last executing test programs:

6m8.953121801s ago: executing program 1 (id=155):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x100)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
mount(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x2d, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000bc3d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000ad7a0000f7ffffff18120000", @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000001000000186400000500000000000000000800000280000000000000186600000c0000000000000001000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="4e4c4a1e3e42803979e8d7e36f02553271b173d66bfc18e4874e26a047671e4d7740d69e7472d1af64f4906a5f9937af15e8e7b286a5ed7bd9c6b8290c56c50f4a0abdd5a8a0b6aaf1e34b81cfd64163538112b0210d3fe27f47855b8a46fa46969b9dbaa902e4da44c4caeb31bb4ed93be0e9da587bf6122bd98775d42e666253fb7a411b86574e41", @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x11fe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e3, 0x0)
close(r5)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r5], 0x7c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x1, @ANYBLOB="dffffffffdffffff00000000000002d600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900010073797a3000000000090002007b797a3200000000300004762c0001800c0001007061796c6f6164001c000280080004400000000008000240000000000800034000000000140000001100010000000000000000000000000a"], 0x84}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r8)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf250f0000000c0009800800010005000000040003803c00078008000100400000000c001a008100000000000000080002"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r10 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88)

6m8.775548025s ago: executing program 1 (id=158):
unshare(0x26020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x7, "adf53fc83a25002633d1c54915db4f7edde909771abd7759011a194cd6c28c3845de3cfb3f0c4171c757e54100c2891715dd26a2b6a029e3b1807e87db6cf3e8"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

6m8.455432261s ago: executing program 1 (id=161):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3543b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
mincore(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

6m7.667734966s ago: executing program 1 (id=166):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = getpgrp(0xffffffffffffffff)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

6m7.009798979s ago: executing program 1 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0200000899a1110731f69fd8ef38723f781ee1f944e7bb7014e9fba88408fabade73b732b7499515c3b0671870d04e22d1f216b1", @ANYRES16=r4, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000811)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

6m6.771899643s ago: executing program 1 (id=176):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3543b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
mincore(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

6m6.729683264s ago: executing program 32 (id=176):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3543b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
mincore(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3m55.487042249s ago: executing program 0 (id=824):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
getpgrp(0xffffffffffffffff)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

3m54.883665881s ago: executing program 0 (id=834):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000811)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

3m54.761450404s ago: executing program 0 (id=835):
r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x4800)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x100)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26)
r3 = open(0x0, 0x143142, 0x0)
vmsplice(r3, 0x0, 0x0, 0x6)
read$nci(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec1, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5, 0x0, 0x5}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20)
read$eventfd(r9, &(0x7f0000000100), 0xfffffd79)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r11=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r11, 0x4734}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close_range(r6, r6, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8)

3m53.879268001s ago: executing program 0 (id=843):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080), 0x80, 0x635, &(0x7f0000000c40)="$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")
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x3210021, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = epoll_create1(0x80000)
epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000004680)={0xe0000016})
fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18)
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10})
connect$phonet_pipe(r6, &(0x7f00000000c0)={0x23, 0xfd, 0xd}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1, 0xfffffffe}})
close_range(r0, 0xffffffffffffffff, 0x0)

3m52.803547742s ago: executing program 0 (id=859):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00')
pread64(r1, &(0x7f0000019dc0)=""/102391, 0x18ff7, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0xc, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r4}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="7558ed79292a0e25601ca91faf9064d54e61bfdf59675499c27fd2267e79931e2bfca37b3eca635e91cad249080000", @ANYRES16=r11, @ANYBLOB="010300008000fbdbdf251c00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

3m51.571822645s ago: executing program 5 (id=878):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50000840}, 0x4)

3m51.33888274s ago: executing program 5 (id=880):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

3m51.309378151s ago: executing program 5 (id=882):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb5", 0x87}], 0x1}, 0x20004804)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6ff}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3m51.231168802s ago: executing program 5 (id=883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000600"/20, @ANYRES32=<r1=>0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r4, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})

3m50.909939368s ago: executing program 5 (id=887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50000840}, 0x4)

3m50.711564942s ago: executing program 5 (id=890):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

3m50.686781532s ago: executing program 33 (id=890):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

3m50.666190833s ago: executing program 0 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000000)={0x7, {0x0, 0x2, 0x3, 0x6, 0x4}})
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14)
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000200)=0x32)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m50.665751223s ago: executing program 34 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000000)={0x7, {0x0, 0x2, 0x3, 0x6, 0x4}})
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14)
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000200)=0x32)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m7.145493573s ago: executing program 6 (id=2346):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
ioctl$TCSETSW2(r0, 0x5453, 0x0)

2m7.063039155s ago: executing program 6 (id=2348):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000c, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)

2m7.005775926s ago: executing program 6 (id=2350):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x7, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0xfffffffd, 0x6, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x73, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2m6.702005641s ago: executing program 6 (id=2353):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff8c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48)
r1 = socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r1}, 0x20)
syz_emit_ethernet(0x26, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @random="1a616700", @val={@void, {0x8100, 0x4, 0x1}}, {@arp={0x806, @generic={0x201, 0x8917, 0x6, 0x0, 0xa, @local, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000ac0)={[{@map_acorn}, {@overriderock, 0x0}, {@mode={'mode', 0x3d, 0xfffffffffffffffc}}, {@cruft}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@unhide}, {@session={'session', 0x3d, 0x40000000058}}, {@block={'block', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@nocompress}], [{@seclabel}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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")
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r8}, 0x18)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

2m6.593304304s ago: executing program 6 (id=2355):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair(0x1e, 0x4, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400246}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x1100)
sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd26, 0x25dfdbfe, 0x5, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cq_drain_complete\x00', r5, 0x0, 0x80000000000}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10)
syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080))
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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")
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000d80)="$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")
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='c\xe2\x1aXKp\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
bind$unix(r9, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)

2m6.27033846s ago: executing program 6 (id=2357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) (fail_nth: 8)

2m6.2458122s ago: executing program 35 (id=2357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) (fail_nth: 8)

40.987605757s ago: executing program 4 (id=3541):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xfffff2fd, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000005c0))
sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24044890)

40.922612909s ago: executing program 4 (id=3545):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000000000000000}, 0x18)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})

40.046103125s ago: executing program 4 (id=3569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x200000}, 0x2}}, 0x10)
connect$tipc(r2, &(0x7f0000000000)=@id, 0x10)
close(r2)

39.988732047s ago: executing program 4 (id=3570):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6682dec8, 0x0, 0x1, 0x5, '\x00', r1, r2, 0x0, 0x0, 0x3}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014"], 0x44}}, 0x0)

39.058615465s ago: executing program 4 (id=3581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x200000}, 0x2}}, 0x10)
connect$tipc(r1, &(0x7f0000000000)=@id, 0x10)
close(r1)

38.058363604s ago: executing program 4 (id=3598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

38.025040604s ago: executing program 36 (id=3598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

3.125663749s ago: executing program 3 (id=4570):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r0=>0x0})
openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x2, 0x5, 0xfffffffe}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r11=>r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(&(0x7f0000000240), 0x0)
syz_io_uring_setup(0x3bea, &(0x7f00000000c0)={0x0, 0xd519, 0x4000, 0x5, 0x394}, &(0x7f0000000140), &(0x7f0000000180))
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRESOCT=r11, @ANYBLOB="e76484a44181ab090da89ae6be9460237c4c504bc30868f482ec35bdb73b0bb1f20d8cf809a0082cac4d5ef58b1c45032fe4f73f23ad2b335570edf62f7288136f5ea3294deda863cc15ab2ab0d2e4e46f97d549da66cd4823c94f3a7d1f", @ANYRESHEX=r3, @ANYRESDEC=r12, @ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x29, 0x0, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x54}}, 0x0)
r15 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r15, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

2.709114957s ago: executing program 2 (id=4576):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1)
eventfd2(0x401, 0x801)
eventfd(0x0)
r3 = socket(0x1e, 0x80004, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800004000d3ffffffffffff7f0037320000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fsi_master_read\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r4, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40000000}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00')
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r5, r3, 0x0)
recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0xac, 0x0, 0x0, 0x0, 0x7, 0xc2500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x100008, 0x10000, 0x53, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.211531756s ago: executing program 3 (id=4585):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
close(0x3)

2.211259906s ago: executing program 3 (id=4586):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

2.194016397s ago: executing program 3 (id=4588):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x4000000007}, 0x8781, 0x2000000, 0x4b1420c9, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1})
r1 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x64, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1})
io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @remote, 0x7}, 0x1c)

1.833852064s ago: executing program 3 (id=4595):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"])
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x84, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

1.812976814s ago: executing program 2 (id=4596):
r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfe00000000000000, 0x8000000000004}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000240)=r0}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRESOCT=r2, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x6, 0x8, 0xa, 0x7df, 0x3, 0x8})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r11 = syz_clone(0x2200000, &(0x7f0000000500)="8605f1cb70b26dbca9add0a62fe720c0a07918c0d76f80a5702f5169becdc52ce34daa8f8f0ca52a3090ef0083473d83af803b22e949707d9eb17090722ceb37ca86eec8", 0x44, &(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000000680)="158d3ffa0118762f22a486eaadd46b3d8a5d5de169b213d63ef9735b8d01d098de9fbc5c929daab5c638721bbe79da69bcff16d8bd43e064273a5c2bb10252ab3d5e768205f07cd83fd78fdd8c04b429e2e0b31763e26754248351aba524765bd6296423e3382899332dc25e090936c5bd7422a64fa17e206d3af1bde3bbe3026faf5ec4da3c35b814de546adea96e7657b9a4f304fa9d10390a057be0d070318d73061e3258f5f10f92f76c98d53e8969d24c4af369230e522284764ccb0e2d06b4964c19a1e7b5e833b98741ca5d50db2b2b8d7e18e2c00fb18672")
r12 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc))
setpgid(r11, r12)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="31832abd70000000000019"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

1.724034696s ago: executing program 2 (id=4597):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
close(0x3)

1.723290056s ago: executing program 2 (id=4598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xd215) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xd215)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4f, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) (async)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
io_setup(0x202, &(0x7f0000000200)) (async)
io_setup(0x202, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x0, 0x7f000, 0x0, 0x0, r6}])
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r10, 0x10c, 0x8, &(0x7f0000000340)=0xfffffd2f, 0x4) (async)
setsockopt$llc_int(r10, 0x10c, 0x8, &(0x7f0000000340)=0xfffffd2f, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1.49524066s ago: executing program 9 (id=4599):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)

1.49451915s ago: executing program 9 (id=4600):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x444001)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, <r3=>0x0})
socket$kcm(0x10, 0x2, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x2, 0xfffffffb, 0xfff, 0x2, r3})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000cc0)='btrfs_add_block_group\x00', r4, 0x0, 0xe}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)

777.713234ms ago: executing program 9 (id=4605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x3, 0xb, 0x5, 0x401, 0xa, 'syz1\x00', "664580892050ca9b96fcd9fb5e41af83e83c6886075aa9a3c93822dc3ade6bfe", "2936c87be8aa3fe7932029b763d3e03e316d4d7122d6232a0c2ca01c1a035605", [{0xa0, 0x3, {0x0, 0x6}}, {0xff80, 0x4, {0x0, 0x7}}, {0xed8, 0x3, {0x0, 0x1}}, {0x1, 0x400, {0x0, 0x1}}, {0x40, 0x0, {0x2, 0x9}}, {0x4, 0x0, {0x0, 0x72b}}, {0x7, 0x4, {0x3, 0x6}}, {0x4, 0x200, {0x2, 0x1}}, {0x1, 0x30, {0x3, 0xffffff84}}, {0x7, 0x401, {0x2, 0xdc}}, {0x2, 0x3, {0x3, 0x4}}, {0x2, 0x3, {0x2, 0x5}}, {0x2ae, 0x1, {0x1, 0x92}}, {0xd, 0x5, {0x3, 0x8}}, {0x6, 0x2, {0x0, 0x10}}, {0x5, 0xff25, {0x2, 0x3}}, {0x1, 0x5, {0x0, 0x200}}, {0x4, 0x9, {0x2}}, {0x1, 0x0, {0x2}}, {0x5, 0x68, {0x3, 0x3}}, {0x8, 0x0, {0x0, 0xfffffe01}}, {0xfffe, 0x7, {0x3}}, {0xfff, 0xfff2, {0x3, 0x8}}, {0x761, 0x5e6, {0x1, 0x9}}, {0x401, 0x6, {0x1, 0x3ff}}, {0x6, 0x40, {0x3, 0x3}}, {0x1, 0x4, {0x3, 0x1}}, {0x26, 0xfff9, {0x0, 0x8}}, {0xfffd, 0x8, {0x3, 0x9}}, {0x0, 0x4, {0x3, 0x9}}, {0x1, 0x0, {0x1, 0x10001}}, {0x3, 0xfff, {0x0, 0x3}}, {0x7dc, 0x8000, {0x2, 0x1ff}}, {0x0, 0x6, {0x2, 0x8611}}, {0x2e, 0x61, {0x2, 0x400}}, {0x6, 0x0, {0x2, 0x4}}, {0x5, 0xd9e, {0x3, 0x2}}, {0x7, 0x2, {0x3, 0x7}}, {0x2, 0x8, {0x1, 0x80000000}}, {0xd86, 0xe48, {0x2, 0xffffffff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

733.682985ms ago: executing program 9 (id=4607):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000005}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a3200000000180003801400008010000180040002800600018000000000090001"], 0xc8}}, 0x0)

710.133685ms ago: executing program 7 (id=4608):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
close(0x3)

693.395006ms ago: executing program 7 (id=4609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
close(r7)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x118)
write$cgroup_devices(r4, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES16=r2], 0xffdd)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r9, 0x0)
r10 = socket(0x10, 0x2, 0x0)
write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206010300713a00000000000000563e2743fe8674d0746d61703a697000000005000400000000000900020073797a31000000001800078005000300ff0000000c00018008000140ffffffff050005000200000005000100060000007e8bef1d1f128d0158f21830bda9ebababb3bb97fa4b80a3e0e665ca15dabf2d21976c67da0760699295"], 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppoe(0x18, 0x1, 0x0)

682.296656ms ago: executing program 9 (id=4610):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0)

619.200187ms ago: executing program 9 (id=4611):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1)
eventfd2(0x401, 0x801)
eventfd(0x0)
r3 = socket(0x1e, 0x80004, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800004000d3ffffffffffff7f003732"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fsi_master_read\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r4, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40000000}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00')
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r5, r3, 0x0)
recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0xac, 0x0, 0x0, 0x0, 0x7, 0xc2500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x100008, 0x10000, 0x53, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

426.463721ms ago: executing program 3 (id=4612):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x100)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4040800)

410.386001ms ago: executing program 8 (id=4613):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24044890)

365.254482ms ago: executing program 8 (id=4614):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
cachestat(r2, &(0x7f0000000140)={0x2, 0x3}, &(0x7f00000001c0), 0x0)

364.218982ms ago: executing program 7 (id=4615):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4f8, 0x0, 0x72}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
close_range(r0, 0xffffffffffffffff, 0x0)

337.348272ms ago: executing program 2 (id=4616):
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000180))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000005e0000000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0)

336.813742ms ago: executing program 8 (id=4617):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={<r5=>0x0, 0x7, 0x2, [0x6, 0x4]}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000500)={r5, 0x10000}, &(0x7f0000000540)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

293.014614ms ago: executing program 7 (id=4618):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65)

252.443744ms ago: executing program 8 (id=4619):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
close(0x3)

241.521965ms ago: executing program 7 (id=4620):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)

237.170615ms ago: executing program 2 (id=4621):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu~=0||!')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100200, 0x5, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

211.651395ms ago: executing program 8 (id=4622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x444001)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, <r3=>0x0})
socket$kcm(0x10, 0x2, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x2, 0xfffffffb, 0xfff, 0x2, r3})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000cc0)='btrfs_add_block_group\x00', r4, 0x0, 0xe}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)

177.144076ms ago: executing program 7 (id=4623):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000020000"], 0x0, 0x84, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

0s ago: executing program 8 (id=4624):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r4, 0x1, {0x1}, 0x2}, 0x18, 0x0}, 0x20000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0900000000000000000400"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000040000000100"/28], 0x50)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {<r8=>0xffffffffffffffff, 0xee01}}, './file1\x00'})
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, r8, &(0x7f0000000480)={0x86f, 0x3ff, 0x0, 0xa3, 0x4, 0x9, 0xfffffffffffffff8, 0x3, 0x3})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, <r13=>0x0}, 0x8)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7040f9dbdf251e0000000c00060001000000010000004c002f800c0002000201aaaaaaaaaaaa04000380380003800c0004000402545555555555060003"], 0x6c}, 0x1, 0x0, 0x0, 0x40054}, 0x4050884)

kernel console output (not intermixed with test programs):

775542][T14331] smc: net device bond0 erased user defined pnetid SYZ0
[  377.792308][T14323] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3447: Failed to acquire dquot type 1
[  377.805610][T14323] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  377.827138][T14323] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3447: corrupted inode contents
[  377.838535][T14323] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.3447: mark_inode_dirty error
[  377.850854][T14323] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3447: corrupted inode contents
[  377.851028][T14323] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3447: mark_inode_dirty error
[  377.881411][T14323] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3447: corrupted inode contents
[  377.893674][T14323] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  377.902503][T14323] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3447: corrupted inode contents
[  377.915695][T14323] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.3447: mark_inode_dirty error
[  377.915949][T14323] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  377.916203][T14323] EXT4-fs (loop4): 1 truncate cleaned up
[  377.916682][T14323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.938803][T14323] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  377.965390][T11980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.089890][T14357] smc: net device bond0 applied user defined pnetid SYZ0
[  378.125662][T14357] smc: net device bond0 erased user defined pnetid SYZ0
[  378.329532][T14370] loop8: detected capacity change from 0 to 1764
[  378.379740][T14375] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  378.716245][T14400] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  378.773133][T14407] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  378.847724][T14409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3482'.
[  378.911273][T14416] loop4: detected capacity change from 0 to 512
[  378.921742][T14415] random: crng reseeded on system resumption
[  378.949613][T14416] EXT4-fs (loop4): too many log groups per flexible block group
[  378.957422][T14416] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  378.980476][T14416] EXT4-fs (loop4): mount failed
[  379.008338][T14416] loop4: detected capacity change from 0 to 164
[  379.025680][T14416] ISOFS: unable to read i-node block
[  379.031060][T14416] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  379.070182][T14428] lo speed is unknown, defaulting to 1000
[  379.173352][T14440] loop4: detected capacity change from 0 to 1024
[  379.222710][T14440] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 0
[  379.284209][T14440] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  379.319089][T14440] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents
[  379.334418][T14440] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm gtp: mark_inode_dirty error
[  379.349904][T14440] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents
[  379.365881][T14440] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm gtp: mark_inode_dirty error
[  379.379199][T14440] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents
[  379.394436][T14440] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  379.412982][T14459] SELinux:  Context õñzÜ is not valid (left unmapped).
[  379.423051][T14454] loop8: detected capacity change from 0 to 128
[  379.430372][T14440] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents
[  379.446417][T14462] FAULT_INJECTION: forcing a failure.
[  379.446417][T14462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.452587][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'.
[  379.459740][T14462] CPU: 0 UID: 0 PID: 14462 Comm: syz.2.3504 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  379.459780][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  379.459799][T14462] Call Trace:
[  379.459849][T14462]  <TASK>
[  379.459861][T14462]  __dump_stack+0x1d/0x30
[  379.459891][T14462]  dump_stack_lvl+0xe8/0x140
[  379.459919][T14462]  dump_stack+0x15/0x1b
[  379.459943][T14462]  should_fail_ex+0x265/0x280
[  379.460039][T14462]  should_fail+0xb/0x20
[  379.460068][T14462]  should_fail_usercopy+0x1a/0x20
[  379.460136][T14462]  _copy_from_user+0x1c/0xb0
[  379.460220][T14462]  __sys_sendto+0x19e/0x330
[  379.460269][T14462]  __x64_sys_sendto+0x76/0x90
[  379.460335][T14462]  x64_sys_call+0x2d05/0x2ff0
[  379.460365][T14462]  do_syscall_64+0xd2/0x200
[  379.460411][T14462]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  379.460447][T14462]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  379.460533][T14462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.460564][T14462] RIP: 0033:0x7f733921ec29
[  379.460586][T14462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.460612][T14462] RSP: 002b:00007f7337c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  379.460637][T14462] RAX: ffffffffffffffda RBX: 00007f7339465fa0 RCX: 00007f733921ec29
[  379.460655][T14462] RDX: fffffffffffffea7 RSI: 0000200000f6f000 RDI: 0000000000000003
[  379.460731][T14462] RBP: 00007f7337c7f090 R08: 0000200000b63fe4 R09: 000000000000001c
[  379.460749][T14462] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001
[  379.460767][T14462] R13: 00007f7339466038 R14: 00007f7339465fa0 R15: 00007fff58cde4b8
[  379.460794][T14462]  </TASK>
[  379.494020][T14454] syz.8.3500: attempt to access beyond end of device
[  379.494020][T14454] loop8: rw=0, sector=121, nr_sectors = 920 limit=128
[  379.503289][T14440] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm gtp: mark_inode_dirty error
[  379.662953][T14469] netlink: 'syz.2.3506': attribute type 13 has an invalid length.
[  379.678936][T14440] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  379.693036][T14440] EXT4-fs (loop4): 1 truncate cleaned up
[  379.706644][T14440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.722140][T14440] netlink: 'gtp': attribute type 10 has an invalid length.
[  379.780633][T14471] netlink: 'syz.4.3495': attribute type 10 has an invalid length.
[  379.808160][T14440] team0: Port device dummy0 added
[  379.816446][T14471] team0: Port device dummy0 removed
[  379.836487][T11980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.858140][T14476] loop4: detected capacity change from 0 to 128
[  379.867839][T14476] syz.4.3508: attempt to access beyond end of device
[  379.867839][T14476] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128
[  379.882232][T14476] syz.4.3508: attempt to access beyond end of device
[  379.882232][T14476] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128
[  379.895865][T14476] Buffer I/O error on dev loop4, logical block 79, lost async page write
[  379.905040][T14476] syz.4.3508: attempt to access beyond end of device
[  379.905040][T14476] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  379.918550][T14476] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  379.950656][T14483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3511'.
[  380.184097][T14498] loop7: detected capacity change from 0 to 512
[  380.191156][T14498] EXT4-fs: Ignoring removed mblk_io_submit option
[  380.197951][T14498] EXT4-fs: Ignoring removed nomblk_io_submit option
[  380.202162][T14501] random: crng reseeded on system resumption
[  380.210971][T14498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  380.210995][T14498] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  380.218439][T14498] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3517: Allocating blocks 41-42 which overlap fs metadata
[  380.243238][T14498] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3517: Allocating blocks 41-42 which overlap fs metadata
[  380.257511][T14498] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3517: Failed to acquire dquot type 1
[  380.270228][T14498] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  380.271979][T14504] @: renamed from vlan0
[  380.285259][T14498] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3517: corrupted inode contents
[  380.304594][T14498] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.3517: mark_inode_dirty error
[  380.316761][T14498] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3517: corrupted inode contents
[  380.330251][T14498] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.3517: mark_inode_dirty error
[  380.343346][T14498] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3517: corrupted inode contents
[  380.357149][T14498] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[  380.365980][T14498] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3517: corrupted inode contents
[  380.378449][T14498] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.3517: mark_inode_dirty error
[  380.390474][T14498] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[  380.401663][T14498] EXT4-fs (loop7): 1 truncate cleaned up
[  380.408344][T14498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.430760][T14498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  380.451676][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.535685][T14523] FAULT_INJECTION: forcing a failure.
[  380.535685][T14523] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  380.549881][T14523] CPU: 1 UID: 0 PID: 14523 Comm: syz.7.3525 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  380.549931][T14523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  380.549943][T14523] Call Trace:
[  380.549950][T14523]  <TASK>
[  380.549958][T14523]  __dump_stack+0x1d/0x30
[  380.549976][T14523]  dump_stack_lvl+0xe8/0x140
[  380.549994][T14523]  dump_stack+0x15/0x1b
[  380.550011][T14523]  should_fail_ex+0x265/0x280
[  380.550096][T14523]  should_fail_alloc_page+0xf2/0x100
[  380.550122][T14523]  __alloc_frozen_pages_noprof+0xff/0x360
[  380.550232][T14523]  alloc_pages_mpol+0xb3/0x250
[  380.550278][T14523]  vma_alloc_folio_noprof+0x1aa/0x300
[  380.550312][T14523]  handle_mm_fault+0xec2/0x2c20
[  380.550407][T14523]  ? __rcu_read_lock+0x37/0x50
[  380.550427][T14523]  ? __pte_offset_map_lock+0x1d4/0x230
[  380.550514][T14523]  __get_user_pages+0x102e/0x1fa0
[  380.550547][T14523]  __gup_longterm_locked+0x8f4/0xe60
[  380.550573][T14523]  ? security_ptrace_access_check+0x69/0x80
[  380.550597][T14523]  ? __ptrace_may_access+0x2c3/0x340
[  380.550657][T14523]  pin_user_pages_remote+0x7e/0xb0
[  380.550687][T14523]  process_vm_rw+0x484/0x960
[  380.550760][T14523]  __x64_sys_process_vm_writev+0x78/0x90
[  380.550816][T14523]  x64_sys_call+0x2a7c/0x2ff0
[  380.550835][T14523]  do_syscall_64+0xd2/0x200
[  380.550864][T14523]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  380.550919][T14523]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  380.550946][T14523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.550965][T14523] RIP: 0033:0x7f88697eec29
[  380.550979][T14523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.551019][T14523] RSP: 002b:00007f886824f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  380.551037][T14523] RAX: ffffffffffffffda RBX: 00007f8869a35fa0 RCX: 00007f88697eec29
[  380.551049][T14523] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000001ba
[  380.551060][T14523] RBP: 00007f886824f090 R08: 0000000000000001 R09: 0000000000000000
[  380.551072][T14523] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  380.551084][T14523] R13: 00007f8869a36038 R14: 00007f8869a35fa0 R15: 00007ffdd617c2b8
[  380.551102][T14523]  </TASK>
[  380.798402][   T29] kauditd_printk_skb: 360 callbacks suppressed
[  380.798421][   T29] audit: type=1400 audit(380.771:89234): avc:  denied  { map } for  pid=14525 comm="+}[@" path="socket:[49087]" dev="sockfs" ino=49087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  380.830769][   T29] audit: type=1400 audit(380.771:89235): avc:  denied  { accept } for  pid=14525 comm="+}[@" path="socket:[49087]" dev="sockfs" ino=49087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  380.871758][T14528] loop8: detected capacity change from 0 to 1024
[  380.890618][T14528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.899463][T14531] loop7: detected capacity change from 0 to 512
[  380.911784][T14531] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  380.998609][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.021374][T14538] loop8: detected capacity change from 0 to 512
[  381.034023][   T29] audit: type=1326 audit(381.001:89236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.059950][T14543] FAULT_INJECTION: forcing a failure.
[  381.059950][T14543] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  381.060535][   T29] audit: type=1326 audit(381.001:89237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.073271][T14543] CPU: 0 UID: 0 PID: 14543 Comm: syz.2.3532 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  381.073304][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  381.073381][T14543] Call Trace:
[  381.073390][T14543]  <TASK>
[  381.073403][T14543]  __dump_stack+0x1d/0x30
[  381.073434][T14543]  dump_stack_lvl+0xe8/0x140
[  381.073460][T14543]  dump_stack+0x15/0x1b
[  381.073487][T14543]  should_fail_ex+0x265/0x280
[  381.073522][T14543]  should_fail_alloc_page+0xf2/0x100
[  381.073646][T14543]  __alloc_frozen_pages_noprof+0xff/0x360
[  381.073700][T14543]  alloc_pages_mpol+0xb3/0x250
[  381.073790][T14543]  vma_alloc_folio_noprof+0x1aa/0x300
[  381.073838][T14543]  do_wp_page+0x5db/0x24e0
[  381.073863][T14543]  ? css_rstat_updated+0xb7/0x240
[  381.073979][T14543]  ? __rcu_read_lock+0x37/0x50
[  381.074014][T14543]  handle_mm_fault+0x77d/0x2c20
[  381.074137][T14543]  do_user_addr_fault+0x636/0x1090
[  381.074189][T14543]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  381.074286][T14543]  exc_page_fault+0x62/0xa0
[  381.074327][T14543]  asm_exc_page_fault+0x26/0x30
[  381.074355][T14543] RIP: 0033:0x7f73390e0cb0
[  381.074376][T14543] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  381.074443][T14543] RSP: 002b:00007f7337c7e4a0 EFLAGS: 00010202
[  381.074466][T14543] RAX: 000000000000a005 RBX: 00007f7337c7e540 RCX: 0000000000000101
[  381.074531][T14543] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f7337c7e5e0
[  381.074548][T14543] RBP: 0000000000000102 R08: 00007f732f85f000 R09: 0000000000000004
[  381.074566][T14543] R10: 0000200000001082 R11: 0000000000000551 R12: 0000000000000301
[  381.074584][T14543] R13: 00007f73392bda20 R14: 0000000000000013 R15: 00007f7337c7e5e0
[  381.074610][T14543]  </TASK>
[  381.074623][T14543] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  381.097157][   T29] audit: type=1326 audit(381.001:89238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.241412][T14538] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[  381.243510][   T29] audit: type=1326 audit(381.001:89239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.251754][T14538] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  381.260433][   T29] audit: type=1326 audit(381.001:89240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.274734][T14538] EXT4-fs (loop8): mount failed
[  381.275866][   T29] audit: type=1326 audit(381.001:89241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.394051][T14547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3533'.
[  381.410850][   T29] audit: type=1326 audit(381.001:89242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.2.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  381.425056][T14552] loop4: detected capacity change from 0 to 512
[  381.468638][T14552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.485929][T14549] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3534: bg 0: block 328: padding at end of block bitmap is not set
[  381.518028][T11980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.562230][T14565] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  381.575443][T14567] smc: net device bond0 applied user defined pnetid SYZ0
[  381.584191][T14567] smc: net device bond0 erased user defined pnetid SYZ0
[  381.678720][T14581] loop7: detected capacity change from 0 to 512
[  381.693952][T14583] random: crng reseeded on system resumption
[  381.702070][T14581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.721822][T14581] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3547: bg 0: block 328: padding at end of block bitmap is not set
[  381.763713][T14595] FAULT_INJECTION: forcing a failure.
[  381.763713][T14595] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  381.777861][T14595] CPU: 1 UID: 0 PID: 14595 Comm: syz.2.3552 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  381.777894][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  381.777908][T14595] Call Trace:
[  381.777916][T14595]  <TASK>
[  381.777925][T14595]  __dump_stack+0x1d/0x30
[  381.777948][T14595]  dump_stack_lvl+0xe8/0x140
[  381.778026][T14595]  dump_stack+0x15/0x1b
[  381.778046][T14595]  should_fail_ex+0x265/0x280
[  381.778076][T14595]  should_fail_alloc_page+0xf2/0x100
[  381.778111][T14595]  __alloc_frozen_pages_noprof+0xff/0x360
[  381.778183][T14595]  alloc_pages_mpol+0xb3/0x250
[  381.778228][T14595]  vma_alloc_folio_noprof+0x1aa/0x300
[  381.778261][T14595]  handle_mm_fault+0xec2/0x2c20
[  381.778293][T14595]  do_user_addr_fault+0x636/0x1090
[  381.778357][T14595]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  381.778387][T14595]  exc_page_fault+0x62/0xa0
[  381.778413][T14595]  asm_exc_page_fault+0x26/0x30
[  381.778436][T14595] RIP: 0033:0x7f73390e0c03
[  381.778450][T14595] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  381.778542][T14595] RSP: 002b:00007f7337c7e4a0 EFLAGS: 00010202
[  381.778556][T14595] RAX: 0000000000010000 RBX: 00007f7337c7e540 RCX: 00007f732f85f000
[  381.778634][T14595] RDX: 00007f7337c7e6e0 RSI: 0000000000000001 RDI: 00007f7337c7e5e0
[  381.778669][T14595] RBP: 00000000000000a6 R08: 0000000000000006 R09: 0000000000000021
[  381.778681][T14595] R10: 0000000000000024 R11: 00007f7337c7e540 R12: 0000000000000001
[  381.778693][T14595] R13: 00007f73392bda20 R14: 0000000000000002 R15: 00007f7337c7e5e0
[  381.778711][T14595]  </TASK>
[  381.778721][T14595] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  381.958533][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.997445][T14599] smc: net device bond0 applied user defined pnetid SYZ0
[  382.016312][T14599] smc: net device bond0 erased user defined pnetid SYZ0
[  382.497287][T14640] smc: net device bond0 applied user defined pnetid SYZ0
[  382.519100][T14640] smc: net device bond0 erased user defined pnetid SYZ0
[  382.614954][T14645] loop4: detected capacity change from 0 to 512
[  382.625284][T14650] FAULT_INJECTION: forcing a failure.
[  382.625284][T14650] name failslab, interval 1, probability 0, space 0, times 0
[  382.638165][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.3.3572 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  382.638202][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  382.638215][T14650] Call Trace:
[  382.638223][T14650]  <TASK>
[  382.638232][T14650]  __dump_stack+0x1d/0x30
[  382.638255][T14650]  dump_stack_lvl+0xe8/0x140
[  382.638286][T14650]  dump_stack+0x15/0x1b
[  382.638377][T14650]  should_fail_ex+0x265/0x280
[  382.638414][T14650]  should_failslab+0x8c/0xb0
[  382.638477][T14650]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  382.638526][T14650]  ? make_vfsuid+0x49/0xa0
[  382.638596][T14650]  ? v9fs_session_init+0x4b/0xde0
[  382.638664][T14650]  kstrdup+0x3e/0xd0
[  382.638704][T14650]  v9fs_session_init+0x4b/0xde0
[  382.638732][T14650]  ? __rcu_read_unlock+0x4f/0x70
[  382.638761][T14650]  ? avc_has_perm_noaudit+0x1b1/0x200
[  382.638805][T14650]  ? should_fail_ex+0xdb/0x280
[  382.638840][T14650]  ? v9fs_mount+0x51/0x5c0
[  382.638907][T14650]  ? should_failslab+0x8c/0xb0
[  382.638945][T14650]  ? __kmalloc_cache_noprof+0x189/0x320
[  382.639001][T14650]  v9fs_mount+0x67/0x5c0
[  382.639103][T14650]  ? selinux_capable+0x31/0x40
[  382.639147][T14650]  ? __pfx_v9fs_mount+0x10/0x10
[  382.639217][T14650]  legacy_get_tree+0x78/0xd0
[  382.639252][T14650]  vfs_get_tree+0x57/0x1d0
[  382.639288][T14650]  do_new_mount+0x207/0x5e0
[  382.639320][T14650]  ? security_capable+0x83/0x90
[  382.639361][T14650]  path_mount+0x4a4/0xb20
[  382.639396][T14650]  ? user_path_at+0x109/0x130
[  382.639447][T14650]  __se_sys_mount+0x28f/0x2e0
[  382.639511][T14650]  __x64_sys_mount+0x67/0x80
[  382.639568][T14650]  x64_sys_call+0x2b4d/0x2ff0
[  382.639597][T14650]  do_syscall_64+0xd2/0x200
[  382.639666][T14650]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  382.639703][T14650]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  382.639747][T14650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.639768][T14650] RIP: 0033:0x7f2ec28cec29
[  382.639789][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.639825][T14650] RSP: 002b:00007f2ec132f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  382.639854][T14650] RAX: ffffffffffffffda RBX: 00007f2ec2b15fa0 RCX: 00007f2ec28cec29
[  382.639901][T14650] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  382.639920][T14650] RBP: 00007f2ec132f090 R08: 0000200000000400 R09: 0000000000000000
[  382.639935][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  382.639996][T14650] R13: 00007f2ec2b16038 R14: 00007f2ec2b15fa0 R15: 00007fff6de56d38
[  382.640025][T14650]  </TASK>
[  382.913517][T14645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  382.967614][T14655] FAULT_INJECTION: forcing a failure.
[  382.967614][T14655] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  382.981120][T14655] CPU: 1 UID: 0 PID: 14655 Comm: syz.3.3573 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  382.981154][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  382.981170][T14655] Call Trace:
[  382.981178][T14655]  <TASK>
[  382.981187][T14655]  __dump_stack+0x1d/0x30
[  382.981212][T14655]  dump_stack_lvl+0xe8/0x140
[  382.981242][T14655]  dump_stack+0x15/0x1b
[  382.981261][T14655]  should_fail_ex+0x265/0x280
[  382.981289][T14655]  should_fail_alloc_page+0xf2/0x100
[  382.981356][T14655]  __alloc_frozen_pages_noprof+0xff/0x360
[  382.981400][T14655]  alloc_pages_mpol+0xb3/0x250
[  382.981437][T14655]  alloc_pages_noprof+0x90/0x130
[  382.981507][T14655]  pte_alloc_one+0x2d/0x120
[  382.981539][T14655]  __pte_alloc+0x32/0x2b0
[  382.981639][T14655]  handle_mm_fault+0x1c55/0x2c20
[  382.981678][T14655]  do_user_addr_fault+0x636/0x1090
[  382.981718][T14655]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  382.981762][T14655]  exc_page_fault+0x62/0xa0
[  382.981796][T14655]  asm_exc_page_fault+0x26/0x30
[  382.981831][T14655] RIP: 0033:0x7f2ec2790ca6
[  382.981848][T14655] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  382.981871][T14655] RSP: 002b:00007f2ec132e3f0 EFLAGS: 00010246
[  382.981890][T14655] RAX: 0000000000000001 RBX: 00007f2ec132e490 RCX: 0000000000000101
[  382.981904][T14655] RDX: 000000000000001f RSI: 0000000000000001 RDI: 00007f2ec132e530
[  382.981918][T14655] RBP: 0000000000000102 R08: 00007f2eb8f0f000 R09: 0000000000000000
[  382.982007][T14655] R10: 0000000000000000 R11: 00007f2ec132e4a0 R12: 0000000000000001
[  382.982020][T14655] R13: 00007f2ec296da20 R14: 0000000000000000 R15: 00007f2ec132e530
[  382.982043][T14655]  </TASK>
[  382.982055][T14655] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  383.172665][T14645] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  383.195946][T14645] EXT4-fs (loop4): 1 truncate cleaned up
[  383.202844][T14645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.222786][T14657] random: crng reseeded on system resumption
[  383.246785][T14620] loop8: detected capacity change from 0 to 512
[  383.267229][T14620] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  383.277782][T14645] lo speed is unknown, defaulting to 1000
[  383.299307][T14662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3576'.
[  383.311393][T14620] EXT4-fs (loop8): 1 truncate cleaned up
[  383.317702][T14620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.356579][T14671] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3579'.
[  383.380333][T14671] 0ªX¹¦À: renamed from caif0
[  383.391438][T14671] 0ªX¹¦À: entered allmulticast mode
[  383.397450][T14671] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  383.447772][T14674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3580'.
[  383.463228][T11980] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /148/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.504081][T14676] smc: net device bond0 applied user defined pnetid SYZ0
[  383.511611][T14676] smc: net device bond0 erased user defined pnetid SYZ0
[  383.552369][T11980] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.574121][T14622] loop7: detected capacity change from 0 to 512
[  383.581299][T14622] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  383.593525][T14622] EXT4-fs (loop7): 1 truncate cleaned up
[  383.601427][T14622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.615305][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.651826][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  383.677511][T11980] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /148/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.734017][T11980] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.757237][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  383.774475][T14688] random: crng reseeded on system resumption
[  383.807228][T11980] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /148/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.851235][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.861440][T11980] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.882524][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  383.903114][T11980] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /148/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.936113][T11980] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  383.965928][T14697] serio: Serial port ptm1
[  383.966123][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  383.986531][T11980] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /148/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  384.012637][T11980] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  384.078604][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.101358][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.118380][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.137972][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.157446][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.189844][T11980] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  384.328338][T13067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.508050][ T5143] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.577943][ T5143] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.649613][ T5143] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.709053][ T5143] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.742366][T14730] lo speed is unknown, defaulting to 1000
[  384.759896][T14717] lo speed is unknown, defaulting to 1000
[  384.803236][ T5143] bridge_slave_1: left allmulticast mode
[  384.808958][ T5143] bridge_slave_1: left promiscuous mode
[  384.814738][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.824634][ T5143] bridge_slave_0: left allmulticast mode
[  384.830364][ T5143] bridge_slave_0: left promiscuous mode
[  384.836280][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.859571][T14737] loop8: detected capacity change from 0 to 1024
[  384.918283][T14737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.021983][ T5143] hsr_slave_0: left promiscuous mode
[  385.029485][ T5143] hsr_slave_1: left promiscuous mode
[  385.035522][ T5143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.043072][ T5143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.048279][T14741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3605'.
[  385.059936][ T5143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.067557][ T5143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.098633][ T5143] veth1_macvtap: left promiscuous mode
[  385.104338][ T5143] veth0_macvtap: left promiscuous mode
[  385.113868][ T5143] veth1_vlan: left promiscuous mode
[  385.119792][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.131297][ T5143] veth0_vlan: left promiscuous mode
[  385.270688][ T5143] team0 (unregistering): Port device team_slave_1 removed
[  385.283740][ T5143] team0 (unregistering): Port device team_slave_0 removed
[  385.356552][T14717] chnl_net:caif_netlink_parms(): no params data found
[  385.398242][T14717] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.405408][T14717] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.412759][T14717] bridge_slave_0: entered allmulticast mode
[  385.419510][T14717] bridge_slave_0: entered promiscuous mode
[  385.427163][T14717] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.434453][T14717] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.441727][T14717] bridge_slave_1: entered allmulticast mode
[  385.448359][T14717] bridge_slave_1: entered promiscuous mode
[  385.470144][T14763] smc: net device bond0 applied user defined pnetid SYZ0
[  385.478993][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.486441][T14763] smc: net device bond0 erased user defined pnetid SYZ0
[  385.489604][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.517384][T14717] team0: Port device team_slave_0 added
[  385.524203][T14717] team0: Port device team_slave_1 added
[  385.535401][T14765] loop7: detected capacity change from 0 to 764
[  385.542882][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.549933][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.576019][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.588173][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.595166][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.621138][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.635644][T14765] rock: directory entry would overflow storage
[  385.642028][T14765] rock: sig=0x4f50, size=4, remaining=3
[  385.648410][T14765] iso9660: Corrupted directory entry in block 6 of inode 1792
[  385.658241][T14765] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  385.659748][T14717] hsr_slave_0: entered promiscuous mode
[  385.675070][T14717] hsr_slave_1: entered promiscuous mode
[  385.681174][T14717] debugfs: 'hsr0' already exists in 'hsr'
[  385.687132][T14717] Cannot create hsr debugfs directory
[  385.711230][T14765] Symlink component flag not implemented
[  385.717057][T14765] Symlink component flag not implemented (129)
[  385.724203][T14765] rock: directory entry would overflow storage
[  385.730521][T14765] rock: sig=0x4f50, size=4, remaining=3
[  385.736814][T14765] iso9660: Corrupted directory entry in block 6 of inode 1792
[  385.771348][T14769] serio: Serial port ptm0
[  385.808779][T14717] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  385.817864][T14717] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  385.826086][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  385.826103][   T29] audit: type=1326 audit(385.802:89480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.829601][T14717] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  385.858690][   T29] audit: type=1326 audit(385.802:89481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.886809][   T29] audit: type=1326 audit(385.802:89482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.909975][   T29] audit: type=1326 audit(385.802:89483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.932962][   T29] audit: type=1326 audit(385.802:89484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.956029][   T29] audit: type=1326 audit(385.802:89485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  385.979170][   T29] audit: type=1326 audit(385.802:89486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  386.002381][   T29] audit: type=1326 audit(385.802:89487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  386.025401][   T29] audit: type=1326 audit(385.802:89488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  386.048455][   T29] audit: type=1326 audit(385.802:89489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  386.078841][T14717] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  386.145328][T14717] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.159867][T14717] 8021q: adding VLAN 0 to HW filter on device team0
[  386.170870][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.178035][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.199118][T14717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  386.209656][T14717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  386.222612][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3616'.
[  386.247288][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.254403][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.320469][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.478777][T14717] veth0_vlan: entered promiscuous mode
[  386.494031][T14717] veth1_vlan: entered promiscuous mode
[  386.538679][T14717] veth0_macvtap: entered promiscuous mode
[  386.553226][T14717] veth1_macvtap: entered promiscuous mode
[  386.569184][T14832] random: crng reseeded on system resumption
[  386.598170][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.614416][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.638759][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.653857][T14834] loop8: detected capacity change from 0 to 512
[  386.675183][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.684984][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3632'.
[  386.699866][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.710610][T14834] EXT4-fs (loop8): failed to initialize system zone (-117)
[  386.726746][T14834] EXT4-fs (loop8): mount failed
[  386.735409][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.772804][T14834] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3631'.
[  386.860406][T14862] serio: Serial port ptm0
[  386.949771][T14871] netlink: 'syz.2.3645': attribute type 21 has an invalid length.
[  386.958379][T14871] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3645'.
[  386.981919][T14871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3645'.
[  387.084476][T14882] FAULT_INJECTION: forcing a failure.
[  387.084476][T14882] name failslab, interval 1, probability 0, space 0, times 0
[  387.097351][T14882] CPU: 0 UID: 0 PID: 14882 Comm: syz.2.3649 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  387.097400][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  387.097414][T14882] Call Trace:
[  387.097421][T14882]  <TASK>
[  387.097428][T14882]  __dump_stack+0x1d/0x30
[  387.097505][T14882]  dump_stack_lvl+0xe8/0x140
[  387.097528][T14882]  dump_stack+0x15/0x1b
[  387.097626][T14882]  should_fail_ex+0x265/0x280
[  387.097673][T14882]  should_failslab+0x8c/0xb0
[  387.097699][T14882]  kmem_cache_alloc_noprof+0x50/0x310
[  387.097756][T14882]  ? audit_log_start+0x365/0x6c0
[  387.097875][T14882]  audit_log_start+0x365/0x6c0
[  387.097968][T14882]  audit_seccomp+0x48/0x100
[  387.098006][T14882]  ? __seccomp_filter+0x68c/0x10d0
[  387.098029][T14882]  __seccomp_filter+0x69d/0x10d0
[  387.098053][T14882]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  387.098140][T14882]  ? vfs_write+0x7e8/0x960
[  387.098168][T14882]  ? __rcu_read_unlock+0x4f/0x70
[  387.098192][T14882]  ? __fget_files+0x184/0x1c0
[  387.098226][T14882]  __secure_computing+0x82/0x150
[  387.098247][T14882]  syscall_trace_enter+0xcf/0x1e0
[  387.098273][T14882]  do_syscall_64+0xac/0x200
[  387.098371][T14882]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  387.098409][T14882]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  387.098466][T14882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.098563][T14882] RIP: 0033:0x7f733921ec29
[  387.098582][T14882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.098606][T14882] RSP: 002b:00007f7337c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a
[  387.098629][T14882] RAX: ffffffffffffffda RBX: 00007f7339465fa0 RCX: 00007f733921ec29
[  387.098676][T14882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  387.098692][T14882] RBP: 00007f7337c7f090 R08: 0000000000000000 R09: 0000000000000000
[  387.098704][T14882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.098716][T14882] R13: 00007f7339466038 R14: 00007f7339465fa0 R15: 00007fff58cde4b8
[  387.098735][T14882]  </TASK>
[  387.442518][T14898] serio: Serial port ptm1
[  387.612640][T14910] openvswitch: netlink: Message has 6 unknown bytes.
[  387.656809][T14912] syzkaller0: entered allmulticast mode
[  387.664481][T14912] syzkaller0 (unregistering): left allmulticast mode
[  387.674276][T14890] program syz.7.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  387.683781][T14890] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  387.719002][T14915] FAULT_INJECTION: forcing a failure.
[  387.719002][T14915] name failslab, interval 1, probability 0, space 0, times 0
[  387.731689][T14915] CPU: 0 UID: 0 PID: 14915 Comm: syz.9.3662 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  387.731726][T14915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  387.731743][T14915] Call Trace:
[  387.731752][T14915]  <TASK>
[  387.731763][T14915]  __dump_stack+0x1d/0x30
[  387.731805][T14915]  dump_stack_lvl+0xe8/0x140
[  387.731832][T14915]  dump_stack+0x15/0x1b
[  387.731854][T14915]  should_fail_ex+0x265/0x280
[  387.731886][T14915]  should_failslab+0x8c/0xb0
[  387.731929][T14915]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  387.731968][T14915]  ? __d_alloc+0x3d/0x340
[  387.732033][T14915]  __d_alloc+0x3d/0x340
[  387.732096][T14915]  d_alloc_parallel+0x53/0xc60
[  387.732174][T14915]  ? __rcu_read_unlock+0x4f/0x70
[  387.732203][T14915]  ? __d_lookup+0x316/0x340
[  387.732242][T14915]  ? default_pointer+0xf2/0x5e0
[  387.732282][T14915]  __lookup_slow+0x8c/0x250
[  387.732381][T14915]  lookup_noperm+0xc9/0x180
[  387.732456][T14915]  simple_start_creating+0x97/0x120
[  387.732570][T14915]  start_creating+0xe9/0x160
[  387.732600][T14915]  __debugfs_create_file+0x6b/0x330
[  387.732638][T14915]  debugfs_create_file_full+0x3f/0x60
[  387.732675][T14915]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  387.732791][T14915]  ref_tracker_dir_debugfs+0x100/0x1e0
[  387.732913][T14915]  alloc_netdev_mqs+0x1a2/0xa30
[  387.732951][T14915]  rtnl_create_link+0x239/0x710
[  387.732984][T14915]  rtnl_newlink_create+0x14c/0x620
[  387.733080][T14915]  ? security_capable+0x83/0x90
[  387.733121][T14915]  ? netlink_ns_capable+0x86/0xa0
[  387.733184][T14915]  rtnl_newlink+0xf29/0x12d0
[  387.733235][T14915]  ? bpf_trace_run3+0x12c/0x1d0
[  387.733268][T14915]  ? __kfree_skb+0x109/0x150
[  387.733305][T14915]  ? __rcu_read_unlock+0x4f/0x70
[  387.733333][T14915]  ? avc_has_perm_noaudit+0x1b1/0x200
[  387.733370][T14915]  ? cred_has_capability+0x210/0x280
[  387.733405][T14915]  ? selinux_capable+0x31/0x40
[  387.733440][T14915]  ? security_capable+0x83/0x90
[  387.733470][T14915]  ? ns_capable+0x7d/0xb0
[  387.733497][T14915]  ? __pfx_rtnl_newlink+0x10/0x10
[  387.733618][T14915]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  387.733664][T14915]  netlink_rcv_skb+0x123/0x220
[  387.733771][T14915]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  387.733810][T14915]  rtnetlink_rcv+0x1c/0x30
[  387.733842][T14915]  netlink_unicast+0x5bd/0x690
[  387.733874][T14915]  netlink_sendmsg+0x58b/0x6b0
[  387.733939][T14915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  387.733975][T14915]  __sock_sendmsg+0x142/0x180
[  387.734050][T14915]  ____sys_sendmsg+0x31e/0x4e0
[  387.734125][T14915]  ___sys_sendmsg+0x17b/0x1d0
[  387.734171][T14915]  __x64_sys_sendmsg+0xd4/0x160
[  387.734213][T14915]  x64_sys_call+0x191e/0x2ff0
[  387.734293][T14915]  do_syscall_64+0xd2/0x200
[  387.734381][T14915]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  387.734476][T14915]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  387.734517][T14915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.734591][T14915] RIP: 0033:0x7fac1b64ec29
[  387.734609][T14915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.734632][T14915] RSP: 002b:00007fac1a0af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  387.734657][T14915] RAX: ffffffffffffffda RBX: 00007fac1b895fa0 RCX: 00007fac1b64ec29
[  387.734732][T14915] RDX: 0000000000040014 RSI: 0000200000000080 RDI: 0000000000000003
[  387.734749][T14915] RBP: 00007fac1a0af090 R08: 0000000000000000 R09: 0000000000000000
[  387.734766][T14915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.734805][T14915] R13: 00007fac1b896038 R14: 00007fac1b895fa0 R15: 00007ffd370181d8
[  387.734825][T14915]  </TASK>
[  388.212458][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3668'.
[  388.252385][T14933] loop9: detected capacity change from 0 to 512
[  388.268330][T14933] EXT4-fs (loop9): failed to initialize system zone (-117)
[  388.277410][T14933] EXT4-fs (loop9): mount failed
[  388.313273][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3669'.
[  388.721528][T14939] loop8: detected capacity change from 0 to 512
[  388.728903][T14939] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  388.741070][T14939] EXT4-fs (loop8): 1 truncate cleaned up
[  388.747283][T14939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.795482][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.927045][T14955] loop7: detected capacity change from 0 to 1024
[  388.938717][T14955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.011496][T14959] FAULT_INJECTION: forcing a failure.
[  389.011496][T14959] name failslab, interval 1, probability 0, space 0, times 0
[  389.024274][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.8.3677 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  389.024298][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  389.024310][T14959] Call Trace:
[  389.024316][T14959]  <TASK>
[  389.024350][T14959]  __dump_stack+0x1d/0x30
[  389.024369][T14959]  dump_stack_lvl+0xe8/0x140
[  389.024386][T14959]  dump_stack+0x15/0x1b
[  389.024409][T14959]  should_fail_ex+0x265/0x280
[  389.024431][T14959]  should_failslab+0x8c/0xb0
[  389.024454][T14959]  __kmalloc_noprof+0xa5/0x3e0
[  389.024484][T14959]  ? tcf_idr_create+0x41/0x4a0
[  389.024517][T14959]  tcf_idr_create+0x41/0x4a0
[  389.024631][T14959]  tcf_bpf_init+0x27e/0x610
[  389.024669][T14959]  tcf_action_init_1+0x367/0x4a0
[  389.024705][T14959]  tcf_action_init+0x267/0x6d0
[  389.024783][T14959]  ? mark_reg_read+0x59/0x340
[  389.024841][T14959]  tc_ctl_action+0x291/0x830
[  389.024889][T14959]  ? __pfx_tc_ctl_action+0x10/0x10
[  389.024980][T14959]  rtnetlink_rcv_msg+0x657/0x6d0
[  389.025040][T14959]  netlink_rcv_skb+0x123/0x220
[  389.025063][T14959]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  389.025159][T14959]  rtnetlink_rcv+0x1c/0x30
[  389.025243][T14959]  netlink_unicast+0x5bd/0x690
[  389.025265][T14959]  netlink_sendmsg+0x58b/0x6b0
[  389.025290][T14959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.025327][T14959]  __sock_sendmsg+0x142/0x180
[  389.025418][T14959]  ____sys_sendmsg+0x31e/0x4e0
[  389.025445][T14959]  ___sys_sendmsg+0x17b/0x1d0
[  389.025551][T14959]  __x64_sys_sendmsg+0xd4/0x160
[  389.025582][T14959]  x64_sys_call+0x191e/0x2ff0
[  389.025601][T14959]  do_syscall_64+0xd2/0x200
[  389.025629][T14959]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  389.025651][T14959]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  389.025754][T14959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.025778][T14959] RIP: 0033:0x7f56ba44ec29
[  389.025792][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.025808][T14959] RSP: 002b:00007f56b8eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.025824][T14959] RAX: ffffffffffffffda RBX: 00007f56ba695fa0 RCX: 00007f56ba44ec29
[  389.025841][T14959] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  389.025857][T14959] RBP: 00007f56b8eaf090 R08: 0000000000000000 R09: 0000000000000000
[  389.025949][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.025960][T14959] R13: 00007f56ba696038 R14: 00007f56ba695fa0 R15: 00007ffe35e46708
[  389.026038][T14959]  </TASK>
[  389.302094][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.324036][T14961] FAULT_INJECTION: forcing a failure.
[  389.324036][T14961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  389.337921][T14961] CPU: 1 UID: 0 PID: 14961 Comm: syz.9.3678 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  389.337953][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  389.337969][T14961] Call Trace:
[  389.337977][T14961]  <TASK>
[  389.337987][T14961]  __dump_stack+0x1d/0x30
[  389.338014][T14961]  dump_stack_lvl+0xe8/0x140
[  389.338064][T14961]  dump_stack+0x15/0x1b
[  389.338080][T14961]  should_fail_ex+0x265/0x280
[  389.338105][T14961]  should_fail+0xb/0x20
[  389.338126][T14961]  should_fail_usercopy+0x1a/0x20
[  389.338182][T14961]  _copy_from_user+0x1c/0xb0
[  389.338222][T14961]  io_sqe_files_register+0x1e5/0x4f0
[  389.338262][T14961]  __se_sys_io_uring_register+0xb01/0xeb0
[  389.338332][T14961]  ? fput+0x8f/0xc0
[  389.338408][T14961]  ? ksys_write+0x192/0x1a0
[  389.338436][T14961]  __x64_sys_io_uring_register+0x55/0x70
[  389.338466][T14961]  x64_sys_call+0x18a3/0x2ff0
[  389.338491][T14961]  do_syscall_64+0xd2/0x200
[  389.338525][T14961]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  389.338607][T14961]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  389.338639][T14961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.338661][T14961] RIP: 0033:0x7fac1b64ec29
[  389.338677][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.338764][T14961] RSP: 002b:00007fac1a0af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  389.338784][T14961] RAX: ffffffffffffffda RBX: 00007fac1b895fa0 RCX: 00007fac1b64ec29
[  389.338797][T14961] RDX: 00002000000001c0 RSI: 0000000000000002 RDI: 0000000000000004
[  389.338810][T14961] RBP: 00007fac1a0af090 R08: 0000000000000000 R09: 0000000000000000
[  389.338822][T14961] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  389.338834][T14961] R13: 00007fac1b896038 R14: 00007fac1b895fa0 R15: 00007ffd370181d8
[  389.338854][T14961]  </TASK>
[  389.339983][T14967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'.
[  389.434835][T14979] smc: net device bond0 applied user defined pnetid SYZ0
[  389.554130][T14986] smc: net device bond0 erased user defined pnetid SYZ0
[  389.658081][T15000] loop7: detected capacity change from 0 to 1024
[  389.663703][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'.
[  389.668554][T15002] smc: net device bond0 applied user defined pnetid SYZ0
[  389.682483][T15000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.682632][T15002] smc: net device bond0 erased user defined pnetid SYZ0
[  389.752654][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.791978][T15015] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.919998][T15024] lo speed is unknown, defaulting to 1000
[  390.060651][T15035] smc: net device bond0 applied user defined pnetid SYZ0
[  390.072427][T15035] smc: net device bond0 erased user defined pnetid SYZ0
[  390.123715][T15041] __nla_validate_parse: 1 callbacks suppressed
[  390.123775][T15041] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3708'.
[  390.189119][T15046] loop9: detected capacity change from 0 to 1024
[  390.208155][T15049] loop8: detected capacity change from 0 to 512
[  390.220952][T15046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.224195][T15049] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  390.259368][T14717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.296133][T15049] EXT4-fs (loop8): 1 truncate cleaned up
[  390.302482][T15049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.346673][T15058] loop7: detected capacity change from 0 to 512
[  390.452881][T15058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.551059][T15065] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.625011][T15067] lo speed is unknown, defaulting to 1000
[  390.761870][T15065] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.806301][T15072] smc: net device bond0 applied user defined pnetid SYZ0
[  390.828547][T15056] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  390.860428][T15065] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.888139][T15074] smc: net device bond0 erased user defined pnetid SYZ0
[  390.891140][T15058] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3715: bg 0: block 328: padding at end of block bitmap is not set
[  390.925115][   T29] kauditd_printk_skb: 1436 callbacks suppressed
[  390.925130][   T29] audit: type=1326 audit(390.892:90924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  390.953977][   T29] audit: type=1326 audit(390.892:90925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  390.982912][T15065] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.012233][   T29] audit: type=1326 audit(390.982:90926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.035377][   T29] audit: type=1326 audit(390.982:90927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.058435][   T29] audit: type=1326 audit(390.982:90928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.081673][   T29] audit: type=1326 audit(390.982:90929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.104866][   T29] audit: type=1326 audit(390.982:90930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.128040][   T29] audit: type=1326 audit(390.982:90931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.151226][   T29] audit: type=1326 audit(390.982:90932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.174397][   T29] audit: type=1326 audit(390.982:90933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  391.224423][T15080] pimreg: entered allmulticast mode
[  391.231367][T15080] pimreg: left allmulticast mode
[  391.232970][T12014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.301024][ T5143] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.327040][ T5143] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.336206][ T5143] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.344403][ T5143] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.368749][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.422319][T15097] loop8: detected capacity change from 0 to 512
[  391.480112][T15097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.523797][T15097] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3727: bg 0: block 328: padding at end of block bitmap is not set
[  391.638238][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.313790][T15157] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  392.330119][T15157] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3752'.
[  392.403272][T15159] loop9: detected capacity change from 0 to 512
[  392.447261][T15159] EXT4-fs (loop9): too many log groups per flexible block group
[  392.455020][T15159] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  392.485872][T15159] EXT4-fs (loop9): mount failed
[  392.509785][T15159] loop9: detected capacity change from 0 to 164
[  392.517607][T15159] ISOFS: unable to read i-node block
[  392.522964][T15159] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  392.946962][T15203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  392.973412][T15205] loop9: detected capacity change from 0 to 512
[  393.002350][T15207] loop8: detected capacity change from 0 to 1024
[  393.020165][T15205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.034456][T15205] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3773: bg 0: block 328: padding at end of block bitmap is not set
[  393.052745][T15207] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.087817][T14717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.118027][T15216] random: crng reseeded on system resumption
[  393.128052][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.433716][T15238] loop8: detected capacity change from 0 to 764
[  393.461307][T15238] rock: directory entry would overflow storage
[  393.468475][T15238] rock: sig=0x4f50, size=4, remaining=3
[  393.474120][T15238] iso9660: Corrupted directory entry in block 6 of inode 1792
[  393.487579][T15238] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  393.545682][T15238] Symlink component flag not implemented
[  393.555290][T15238] Symlink component flag not implemented (129)
[  393.575748][T15238] rock: directory entry would overflow storage
[  393.581973][T15238] rock: sig=0x4f50, size=4, remaining=3
[  393.588359][T15238] iso9660: Corrupted directory entry in block 6 of inode 1792
[  393.690360][T15259] loop8: detected capacity change from 0 to 512
[  393.719403][T15259] EXT4-fs (loop8): too many log groups per flexible block group
[  393.727251][T15259] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  393.758913][T15259] EXT4-fs (loop8): mount failed
[  393.792378][T15259] loop8: detected capacity change from 0 to 164
[  393.810854][T15259] ISOFS: unable to read i-node block
[  393.811748][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'.
[  393.816337][T15259] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  393.917642][T15265] SELinux:  Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped).
[  394.142986][T15299] random: crng reseeded on system resumption
[  394.172937][T15297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  394.229017][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3815'.
[  394.472983][T15333] loop9: detected capacity change from 0 to 1024
[  394.500932][T15333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.560387][T15343] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3831'.
[  394.582463][T14717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.606549][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.617227][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.995793][T15362] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  395.102923][T15351] loop9: detected capacity change from 0 to 512
[  395.111378][T15351] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  395.122677][T15351] EXT4-fs (loop9): 1 truncate cleaned up
[  395.145950][T15351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.341920][T15384] smc: net device bond0 applied user defined pnetid SYZ0
[  395.368070][T15384] smc: net device bond0 erased user defined pnetid SYZ0
[  395.404301][T15388] loop9: detected capacity change from 0 to 1024
[  395.558965][T15418] smc: net device bond0 applied user defined pnetid SYZ0
[  395.567797][T15418] smc: net device bond0 erased user defined pnetid SYZ0
[  395.579025][T15421] random: crng reseeded on system resumption
[  395.598066][T15414] loop9: detected capacity change from 0 to 764
[  395.607473][T15424] serio: Serial port ptm0
[  395.616528][T15414] rock: directory entry would overflow storage
[  395.622749][T15414] rock: sig=0x4f50, size=4, remaining=3
[  395.628430][T15414] iso9660: Corrupted directory entry in block 6 of inode 1792
[  395.649411][T15414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  395.684831][T15414] Symlink component flag not implemented
[  395.703265][T15414] Symlink component flag not implemented (129)
[  395.724123][T15414] rock: directory entry would overflow storage
[  395.730375][T15414] rock: sig=0x4f50, size=4, remaining=3
[  395.735987][T15414] iso9660: Corrupted directory entry in block 6 of inode 1792
[  395.848990][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3871'.
[  395.907648][T15451] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  396.098623][T15456] loop8: detected capacity change from 0 to 512
[  396.132361][T15456] EXT4-fs (loop8): too many log groups per flexible block group
[  396.140262][T15456] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  396.174903][T15456] EXT4-fs (loop8): mount failed
[  396.207635][T15456] loop8: detected capacity change from 0 to 164
[  396.230022][T15456] ISOFS: unable to read i-node block
[  396.236224][T15456] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  396.296394][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3884'.
[  396.465785][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3888'.
[  396.525213][T15488] loop9: detected capacity change from 0 to 512
[  396.589104][T15488] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  396.590434][T15490] random: crng reseeded on system resumption
[  396.605112][T15488] EXT4-fs (loop9): orphan cleanup on readonly fs
[  396.637139][T15488] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3888: corrupted inode contents
[  396.694028][T15488] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.3888: mark_inode_dirty error
[  396.752738][T15488] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3888: corrupted inode contents
[  396.790602][T15488] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3888: mark_inode_dirty error
[  396.797658][T15499] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  396.816432][T15488] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3888: corrupted inode contents
[  396.854483][T15488] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  396.876653][T15488] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3888: corrupted inode contents
[  396.910742][T15488] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.3888: mark_inode_dirty error
[  396.931253][T15488] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  396.961732][T15488] EXT4-fs (loop9): 1 truncate cleaned up
[  396.967793][ T5096] __quota_error: 275 callbacks suppressed
[  396.967812][ T5096] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  396.983603][ T5096] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 1
[  397.076810][T15514] smc: net device bond0 applied user defined pnetid SYZ0
[  397.084179][T15514] smc: net device bond0 erased user defined pnetid SYZ0
[  397.226575][T15534] loop8: detected capacity change from 0 to 512
[  397.274313][   T29] audit: type=1326 audit(397.242:91209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.297430][   T29] audit: type=1326 audit(397.242:91210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.327881][T15534] EXT4-fs (loop8): too many log groups per flexible block group
[  397.336758][T15534] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  397.344846][T15534] EXT4-fs (loop8): mount failed
[  397.349880][   T29] audit: type=1326 audit(397.242:91211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.372850][   T29] audit: type=1326 audit(397.242:91212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.387437][T15546] smc: net device bond0 applied user defined pnetid SYZ0
[  397.396024][   T29] audit: type=1326 audit(397.242:91213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.396062][   T29] audit: type=1326 audit(397.242:91214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.396095][   T29] audit: type=1326 audit(397.242:91215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.396145][   T29] audit: type=1326 audit(397.242:91216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.396179][   T29] audit: type=1326 audit(397.242:91217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.3.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  397.524174][T15547] smc: net device bond0 erased user defined pnetid SYZ0
[  397.533550][T15534] loop8: detected capacity change from 0 to 164
[  397.543391][T15534] ISOFS: unable to read i-node block
[  397.549464][T15534] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  397.638335][T15560] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  397.652160][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3921'.
[  397.811280][T15583] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  397.830107][T15585] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  397.839272][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3934'.
[  397.941084][T15598] smc: net device bond0 applied user defined pnetid SYZ0
[  397.957774][T15598] smc: net device bond0 erased user defined pnetid SYZ0
[  398.046614][T15605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  398.110836][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3947'.
[  398.263210][T15640] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3958'.
[  398.604363][T15665] random: crng reseeded on system resumption
[  399.033129][T15697] random: crng reseeded on system resumption
[  399.473392][T14717] EXT4-fs unmount: 4 callbacks suppressed
[  399.473409][T14717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.709787][T15738] loop8: detected capacity change from 0 to 512
[  399.727764][T15738] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  399.735970][T15738] EXT4-fs (loop8): orphan cleanup on readonly fs
[  399.743857][T15738] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4003: corrupted inode contents
[  399.756128][T15738] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.4003: mark_inode_dirty error
[  399.769480][T15738] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4003: corrupted inode contents
[  399.781749][T15738] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.4003: mark_inode_dirty error
[  399.799102][T15738] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4003: corrupted inode contents
[  399.811999][T15738] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[  399.821626][T15738] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4003: corrupted inode contents
[  399.834719][T15738] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.4003: mark_inode_dirty error
[  399.846451][T15738] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[  399.857879][T15738] EXT4-fs (loop8): 1 truncate cleaned up
[  399.866458][ T5116] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 1
[  399.879010][T15738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  399.913004][T15749] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  400.093038][T15770] serio: Serial port ptm0
[  400.496715][T15778] loop9: detected capacity change from 0 to 764
[  400.506253][T15778] rock: directory entry would overflow storage
[  400.512480][T15778] rock: sig=0x4f50, size=4, remaining=3
[  400.518857][T15778] iso9660: Corrupted directory entry in block 6 of inode 1792
[  400.528092][T15778] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  400.538785][T15778] Symlink component flag not implemented
[  400.544481][T15778] Symlink component flag not implemented (129)
[  400.552831][T15778] rock: directory entry would overflow storage
[  400.559065][T15778] rock: sig=0x4f50, size=4, remaining=3
[  400.564867][T15778] iso9660: Corrupted directory entry in block 6 of inode 1792
[  400.628192][T15789] loop9: detected capacity change from 0 to 512
[  400.646212][T15789] EXT4-fs (loop9): too many log groups per flexible block group
[  400.653971][T15789] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  400.662047][T15789] EXT4-fs (loop9): mount failed
[  400.746993][T10252] IPVS: starting estimator thread 0...
[  400.803809][T15818] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  400.845168][T15810] IPVS: using max 2352 ests per chain, 117600 per kthread
[  401.147442][T15844] lo speed is unknown, defaulting to 1000
[  401.276770][T15858] serio: Serial port ptm0
[  401.326604][T15864] loop9: detected capacity change from 0 to 512
[  401.343680][T15864] EXT4-fs (loop9): too many log groups per flexible block group
[  401.351705][T15864] EXT4-fs (loop9): failed to initialize mballoc (-12)
[  401.376282][T15864] EXT4-fs (loop9): mount failed
[  401.418102][T15864] loop9: detected capacity change from 0 to 164
[  401.429225][T15864] ISOFS: unable to read i-node block
[  401.434574][T15864] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  401.448747][T15872] FAULT_INJECTION: forcing a failure.
[  401.448747][T15872] name failslab, interval 1, probability 0, space 0, times 0
[  401.461545][T15872] CPU: 0 UID: 0 PID: 15872 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  401.461646][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  401.461663][T15872] Call Trace:
[  401.461671][T15872]  <TASK>
[  401.461681][T15872]  __dump_stack+0x1d/0x30
[  401.461707][T15872]  dump_stack_lvl+0xe8/0x140
[  401.461732][T15872]  dump_stack+0x15/0x1b
[  401.461753][T15872]  should_fail_ex+0x265/0x280
[  401.461835][T15872]  should_failslab+0x8c/0xb0
[  401.461867][T15872]  __kmalloc_noprof+0xa5/0x3e0
[  401.461902][T15872]  ? shmem_initxattrs+0x1c2/0x350
[  401.461955][T15872]  shmem_initxattrs+0x1c2/0x350
[  401.462021][T15872]  security_inode_init_security+0x25c/0x330
[  401.462056][T15872]  ? __pfx_shmem_initxattrs+0x10/0x10
[  401.462096][T15872]  shmem_mknod+0xad/0x180
[  401.462173][T15872]  shmem_create+0x34/0x50
[  401.462204][T15872]  ? __pfx_shmem_create+0x10/0x10
[  401.462244][T15872]  path_openat+0x1102/0x2170
[  401.462283][T15872]  do_filp_open+0x109/0x230
[  401.462319][T15872]  do_sys_openat2+0xa6/0x110
[  401.462405][T15872]  __x64_sys_openat+0xf2/0x120
[  401.462505][T15872]  x64_sys_call+0x2e9c/0x2ff0
[  401.462534][T15872]  do_syscall_64+0xd2/0x200
[  401.462574][T15872]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  401.462672][T15872]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  401.462712][T15872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.462739][T15872] RIP: 0033:0x7f88697eec29
[  401.462759][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.462801][T15872] RSP: 002b:00007f886824f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  401.462824][T15872] RAX: ffffffffffffffda RBX: 00007f8869a35fa0 RCX: 00007f88697eec29
[  401.462837][T15872] RDX: 000000000000275a RSI: 0000200000000180 RDI: ffffffffffffff9c
[  401.462849][T15872] RBP: 00007f886824f090 R08: 0000000000000000 R09: 0000000000000000
[  401.462878][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  401.462890][T15872] R13: 00007f8869a36038 R14: 00007f8869a35fa0 R15: 00007ffdd617c2b8
[  401.462912][T15872]  </TASK>
[  401.711174][T15884] serio: Serial port ptm2
[  401.847747][T15900] __nla_validate_parse: 3 callbacks suppressed
[  401.847766][T15900] netlink: 165 bytes leftover after parsing attributes in process `syz.7.4067'.
[  401.870341][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.880423][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.037643][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4070'.
[  402.097303][T15911] FAULT_INJECTION: forcing a failure.
[  402.097303][T15911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.110604][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.3.4072 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  402.110636][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  402.110649][T15911] Call Trace:
[  402.110655][T15911]  <TASK>
[  402.110662][T15911]  __dump_stack+0x1d/0x30
[  402.110684][T15911]  dump_stack_lvl+0xe8/0x140
[  402.110710][T15911]  dump_stack+0x15/0x1b
[  402.110784][T15911]  should_fail_ex+0x265/0x280
[  402.110808][T15911]  should_fail+0xb/0x20
[  402.110826][T15911]  should_fail_usercopy+0x1a/0x20
[  402.110856][T15911]  _copy_from_user+0x1c/0xb0
[  402.110884][T15911]  __sys_bpf+0x178/0x7b0
[  402.110916][T15911]  __x64_sys_bpf+0x41/0x50
[  402.110976][T15911]  x64_sys_call+0x2aea/0x2ff0
[  402.110995][T15911]  do_syscall_64+0xd2/0x200
[  402.111023][T15911]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  402.111054][T15911]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  402.111084][T15911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.111104][T15911] RIP: 0033:0x7f2ec28cec29
[  402.111135][T15911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.111151][T15911] RSP: 002b:00007f2ec132f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  402.111167][T15911] RAX: ffffffffffffffda RBX: 00007f2ec2b15fa0 RCX: 00007f2ec28cec29
[  402.111179][T15911] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a
[  402.111189][T15911] RBP: 00007f2ec132f090 R08: 0000000000000000 R09: 0000000000000000
[  402.111200][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.111211][T15911] R13: 00007f2ec2b16038 R14: 00007f2ec2b15fa0 R15: 00007fff6de56d38
[  402.111277][T15911]  </TASK>
[  402.301782][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4073'.
[  402.535152][   T29] kauditd_printk_skb: 355 callbacks suppressed
[  402.535172][   T29] audit: type=1326 audit(402.513:91572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.567540][   T29] audit: type=1326 audit(402.513:91573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.590848][   T29] audit: type=1326 audit(402.513:91574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.613863][   T29] audit: type=1326 audit(402.513:91575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.619501][T15925] SELinux: failed to load policy
[  402.636951][   T29] audit: type=1326 audit(402.513:91576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.636990][   T29] audit: type=1326 audit(402.513:91577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.688260][   T29] audit: type=1326 audit(402.520:91578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.711269][   T29] audit: type=1326 audit(402.520:91579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.734337][   T29] audit: type=1326 audit(402.520:91580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.757526][   T29] audit: type=1326 audit(402.520:91581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.3.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec28cec29 code=0x7ffc0000
[  402.812569][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.838162][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4080'.
[  402.902087][T15939] loop9: detected capacity change from 0 to 764
[  402.927355][T15939] Symlink component flag not implemented
[  402.960470][T15939] Symlink component flag not implemented (129)
[  402.972245][T15953] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4089'.
[  402.988927][T15939] rock: directory entry would overflow storage
[  402.995247][T15939] rock: sig=0x4f50, size=4, remaining=3
[  403.000838][T15939] iso9660: Corrupted directory entry in block 6 of inode 1792
[  403.003265][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.018696][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.036107][T15955] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4090'.
[  403.060776][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4092'.
[  403.076404][T15961] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4093'.
[  403.105710][T15959] loop9: detected capacity change from 0 to 512
[  403.146614][T15959] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  403.164782][T15959] EXT4-fs (loop9): orphan cleanup on readonly fs
[  403.205852][T15959] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.4092: corrupted inode contents
[  403.261271][T15959] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.4092: mark_inode_dirty error
[  403.293508][T15959] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.4092: corrupted inode contents
[  403.313203][T15959] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4092: mark_inode_dirty error
[  403.334826][T15959] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.4092: corrupted inode contents
[  403.347546][T15959] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  403.357448][T15959] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.4092: corrupted inode contents
[  403.370852][T15959] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.4092: mark_inode_dirty error
[  403.383827][T15959] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  403.394767][T15959] EXT4-fs (loop9): 1 truncate cleaned up
[  403.401443][ T5105] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1
[  403.436011][T15959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  403.498641][T15987] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  403.517755][T15965] SELinux: failed to load policy
[  403.627069][T16005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4107'.
[  404.121215][T16048] FAULT_INJECTION: forcing a failure.
[  404.121215][T16048] name failslab, interval 1, probability 0, space 0, times 0
[  404.134002][T16048] CPU: 0 UID: 0 PID: 16048 Comm: syz.3.4127 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  404.134038][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  404.134053][T16048] Call Trace:
[  404.134062][T16048]  <TASK>
[  404.134072][T16048]  __dump_stack+0x1d/0x30
[  404.134097][T16048]  dump_stack_lvl+0xe8/0x140
[  404.134122][T16048]  dump_stack+0x15/0x1b
[  404.134143][T16048]  should_fail_ex+0x265/0x280
[  404.134173][T16048]  should_failslab+0x8c/0xb0
[  404.134198][T16048]  kmem_cache_alloc_noprof+0x50/0x310
[  404.134228][T16048]  ? __mpol_dup+0x42/0x1b0
[  404.134268][T16048]  __mpol_dup+0x42/0x1b0
[  404.134307][T16048]  __se_sys_set_mempolicy_home_node+0x283/0x530
[  404.134343][T16048]  __x64_sys_set_mempolicy_home_node+0x55/0x70
[  404.134397][T16048]  x64_sys_call+0x2261/0x2ff0
[  404.134424][T16048]  do_syscall_64+0xd2/0x200
[  404.134464][T16048]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  404.134495][T16048]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  404.134555][T16048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.134577][T16048] RIP: 0033:0x7f2ec28cec29
[  404.134593][T16048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.134613][T16048] RSP: 002b:00007f2ec132f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2
[  404.134635][T16048] RAX: ffffffffffffffda RBX: 00007f2ec2b15fa0 RCX: 00007f2ec28cec29
[  404.134647][T16048] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000146000
[  404.134659][T16048] RBP: 00007f2ec132f090 R08: 0000000000000000 R09: 0000000000000000
[  404.134670][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.134682][T16048] R13: 00007f2ec2b16038 R14: 00007f2ec2b15fa0 R15: 00007fff6de56d38
[  404.134705][T16048]  </TASK>
[  405.083889][T16106] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.139401][T16106] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.199600][T16106] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.247490][T16106] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.309727][   T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.331413][   T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.344634][   T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.354969][T16122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.363414][   T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.372220][T16122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.110783][T14717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.812964][T16228] loop8: detected capacity change from 0 to 1024
[  406.819854][T16228] EXT4-fs: Ignoring removed orlov option
[  406.834415][T16228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.020922][T16252] __nla_validate_parse: 9 callbacks suppressed
[  407.020940][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4206'.
[  407.106147][T16262] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  407.373324][T16292] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  407.435659][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.481369][T16298] loop8: detected capacity change from 0 to 512
[  407.495472][T16298] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  407.508117][T16298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  407.526947][T16298] System zones: 1-12
[  407.531655][T16298] EXT4-fs (loop8): 1 truncate cleaned up
[  407.538610][T16298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.767409][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  407.767427][   T29] audit: type=1326 audit(407.616:91959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.796740][   T29] audit: type=1326 audit(407.616:91960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.819857][   T29] audit: type=1326 audit(407.616:91961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.843376][   T29] audit: type=1326 audit(407.626:91962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.866445][   T29] audit: type=1326 audit(407.626:91963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.889496][   T29] audit: type=1326 audit(407.626:91964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.912695][   T29] audit: type=1326 audit(407.626:91965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.935688][   T29] audit: type=1326 audit(407.626:91966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.958689][   T29] audit: type=1326 audit(407.626:91967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  407.959394][T16319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4236'.
[  407.981524][   T29] audit: type=1326 audit(407.626:91968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733921ec29 code=0x7ffc0000
[  408.036292][T10614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.093355][T16335] 9pnet_fd: Insufficient options for proto=fd
[  408.426938][T16358] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4251'.
[  408.828088][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4262'.
[  408.990604][T16413] loop8: detected capacity change from 0 to 512
[  409.006996][T16413] EXT4-fs (loop8): too many log groups per flexible block group
[  409.015474][T16413] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  409.060975][T16421] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4275'.
[  409.071083][T16413] EXT4-fs (loop8): mount failed
[  409.117429][T16413] loop8: detected capacity change from 0 to 164
[  409.125434][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4276'.
[  409.136264][T16413] ISOFS: unable to read i-node block
[  409.141601][T16413] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  409.188253][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4277'.
[  409.318753][T16444] FAULT_INJECTION: forcing a failure.
[  409.318753][T16444] name failslab, interval 1, probability 0, space 0, times 0
[  409.331510][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.2.4277 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  409.331547][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  409.331564][T16444] Call Trace:
[  409.331653][T16444]  <TASK>
[  409.331663][T16444]  __dump_stack+0x1d/0x30
[  409.331687][T16444]  dump_stack_lvl+0xe8/0x140
[  409.331712][T16444]  dump_stack+0x15/0x1b
[  409.331755][T16444]  should_fail_ex+0x265/0x280
[  409.331831][T16444]  should_failslab+0x8c/0xb0
[  409.331865][T16444]  __kvmalloc_node_noprof+0x123/0x4e0
[  409.331904][T16444]  ? alloc_fdtable+0xbd/0x1d0
[  409.331982][T16444]  ? __kmalloc_cache_noprof+0x22e/0x320
[  409.332022][T16444]  alloc_fdtable+0xbd/0x1d0
[  409.332059][T16444]  dup_fd+0x4c7/0x540
[  409.332129][T16444]  copy_files+0x98/0xf0
[  409.332165][T16444]  copy_process+0xc5b/0x2000
[  409.332206][T16444]  kernel_clone+0x16c/0x5c0
[  409.332273][T16444]  __se_sys_clone3+0x1c2/0x200
[  409.332324][T16444]  __x64_sys_clone3+0x31/0x40
[  409.332361][T16444]  x64_sys_call+0x1fc9/0x2ff0
[  409.332441][T16444]  do_syscall_64+0xd2/0x200
[  409.332483][T16444]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  409.332556][T16444]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  409.332597][T16444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.332621][T16444] RIP: 0033:0x7f733921ec29
[  409.332639][T16444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.332710][T16444] RSP: 002b:00007f7337c5df08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  409.332756][T16444] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f733921ec29
[  409.332774][T16444] RDX: 00007f7337c5df20 RSI: 0000000000000058 RDI: 00007f7337c5df20
[  409.332833][T16444] RBP: 00007f7337c5e090 R08: 0000000000000000 R09: 0000000000000058
[  409.332867][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.332883][T16444] R13: 00007f7339466128 R14: 00007f7339466090 R15: 00007fff58cde4b8
[  409.332907][T16444]  </TASK>
[  409.641634][T16452] serio: Serial port ptm0
[  409.664790][T16454] loop8: detected capacity change from 0 to 512
[  409.676800][T16454] EXT4-fs (loop8): too many log groups per flexible block group
[  409.684575][T16454] EXT4-fs (loop8): failed to initialize mballoc (-12)
[  409.691616][T16454] EXT4-fs (loop8): mount failed
[  409.720412][T16454] loop8: detected capacity change from 0 to 164
[  409.727732][T16454] ISOFS: unable to read i-node block
[  409.733144][T16454] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  409.857284][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4293'.
[  409.931750][T16491] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3758. macoff=82
[  410.801577][T16623] smc: net device bond0 applied user defined pnetid SYZ0
[  411.127124][T16680] serio: Serial port ptm0
[  411.711364][T16718] Invalid ELF header magic: != ELF
[  411.840620][T16730] siw: device registration error -23
[  411.925896][T16751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.935015][T16751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.093030][T16785] __nla_validate_parse: 8 callbacks suppressed
[  412.093115][T16785] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4390'.
[  412.232525][T16798] serio: Serial port ptm0
[  412.605511][T16836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4411'.
[  412.915520][T16862] usb usb8: usbfs: process 16862 (syz.8.4416) did not claim interface 0 before use
[  413.159747][T16871] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4421'.
[  413.219410][   T29] kauditd_printk_skb: 463 callbacks suppressed
[  413.219430][   T29] audit: type=1400 audit(412.857:92432): avc:  denied  { bind } for  pid=16850 comm="syz.8.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  413.244692][   T29] audit: type=1400 audit(412.867:92433): avc:  denied  { write } for  pid=16850 comm="syz.8.4416" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  413.267264][   T29] audit: type=1400 audit(413.137:92434): avc:  denied  { write } for  pid=16870 comm="syz.3.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  413.298949][T16877] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4424'.
[  413.306794][T16871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.318447][T16871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.342493][   T29] audit: type=1326 audit(413.267:92435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365561][   T29] audit: type=1326 audit(413.267:92436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365601][   T29] audit: type=1326 audit(413.267:92437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365635][   T29] audit: type=1326 audit(413.267:92438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365673][   T29] audit: type=1326 audit(413.267:92439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365698][   T29] audit: type=1326 audit(413.267:92440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.365836][   T29] audit: type=1326 audit(413.277:92441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16875 comm="syz.7.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88697eec29 code=0x7ffc0000
[  413.629294][T16896] serio: Serial port ptm0
[  413.746307][T16904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4434'.
[  413.880215][T16916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4438'.
[  414.278931][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4446'.
[  414.615681][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4460'.
[  414.659077][T16989] FAULT_INJECTION: forcing a failure.
[  414.659077][T16989] name failslab, interval 1, probability 0, space 0, times 0
[  414.671847][T16989] CPU: 0 UID: 0 PID: 16989 Comm: syz.3.4466 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  414.671958][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  414.671976][T16989] Call Trace:
[  414.671983][T16989]  <TASK>
[  414.671993][T16989]  __dump_stack+0x1d/0x30
[  414.672036][T16989]  dump_stack_lvl+0xe8/0x140
[  414.672061][T16989]  dump_stack+0x15/0x1b
[  414.672083][T16989]  should_fail_ex+0x265/0x280
[  414.672183][T16989]  should_failslab+0x8c/0xb0
[  414.672215][T16989]  kmem_cache_alloc_noprof+0x50/0x310
[  414.672295][T16989]  ? alloc_empty_file+0x76/0x200
[  414.672353][T16989]  alloc_empty_file+0x76/0x200
[  414.672415][T16989]  alloc_file_pseudo+0xc6/0x160
[  414.672519][T16989]  sock_alloc_file+0x9c/0x1e0
[  414.672569][T16989]  do_accept+0x1e4/0x3a0
[  414.672605][T16989]  __sys_accept4+0xbf/0x140
[  414.672633][T16989]  __x64_sys_accept4+0x51/0x60
[  414.672696][T16989]  x64_sys_call+0x2ed3/0x2ff0
[  414.672749][T16989]  do_syscall_64+0xd2/0x200
[  414.672836][T16989]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  414.672868][T16989]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  414.672907][T16989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.672983][T16989] RIP: 0033:0x7f2ec28cec29
[  414.673002][T16989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.673090][T16989] RSP: 002b:00007f2ec132f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  414.673232][T16989] RAX: ffffffffffffffda RBX: 00007f2ec2b15fa0 RCX: 00007f2ec28cec29
[  414.673248][T16989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  414.673263][T16989] RBP: 00007f2ec132f090 R08: 0000000000000000 R09: 0000000000000000
[  414.673279][T16989] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[  414.673294][T16989] R13: 00007f2ec2b16038 R14: 00007f2ec2b15fa0 R15: 00007fff6de56d38
[  414.673321][T16989]  </TASK>
[  414.888205][T16994] serio: Serial port ptm1
[  414.896496][T16997] serio: Serial port ptm2
[  414.927178][T17009] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  415.647896][T17044] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4486'.
[  415.858492][T17068] serio: Serial port ptm0
[  416.152913][T17086] serio: Serial port ptm1
[  417.259889][T17126] serio: Serial port ptm0
[  417.283305][T17129] serio: Serial port ptm1
[  417.648229][T17142] serio: Serial port ptm2
[  417.672157][T17114] syz.8.4511 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  417.686476][T17114] CPU: 0 UID: 0 PID: 17114 Comm: syz.8.4511 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  417.686567][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  417.686585][T17114] Call Trace:
[  417.686594][T17114]  <TASK>
[  417.686654][T17114]  __dump_stack+0x1d/0x30
[  417.686734][T17114]  dump_stack_lvl+0xe8/0x140
[  417.686760][T17114]  dump_stack+0x15/0x1b
[  417.686825][T17114]  dump_header+0x81/0x220
[  417.686884][T17114]  oom_kill_process+0x342/0x400
[  417.686929][T17114]  out_of_memory+0x979/0xb80
[  417.686974][T17114]  try_charge_memcg+0x5e6/0x9e0
[  417.687007][T17114]  obj_cgroup_charge_pages+0xa6/0x150
[  417.687050][T17114]  __memcg_kmem_charge_page+0x9f/0x170
[  417.687209][T17114]  __alloc_frozen_pages_noprof+0x188/0x360
[  417.687258][T17114]  alloc_pages_mpol+0xb3/0x250
[  417.687305][T17114]  alloc_pages_noprof+0x90/0x130
[  417.687353][T17114]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  417.687412][T17114]  __kvmalloc_node_noprof+0x30f/0x4e0
[  417.687509][T17114]  ? ip_set_alloc+0x1f/0x30
[  417.687533][T17114]  ? ip_set_alloc+0x1f/0x30
[  417.687558][T17114]  ? __kmalloc_cache_noprof+0x189/0x320
[  417.687600][T17114]  ip_set_alloc+0x1f/0x30
[  417.687620][T17114]  hash_netiface_create+0x282/0x740
[  417.687732][T17114]  ? __pfx_hash_netiface_create+0x10/0x10
[  417.687763][T17114]  ip_set_create+0x3c9/0x960
[  417.687807][T17114]  ? __nla_parse+0x40/0x60
[  417.687914][T17114]  nfnetlink_rcv_msg+0x4c3/0x590
[  417.688025][T17114]  netlink_rcv_skb+0x123/0x220
[  417.688056][T17114]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  417.688089][T17114]  nfnetlink_rcv+0x16b/0x1690
[  417.688112][T17114]  ? nlmon_xmit+0x4f/0x60
[  417.688208][T17114]  ? consume_skb+0x49/0x150
[  417.688229][T17114]  ? nlmon_xmit+0x4f/0x60
[  417.688331][T17114]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  417.688359][T17114]  ? __dev_queue_xmit+0x1200/0x2000
[  417.688382][T17114]  ? __dev_queue_xmit+0x182/0x2000
[  417.688408][T17114]  ? ref_tracker_free+0x37d/0x3e0
[  417.688449][T17114]  ? __netlink_deliver_tap+0x4dc/0x500
[  417.688536][T17114]  netlink_unicast+0x5bd/0x690
[  417.688559][T17114]  netlink_sendmsg+0x58b/0x6b0
[  417.688587][T17114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.688689][T17114]  __sock_sendmsg+0x142/0x180
[  417.688719][T17114]  ____sys_sendmsg+0x31e/0x4e0
[  417.688817][T17114]  ___sys_sendmsg+0x17b/0x1d0
[  417.688855][T17114]  __x64_sys_sendmsg+0xd4/0x160
[  417.688958][T17114]  x64_sys_call+0x191e/0x2ff0
[  417.688977][T17114]  do_syscall_64+0xd2/0x200
[  417.689006][T17114]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  417.689081][T17114]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  417.689109][T17114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.689128][T17114] RIP: 0033:0x7f56ba44ec29
[  417.689142][T17114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.689170][T17114] RSP: 002b:00007f56b8eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.689187][T17114] RAX: ffffffffffffffda RBX: 00007f56ba695fa0 RCX: 00007f56ba44ec29
[  417.689198][T17114] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  417.689277][T17114] RBP: 00007f56ba4d1e41 R08: 0000000000000000 R09: 0000000000000000
[  417.689288][T17114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.689300][T17114] R13: 00007f56ba696038 R14: 00007f56ba695fa0 R15: 00007ffe35e46708
[  417.689389][T17114]  </TASK>
[  417.689396][T17114] memory: usage 307200kB, limit 307200kB, failcnt 331
[  418.027309][T17114] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0
[  418.035364][T17114] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0
[  418.042822][T17114] Memory cgroup stats for /syz8:
[  418.043050][T17114] cache 0
[  418.051833][T17114] rss 4096
[  418.054892][T17114] shmem 0
[  418.057881][T17114] mapped_file 0
[  418.061387][T17114] dirty 0
[  418.064427][T17114] writeback 0
[  418.067762][T17114] workingset_refault_anon 253
[  418.072455][T17114] workingset_refault_file 0
[  418.077627][T17114] swap 155648
[  418.080921][T17114] swapcached 32768
[  418.084679][T17114] pgpgin 144926
[  418.088142][T17114] pgpgout 144912
[  418.091723][T17114] pgfault 190594
[  418.095341][T17114] pgmajfault 136
[  418.098935][T17114] inactive_anon 12288
[  418.103024][T17114] active_anon 20480
[  418.107691][T17114] inactive_file 0
[  418.111604][T17114] active_file 24576
[  418.115639][T17114] unevictable 0
[  418.119528][T17114] hierarchical_memory_limit 314572800
[  418.125041][T17114] hierarchical_memsw_limit 9223372036854771712
[  418.131312][T17114] total_cache 0
[  418.135482][T17114] total_rss 4096
[  418.139124][T17114] total_shmem 0
[  418.142906][T17114] total_mapped_file 0
[  418.146974][T17114] total_dirty 0
[  418.150456][T17114] total_writeback 0
[  418.154469][T17114] total_workingset_refault_anon 253
[  418.159715][T17114] total_workingset_refault_file 0
[  418.165376][T17114] total_swap 155648
[  418.169198][T17114] total_swapcached 32768
[  418.173453][T17114] total_pgpgin 144926
[  418.177457][T17114] total_pgpgout 144912
[  418.181524][T17114] total_pgfault 190594
[  418.185621][T17114] total_pgmajfault 136
[  418.189727][T17114] total_inactive_anon 12288
[  418.194826][T17114] total_active_anon 20480
[  418.199156][T17114] total_inactive_file 0
[  418.203392][T17114] total_active_file 24576
[  418.207865][T17114] total_unevictable 0
[  418.211843][T17114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4511,pid=17113,uid=0
[  418.227553][T17114] Memory cgroup out of memory: Killed process 17113 (syz.8.4511) total-vm:93760kB, anon-rss:1200kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  418.296969][T17156] __nla_validate_parse: 3 callbacks suppressed
[  418.296990][T17156] netlink: 32 bytes leftover after parsing attributes in process `gtp'.
[  418.336940][   T29] kauditd_printk_skb: 349 callbacks suppressed
[  418.337016][   T29] audit: type=1326 audit(418.317:92791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.384618][   T29] audit: type=1326 audit(418.317:92792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.409004][   T29] audit: type=1400 audit(418.317:92793): avc:  denied  { write } for  pid=17158 comm="syz.7.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  418.428743][   T29] audit: type=1400 audit(418.317:92794): avc:  denied  { connect } for  pid=17158 comm="syz.7.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  418.448730][   T29] audit: type=1400 audit(418.317:92795): avc:  denied  { name_connect } for  pid=17158 comm="syz.7.4528" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  418.470825][   T29] audit: type=1326 audit(418.347:92796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.494956][   T29] audit: type=1326 audit(418.347:92797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.518146][   T29] audit: type=1326 audit(418.347:92798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.541937][   T29] audit: type=1326 audit(418.347:92799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.565986][   T29] audit: type=1326 audit(418.347:92800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.9.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b64ec29 code=0x7ffc0000
[  418.715596][T17186] netlink: 32 bytes leftover after parsing attributes in process `gtp'.
[  418.952358][T17207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4546'.
[  419.049978][T17225] netlink: 32 bytes leftover after parsing attributes in process `gtp'.
[  419.185605][T17241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4559'.
[  419.333681][T17257] netlink: 165 bytes leftover after parsing attributes in process `syz.9.4565'.
[  419.366237][T17257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.387034][T17257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.466374][T17269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17269 comm=syz.7.4569
[  419.643069][T17201] syz.8.4544 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  419.654218][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.8.4544 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  419.654253][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  419.654270][T17201] Call Trace:
[  419.654357][T17201]  <TASK>
[  419.654368][T17201]  __dump_stack+0x1d/0x30
[  419.654397][T17201]  dump_stack_lvl+0xe8/0x140
[  419.654423][T17201]  dump_stack+0x15/0x1b
[  419.654445][T17201]  dump_header+0x81/0x220
[  419.654493][T17201]  oom_kill_process+0x342/0x400
[  419.654527][T17201]  out_of_memory+0x979/0xb80
[  419.654573][T17201]  try_charge_memcg+0x5e6/0x9e0
[  419.654619][T17201]  charge_memcg+0x51/0xc0
[  419.654644][T17201]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  419.654740][T17201]  __read_swap_cache_async+0x1df/0x350
[  419.654776][T17201]  swap_cluster_readahead+0x277/0x3e0
[  419.654840][T17201]  swapin_readahead+0xde/0x6f0
[  419.654873][T17201]  ? __filemap_get_folio+0x4f7/0x6b0
[  419.654899][T17201]  ? swap_cache_get_folio+0x77/0x200
[  419.654972][T17201]  do_swap_page+0x301/0x2430
[  419.654997][T17201]  ? css_rstat_updated+0xb7/0x240
[  419.655028][T17201]  ? __pfx_default_wake_function+0x10/0x10
[  419.655139][T17201]  handle_mm_fault+0x9a5/0x2c20
[  419.655183][T17201]  do_user_addr_fault+0x636/0x1090
[  419.655271][T17201]  ? fpregs_restore_userregs+0xe2/0x1d0
[  419.655326][T17201]  ? switch_fpu_return+0xe/0x20
[  419.655379][T17201]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  419.655418][T17201]  exc_page_fault+0x62/0xa0
[  419.655457][T17201]  asm_exc_page_fault+0x26/0x30
[  419.655483][T17201] RIP: 0033:0x7f56ba32565c
[  419.655502][T17201] Code: 66 0f 1f 44 00 00 69 3d 56 00 ea 00 e8 03 00 00 48 8d 1d 57 09 37 00 e8 32 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  419.655526][T17201] RSP: 002b:00007ffe35e46870 EFLAGS: 00010202
[  419.655545][T17201] RAX: 0000000000000000 RBX: 00007f56ba695fa0 RCX: 0000000000000000
[  419.655562][T17201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555763a7808
[  419.655577][T17201] RBP: 00007f56ba697da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  419.655595][T17201] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000006674b
[  419.655607][T17201] R13: 00007ffe35e46960 R14: ffffffffffffffff R15: 00007ffe35e46980
[  419.655625][T17201]  </TASK>
[  419.655632][T17201] memory: usage 307200kB, limit 307200kB, failcnt 516
[  419.882609][T17201] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  419.882631][T17201] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  419.882647][T17201] Memory cgroup stats for 
[  419.893571][T17294] serio: Serial port ptm0
[  419.897890][T17201] /syz8:
[  419.898226][T17201] cache 0
[  419.912542][T17201] rss 0
[  419.915340][T17201] shmem 0
[  419.918274][T17201] mapped_file 0
[  419.921727][T17201] dirty 0
[  419.924702][T17201] writeback 4096
[  419.928283][T17201] workingset_refault_anon 266
[  419.932959][T17201] workingset_refault_file 0
[  419.937497][T17201] swap 184320
[  419.940783][T17201] swapcached 4096
[  419.944488][T17201] pgpgin 145082
[  419.948043][T17201] pgpgout 145075
[  419.951615][T17201] pgfault 190985
[  419.955229][T17201] pgmajfault 143
[  419.958803][T17201] inactive_anon 4096
[  419.962722][T17201] active_anon 0
[  419.966200][T17201] inactive_file 24576
[  419.970284][T17201] active_file 0
[  419.973821][T17201] unevictable 0
[  419.977327][T17201] hierarchical_memory_limit 314572800
[  419.982796][T17201] hierarchical_memsw_limit 9223372036854771712
[  419.988970][T17201] total_cache 0
[  419.992432][T17201] total_rss 0
[  419.995752][T17201] total_shmem 0
[  419.999375][T17201] total_mapped_file 0
[  420.003460][T17201] total_dirty 0
[  420.006948][T17201] total_writeback 4096
[  420.011019][T17201] total_workingset_refault_anon 266
[  420.016261][T17201] total_workingset_refault_file 0
[  420.021396][T17201] total_swap 184320
[  420.025283][T17201] total_swapcached 4096
[  420.029462][T17201] total_pgpgin 145082
[  420.033538][T17201] total_pgpgout 145075
[  420.037661][T17201] total_pgfault 190985
[  420.041835][T17201] total_pgmajfault 143
[  420.046004][T17201] total_inactive_anon 4096
[  420.050439][T17201] total_active_anon 0
[  420.054507][T17201] total_inactive_file 24576
[  420.059105][T17201] total_active_file 0
[  420.063192][T17201] total_unevictable 0
[  420.067268][T17201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4544,pid=17201,uid=0
[  420.082731][T17201] Memory cgroup out of memory: Killed process 17201 (syz.8.4544) total-vm:93760kB, anon-rss:1196kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  420.264120][T17312] serio: Serial port ptm1
[  420.759074][T17351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4596'.
[  420.840644][T17356] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4598'.
[  421.272470][T17345] syz.8.4594 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  421.283635][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.8.4594 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  421.283676][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  421.283690][T17345] Call Trace:
[  421.283697][T17345]  <TASK>
[  421.283705][T17345]  __dump_stack+0x1d/0x30
[  421.283728][T17345]  dump_stack_lvl+0xe8/0x140
[  421.283749][T17345]  dump_stack+0x15/0x1b
[  421.283845][T17345]  dump_header+0x81/0x220
[  421.283888][T17345]  oom_kill_process+0x342/0x400
[  421.283995][T17345]  out_of_memory+0x979/0xb80
[  421.284032][T17345]  try_charge_memcg+0x5e6/0x9e0
[  421.284093][T17345]  charge_memcg+0x51/0xc0
[  421.284113][T17345]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  421.284137][T17345]  __read_swap_cache_async+0x1df/0x350
[  421.284232][T17345]  swap_cluster_readahead+0x277/0x3e0
[  421.284346][T17345]  swapin_readahead+0xde/0x6f0
[  421.284381][T17345]  ? __filemap_get_folio+0x4f7/0x6b0
[  421.284430][T17345]  ? __rcu_read_unlock+0x34/0x70
[  421.284454][T17345]  ? swap_cache_get_folio+0x77/0x200
[  421.284557][T17345]  do_swap_page+0x301/0x2430
[  421.284641][T17345]  ? css_rstat_updated+0xb7/0x240
[  421.284673][T17345]  ? __pfx_default_wake_function+0x10/0x10
[  421.284801][T17345]  handle_mm_fault+0x9a5/0x2c20
[  421.284849][T17345]  do_user_addr_fault+0x636/0x1090
[  421.284938][T17345]  exc_page_fault+0x62/0xa0
[  421.285037][T17345]  asm_exc_page_fault+0x26/0x30
[  421.285058][T17345] RIP: 0033:0x7f56ba32565c
[  421.285074][T17345] Code: 66 0f 1f 44 00 00 69 3d 56 00 ea 00 e8 03 00 00 48 8d 1d 57 09 37 00 e8 32 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  421.285093][T17345] RSP: 002b:00007ffe35e46870 EFLAGS: 00010287
[  421.285154][T17345] RAX: 0000000000000000 RBX: 00007f56ba696090 RCX: 0000000000000000
[  421.285168][T17345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555763a7808
[  421.285180][T17345] RBP: 00007f56ba697da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  421.285294][T17345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000066dec
[  421.285307][T17345] R13: 00007ffe35e46960 R14: ffffffffffffffff R15: 00007ffe35e46980
[  421.285327][T17345]  </TASK>
[  421.492950][T17345] memory: usage 307200kB, limit 307200kB, failcnt 733
[  421.499801][T17345] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  421.507853][T17345] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  421.515217][T17345] Memory cgroup stats for /syz8:
[  421.534861][T17345] cache 0
[  421.542933][T17345] rss 0
[  421.545801][T17345] shmem 0
[  421.548757][T17345] mapped_file 0
[  421.552237][T17345] dirty 0
[  421.555243][T17345] writeback 0
[  421.558574][T17345] workingset_refault_anon 290
[  421.563297][T17345] workingset_refault_file 0
[  421.568769][T17345] swap 188416
[  421.572217][T17345] swapcached 0
[  421.575693][T17345] pgpgin 145506
[  421.579165][T17345] pgpgout 145500
[  421.582789][T17345] pgfault 191846
[  421.586469][T17345] pgmajfault 153
[  421.590068][T17345] inactive_anon 0
[  421.593747][T17345] active_anon 0
[  421.598017][T17345] inactive_file 24576
[  421.602122][T17345] active_file 0
[  421.605634][T17345] unevictable 0
[  421.609156][T17345] hierarchical_memory_limit 314572800
[  421.614570][T17345] hierarchical_memsw_limit 9223372036854771712
[  421.620745][T17345] total_cache 0
[  421.624935][T17345] total_rss 0
[  421.628262][T17345] total_shmem 0
[  421.631768][T17345] total_mapped_file 0
[  421.635989][T17345] total_dirty 0
[  421.639463][T17345] total_writeback 0
[  421.643282][T17345] total_workingset_refault_anon 290
[  421.648624][T17345] total_workingset_refault_file 0
[  421.653702][T17345] total_swap 188416
[  421.658284][T17345] total_swapcached 0
[  421.662272][T17345] total_pgpgin 145506
[  421.666326][T17345] total_pgpgout 145500
[  421.670409][T17345] total_pgfault 191846
[  421.674600][T17345] total_pgmajfault 153
[  421.678769][T17345] total_inactive_anon 0
[  421.682972][T17345] total_active_anon 0
[  421.687669][T17345] total_inactive_file 24576
[  421.692186][T17345] total_active_file 0
[  421.696212][T17345] total_unevictable 0
[  421.700203][T17345] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4594,pid=17345,uid=0
[  421.716073][T17345] Memory cgroup out of memory: Killed process 17345 (syz.8.4594) total-vm:93760kB, anon-rss:1196kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  421.833247][T17386] netlink: 20 bytes leftover after parsing attributes in process `gtp'.
[  421.898552][T17396] serio: Serial port ptm0
[  421.969713][T17392] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4609'.
[  422.270973][T17421] SELinux:  policydb version 4373 does not match my version range 15-35
[  422.281678][T17421] SELinux: failed to load policy
[  422.563921][T17431] ==================================================================
[  422.572058][T17431] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  422.581918][T17431] 
[  422.584258][T17431] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1:
[  422.592341][T17431]  tick_do_update_jiffies64+0x113/0x1c0
[  422.597913][T17431]  tick_nohz_handler+0x7f/0x2d0
[  422.602794][T17431]  __hrtimer_run_queues+0x20f/0x5a0
[  422.608027][T17431]  hrtimer_interrupt+0x21a/0x460
[  422.612987][T17431]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  422.618910][T17431]  sysvec_apic_timer_interrupt+0x6f/0x80
[  422.624571][T17431]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  422.630572][T17431]  kcsan_setup_watchpoint+0x415/0x430
[  422.635999][T17431]  __get_user_pages+0x503/0x1fa0
[  422.640958][T17431]  __mm_populate+0x243/0x3a0
[  422.645615][T17431]  vm_mmap_pgoff+0x232/0x2e0
[  422.650233][T17431]  ksys_mmap_pgoff+0xc2/0x310
[  422.654918][T17431]  x64_sys_call+0x14a3/0x2ff0
[  422.659635][T17431]  do_syscall_64+0xd2/0x200
[  422.664161][T17431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.670070][T17431] 
[  422.672426][T17431] read to 0xffffffff868099c0 of 8 bytes by task 17431 on cpu 0:
[  422.680149][T17431]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  422.686412][T17431]  count_shadow_nodes+0x6a/0x230
[  422.691370][T17431]  do_shrink_slab+0x60/0x680
[  422.696505][T17431]  shrink_slab+0x448/0x760
[  422.700942][T17431]  shrink_node+0x6c3/0x2120
[  422.705464][T17431]  do_try_to_free_pages+0x3f6/0xcd0
[  422.710715][T17431]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  422.716739][T17431]  try_charge_memcg+0x358/0x9e0
[  422.721602][T17431]  obj_cgroup_charge_pages+0xa6/0x150
[  422.727004][T17431]  __memcg_kmem_charge_page+0x9f/0x170
[  422.732486][T17431]  __alloc_frozen_pages_noprof+0x188/0x360
[  422.738315][T17431]  alloc_pages_mpol+0xb3/0x250
[  422.743112][T17431]  alloc_pages_noprof+0x90/0x130
[  422.748069][T17431]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  422.754003][T17431]  __kvmalloc_node_noprof+0x30f/0x4e0
[  422.759397][T17431]  ip_set_alloc+0x1f/0x30
[  422.763743][T17431]  hash_netiface_create+0x282/0x740
[  422.768985][T17431]  ip_set_create+0x3c9/0x960
[  422.773595][T17431]  nfnetlink_rcv_msg+0x4c3/0x590
[  422.778544][T17431]  netlink_rcv_skb+0x123/0x220
[  422.783320][T17431]  nfnetlink_rcv+0x16b/0x1690
[  422.788006][T17431]  netlink_unicast+0x5bd/0x690
[  422.792784][T17431]  netlink_sendmsg+0x58b/0x6b0
[  422.797566][T17431]  __sock_sendmsg+0x142/0x180
[  422.802267][T17431]  ____sys_sendmsg+0x31e/0x4e0
[  422.807046][T17431]  ___sys_sendmsg+0x17b/0x1d0
[  422.811736][T17431]  __x64_sys_sendmsg+0xd4/0x160
[  422.816600][T17431]  x64_sys_call+0x191e/0x2ff0
[  422.821293][T17431]  do_syscall_64+0xd2/0x200
[  422.825823][T17431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.831735][T17431] 
[  422.834062][T17431] value changed: 0x0000000100002f9f -> 0x0000000100002fa0
[  422.841173][T17431] 
[  422.843498][T17431] Reported by Kernel Concurrency Sanitizer on:
[  422.849649][T17431] CPU: 0 UID: 0 PID: 17431 Comm: syz.7.4623 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  422.859461][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  422.869523][T17431] ==================================================================