]  ? vfs_write+0x669/0x950
[  287.108899][T14855]  ? putname+0xe1/0x100
[  287.108987][T14855]  __x64_sys_perf_event_open+0x67/0x80
[  287.109025][T14855]  x64_sys_call+0x27bb/0x2e10
[  287.109092][T14855]  do_syscall_64+0xc9/0x1c0
[  287.109117][T14855]  ? clear_bhb_loop+0x25/0x80
[  287.109142][T14855]  ? clear_bhb_loop+0x25/0x80
[  287.109210][T14855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.109234][T14855] RIP: 0033:0x7f564097d169
[  287.109251][T14855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.109272][T14855] RSP: 002b:00007f563efe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  287.109361][T14855] RAX: ffffffffffffffda RBX: 00007f5640b95fa0 RCX: 00007f564097d169
[  287.109375][T14855] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0
[  287.109389][T14855] RBP: 00007f563efe7090 R08: 0000000000000000 R09: 0000000000000000
[  287.109403][T14855] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  287.109417][T14855] R13: 0000000000000000 R14: 00007f5640b95fa0 R15: 00007ffd823e0848
[  287.109438][T14855]  </TASK>
[  287.823227][T14882] loop2: detected capacity change from 0 to 2048
[  287.884991][T14882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.909689][T14886] 9pnet: Could not find request transport: 0xffffffffffffffff
[  287.917891][   T29] audit: type=1400 audit(2000000086.210:38672): avc:  denied  { mounton } for  pid=14883 comm="syz.7.3898" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  287.929955][T14893] loop6: detected capacity change from 0 to 1024
[  287.930887][T14893] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  288.024293][T14895] loop7: detected capacity change from 0 to 128
[  288.050896][T14903] loop6: detected capacity change from 0 to 512
[  288.058954][T14903] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  288.068206][T14903] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  288.087620][T14895] bio_check_eod: 58 callbacks suppressed
[  288.087637][T14895] syz.7.3901: attempt to access beyond end of device
[  288.087637][T14895] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128
[  288.106905][T14895] syz.7.3901: attempt to access beyond end of device
[  288.106905][T14895] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128
[  288.120647][T14895] syz.7.3901: attempt to access beyond end of device
[  288.120647][T14895] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128
[  288.134401][T14895] syz.7.3901: attempt to access beyond end of device
[  288.134401][T14895] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128
[  288.148246][T14895] syz.7.3901: attempt to access beyond end of device
[  288.148246][T14895] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128
[  288.162690][T14903] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  288.163101][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.171875][T14895] syz.7.3901: attempt to access beyond end of device
[  288.171875][T14895] loop7: rw=2049, sector=313, nr_sectors = 8 limit=128
[  288.194072][T14903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  288.202204][T14895] syz.7.3901: attempt to access beyond end of device
[  288.202204][T14895] loop7: rw=2049, sector=329, nr_sectors = 8 limit=128
[  288.202221][T14903] System zones: 
[  288.202251][T14895] syz.7.3901: attempt to access beyond end of device
[  288.202251][T14895] loop7: rw=2049, sector=345, nr_sectors = 8 limit=128
[  288.215596][T14903] 0-2, 18-18, 34-34
[  288.236614][T14903] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  288.257555][T14895] syz.7.3901: attempt to access beyond end of device
[  288.257555][T14895] loop7: rw=2049, sector=361, nr_sectors = 8 limit=128
[  288.271213][T14895] syz.7.3901: attempt to access beyond end of device
[  288.271213][T14895] loop7: rw=2049, sector=377, nr_sectors = 8 limit=128
[  288.271803][T14903] EXT4-fs (loop6): 1 truncate cleaned up
[  288.302511][T14903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.348541][T14917] loop7: detected capacity change from 0 to 128
[  288.406168][T14920] binfmt_misc: register: failed to install interpreter file ./file1
[  288.441112][T14921] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3911'.
[  288.514564][T14128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.654717][T14933] loop7: detected capacity change from 0 to 256
[  288.733022][T14933] FAT-fs (loop7): codepage cp857 not found
[  288.758298][T14933] 9pnet: p9_errstr2errno: server reported unknown error �@��hQI���te}u���
[  288.846919][   T29] audit: type=1326 audit(2000000087.150:38673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14939 comm="syz.6.3914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472432d169 code=0x0
[  288.877379][T14937] loop4: detected capacity change from 0 to 8192
[  288.964171][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'.
[  288.973112][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3914'.
[  289.011396][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'.
[  289.020413][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'.
[  289.029295][T14942] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3914'.
[  289.039595][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3914'.
[  289.282153][T14946] loop1: detected capacity change from 0 to 512
[  289.323672][   T29] audit: type=1326 audit(2000000087.600:38674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.347367][   T29] audit: type=1326 audit(2000000087.600:38675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.371107][   T29] audit: type=1326 audit(2000000087.600:38676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.386237][T11553] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  289.394720][   T29] audit: type=1326 audit(2000000087.600:38677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.405579][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  289.405647][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  289.405657][T11553] Call Trace:
[  289.405663][T11553]  <TASK>
[  289.405670][T11553]  dump_stack_lvl+0xf6/0x150
[  289.405691][T11553]  dump_stack+0x15/0x1a
[  289.405710][T11553]  dump_header+0x83/0x2d0
[  289.405797][T11553]  oom_kill_process+0x341/0x4c0
[  289.405829][T11553]  out_of_memory+0x9d1/0xc20
[  289.405897][T11553]  mem_cgroup_out_of_memory+0x13f/0x190
[  289.405930][T11553]  try_charge_memcg+0x5a3/0x820
[  289.406021][T11553]  charge_memcg+0x50/0xc0
[  289.406043][T11553]  __mem_cgroup_charge+0x29/0xb0
[  289.406068][T11553]  filemap_add_folio+0x56/0x1b0
[  289.406179][T11553]  __filemap_get_folio+0x340/0x6b0
[  289.406218][T11553]  filemap_fault+0x482/0xb10
[  289.406255][T11553]  ? __list_del_entry_valid_or_report+0x66/0x130
[  289.406297][T11553]  __do_fault+0xb6/0x200
[  289.406362][T11553]  handle_mm_fault+0xead/0x2b30
[  289.406419][T11553]  exc_page_fault+0x3b9/0x650
[  289.406459][T11553]  asm_exc_page_fault+0x26/0x30
[  289.406481][T11553] RIP: 0033:0x7fb1c2f541b4
[  289.406500][T11553] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 15 e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 14 e7 00 48 01 d1
[  289.406521][T11553] RSP: 002b:00007ffe1d97eac0 EFLAGS: 00010206
[  289.406538][T11553] RAX: 0000001b2d820000 RBX: 00000000000001d1 RCX: 00000000000468e8
[  289.406553][T11553] RDX: 0000000004d133f4 RSI: 00007ffe1d97eb50 RDI: 0000000000000001
[  289.406607][T11553] RBP: 00007ffe1d97eafc R08: 0000000012604bc3 R09: 7fffffffffffffff
[  289.406621][T11553] R10: 00007fb1c3dce038 R11: 0000000000000010 R12: 0000000000001388
[  289.406635][T11553] R13: 00000000000927c0 R14: 0000000000046876 R15: 00007ffe1d97eb50
[  289.406658][T11553]  </TASK>
[  289.406665][T11553] memory: usage 307200kB, limit 307200kB, failcnt 11393
[  289.429221][   T29] audit: type=1326 audit(2000000087.600:38678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.441545][T11553] memory+swap: usage 311456kB, limit 9007199254740988kB, failcnt 0
[  289.451603][   T29] audit: type=1326 audit(2000000087.600:38679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14947 comm="syz.2.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564097d169 code=0x7ffc0000
[  289.675593][T11553] kmem: usage 170320kB, limit 9007199254740988kB, failcnt 0
[  289.679355][T14950] 9pnet: Could not find request transport: 0xffffffffffffffff
[  289.682968][T11553] Memory cgroup stats for /syz4:
[  289.725914][T14961] bridge0: port 3(vlan2) entered blocking state
[  289.737402][T14961] bridge0: port 3(vlan2) entered disabled state
[  289.744779][T14946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.758425][T14946] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  289.770586][T11553] cache 139264
[  289.773973][T11553] rss 135168
[  289.777176][T11553] shmem 8192
[  289.780467][T11553] mapped_file 12288
[  289.784362][T11553] dirty 4096
[  289.787554][T11553] writeback 0
[  289.790859][T11553] workingset_refault_anon 103
[  289.791733][T14961] vlan2: entered allmulticast mode
[  289.795524][T11553] workingset_refault_file 152
[  289.795534][T11553] swap 4259840
[  289.795541][T11553] swapcached 122880
[  289.800691][T14961] bond0: entered allmulticast mode
[  289.805309][T11553] pgpgin 283947
[  289.808674][T14961] bond_slave_0: entered allmulticast mode
[  289.812479][T11553] pgpgout 283877
[  289.812554][T11553] pgfault 302991
[  289.817640][T14961] bond_slave_1: entered allmulticast mode
[  289.821110][T11553] pgmajfault 88
[  289.821120][T11553] inactive_anon 24576
[  289.821130][T11553] active_anon 122880
[  289.851211][T11553] inactive_file 8192
[  289.855111][T11553] active_file 131072
[  289.857570][T14946] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.3918: corrupted inode contents
[  289.858994][T11553] unevictable 0
[  289.859004][T11553] hierarchical_memory_limit 314572800
[  289.859020][T11553] hierarchical_memsw_limit 9223372036854771712
[  289.859030][T11553] total_cache 139264
[  289.859039][T11553] total_rss 135168
[  289.859121][T11553] total_shmem 8192
[  289.897215][T11553] total_mapped_file 12288
[  289.901623][T11553] total_dirty 4096
[  289.905428][T11553] total_writeback 0
[  289.906251][T14946] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.3918: mark_inode_dirty error
[  289.909289][T11553] total_workingset_refault_anon 103
[  289.909303][T11553] total_workingset_refault_file 152
[  289.909314][T11553] total_swap 4259840
[  289.909323][T11553] total_swapcached 122880
[  289.909333][T11553] total_pgpgin 283947
[  289.909342][T11553] total_pgpgout 283877
[  289.909409][T11553] total_pgfault 302991
[  289.909419][T11553] total_pgmajfault 88
[  289.909428][T11553] total_inactive_anon 24576
[  289.909438][T11553] total_active_anon 122880
[  289.909448][T11553] total_inactive_file 8192
[  289.909457][T11553] total_active_file 131072
[  289.909467][T11553] total_unevictable 0
[  289.909476][T11553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3916,pid=14934,uid=0
[  289.909704][T11553] Memory cgroup out of memory: Killed process 14934 (syz.4.3916) total-vm:93852kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  289.915291][T14961] vlan2: entered promiscuous mode
[  289.928956][T14946] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.3918: corrupted inode contents
[  289.931429][T14961] bond0: entered promiscuous mode
[  289.931447][T14961] bond_slave_0: entered promiscuous mode
[  289.931545][T14961] bond_slave_1: entered promiscuous mode
[  290.058140][T14946] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3918: mark_inode_dirty error
[  290.092164][T14935] syz.4.3916 (14935) used greatest stack depth: 7176 bytes left
[  290.112202][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3925'.
[  290.122064][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.133321][T14965] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.181730][T14971] loop7: detected capacity change from 0 to 2048
[  290.247467][T14965] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.254523][T14981] veth0: entered promiscuous mode
[  290.267063][T14971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.312446][T14965] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.326193][T14981] veth0 (unregistering): left promiscuous mode
[  290.351675][T14965] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.364317][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.374284][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.392080][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.400705][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.415402][T14990] macvtap2: entered promiscuous mode
[  290.420760][T14990] batadv0: entered promiscuous mode
[  290.426144][T14990] macvtap2: entered allmulticast mode
[  290.431594][T14990] batadv0: entered allmulticast mode
[  290.446826][T14990] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  290.463599][T14965] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.478570][T14965] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.492933][T14990] batadv0: left allmulticast mode
[  290.498058][T14990] batadv0: left promiscuous mode
[  290.520549][T14965] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.544251][T14965] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.555480][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.597893][T14999] loop7: detected capacity change from 0 to 1024
[  290.608179][T14999] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  290.681357][T15003] loop6: detected capacity change from 0 to 512
[  290.711440][T15005] loop7: detected capacity change from 0 to 512
[  290.718456][T15005] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  290.727599][T15005] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  290.743395][T15003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.749535][T15005] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  290.767963][T15005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  290.776041][T15005] System zones: 0-2, 18-18, 34-35
[  290.780102][T15003] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  290.784627][T15005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.807615][T15005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.813038][T15003] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3938: corrupted inode contents
[  290.829871][T15003] EXT4-fs error (device loop6): ext4_dirty_inode:6086: inode #2: comm syz.6.3938: mark_inode_dirty error
[  290.869011][T15011] bridge0: port 4(macsec1) entered blocking state
[  290.875695][T15011] bridge0: port 4(macsec1) entered disabled state
[  290.885455][T15011] macsec1: entered allmulticast mode
[  290.886791][T15003] EXT4-fs error (device loop6): ext4_do_update_inode:5194: inode #2: comm syz.6.3938: corrupted inode contents
[  290.890796][T15011] bridge0: entered allmulticast mode
[  290.912893][T15011] macsec1: left allmulticast mode
[  290.913712][T15003] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.3938: mark_inode_dirty error
[  290.918060][T15011] bridge0: left allmulticast mode
[  290.945610][T15017] loop4: detected capacity change from 0 to 512
[  290.955010][T15017] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  290.968315][T14128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.995934][T15023] loop6: detected capacity change from 0 to 128
[  291.018448][T15023] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.033730][T15023] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  291.088617][T14128] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.151283][T15033] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14)
[  291.157940][T15033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  291.165749][T15033] vhci_hcd vhci_hcd.0: Device attached
[  291.179888][T15036] loop1: detected capacity change from 0 to 1024
[  291.193942][T15036] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  291.229393][T15026] lo speed is unknown, defaulting to 1000
[  291.330397][T15050] FAULT_INJECTION: forcing a failure.
[  291.330397][T15050] name failslab, interval 1, probability 0, space 0, times 0
[  291.343147][T15050] CPU: 0 UID: 0 PID: 15050 Comm: syz.1.3952 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  291.343174][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  291.343222][T15050] Call Trace:
[  291.343229][T15050]  <TASK>
[  291.343238][T15050]  dump_stack_lvl+0xf6/0x150
[  291.343264][T15050]  dump_stack+0x15/0x1a
[  291.343366][T15050]  should_fail_ex+0x261/0x270
[  291.343412][T15050]  should_failslab+0x8f/0xb0
[  291.343506][T15050]  kmem_cache_alloc_noprof+0x59/0x340
[  291.343543][T15050]  ? alloc_empty_file+0x78/0x200
[  291.343565][T15050]  alloc_empty_file+0x78/0x200
[  291.343586][T15050]  path_openat+0x6f/0x2000
[  291.343620][T15050]  ? mntput+0x49/0x70
[  291.343701][T15050]  ? terminate_walk+0x271/0x290
[  291.343729][T15050]  ? path_openat+0x1ab2/0x2000
[  291.343752][T15050]  ? _parse_integer_limit+0x167/0x180
[  291.343779][T15050]  do_filp_open+0x115/0x240
[  291.343887][T15050]  do_open_execat+0xd5/0x280
[  291.343915][T15050]  alloc_bprm+0x2a/0x680
[  291.343939][T15050]  ? __check_object_size+0x367/0x510
[  291.343965][T15050]  do_execveat_common+0x12b/0x7e0
[  291.344001][T15050]  __x64_sys_execve+0x5c/0x70
[  291.344125][T15050]  x64_sys_call+0x1362/0x2e10
[  291.344145][T15050]  do_syscall_64+0xc9/0x1c0
[  291.344167][T15050]  ? clear_bhb_loop+0x25/0x80
[  291.344194][T15050]  ? clear_bhb_loop+0x25/0x80
[  291.344219][T15050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.344245][T15050] RIP: 0033:0x7fd4e13cd169
[  291.344262][T15050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.344282][T15050] RSP: 002b:00007fd4dfa37038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  291.344417][T15050] RAX: ffffffffffffffda RBX: 00007fd4e15e5fa0 RCX: 00007fd4e13cd169
[  291.344428][T15050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  291.344439][T15050] RBP: 00007fd4dfa37090 R08: 0000000000000000 R09: 0000000000000000
[  291.344449][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.344460][T15050] R13: 0000000000000000 R14: 00007fd4e15e5fa0 R15: 00007ffd375af6e8
[  291.344490][T15050]  </TASK>
[  291.594803][T15037] vhci_hcd: connection closed
[  291.599780][ T8188] vhci_hcd: stop threads
[  291.604038][ T8188] vhci_hcd: release socket
[  291.608464][ T8188] vhci_hcd: disconnect device
[  291.629249][ T3379] usb 16-1: enqueue for inactive port 0
[  291.641558][T15052] bridge0: port 3(macsec1) entered blocking state
[  291.648098][T15052] bridge0: port 3(macsec1) entered disabled state
[  291.654819][T15052] macsec1: entered allmulticast mode
[  291.660141][T15052] bridge0: entered allmulticast mode
[  291.669655][T15052] macsec1: left allmulticast mode
[  291.674718][T15052] bridge0: left allmulticast mode
[  291.727732][T15054] loop2: detected capacity change from 0 to 512
[  291.734415][T15054] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  291.849255][ T3379] usb 16-1: enqueue for inactive port 0
[  291.941670][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.954238][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.968118][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  291.968165][   T29] audit: type=1400 audit(2000000090.250:38874): avc:  denied  { read write } for  pid=15064 comm="syz.1.3957" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.998246][   T29] audit: type=1400 audit(2000000090.250:38875): avc:  denied  { open } for  pid=15064 comm="syz.1.3957" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  292.021867][   T29] audit: type=1400 audit(2000000090.250:38876): avc:  denied  { ioctl } for  pid=15064 comm="syz.1.3957" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  292.047057][   T29] audit: type=1400 audit(2000000090.270:38877): avc:  denied  { write } for  pid=15056 comm="-)-}@^%,@%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  292.066644][   T29] audit: type=1400 audit(2000000090.270:38878): avc:  denied  { connect } for  pid=15056 comm="-)-}@^%,@%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  292.086399][   T29] audit: type=1400 audit(2000000090.270:38879): avc:  denied  { name_connect } for  pid=15056 comm="-)-}@^%,@%" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  292.114054][   T29] audit: type=1400 audit(2000000090.420:38880): avc:  denied  { create } for  pid=15064 comm="syz.1.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  292.138334][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.146780][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.156236][T15065] __nla_validate_parse: 8 callbacks suppressed
[  292.156247][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'.
[  292.173074][   T29] audit: type=1400 audit(2000000090.450:38881): avc:  denied  { connect } for  pid=15064 comm="syz.1.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  292.192985][   T29] audit: type=1400 audit(2000000090.450:38882): avc:  denied  { name_connect } for  pid=15064 comm="syz.1.3957" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  292.214405][   T29] audit: type=1400 audit(2000000090.450:38883): avc:  denied  { write } for  pid=15064 comm="syz.1.3957" faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  292.242979][T15065] macvtap3: entered promiscuous mode
[  292.248616][T15065] batadv0: entered promiscuous mode
[  292.254051][T15065] macvtap3: entered allmulticast mode
[  292.259488][T15065] batadv0: entered allmulticast mode
[  292.270321][T15065] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  292.282130][T15069] bridge0: port 4(macsec1) entered blocking state
[  292.288628][T15069] bridge0: port 4(macsec1) entered disabled state
[  292.297017][T15048] Set syz1 is full, maxelem 65536 reached
[  292.298408][T15069] macsec1: entered allmulticast mode
[  292.308141][T15069] bridge0: entered allmulticast mode
[  292.319126][T15069] macsec1: left allmulticast mode
[  292.324250][T15069] bridge0: left allmulticast mode
[  292.386686][T15066] batadv0: left allmulticast mode
[  292.391830][T15066] batadv0: left promiscuous mode
[  292.397616][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.406581][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.440507][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.449481][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.458345][T15073] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.532764][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3958'.
[  292.609799][T15076] loop7: detected capacity change from 0 to 512
[  292.616915][T15076] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  292.642107][T15076] EXT4-fs (loop7): 1 truncate cleaned up
[  292.648149][T15076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.683615][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.717977][T15057] Set syz1 is full, maxelem 65536 reached
[  292.729654][T15080] loop7: detected capacity change from 0 to 1024
[  292.736753][T15080] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  292.773939][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3962'.
[  293.060693][ T3379] usb usb16-port1: attempt power cycle
[  293.388795][T15099] loop4: detected capacity change from 0 to 512
[  293.399692][T15099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  293.409962][T15100] loop1: detected capacity change from 0 to 1024
[  293.417067][T15100] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  293.428379][T15099] EXT4-fs (loop4): 1 truncate cleaned up
[  293.428635][T15100] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  293.434937][T15099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.450876][T15100] EXT4-fs (loop1): orphan cleanup on readonly fs
[  293.463552][T15100] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  293.478147][T15100] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  293.490124][T15100] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.3966: Freeing blocks not in datazone - block = 0, count = 4096
[  293.504673][T15100] EXT4-fs (loop1): Remounting filesystem read-only
[  293.511946][T15100] EXT4-fs (loop1): 1 orphan inode deleted
[  293.522977][T15100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  293.540678][T15106] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  293.573357][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.594692][T15112] loop1: detected capacity change from 0 to 512
[  293.601905][T15112] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  293.605038][T15108] SELinux:  policydb magic number 0x6f6d656d does not match expected magic number 0xf97cff8c
[  293.622622][T15108] SELinux: failed to load policy
[  293.627157][T15112] EXT4-fs (loop1): 1 truncate cleaned up
[  293.633850][T15112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.666774][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.674130][T15116] bridge0: port 4(macsec1) entered blocking state
[  293.682318][T15116] bridge0: port 4(macsec1) entered disabled state
[  293.689409][T15116] macsec1: entered allmulticast mode
[  293.694714][T15116] bridge0: entered allmulticast mode
[  293.713897][T15116] macsec1: left allmulticast mode
[  293.719027][T15116] bridge0: left allmulticast mode
[  293.792891][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3976'.
[  293.807365][T15125] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.835967][T11553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.884988][T15137] loop1: detected capacity change from 0 to 512
[  293.885602][T15137] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  293.885623][T15137] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  293.886364][T15137] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  293.886547][T15137] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  293.886577][T15137] System zones: 0-2, 18-18, 34-34
[  293.886927][T15137] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  293.887236][T15137] EXT4-fs (loop1): 1 truncate cleaned up
[  293.887767][T15137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.899242][T15125] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.925390][T15139] rdma_rxe: rxe_newlink: failed to add lo
[  294.031037][T15125] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.091489][T15125] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.203698][T12140] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.222538][T15144] IPVS: set_ctl: invalid protocol: 247 172.20.20.30:20001
[  294.231265][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'.
[  294.297337][T15146] SELinux:  policydb magic number 0x6f6d656d does not match expected magic number 0xf97cff8c
[  294.307767][T15146] SELinux: failed to load policy
[  294.334297][T15151] loop1: detected capacity change from 0 to 512
[  294.340981][T15151] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  294.482171][T15156] rdma_rxe: rxe_newlink: failed to add lo
[  294.731071][T15160] loop7: detected capacity change from 0 to 2048
[  294.742063][T15160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.783508][T15162] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  294.791075][T15162] vhci_hcd: invalid port number 253
[  294.796302][T15162] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  294.826911][T15170] bridge0: port 3(macsec1) entered blocking state
[  294.833501][T15170] bridge0: port 3(macsec1) entered disabled state
[  294.840199][T15170] macsec1: entered allmulticast mode
[  294.845501][T15170] bridge0: entered allmulticast mode
[  294.851744][T15170] macsec1: left allmulticast mode
[  294.856783][T15170] bridge0: left allmulticast mode
[  294.919589][ T3379] usb usb16-port1: unable to enumerate USB device
[  294.925823][T15175] 9pnet: Could not find request transport: 0xffffffffffffffff
[  294.967516][T15180] loop2: detected capacity change from 0 to 1024
[  294.974592][T15180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  294.986503][T15180] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  294.997499][T15180] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  295.005624][T15180] EXT4-fs (loop2): orphan cleanup on readonly fs
[  295.012731][T15180] EXT4-fs error (device loop2): __ext4_get_inode_loc:4461: comm syz.2.3993: Invalid inode table block 0 in block_group 0
[  295.013161][T11158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.028514][T15180] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  295.044345][T15180] EXT4-fs error (device loop2): ext4_quota_write:7324: inode #3: comm syz.2.3993: mark_inode_dirty error
[  295.057093][T15180] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3993: Failed to acquire dquot type 0
[  295.069244][T15180] EXT4-fs error (device loop2): __ext4_get_inode_loc:4461: comm syz.2.3993: Invalid inode table block 0 in block_group 0
[  295.082421][T15180] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  295.094442][T15180] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.3993: mark_inode_dirty error
[  295.106101][T15180] EXT4-fs error (device loop2): __ext4_get_inode_loc:4461: comm syz.2.3993: Invalid inode table block 0 in block_group 0
[  295.119804][T15180] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  295.129393][T15180] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  295.137989][T15180] EXT4-fs error (device loop2): __ext4_get_inode_loc:4461: comm syz.2.3993: Invalid inode table block 0 in block_group 0
[  295.156453][T15180] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  295.167169][T15180] EXT4-fs error (device loop2): ext4_truncate:4266: inode #15: comm syz.2.3993: mark_inode_dirty error
[  295.178724][T15180] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  295.192335][T15180] EXT4-fs (loop2): 1 truncate cleaned up
[  295.198429][T15180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  295.213631][T15180] EXT4-fs error (device loop2): __ext4_get_inode_loc:4461: comm syz.2.3993: Invalid inode table block 0 in block_group 0
[  295.217659][T15125] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.227055][T15187] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  295.241489][T15125] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.253261][T15187] vhci_hcd: invalid port number 253
[  295.255111][T15125] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.258472][T15187] vhci_hcd: default hub control req: 6011 v8001 i00fd l0
[  295.278525][T15125] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.287474][T12725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.348222][T15191] bridge0: port 3(macsec1) entered blocking state
[  295.348267][T15191] bridge0: port 3(macsec1) entered disabled state
[  295.352551][T15191] macsec1: entered allmulticast mode
[  295.352567][T15191] bridge0: entered allmulticast mode
[  295.353337][T15191] macsec1: left allmulticast mode
[  295.353356][T15191] bridge0: left allmulticast mode
[  295.463746][T15204] loop1: detected capacity change from 0 to 512
[  295.463958][T15204] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  295.511973][T15212] loop4: detected capacity change from 0 to 2048
[  295.543723][T15212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.586603][T15221] 9pnet: Could not find request transport: 0xffffffffffffffff
[  295.591432][T15219] netlink: 'syz.1.4008': attribute type 10 has an invalid length.
[  295.606979][T15219] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  295.617408][T15219] bridge_slave_1: left allmulticast mode
[  295.623196][T15219] bridge_slave_1: left promiscuous mode
[  295.628909][T15219] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.637162][T15219] bridge_slave_0: left allmulticast mode
[  295.642852][T15219] bridge_slave_0: left promiscuous mode
[  295.648546][T15219] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.721753][T15227] loop1: detected capacity change from 0 to 256
[  295.729438][T15227] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.756205][T15219] bond0: (slave bridge0): Releasing backup interface
[  295.886902][T15224] ==================================================================
[  295.895023][T15224] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range
[  295.903450][T15224] 
[  295.905905][T15224] write to 0xffff888106963c54 of 4 bytes by task 15212 on cpu 1:
[  295.913638][T15224]  __xa_set_mark+0x192/0x1c0
[  295.918280][T15224]  __folio_mark_dirty+0x3b5/0x4e0
[  295.923317][T15224]  mark_buffer_dirty+0x134/0x230
[  295.928275][T15224]  block_write_end+0x123/0x210
[  295.933064][T15224]  ext4_write_end+0x148/0x770
[  295.937763][T15224]  ext4_da_write_end+0x74/0x810
[  295.942634][T15224]  generic_perform_write+0x31e/0x4b0
[  295.947931][T15224]  ext4_buffered_write_iter+0x1ed/0x3c0
[  295.953522][T15224]  ext4_file_write_iter+0xe49/0xf80
[  295.958747][T15224]  iter_file_splice_write+0x5f2/0x980
[  295.964152][T15224]  direct_splice_actor+0x160/0x2c0
[  295.969294][T15224]  splice_direct_to_actor+0x305/0x680
[  295.974692][T15224]  do_splice_direct+0xd9/0x150
[  295.979476][T15224]  do_sendfile+0x40a/0x690
[  295.983918][T15224]  __x64_sys_sendfile64+0x113/0x160
[  295.989288][T15224]  x64_sys_call+0xfc3/0x2e10
[  295.993943][T15224]  do_syscall_64+0xc9/0x1c0
[  295.998470][T15224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.004386][T15224] 
[  296.006731][T15224] read to 0xffff888106963c54 of 4 bytes by task 15224 on cpu 0:
[  296.014379][T15224]  filemap_write_and_wait_range+0x105/0x370
[  296.020308][T15224]  ext4_file_write_iter+0xe89/0xf80
[  296.025607][T15224]  iter_file_splice_write+0x5f2/0x980
[  296.031101][T15224]  direct_splice_actor+0x160/0x2c0
[  296.036227][T15224]  splice_direct_to_actor+0x305/0x680
[  296.041644][T15224]  do_splice_direct+0xd9/0x150
[  296.046440][T15224]  do_sendfile+0x40a/0x690
[  296.050888][T15224]  __x64_sys_sendfile64+0x113/0x160
[  296.056181][T15224]  x64_sys_call+0xfc3/0x2e10
[  296.060796][T15224]  do_syscall_64+0xc9/0x1c0
[  296.065320][T15224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.071237][T15224] 
[  296.073573][T15224] value changed: 0x00000021 -> 0x0a000021
[  296.079295][T15224] 
[  296.081650][T15224] Reported by Kernel Concurrency Sanitizer on:
[  296.087817][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.4.4006 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) 
[  296.099994][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  296.110070][T15224] ==================================================================
[  296.360490][T11553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.