last executing test programs:

5m2.56894342s ago: executing program 32 (id=97):
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
unlink(&(0x7f0000000200)='./control\x00')
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200000, &(0x7f0000000300)={[{@minixdf}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2f}}, {@i_version}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
chmod(&(0x7f0000000180)='./file1\x00', 0x4)

5m0.453779306s ago: executing program 33 (id=122):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r1 = dup(r0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40086602, 0x0)

4m58.811310956s ago: executing program 34 (id=137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@grpjquota}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, 0x0)
setresuid(0xee01, 0x0, 0xffffffffffffffff)
keyctl$session_to_parent(0x12)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0)

4m51.443054405s ago: executing program 7 (id=200):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

4m51.394316686s ago: executing program 35 (id=200):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

4m45.761455885s ago: executing program 36 (id=272):
creat(&(0x7f0000000080)='./bus\x00', 0x160)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")

4m39.934348066s ago: executing program 37 (id=321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0xfe, {0x2, 0x1f, 0x16, 0x16, 0x0, 0x8000}})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
close(r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0x19}}, './file0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r7, &(0x7f0000000000)="fa", 0xfffffdef)
r8 = dup(r6)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r9, @fallback=0x26, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYBLOB="adffa88800000000"], 0x44}}, 0x0)

4m37.880720231s ago: executing program 38 (id=351):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000000)={[{@data_writeback}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@dax_never}, {@quota}, {@usrjquota}]}, 0xfe, 0x507, &(0x7f0000001780)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
close_range(r1, 0xffffffffffffffff, 0x0)

4m34.185343646s ago: executing program 39 (id=395):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]})
setregid(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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")
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
sendfile(r4, r5, 0x0, 0xe065)

4m27.773165894s ago: executing program 3 (id=452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)

4m27.714230405s ago: executing program 3 (id=453):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0xb10, 0x2}, 0x200, 0x2, 0xa, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x300)

4m27.641236946s ago: executing program 3 (id=454):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18)
ioperm(0x0, 0x8001, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0)

4m26.48718057s ago: executing program 3 (id=465):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, &(0x7f0000000240)={{}, {<r2=>0x0}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000026"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070286d2b39b0000f8ffffffb703000008000000b7040400000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0)
unshare(0x2040600)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x40247007, &(0x7f0000000180)={0x56, 0x6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fchmod(0xffffffffffffffff, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m26.253309083s ago: executing program 3 (id=467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) (fail_nth: 1)

4m26.237283643s ago: executing program 3 (id=468):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

4m26.174547904s ago: executing program 40 (id=468):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

4m22.430059609s ago: executing program 7 (id=469):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

4m22.39897493s ago: executing program 7 (id=495):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x80, &(0x7f0000000180)}, 0x44040084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x10)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa90abaaaabb8864a2598298777dbd0d01a05b4ac2041519e9e4f6befb3699950e55ffa709603dde2eb0ab5bd781796843563fbd98900ec52482635d24ee71b742357ce58cbafab975ad239088db00802ffb7057266e972952afe3cc3f35cf3cc8b04aa15279432c6f78526a58192f56c2aa3b080060ff7425e1990276d725238b290c5d935b84e71981eef9ae8dc60d0bb182efffe85785c1c4461459d9075dd22872593c8466f1ed9e5529a2ba99120e702755a9284c0e9d804cdcd5976e0be11612a9182baa36da9a7ad31c78923847e816a715b09ce045d6fb9a63e907dcd8da0a4e576831d4d86196"], 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a7a000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e65720000003800028008000240000000840800034000000007080004400000000f0800014000000000140005800c000124f110d96c6f616400040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = geteuid()
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f00000005c0))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000026a6", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r3, r1, 0x31, 0x8, 0x0, @void, @value=r1}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x401, 0x17, 0x6, 0xccc}, {0x7, 0x7f, 0xf, 0x7}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x18)
r9 = accept4$tipc(r8, &(0x7f0000000700)=@name, &(0x7f0000000740)=0x10, 0x0)
fcntl$setlease(r9, 0x400, 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000006c0)='./control\x00', 0x0, 0x2000, 0x0)

4m22.041438014s ago: executing program 0 (id=498):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18)
ioperm(0x0, 0x8001, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)

4m21.979935175s ago: executing program 7 (id=502):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, &(0x7f0000000240)={{}, {<r2=>0x0}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000026"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070286d2b39b0000f8ffffffb703000008000000b7040400000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0)
unshare(0x2040600)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x40247007, &(0x7f0000000180)={0x56, 0x6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fchmod(0xffffffffffffffff, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m21.866666816s ago: executing program 4 (id=505):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

4m21.727132368s ago: executing program 4 (id=507):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0)

4m21.658833749s ago: executing program 7 (id=508):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x20000400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x80000000, 0x1}, {0x1, 0xa8}]}, 0x14, 0x0)
ftruncate(r1, 0xc17a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = syz_open_dev$vcsu(&(0x7f0000000540), 0x2, 0x440800)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r4, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r5, 0x9, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r5, 0x20, &(0x7f00000003c0)={&(0x7f0000000500)=""/193, 0xc1, <r6=>0x0, &(0x7f00000007c0)=""/154, 0x9a}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x1, 0x7e, &(0x7f0000000700)=""/126, 0x41100, 0x4, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000780)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x4, 0x0, &(0x7f00000007c0)=[{0x4, 0x5, 0xe, 0x2}, {0x4, 0x3, 0x4, 0x6}, {0x4, 0x1, 0x9, 0x4}, {0x5, 0x3, 0xd, 0xa}], 0x10, 0x29e4, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x2, 0x18}, 0xc)
r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x28, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_query, @map_fd={0x18, 0x6}, @alu={0x7, 0x1, 0x7, 0x4, 0x2, 0xffffffffffffffe0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4224}, @alu={0x7, 0x0, 0x3, 0xa, 0x3, 0xfffffffffffffff8, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0xc, 0x1, &(0x7f0000000540)=""/1, 0x41000, 0x46, '\x00', 0x0, @fallback=0x27, r1, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x5, 0x3}, 0x10, r6, r0, 0x6, &(0x7f0000000780)=[r7, r8, 0x1, r10, r11, r12, r13], &(0x7f00000007c0)=[{0x4, 0x3, 0xd, 0x4}, {0x3, 0x3, 0xf, 0x5}, {0x0, 0x4, 0x8, 0x3}, {0x3, 0x1, 0xd}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x4, 0xa, 0x8}], 0x10, 0x40, @void, @value}, 0x94)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x5}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
syz_clone(0x2c302080, 0x0, 0x0, 0x0, 0x0, 0x0)

4m21.55705129s ago: executing program 4 (id=509):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xa, 0x0, &(0x7f0000000140)="c58218cb6f2979397912", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r2 = dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
fsetxattr$security_selinux(r4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x12)
mkdir(0x0, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
pivot_root(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000003c0)='./bus\x00')
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)

4m21.5564402s ago: executing program 4 (id=510):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, &(0x7f0000000240)={{}, {<r2=>0x0}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000026"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070286d2b39b0000f8ffffffb703000008000000b7040400000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0)
unshare(0x2040600)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fchmod(0xffffffffffffffff, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m21.470116601s ago: executing program 4 (id=512):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)

4m21.140986675s ago: executing program 0 (id=513):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
timerfd_create(0x0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)

4m20.224874086s ago: executing program 0 (id=520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x2, 0x1}, @datasec={0x10, 0x8, 0x0, 0xf, 0x3, [{0x1, 0x7, 0x1}, {0x5, 0x3}, {0x1, 0x3, 0x9}, {0x2, 0x5, 0x8}, {0x5, 0x4, 0x9c1a}, {0x1, 0x8, 0x8}, {0x4, 0x100, 0x6}, {0x2, 0x80000000, 0x4a}], "a6abfe"}]}, {0x0, [0x61, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/222, 0xab, 0xde, 0x0, 0x40, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, r1, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12)

4m20.095958728s ago: executing program 0 (id=522):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, &(0x7f0000000240)={{}, {<r2=>0x0}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000026"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070286d2b39b0000f8ffffffb703000008000000b7040400000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0)
unshare(0x2040600)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fchmod(0xffffffffffffffff, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m19.953187199s ago: executing program 0 (id=525):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1f, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x100000, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kvm_set_irq\x00', r3, 0x0, 0x1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18)
r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r4, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

4m19.805206862s ago: executing program 7 (id=527):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVgWO+AOQEIJKnDhxQeLGBQnlT0BIlcgdAQIhSOHAARg0s7Ops8wmtrIfqf37Se/uO+/szvO8G+/sOx+ZCeDUeiEi3oyIuYh4KSIWy/a0LHHQL/nrPrz73npe8ua3/5ZEUrZFFNV7zpVvm+8/Veru7V9ba7dbO+V0s7d9o9nd27+0tb222dpsXV9ZWX519bXVV1Yvj6Wfeb9e/9qffvT9n3399V9/8d3fX/nLxe/kSX+1nD/o1/gUn17cKR7r+WdxTy0idsYbbGbmyv7UZ50IAABHko9SPxURnyvG/4sxV4zmCsNDuvnpZwcAAACMQ/bGQvw7icgAAACAE+uNiFiIJG2U5wIsRJo2Gv1zeD8TT6TtTrf3haud3esb+byIpainV7farcvlObVLUU/y6eWi/tH0y0PTKxHxVET8cPFsMd1Y77Q3Zr3zAwAAAE6Jc0Pb//9c7G//AwAAACfM0qwTAAAAACZu1PZ/MuU8AAAAgMlx/B8AAABOtG+89VZessH9rzfe2du91nnn0kare62xvbveWO/s3GhsdjqbxTX7th+0rHpEtDudG1+K2L3Z7LW6vWZ3b//Kdmf3eu/KlvsHAgAAwKw89fztO0lEHHz5bFFyZ/KHuRFvcK4AnBjpcV78x8nlAUzfqJ/5IzgzzjyA6avNOgFgdg5mnQAwa/dd6qNiUHD45J379hn8ZnI5AQAA43Xhs7fvfLfi+H+tPJ8fOLmOdfwfOFEe4fg/8DHn+D+cXvVjjQBuTTATYFYedquPkRfvqDr+X3lmcJY9dFkAAMBELRTl+bRRHgtciDRtNCKeLP6rfz25utVuXY6IT0bE7xbrn8inl4t3Jm4PCAAAAAAAAAAAAAAAAAAAAAAAAABHlGVJZAAAAMCJFpH+OSnv/3Vh8fzC8P6BM8m/FqO8pde7P3n7xzfXer2d5bz97/fae++X7S/PYg8GAAAAnEa1B84dbKcPtuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJw+vPve+qBMM+5fvxIRS1XxazFfPM9HPSKe+EcStUPvSyJibgzxD25FxNNV8ZM8rVgqsxiOn0bE2enEfzbLssr458YQH06z2/n6582q718aLxTP1d//Wlke1X3rvzO/PDQnvbf+mxux/nvyiDGe+eAXzZHxb0U8U6te/wziJyPiv1i1wIoP5dvf2t//v8b+wiP7acSFyt+f5L5Yzd72jWZ3b//S1vbaZmuzdX1lZfnV1ddWX1m93Ly61W6Vj1Uh4gfP/uq/Q9H/k/UV/Y8R8Zce0v/zeaV+qDEbDlMG++Dm3U/3q/WhRRTxL75Y/ff39APi538Tny9/B/L5Fwb1g379sOd+/tvnKhMr42+M6P/D/v0vjlrokJe++b0/HPGlAMAUdPf2r621262diVfez7JsWrGOXon0qC8uhotT/cSmWxmM7iYWYv5x6emUK+cfjzSOUxnHni0AAOBx89Ggf9aZAAAAAAAAAAAAAAAAAAAAwOnV3Yt00pcTG455MJuuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA80P8CAAD//yOS2ac=")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff08ff08004700002c0000000000219078ac1e0101ac1414120194040100000000ffff000004019078040bc0f700de9560"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x200000000000000, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000002c0)=0xa, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)
dup(0xffffffffffffffff)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
fallocate(r3, 0xb311ada96e982088, 0x81, 0x0)

4m19.804953131s ago: executing program 41 (id=527):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff08ff08004700002c0000000000219078ac1e0101ac1414120194040100000000ffff000004019078040bc0f700de9560"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x200000000000000, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000002c0)=0xa, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)
dup(0xffffffffffffffff)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
fallocate(r3, 0xb311ada96e982088, 0x81, 0x0)

4m19.664402253s ago: executing program 0 (id=530):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff08ff08004700002c0000000000219078ac1e0101ac1414120194040100000000ffff000004019078040bc0f700de9560"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x200000000000000, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000002c0)=0xa, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)
dup(0xffffffffffffffff)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
fallocate(r3, 0xb311ada96e982088, 0x81, 0x0)

4m19.624522634s ago: executing program 42 (id=530):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVgWO+AOQEIJKnDhxQeLGBQnlT0BIlcgdAQIhSOHAARg0s7Ops8wmtrIfqf37Se/uO+/szvO8G+/sOx+ZCeDUeiEi3oyIuYh4KSIWy/a0LHHQL/nrPrz73npe8ua3/5ZEUrZFFNV7zpVvm+8/Veru7V9ba7dbO+V0s7d9o9nd27+0tb222dpsXV9ZWX519bXVV1Yvj6Wfeb9e/9qffvT9n3399V9/8d3fX/nLxe/kSX+1nD/o1/gUn17cKR7r+WdxTy0idsYbbGbmyv7UZ50IAABHko9SPxURnyvG/4sxV4zmCsNDuvnpZwcAAACMQ/bGQvw7icgAAACAE+uNiFiIJG2U5wIsRJo2Gv1zeD8TT6TtTrf3haud3esb+byIpainV7farcvlObVLUU/y6eWi/tH0y0PTKxHxVET8cPFsMd1Y77Q3Zr3zAwAAAE6Jc0Pb//9c7G//AwAAACfM0qwTAAAAACZu1PZ/MuU8AAAAgMlx/B8AAABOtG+89VZessH9rzfe2du91nnn0kare62xvbveWO/s3GhsdjqbxTX7th+0rHpEtDudG1+K2L3Z7LW6vWZ3b//Kdmf3eu/KlvsHAgAAwKw89fztO0lEHHz5bFFyZ/KHuRFvcK4AnBjpcV78x8nlAUzfqJ/5IzgzzjyA6avNOgFgdg5mnQAwa/dd6qNiUHD45J379hn8ZnI5AQAA43Xhs7fvfLfi+H+tPJ8fOLmOdfwfOFEe4fg/8DHn+D+cXvVjjQBuTTATYFYedquPkRfvqDr+X3lmcJY9dFkAAMBELRTl+bRRHgtciDRtNCKeLP6rfz25utVuXY6IT0bE7xbrn8inl4t3Jm4PCAAAAAAAAAAAAAAAAAAAAAAAAABHlGVJZAAAAMCJFpH+OSnv/3Vh8fzC8P6BM8m/FqO8pde7P3n7xzfXer2d5bz97/fae++X7S/PYg8GAAAAnEa1B84dbKcPtuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJw+vPve+qBMM+5fvxIRS1XxazFfPM9HPSKe+EcStUPvSyJibgzxD25FxNNV8ZM8rVgqsxiOn0bE2enEfzbLssr458YQH06z2/n6582q718aLxTP1d//Wlke1X3rvzO/PDQnvbf+mxux/nvyiDGe+eAXzZHxb0U8U6te/wziJyPiv1i1wIoP5dvf2t//v8b+wiP7acSFyt+f5L5Yzd72jWZ3b//S1vbaZmuzdX1lZfnV1ddWX1m93Ly61W6Vj1Uh4gfP/uq/Q9H/k/UV/Y8R8Zce0v/zeaV+qDEbDlMG++Dm3U/3q/WhRRTxL75Y/ff39APi538Tny9/B/L5Fwb1g379sOd+/tvnKhMr42+M6P/D/v0vjlrokJe++b0/HPGlAMAUdPf2r621262diVfez7JsWrGOXon0qC8uhotT/cSmWxmM7iYWYv5x6emUK+cfjzSOUxnHni0AAOBx89Ggf9aZAAAAAAAAAAAAAAAAAAAAwOnV3Yt00pcTG455MJuuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA80P8CAAD//yOS2ac=")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff08ff08004700002c0000000000219078ac1e0101ac1414120194040100000000ffff000004019078040bc0f700de9560"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x200000000000000, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000002c0)=0xa, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)
dup(0xffffffffffffffff)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
fallocate(r3, 0xb311ada96e982088, 0x81, 0x0)

4m17.796437566s ago: executing program 4 (id=541):
r0 = socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r3=>0x0}, &(0x7f0000000300)=0xc)
r4 = socket(0x21, 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x4040016}}], 0x1, 0x4044850)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2a, 0x12, 0x43, {0x7, @tcp_ip6_spec={@remote, @mcast1, 0x4e24, 0x4e22, 0x40}, {0x0, @broadcast, 0x401, 0x6, [0x8, 0x3ff]}, @tcp_ip4_spec={@broadcast, @multicast2, 0x4e23, 0x4e22, 0x7}, {0x0, @random="db92d4057181", 0x9, 0xa, [0x8001, 0x8000]}, 0x7, 0x7}, 0x9, [0xfffffff9, 0x9, 0x0, 0x5, 0xe51, 0x5, 0x1, 0x4, 0x0]}})
close_range(r5, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8)
setresuid(r3, r8, r9)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800c86c8980e6a010b1fffffffff90018116bec", @ANYBLOB="5b99c848558f3a1d6b02c08e9372fd9c7270de", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r11, &(0x7f0000000080)="97", 0x1, 0x80, &(0x7f0000000000)={0xa, 0x3, 0x7ffffffd, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c)
close(r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000800)={0x9, 0xfe49, 0x1, 'queue0\x00', 0x2})
r12 = socket$inet(0x2b, 0x801, 0x0)
splice(r12, 0x0, r2, 0x0, 0x39000, 0x9)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0)
r14 = open(&(0x7f0000000000)='./file0\x00', 0x403000, 0x107)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4b, r15})

4m17.776423166s ago: executing program 43 (id=541):
r0 = socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r3=>0x0}, &(0x7f0000000300)=0xc)
r4 = socket(0x21, 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x4040016}}], 0x1, 0x4044850)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2a, 0x12, 0x43, {0x7, @tcp_ip6_spec={@remote, @mcast1, 0x4e24, 0x4e22, 0x40}, {0x0, @broadcast, 0x401, 0x6, [0x8, 0x3ff]}, @tcp_ip4_spec={@broadcast, @multicast2, 0x4e23, 0x4e22, 0x7}, {0x0, @random="db92d4057181", 0x9, 0xa, [0x8001, 0x8000]}, 0x7, 0x7}, 0x9, [0xfffffff9, 0x9, 0x0, 0x5, 0xe51, 0x5, 0x1, 0x4, 0x0]}})
close_range(r5, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8)
setresuid(r3, r8, r9)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800c86c8980e6a010b1fffffffff90018116bec", @ANYBLOB="5b99c848558f3a1d6b02c08e9372fd9c7270de", @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r11, &(0x7f0000000080)="97", 0x1, 0x80, &(0x7f0000000000)={0xa, 0x3, 0x7ffffffd, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c)
close(r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000800)={0x9, 0xfe49, 0x1, 'queue0\x00', 0x2})
r12 = socket$inet(0x2b, 0x801, 0x0)
splice(r12, 0x0, r2, 0x0, 0x39000, 0x9)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0)
r14 = open(&(0x7f0000000000)='./file0\x00', 0x403000, 0x107)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4b, r15})

4m12.364804392s ago: executing program 6 (id=586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

4m12.150293025s ago: executing program 6 (id=589):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
fspick(0xffffffffffffffff, 0x0, 0x1)

4m12.062344586s ago: executing program 6 (id=590):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001f80)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x8}}}}}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

4m11.911209208s ago: executing program 6 (id=592):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

4m11.784149999s ago: executing program 6 (id=594):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4m11.382094534s ago: executing program 6 (id=599):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_io_uring_setup(0x2bcd, &(0x7f00000004c0)={0x0, 0x57cb, 0x0, 0x1, 0x144}, &(0x7f0000000400), &(0x7f0000000a00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
futex(0x0, 0x109, 0x2, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2)
listen(r1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x8000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x9}, @eol, @mss={0x2, 0x4, 0x9cc}, @sack={0x5, 0x16, [0x7ff, 0x0, 0x7, 0x0, 0x57a2]}]}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

4m11.314118865s ago: executing program 44 (id=599):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_io_uring_setup(0x2bcd, &(0x7f00000004c0)={0x0, 0x57cb, 0x0, 0x1, 0x144}, &(0x7f0000000400), &(0x7f0000000a00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
futex(0x0, 0x109, 0x2, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2)
listen(r1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x8000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x9}, @eol, @mss={0x2, 0x4, 0x9cc}, @sack={0x5, 0x16, [0x7ff, 0x0, 0x7, 0x0, 0x57a2]}]}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

2.021571336s ago: executing program 1 (id=5255):
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
truncate(&(0x7f0000000200)='./file0\x00', 0x1)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000003000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002da000004030000000000000000000000000000c7e3"], 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000640101020000000000000000000000000000000800cf14540000000a000008003d158e7f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000e00000020000000000000000000000003c0400000635000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)

1.64615338s ago: executing program 1 (id=5263):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000180)="b8", 0x20000, 0x2004c054, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = dup(r2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback, 0x7fffffff}}, 0x6, 0x401}, &(0x7f00000001c0)=0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10)
r10 = fcntl$dupfd(r1, 0x0, r1)
write$sndseq(r10, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x3}, {0x5}, @control={0x4, 0x4, 0x4}}, {0x3, 0x4, 0x0, 0x0, @time={0x200040, 0x74e4}, {}, {}, @ext={0x0, 0x0}}], 0x38)

1.416683123s ago: executing program 1 (id=5267):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
socketpair(0x1e, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmctl$IPC_RMID(0x0, 0x300)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2d, 'net'}, {0x2d, 'freezer'}, {0x2b, 'io'}]}, 0x12)
r4 = openat$cgroup_int(r3, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x1ff, 0x12)
mkdirat$cgroup(r3, &(0x7f00000001c0)='syz0\x00', 0x1ff)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='trans=fd,']}, &(0x7f0000000480)={[&(0x7f00000003c0)='{,.\xdd$\x00', &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='9p_protocol_dump\x00']}, 0x1000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_protocol_dump\x00', r8}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

1.233307396s ago: executing program 5 (id=5273):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)

1.200816666s ago: executing program 5 (id=5277):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = getuid()
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x21f}, @fd}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7fffffff, 0xf7, &(0x7f0000000600)=""/247, 0x41000, 0x61, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000540)=[{0x3, 0x8000003, 0xa, 0x4}, {0x5, 0x4, 0xd, 0x9}, {0x1, 0x5, 0xa, 0x7}, {0x4, 0x2, 0xc, 0x4}, {0x4, 0x5, 0x10, 0x1}, {0x0, 0x2, 0x3, 0x8}, {0x1, 0x5, 0x6, 0xa}, {0x4, 0x1, 0x10, 0x5}], 0x10, 0xa5, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x7, &(0x7f0000000900)=[{0x8, 0x7, 0x5b, 0x800}, {0x178, 0x5, 0x2, 0xffff4a9d}, {0xe, 0x6, 0xc, 0x5}, {0x1, 0x1, 0x6, 0x44c8}, {0x3, 0x4, 0x2, 0x9}, {0x6, 0x40, 0xe, 0x5a4e59a3}, {0x9, 0x4, 0xe, 0x7fffffff}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300)="8c85059fbb89ead882486bd2b9624a831ae21036445d6bc80e1f0ef96ef2b187b447c43126e165e6d41aabff6871343ce95e30d2ef7aad3455da099f79bd9d089e1b12dbdd2d53d0b14cac775a0d948942e6175918deed1564f41b09a0abdc0f65d20e9fcbd4382a245c926711063b3d679eef74be10065d46", 0x37db, r10}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r10}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000880)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = syz_open_procfs(0x0, &(0x7f0000000980)='net/fib_triestat\x00')
pread64(r11, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r12, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000", @ANYRES32=r3, @ANYRES64], 0xc8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000000)=0xe8)
setresuid(r3, 0xee00, r13)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r14, {0x3, 0x1}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xfffffffffffffca8}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x688ff5d5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004000}, 0x4000)

1.104769167s ago: executing program 9 (id=5279):
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x34, 0x0, 0x0, 0x0, "d06447c20935b73a317026081b51c21003f54066e4394999e93a8ded64b657318e9d53a23606f312722b6f6379b91d7aba5f57efc7b8dc70b1d0d7df02c6e745"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x201, 0x48f, 0x57c, 0xfd3]}) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
r1 = syz_open_pts(0xffffffffffffffff, 0x10000)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xa, &(0x7f0000000180)=@raw=[@generic={0x1, 0x8, 0x2, 0x8ef, 0xfffffffd}, @generic={0xf1, 0xc, 0x4, 0x40, 0x3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001280)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000012c0)=[{0x5, 0x4, 0x9, 0x9}, {0x2, 0x2, 0xf, 0x5}, {0x5, 0x1, 0x0, 0x1}, {0x0, 0x4, 0x2, 0xc}, {0x3, 0x5, 0x5, 0x5}, {0x2, 0x1, 0xb, 0x1}, {0x0, 0x1, 0xd, 0x6}, {0x0, 0x5, 0x9, 0x2}, {0x0, 0x2, 0xc, 0xc}], 0x10, 0x8000, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000140)='workqueue_queue_work\x00', r2, 0x0, 0x6}, 0x18) (async)
r4 = accept(r0, &(0x7f0000001480)=@vsock, &(0x7f0000001500)=0x80)
lseek(r4, 0x3ff, 0x4) (async)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000001540)={0x1, 0x3, 0x0, 0x5, 0x0, 0x5, 0x435b, 0xfe, 0x7ff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000015c0)=[@mss={0x2, 0x401}, @mss={0x2, 0xa}, @mss={0x2, 0x7f}, @timestamp], 0x4) (async)
setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000001600)=@fragment={0x73, 0x0, 0x0, 0x1, 0x0, 0x9, 0x66}, 0x8) (async)
setsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f0000001640)='\'', 0x1)
r5 = socket$rds(0x15, 0x5, 0x0) (async)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000001680)=0xc, 0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = syz_open_dev$rtc(&(0x7f00000016c0), 0x7, 0x212001)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001700)={"a58d11052e93426d17edbcdba3934a17", <r9=>0x0, 0x0, {0x31c, 0x1}, {0x99a1, 0x3}, 0x6, [0x2, 0x100000001, 0x2, 0x8, 0x3, 0xe668, 0x9, 0x2, 0x9, 0x5, 0x86ba, 0x1, 0x44, 0xffffffffffffffff, 0x1785, 0xffffffffffffc511]})
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001880)={{r4}, r9, 0x1a, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x3, 0x1c, {0x10, 0x8, 0x8, 0xfffffffffffffffa, 0x9}, [0x0]}}, @devid})
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000002880)={0x0, 0xb673}, 0x8) (async)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000002900)={0x7, &(0x7f00000028c0)=[{0x5, 0x830}, {0xb, 0x36}, {0x2, 0x4}, {0x6}, {0x1, 0x400}, {0x1ff, 0x2}, {0x6, 0x2}]})
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r10, 0x1, 0x2f, &(0x7f0000002940)=0x3, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002c00)={&(0x7f0000002980)="cfb7f7254878124a37908a5dd696c2e6e5e19d1a3979f31dcdfbbae5344c915849677732ac06a684e7632233b53e1cbeb9aa20cf6c630fcd89990c4a15027bdfac52ee0eed679260bfa04e32127fbfe889a439cb9397ab05f46cdc5bdedb536188c54da1eeefcbbaef6e24786c7b3aee55f2401635bfbb52e6cbcc68b80facb910ce2a3e801351c6efd7915aa50885f8bf84100fb5f307cf23ec804d006db1febc01f7aa2b76caf293a9b692993c3839020b12682300283714dabd5b6bb2974b3f53c21c12", &(0x7f0000002a80)=""/9, &(0x7f0000002ac0)="59c6bfb3a07d861a6ddad5882b3e144d9f452ac1c1d6f347640e4c431d85502657023a5c60765c63a1c5368792cc2c026913d280c1421449e157471e30c546c81e1e02be22613d41b2799d6ba704d254a9c220339966a9143574e2df6e1f4d46ee87ed77295896e89681e4e2897c839992f210f25315632cfc2161cf709a5730567635bdd9de7dffc9aa54bc4260b807ab74d7cfb59e78eefe40089de5d82b0cbfcc138d109764a85675d4ef4c844c8afec1499ad0711a940b7e9c3486fa98e969fd7ec76a072972915911ce20f695669fe6677c23", &(0x7f0000002bc0)="6adf67b3f0527ea32b3a4e152d20d4ba244d254e92d4", 0x0, r7, 0x4}, 0x38) (async)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/power/disk', 0x109800, 0x194)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000002c80)={0x8, 0x1, 0x0, 'queue0\x00', 0x1}) (async)
timer_create(0x0, &(0x7f0000002d40)={0x0, 0x1c, 0x1}, &(0x7f0000002d80))

1.104605317s ago: executing program 9 (id=5280):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8000000}]}}]}, 0x3c}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)

1.054080798s ago: executing program 9 (id=5282):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8000000}]}}]}, 0x3c}}, 0x0) (fail_nth: 1)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)

863.93649ms ago: executing program 5 (id=5283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000190b985a00000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

841.242131ms ago: executing program 2 (id=5284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d000000020000000400000002400000050000", @ANYRES32=r0], 0x48)

840.63574ms ago: executing program 8 (id=5285):
rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

840.127451ms ago: executing program 5 (id=5286):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async)
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0}) (async)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

806.656681ms ago: executing program 9 (id=5287):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)

806.443911ms ago: executing program 8 (id=5288):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r1)
socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

802.016071ms ago: executing program 9 (id=5289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff')

745.277401ms ago: executing program 9 (id=5290):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={<r4=>0x0, 0x4}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e20, @local}}, 0x9, 0x4}, &(0x7f0000000140)=0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8000000}]}}]}, 0x3c}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0xfffffffffffffed5)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38)
sendto$inet6(r6, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x11000)
write$binfmt_aout(r6, 0x0, 0xfdef)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x40, r5, 0x5a51}, 0xc)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)

745.133691ms ago: executing program 2 (id=5291):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x64, 0x3) (fail_nth: 3)

544.847394ms ago: executing program 2 (id=5292):
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x440000)

490.844935ms ago: executing program 8 (id=5293):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={<r1=>0x0, 0x8}, &(0x7f0000000040)=0x8) (async)
timer_create(0x1, &(0x7f0000000080)={0x0, 0xe, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0x1, &(0x7f0000000140)="e2a6d2a01c976c145559d8e6374e947c75fd012629372d035fc3c0f9c7b081f63c122e5e6adaa7f371118b1b80717b25cc0b447b88d2187e96c006d5bdfdba368db2eb22cae52da419d03486a7345e47bcba01a527b2dd1da7cd924733da9a5611715211e3f9519faaf87599902407c6acd5640b0bd9249195b733793531bd10", &(0x7f00000001c0)=""/113}, 0x20)
r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x32102, 0x90)
r4 = openat(r3, &(0x7f00000002c0)='./file0\x00', 0x90000, 0x80)
r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffffff, 0x438480)
copy_file_range(r5, &(0x7f0000000340)=0xfbd, r0, 0x0, 0x10, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3ff, 0x6fa6e84, 0x9, 0x80, r5, 0x0, '\x00', r6, r5, 0x0, 0x3, 0x3, 0x5, @void, @value, @void, @value}, 0x50)
r8 = memfd_secret(0x0)
connect$unix(r8, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async)
close_range(r4, r7, 0x0) (async)
timer_create(0x3, &(0x7f00000004c0)={0x0, 0x3b, 0x2}, &(0x7f0000000500)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000540)={<r10=>0x0, <r11=>0x0})
timer_settime(r9, 0x0, &(0x7f0000000580)={{r10, r11+60000000}, {0x77359400}}, &(0x7f00000005c0)) (async)
connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
r12 = memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xb, &(0x7f0000000640)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9a}}, @call={0x85, 0x0, 0x0, 0xd4}], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x63, '\x00', r6, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x3, &(0x7f0000001740)=[r7, r4, r12], &(0x7f0000001780)=[{0x4, 0x3, 0x10, 0x3}, {0x5, 0x5, 0x9, 0x2}, {0x3, 0x3, 0x5}], 0x10, 0x1, @void, @value}, 0x94)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), r4)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r13, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffc00}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
connect$pppoe(r5, &(0x7f00000019c0)={0x18, 0x0, {0x0, @multicast, 'dummy0\x00'}}, 0x1e) (async)
timer_create(0x6, &(0x7f0000001ac0)={0x0, 0xa, 0x0, @thr={&(0x7f0000001a00)="652b2e6bd41bbbedc6c60f2b871a23d8a3d68cbf6e7f94178c", &(0x7f0000001a40)="46d8ba110146ace2360d96ac507bd1da25d85656283d1df5d8d4b286c07276251c537ba0973fefb2bfd918f94b373df59d7591bbb85320da6e473eca1c766a62b6ba08d59583e59de097f43edad07b4e16c72f830886ee67c2da6f2aba81232558404a5f51"}}, &(0x7f0000001b00)=<r14=>0x0)
timer_gettime(r14, &(0x7f0000001b40))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={r5, 0x20, &(0x7f0000001e40)={&(0x7f0000001d40)=""/147, 0x93, <r15=>0x0, &(0x7f0000001e00)=""/30, 0x1e}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0xc, 0x1e, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x0, 0x1, 0x8, 0xa, 0x2, 0x4}, @generic={0x2, 0x8, 0x1, 0xb7f, 0x9}, @call={0x85, 0x0, 0x0, 0x9b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c80)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0x7, 0x1000, 0x4fa}, 0x10, r15, 0xffffffffffffffff, 0x1, &(0x7f0000001ec0)=[r8, r12, r8, r5], &(0x7f0000001f00)=[{0x0, 0x5, 0xe}], 0x10, 0x9, @void, @value}, 0x94) (async)
sendmsg$inet(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002000)="a2025d78d7a86feded5c0f1f9b49bf2b3288a3da3beec7219e60f56383c7c6e158795cbb", 0x24}, {&(0x7f0000002040)="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", 0xfe}, {&(0x7f0000002140)="c2d02b7f17c828ca635eba0b7283e602dc71765c5cb65b5932fb2a7531e6ecf7945b61819d77ca10adeb214f2526a0bb0730084234193793bf0b66130faf072245f83108a37f2a5a322f8c7c8ce384a0e55951e34891675b760cf713ab866892d6d562b6cc9191b0cd3b95fc80be6bee89ee34474b8f593020eae5b3fd27fc329ea3c8a131cc052e800723cd5a60cc86c4d38e114cb8466ed0a8beb6d1731c84c3e4ecf9e5b4d66df1c2f19764ea1f5a226840b34aa6223de08ae79621c61ffa3bd2d9525d44db50dd8d00879dc84449543c081e1e1a8481d83945", 0xdb}], 0x3, &(0x7f0000002280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}, 0x40000) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000002380)={r1, 0x40, 0x20}, 0xc)

482.567705ms ago: executing program 1 (id=5294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000a000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f10000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x3}, {0x1, 0x1}}], 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, 0x0, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0x2}, {0x1}}}, 0x24}}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, 0x0, &(0x7f0000000040)}, 0x20)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$tipc(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
r13 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020)

420.987176ms ago: executing program 8 (id=5295):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000e0000002000000001202000000000000840000800600008213cd000700000000"], 0x30, 0x88c0}, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200002200000000000000"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55)
write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
r14 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r15=>0x0})
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r15, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)

323.527607ms ago: executing program 1 (id=5296):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

302.397287ms ago: executing program 8 (id=5297):
inotify_init1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3)
socket$kcm(0xa, 0x3, 0x87)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x3514e082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x6, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xc, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
close_range(r0, 0xffffffffffffffff, 0x0)

252.728527ms ago: executing program 8 (id=5298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x98e4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10)
mq_open(0x0, 0x42, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf4f3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20)
close(r9)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

152.197019ms ago: executing program 5 (id=5299):
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc020000000000000000000000000000fe8000000000000000000000000000aa6700"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

151.635119ms ago: executing program 2 (id=5300):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)

100.277179ms ago: executing program 5 (id=5301):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xfffffffffffffca8}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x688ff5d5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004000}, 0x4000) (fail_nth: 3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

99.864859ms ago: executing program 2 (id=5302):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x80000001, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)

29.29529ms ago: executing program 1 (id=5303):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r1)
socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

0s ago: executing program 2 (id=5304):
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
truncate(&(0x7f0000000200)='./file0\x00', 0x1)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000003000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002da000004030000000000000000000000000000c7e3"], 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000640101020000000000000000000000000000000800cf14540000000a000008003d158e7f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000e00000020000000000000000000000003c0400000635000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)

0s ago: executing program 9 (id=5306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid() (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7040000080000008500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r8 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_pidfd_open(r0, 0x0) (async)
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)

kernel console output (not intermixed with test programs):

k.
[  308.291692][T20682] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.324508][T20705] FAULT_INJECTION: forcing a failure.
[  308.324508][T20705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.337706][T20705] CPU: 1 UID: 0 PID: 20705 Comm: syz.5.4618 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  308.337806][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  308.337821][T20705] Call Trace:
[  308.337829][T20705]  <TASK>
[  308.337839][T20705]  __dump_stack+0x1d/0x30
[  308.337864][T20705]  dump_stack_lvl+0xe8/0x140
[  308.337888][T20705]  dump_stack+0x15/0x1b
[  308.337937][T20705]  should_fail_ex+0x265/0x280
[  308.338104][T20705]  should_fail+0xb/0x20
[  308.338175][T20705]  should_fail_usercopy+0x1a/0x20
[  308.338193][T20705]  strncpy_from_user+0x25/0x230
[  308.338238][T20705]  ? kmem_cache_alloc_noprof+0x186/0x310
[  308.338279][T20705]  ? getname_flags+0x80/0x3b0
[  308.338316][T20705]  getname_flags+0xae/0x3b0
[  308.338405][T20705]  user_path_at+0x28/0x130
[  308.338429][T20705]  __se_sys_fspick+0xaa/0x240
[  308.338457][T20705]  __x64_sys_fspick+0x43/0x50
[  308.338518][T20705]  x64_sys_call+0x21bd/0x2fb0
[  308.338544][T20705]  do_syscall_64+0xd0/0x1a0
[  308.338568][T20705]  ? clear_bhb_loop+0x25/0x80
[  308.338588][T20705]  ? clear_bhb_loop+0x25/0x80
[  308.338638][T20705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.338658][T20705] RIP: 0033:0x7f05c558e969
[  308.338733][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.338751][T20705] RSP: 002b:00007f05c3bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  308.338771][T20705] RAX: ffffffffffffffda RBX: 00007f05c57b5fa0 RCX: 00007f05c558e969
[  308.338787][T20705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  308.338811][T20705] RBP: 00007f05c3bf7090 R08: 0000000000000000 R09: 0000000000000000
[  308.338826][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.338841][T20705] R13: 0000000000000000 R14: 00007f05c57b5fa0 R15: 00007fffcba74228
[  308.338889][T20705]  </TASK>
[  308.691922][T20717] unsupported nla_type 52263
[  308.748570][T20724] loop9: detected capacity change from 0 to 512
[  308.766545][T20724] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  308.775306][T20724] EXT4-fs (loop9): 1 truncate cleaned up
[  308.788139][T20724] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  308.859204][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4628'.
[  308.911365][T20741] FAULT_INJECTION: forcing a failure.
[  308.911365][T20741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.924557][T20741] CPU: 0 UID: 0 PID: 20741 Comm: syz.2.4632 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  308.924595][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  308.924612][T20741] Call Trace:
[  308.924620][T20741]  <TASK>
[  308.924629][T20741]  __dump_stack+0x1d/0x30
[  308.924701][T20741]  dump_stack_lvl+0xe8/0x140
[  308.924722][T20741]  dump_stack+0x15/0x1b
[  308.924739][T20741]  should_fail_ex+0x265/0x280
[  308.924776][T20741]  should_fail+0xb/0x20
[  308.924822][T20741]  should_fail_usercopy+0x1a/0x20
[  308.924873][T20741]  _copy_from_user+0x1c/0xb0
[  308.924895][T20741]  ___sys_sendmsg+0xc1/0x1d0
[  308.924935][T20741]  __x64_sys_sendmsg+0xd4/0x160
[  308.924963][T20741]  x64_sys_call+0x2999/0x2fb0
[  308.925051][T20741]  do_syscall_64+0xd0/0x1a0
[  308.925123][T20741]  ? clear_bhb_loop+0x25/0x80
[  308.925145][T20741]  ? clear_bhb_loop+0x25/0x80
[  308.925168][T20741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.925195][T20741] RIP: 0033:0x7f6330b9e969
[  308.925280][T20741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.925302][T20741] RSP: 002b:00007f632f207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.925321][T20741] RAX: ffffffffffffffda RBX: 00007f6330dc5fa0 RCX: 00007f6330b9e969
[  308.925333][T20741] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000006
[  308.925345][T20741] RBP: 00007f632f207090 R08: 0000000000000000 R09: 0000000000000000
[  308.925356][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.925369][T20741] R13: 0000000000000000 R14: 00007f6330dc5fa0 R15: 00007ffe2a96cf68
[  308.925398][T20741]  </TASK>
[  309.344672][T20770] FAULT_INJECTION: forcing a failure.
[  309.344672][T20770] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.357952][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.2.4645 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  309.357981][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  309.357994][T20770] Call Trace:
[  309.358003][T20770]  <TASK>
[  309.358013][T20770]  __dump_stack+0x1d/0x30
[  309.358054][T20770]  dump_stack_lvl+0xe8/0x140
[  309.358078][T20770]  dump_stack+0x15/0x1b
[  309.358098][T20770]  should_fail_ex+0x265/0x280
[  309.358160][T20770]  should_fail+0xb/0x20
[  309.358186][T20770]  should_fail_usercopy+0x1a/0x20
[  309.358204][T20770]  _copy_to_user+0x20/0xa0
[  309.358228][T20770]  simple_read_from_buffer+0xb5/0x130
[  309.358269][T20770]  proc_fail_nth_read+0x100/0x140
[  309.358302][T20770]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  309.358367][T20770]  vfs_read+0x19d/0x6f0
[  309.358392][T20770]  ? __rcu_read_unlock+0x4f/0x70
[  309.358418][T20770]  ? __fget_files+0x184/0x1c0
[  309.358455][T20770]  ksys_read+0xda/0x1a0
[  309.358536][T20770]  __x64_sys_read+0x40/0x50
[  309.358559][T20770]  x64_sys_call+0x2d77/0x2fb0
[  309.358579][T20770]  do_syscall_64+0xd0/0x1a0
[  309.358603][T20770]  ? clear_bhb_loop+0x25/0x80
[  309.358630][T20770]  ? clear_bhb_loop+0x25/0x80
[  309.358717][T20770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.358743][T20770] RIP: 0033:0x7f6330b9d37c
[  309.358762][T20770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  309.358818][T20770] RSP: 002b:00007f632f207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  309.358852][T20770] RAX: ffffffffffffffda RBX: 00007f6330dc5fa0 RCX: 00007f6330b9d37c
[  309.358866][T20770] RDX: 000000000000000f RSI: 00007f632f2070a0 RDI: 0000000000000009
[  309.358881][T20770] RBP: 00007f632f207090 R08: 0000000000000000 R09: 0000000000000000
[  309.358895][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.358908][T20770] R13: 0000000000000000 R14: 00007f6330dc5fa0 R15: 00007ffe2a96cf68
[  309.358930][T20770]  </TASK>
[  309.664289][T20778] loop9: detected capacity change from 0 to 512
[  309.683913][T20778] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  309.706589][ T3506] kernel write not supported for file bpf-prog (pid: 3506 comm: kworker/0:7)
[  309.725759][T20778] EXT4-fs (loop9): 1 truncate cleaned up
[  309.752252][T20778] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  309.903437][T20809] FAULT_INJECTION: forcing a failure.
[  309.903437][T20809] name failslab, interval 1, probability 0, space 0, times 0
[  309.916191][T20809] CPU: 0 UID: 0 PID: 20809 Comm: syz.2.4662 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  309.916226][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  309.916241][T20809] Call Trace:
[  309.916247][T20809]  <TASK>
[  309.916255][T20809]  __dump_stack+0x1d/0x30
[  309.916302][T20809]  dump_stack_lvl+0xe8/0x140
[  309.916368][T20809]  dump_stack+0x15/0x1b
[  309.916390][T20809]  should_fail_ex+0x265/0x280
[  309.916462][T20809]  should_failslab+0x8c/0xb0
[  309.916496][T20809]  kmem_cache_alloc_node_noprof+0x57/0x320
[  309.916541][T20809]  ? __alloc_skb+0x101/0x320
[  309.916580][T20809]  __alloc_skb+0x101/0x320
[  309.916667][T20809]  ? audit_log_start+0x365/0x6c0
[  309.916704][T20809]  audit_log_start+0x380/0x6c0
[  309.916820][T20809]  audit_seccomp+0x48/0x100
[  309.916851][T20809]  ? __seccomp_filter+0x68c/0x10d0
[  309.916877][T20809]  __seccomp_filter+0x69d/0x10d0
[  309.916901][T20809]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  309.916971][T20809]  ? vfs_write+0x75e/0x8d0
[  309.917011][T20809]  __secure_computing+0x82/0x150
[  309.917036][T20809]  syscall_trace_enter+0xcf/0x1e0
[  309.917066][T20809]  do_syscall_64+0xaa/0x1a0
[  309.917093][T20809]  ? clear_bhb_loop+0x25/0x80
[  309.917133][T20809]  ? clear_bhb_loop+0x25/0x80
[  309.917159][T20809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.917252][T20809] RIP: 0033:0x7f6330b9e969
[  309.917267][T20809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.917294][T20809] RSP: 002b:00007f632f207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  309.917312][T20809] RAX: ffffffffffffffda RBX: 00007f6330dc5fa0 RCX: 00007f6330b9e969
[  309.917343][T20809] RDX: 0000000000000015 RSI: 0000000000000040 RDI: 0000000000000000
[  309.917358][T20809] RBP: 00007f632f207090 R08: 0000000000000000 R09: 0000000000000000
[  309.917373][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.917388][T20809] R13: 0000000000000000 R14: 00007f6330dc5fa0 R15: 00007ffe2a96cf68
[  309.917466][T20809]  </TASK>
[  309.920887][T20808] rdma_op ffff888174792180 conn xmit_rdma 0000000000000000
[  310.023505][T20814] loop9: detected capacity change from 0 to 512
[  310.128993][T20826] loop8: detected capacity change from 0 to 1024
[  310.132863][T20814] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  310.161790][T20826] EXT4-fs: Ignoring removed bh option
[  310.163230][T20814] EXT4-fs (loop9): 1 truncate cleaned up
[  310.168066][T20826] EXT4-fs: inline encryption not supported
[  310.183707][T20814] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  310.184816][T20826] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  310.208499][T20826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  310.218873][T20826] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4666: lblock 2 mapped to illegal pblock 2 (length 1)
[  310.234328][T20826] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4666: lblock 0 mapped to illegal pblock 48 (length 1)
[  310.248931][T20826] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4666: Failed to acquire dquot type 0
[  310.261761][T20834] netlink: 'syz.2.4667': attribute type 10 has an invalid length.
[  310.276742][T20826] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  310.296752][T20826] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4666: mark_inode_dirty error
[  310.308296][T20834] hsr_slave_0: left promiscuous mode
[  310.318495][T20838] __nla_validate_parse: 1 callbacks suppressed
[  310.318551][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'.
[  310.334010][T20826] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  310.334056][T20826] EXT4-fs (loop8): 1 orphan inode deleted
[  310.345803][ T1391] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  310.376835][T20834] hsr_slave_1: left promiscuous mode
[  310.388245][T20838] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.392757][ T1391] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  310.413503][T20849] netlink: 'syz.9.4676': attribute type 21 has an invalid length.
[  310.413608][T20826] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  310.421466][T20849] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4676'.
[  310.441500][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4676'.
[  310.466558][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4678'.
[  310.478210][T20853] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  310.507427][T20838] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.597458][T20838] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.609622][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4688'.
[  310.623873][T20870] bridge0: port 3(macvlan2) entered blocking state
[  310.630539][T20870] bridge0: port 3(macvlan2) entered disabled state
[  310.638649][T20870] macvlan2: entered allmulticast mode
[  310.644127][T20870] bridge0: entered allmulticast mode
[  310.655127][T20870] macvlan2: left allmulticast mode
[  310.661333][T20870] bridge0: left allmulticast mode
[  310.663142][   T29] kauditd_printk_skb: 293 callbacks suppressed
[  310.663171][   T29] audit: type=1400 audit(1746658262.459:14091): avc:  denied  { mount } for  pid=20869 comm="syz.2.4686" name="/" dev="ramfs" ino=62922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  310.669706][T20877] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  310.713506][   T29] audit: type=1326 audit(1746658262.509:14092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bd03e969 code=0x7ffc0000
[  310.717585][T20880] loop9: detected capacity change from 0 to 512
[  310.738277][   T29] audit: type=1326 audit(1746658262.509:14093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bd03e969 code=0x7ffc0000
[  310.768583][   T29] audit: type=1326 audit(1746658262.509:14094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc6bd03e969 code=0x7ffc0000
[  310.780057][T20880] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  310.792333][   T29] audit: type=1326 audit(1746658262.509:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6bd03e9a3 code=0x7ffc0000
[  310.804105][T20880] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  310.825696][   T29] audit: type=1326 audit(1746658262.509:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc6bd03d41f code=0x7ffc0000
[  310.825735][   T29] audit: type=1326 audit(1746658262.509:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc6bd03e9f7 code=0x7ffc0000
[  310.825766][   T29] audit: type=1326 audit(1746658262.509:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6bd03d2d0 code=0x7ffc0000
[  310.825845][   T29] audit: type=1326 audit(1746658262.509:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6bd03e56b code=0x7ffc0000
[  310.839650][   T29] audit: type=1326 audit(1746658262.569:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.9.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6bd03d5ca code=0x7ffc0000
[  310.968551][T20838] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.995343][T20884] loop8: detected capacity change from 0 to 256
[  311.020145][T20884] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  311.048341][T20838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.063493][ T4514] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  311.071062][ T4514] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  311.079202][ T4514] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  311.088099][ T4514] hid-generic 0000:0004:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  311.092116][T20838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.111211][T20896] loop9: detected capacity change from 0 to 1024
[  311.124498][T20896] EXT4-fs: Ignoring removed bh option
[  311.130231][T20896] EXT4-fs: inline encryption not supported
[  311.142029][T20838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.160633][T20838] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.165991][T20896] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  311.197508][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4699'.
[  311.210928][T20904] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  311.234185][T20896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  311.276685][T20914] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  311.327522][T20896] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 2: comm syz.9.4696: lblock 2 mapped to illegal pblock 2 (length 1)
[  311.354222][T20896] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 48: comm syz.9.4696: lblock 0 mapped to illegal pblock 48 (length 1)
[  311.373438][T20916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4703'.
[  311.387821][T20896] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4696: Failed to acquire dquot type 0
[  311.416454][T20896] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  311.427567][T20896] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.4696: mark_inode_dirty error
[  311.460986][T20896] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  311.496743][T20922] loop8: detected capacity change from 0 to 2048
[  311.503315][T20896] EXT4-fs (loop9): 1 orphan inode deleted
[  311.511724][   T37] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  311.544001][   T37] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0
[  311.576988][T20896] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  311.636556][T20940] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4708'.
[  311.660669][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4710'.
[  311.690594][T20935] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  311.723921][T20946] loop9: detected capacity change from 0 to 512
[  311.745270][T20946] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  311.766296][T20946] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  311.981188][T20952] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4715'.
[  312.011729][T20955] rdma_op ffff8881195f3d80 conn xmit_rdma 0000000000000000
[  312.153954][T20964] loop9: detected capacity change from 0 to 2048
[  312.207636][T20967] loop8: detected capacity change from 0 to 1024
[  312.214383][T20967] EXT4-fs: Ignoring removed bh option
[  312.220023][T20967] EXT4-fs: inline encryption not supported
[  312.235720][T20967] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  312.248159][T20967] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  312.265831][T20964] Alternate GPT is invalid, using primary GPT.
[  312.272177][T20964]  loop9: p1 p2 p3
[  312.287295][T20967] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4721: lblock 2 mapped to illegal pblock 2 (length 1)
[  312.313931][T20964] FAULT_INJECTION: forcing a failure.
[  312.313931][T20964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.327929][T20964] CPU: 1 UID: 0 PID: 20964 Comm: syz.9.4720 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  312.327958][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  312.327975][T20964] Call Trace:
[  312.327983][T20964]  <TASK>
[  312.327993][T20964]  __dump_stack+0x1d/0x30
[  312.328021][T20964]  dump_stack_lvl+0xe8/0x140
[  312.328095][T20964]  dump_stack+0x15/0x1b
[  312.328162][T20964]  should_fail_ex+0x265/0x280
[  312.328202][T20964]  should_fail+0xb/0x20
[  312.328351][T20964]  should_fail_usercopy+0x1a/0x20
[  312.328402][T20964]  _copy_from_user+0x1c/0xb0
[  312.328424][T20964]  ___sys_recvmsg+0xaa/0x370
[  312.328509][T20964]  ? _parse_integer+0x27/0x40
[  312.328555][T20964]  do_recvmmsg+0x1ef/0x540
[  312.328581][T20964]  ? fput+0x8f/0xc0
[  312.328601][T20964]  __x64_sys_recvmmsg+0xe5/0x170
[  312.328687][T20964]  x64_sys_call+0x1c6a/0x2fb0
[  312.328713][T20964]  do_syscall_64+0xd0/0x1a0
[  312.328747][T20964]  ? clear_bhb_loop+0x25/0x80
[  312.328775][T20964]  ? clear_bhb_loop+0x25/0x80
[  312.328804][T20964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.328870][T20964] RIP: 0033:0x7fc6bd03e969
[  312.328891][T20964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.328914][T20964] RSP: 002b:00007fc6bb6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  312.329019][T20964] RAX: ffffffffffffffda RBX: 00007fc6bd265fa0 RCX: 00007fc6bd03e969
[  312.329035][T20964] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006
[  312.329052][T20964] RBP: 00007fc6bb6a7090 R08: 0000000000000000 R09: 0000000000000000
[  312.329068][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.329084][T20964] R13: 0000000000000000 R14: 00007fc6bd265fa0 R15: 00007ffc1369d9c8
[  312.329201][T20964]  </TASK>
[  312.520299][T20967] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4721: lblock 0 mapped to illegal pblock 48 (length 1)
[  312.536349][T20967] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4721: Failed to acquire dquot type 0
[  312.586393][T20967] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  312.597474][T20967] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4721: mark_inode_dirty error
[  312.632859][T20967] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  312.655515][T20967] EXT4-fs (loop8): 1 orphan inode deleted
[  312.661441][T20974] loop9: detected capacity change from 0 to 2048
[  312.666724][T20967] EXT4-fs mount: 14 callbacks suppressed
[  312.666745][T20967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.688045][   T37] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  312.714891][   T37] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0
[  312.738460][T20967] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  312.776843][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.787363][T20974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.838822][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.883120][T20983] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.928455][T20985] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  312.971811][T20983] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.038398][T20983] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.075820][T20993] loop9: detected capacity change from 0 to 512
[  313.092347][T20993] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  313.104804][T20983] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.146738][T20993] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  313.192857][T20983] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.230500][T20983] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.245416][T21004] netlink: 'syz.9.4738': attribute type 21 has an invalid length.
[  313.267995][T20983] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.280191][T20983] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.298467][T21008] loop8: detected capacity change from 0 to 2048
[  313.355675][T21008] Alternate GPT is invalid, using primary GPT.
[  313.363201][T21008]  loop8: p1 p2 p3
[  313.426696][T21019] rdma_op ffff888174793180 conn xmit_rdma 0000000000000000
[  313.528913][T21038] netlink: 'syz.2.4752': attribute type 1 has an invalid length.
[  313.544358][T21034] loop8: detected capacity change from 0 to 2048
[  313.552850][T21038] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.596892][T21034] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.618933][T21038] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.626376][T21038] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  313.639194][T21038] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  313.676738][T21044] ip6erspan0: entered promiscuous mode
[  313.702432][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.770123][T21053] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  313.778914][T21055] rdma_op ffff8881195f3180 conn xmit_rdma 0000000000000000
[  313.862517][T21068] loop8: detected capacity change from 0 to 1024
[  313.871421][T21068] EXT4-fs: Ignoring removed bh option
[  313.877006][T21068] EXT4-fs: inline encryption not supported
[  313.883975][T21068] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  313.904731][T21068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  313.917842][T21068] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4763: lblock 2 mapped to illegal pblock 2 (length 1)
[  313.933495][T21070] loop9: detected capacity change from 0 to 2048
[  313.940183][T21068] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4763: lblock 0 mapped to illegal pblock 48 (length 1)
[  313.965913][T21068] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4763: Failed to acquire dquot type 0
[  313.998609][T21070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.025958][T21068] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  314.050382][T21068] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4763: mark_inode_dirty error
[  314.083036][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.110689][T21068] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  314.128175][T21068] EXT4-fs (loop8): 1 orphan inode deleted
[  314.134504][T21068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.147270][T15024] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1)
[  314.165854][T15024] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 0
[  314.198287][T21068] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  314.207466][T21083] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  314.234621][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.315163][T21097] netlink: 'syz.9.4775': attribute type 21 has an invalid length.
[  314.402486][T21105] loop9: detected capacity change from 0 to 1024
[  314.406460][T21104] loop8: detected capacity change from 0 to 2048
[  314.417719][T21105] EXT4-fs: Ignoring removed bh option
[  314.423212][T21105] EXT4-fs: inline encryption not supported
[  314.431893][T21105] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  314.444412][T21104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.445045][T21105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  314.477004][T21105] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 2: comm syz.9.4779: lblock 2 mapped to illegal pblock 2 (length 1)
[  314.493983][T21105] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 48: comm syz.9.4779: lblock 0 mapped to illegal pblock 48 (length 1)
[  314.508937][T21105] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4779: Failed to acquire dquot type 0
[  314.521635][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.532354][T21105] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  314.542092][T21105] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.4779: mark_inode_dirty error
[  314.555190][T21105] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  314.566691][T21105] EXT4-fs (loop9): 1 orphan inode deleted
[  314.572907][T21105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.593566][T21117] loop8: detected capacity change from 0 to 1024
[  314.605642][ T1391] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  314.621503][ T1391] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  314.626840][T21117] EXT4-fs: Ignoring removed bh option
[  314.638420][T21117] EXT4-fs: inline encryption not supported
[  314.678657][T21117] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  314.695930][T21117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  314.713903][T21117] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4782: lblock 2 mapped to illegal pblock 2 (length 1)
[  314.733449][T21105] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  314.751314][T21117] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4782: lblock 0 mapped to illegal pblock 48 (length 1)
[  314.751497][T21127] netlink: 'syz.5.4786': attribute type 21 has an invalid length.
[  314.780726][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.788153][T21117] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4782: Failed to acquire dquot type 0
[  314.805724][T21117] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  314.825620][T21117] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4782: mark_inode_dirty error
[  314.844321][T21117] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  314.854910][T21117] EXT4-fs (loop8): 1 orphan inode deleted
[  314.861159][T21117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.877674][ T1391] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  314.909336][ T1391] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  314.934169][T21117] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  314.974364][T21150] FAULT_INJECTION: forcing a failure.
[  314.974364][T21150] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.988308][T21150] CPU: 1 UID: 0 PID: 21150 Comm: syz.1.4797 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  314.988342][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  314.988359][T21150] Call Trace:
[  314.988367][T21150]  <TASK>
[  314.988377][T21150]  __dump_stack+0x1d/0x30
[  314.988425][T21150]  dump_stack_lvl+0xe8/0x140
[  314.988448][T21150]  dump_stack+0x15/0x1b
[  314.988470][T21150]  should_fail_ex+0x265/0x280
[  314.988503][T21150]  should_fail+0xb/0x20
[  314.988578][T21150]  should_fail_usercopy+0x1a/0x20
[  314.988600][T21150]  _copy_from_user+0x1c/0xb0
[  314.988626][T21150]  ___bpf_copy_key+0xa5/0x110
[  314.988650][T21150]  map_update_elem+0x165/0x520
[  314.988748][T21150]  __sys_bpf+0x5d7/0x790
[  314.988848][T21150]  __x64_sys_bpf+0x41/0x50
[  314.988876][T21150]  x64_sys_call+0x2478/0x2fb0
[  314.988951][T21150]  do_syscall_64+0xd0/0x1a0
[  314.988986][T21150]  ? clear_bhb_loop+0x25/0x80
[  314.989007][T21150]  ? clear_bhb_loop+0x25/0x80
[  314.989028][T21150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.989117][T21150] RIP: 0033:0x7f2b0ff4e969
[  314.989137][T21150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.989158][T21150] RSP: 002b:00007f2b0e5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.989181][T21150] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4e969
[  314.989205][T21150] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000002
[  314.989257][T21150] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000000
[  314.989272][T21150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.989288][T21150] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  314.989312][T21150]  </TASK>
[  314.989828][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.115121][T21161] loop9: detected capacity change from 0 to 1024
[  315.188152][T21161] EXT4-fs: Ignoring removed bh option
[  315.193656][T21161] EXT4-fs: inline encryption not supported
[  315.200753][T21161] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  315.213172][T21161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  315.222294][T21161] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 2: comm syz.9.4802: lblock 2 mapped to illegal pblock 2 (length 1)
[  315.237714][T21161] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 48: comm syz.9.4802: lblock 0 mapped to illegal pblock 48 (length 1)
[  315.252181][T21161] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4802: Failed to acquire dquot type 0
[  315.263830][T21161] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  315.284787][T21166] netlink: 'syz.1.4803': attribute type 21 has an invalid length.
[  315.285599][T21161] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.4802: mark_inode_dirty error
[  315.305785][T21161] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  315.318607][T21161] EXT4-fs (loop9): 1 orphan inode deleted
[  315.325334][T21161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.339554][ T1391] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.359736][T21170] __nla_validate_parse: 12 callbacks suppressed
[  315.359753][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4804'.
[  315.376223][ T1391] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0
[  315.389028][T21170] syz!: rxe_newlink: already configured on team_slave_0
[  315.389871][T21161] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  315.431904][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.451874][T21183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.467587][T21183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.478664][T21190] netlink: 'syz.2.4811': attribute type 39 has an invalid length.
[  315.487770][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  315.494313][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  315.501792][T21190] vhci_hcd vhci_hcd.0: Device attached
[  315.523579][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'.
[  315.535207][T21181] syz!: rxe_newlink: already configured on team_slave_0
[  315.542703][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[  315.549267][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  315.556764][T21190] vhci_hcd vhci_hcd.0: Device attached
[  315.571402][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11)
[  315.578079][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  315.581795][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4813'.
[  315.585774][T21190] vhci_hcd vhci_hcd.0: Device attached
[  315.600636][T21203] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  315.611398][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13)
[  315.611922][T21205] netlink: 'syz.1.4814': attribute type 21 has an invalid length.
[  315.618099][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  315.618253][T21190] vhci_hcd vhci_hcd.0: Device attached
[  315.648374][T21209] FAULT_INJECTION: forcing a failure.
[  315.648374][T21209] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  315.661725][T21209] CPU: 0 UID: 0 PID: 21209 Comm: syz.1.4815 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  315.661760][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  315.661775][T21209] Call Trace:
[  315.661783][T21209]  <TASK>
[  315.661793][T21209]  __dump_stack+0x1d/0x30
[  315.661840][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15)
[  315.661873][T21209]  dump_stack_lvl+0xe8/0x140
[  315.661897][T21209]  dump_stack+0x15/0x1b
[  315.661915][T21209]  should_fail_ex+0x265/0x280
[  315.661969][T21209]  should_fail_alloc_page+0xf2/0x100
[  315.662014][T21209]  __alloc_frozen_pages_noprof+0xff/0x360
[  315.662051][T21209]  alloc_pages_mpol+0xb3/0x250
[  315.662138][T21209]  alloc_migration_target_by_mpol+0x11b/0x240
[  315.662178][T21209]  migrate_pages_batch+0x2e4/0x17d0
[  315.662227][T21209]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  315.662306][T21209]  ? __walk_page_range+0x324/0x340
[  315.662413][T21209]  ? find_vma+0x6c/0xa0
[  315.662447][T21209]  migrate_pages+0xf99/0x17f0
[  315.662544][T21209]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  315.662595][T21209]  __se_sys_mbind+0x975/0xac0
[  315.662634][T21209]  __x64_sys_mbind+0x78/0x90
[  315.662660][T21209]  x64_sys_call+0x14af/0x2fb0
[  315.662689][T21209]  do_syscall_64+0xd0/0x1a0
[  315.662744][T21209]  ? clear_bhb_loop+0x25/0x80
[  315.662774][T21209]  ? clear_bhb_loop+0x25/0x80
[  315.662803][T21209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.662832][T21209] RIP: 0033:0x7f2b0ff4e969
[  315.662854][T21209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.662932][T21209] RSP: 002b:00007f2b0e5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  315.662958][T21209] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4e969
[  315.662975][T21209] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000
[  315.662992][T21209] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000002
[  315.663009][T21209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.663025][T21209] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  315.663110][T21209]  </TASK>
[  315.878565][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  315.887055][T21190] vhci_hcd vhci_hcd.0: Device attached
[  315.889539][ T3370] vhci_hcd: vhci_device speed not set
[  315.927232][T21214] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17)
[  315.933900][T21214] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  315.941577][T21214] vhci_hcd vhci_hcd.0: Device attached
[  315.955618][ T3370] usb 5-1: new full-speed USB device number 15 using vhci_hcd
[  316.016076][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'.
[  316.027389][T21222] syz!: rxe_newlink: already configured on team_slave_0
[  316.065907][T21190] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(20)
[  316.070701][T21230] loop8: detected capacity change from 0 to 1024
[  316.072583][T21190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  316.083931][T21230] EXT4-fs: Ignoring removed bh option
[  316.087154][T21190] vhci_hcd vhci_hcd.0: Device attached
[  316.092444][T21230] EXT4-fs: inline encryption not supported
[  316.108446][T21230] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  316.122392][T21230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  316.133058][T21212] vhci_hcd: connection closed
[  316.133196][T21191] vhci_hcd: connection reset by peer
[  316.133270][T21200] vhci_hcd: connection closed
[  316.137953][T21196] vhci_hcd: connection closed
[  316.148163][T21227] vhci_hcd: connection closed
[  316.148398][T21206] vhci_hcd: connection closed
[  316.157582][T15024] vhci_hcd: stop threads
[  316.157596][T15024] vhci_hcd: release socket
[  316.157612][T15024] vhci_hcd: disconnect device
[  316.160374][T21230] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4820: lblock 2 mapped to illegal pblock 2 (length 1)
[  316.193855][T15024] vhci_hcd: stop threads
[  316.198201][T15024] vhci_hcd: release socket
[  316.202687][T15024] vhci_hcd: disconnect device
[  316.208781][T21215] vhci_hcd: connection closed
[  316.220501][T15024] vhci_hcd: stop threads
[  316.229624][T15024] vhci_hcd: release socket
[  316.234155][T15024] vhci_hcd: disconnect device
[  316.312539][T21230] __quota_error: 530 callbacks suppressed
[  316.312593][T21230] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  316.345823][T21230] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4820: lblock 0 mapped to illegal pblock 48 (length 1)
[  316.347089][T15024] vhci_hcd: stop threads
[  316.364434][T15024] vhci_hcd: release socket
[  316.368984][T15024] vhci_hcd: disconnect device
[  316.379688][T15024] vhci_hcd: stop threads
[  316.384034][T15024] vhci_hcd: release socket
[  316.388602][T15024] vhci_hcd: disconnect device
[  316.393708][T21230] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  316.402586][T21230] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4820: Failed to acquire dquot type 0
[  316.414834][T15024] vhci_hcd: stop threads
[  316.419235][T15024] vhci_hcd: release socket
[  316.423705][T15024] vhci_hcd: disconnect device
[  316.436522][T21230] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  316.446780][T15024] vhci_hcd: stop threads
[  316.451082][T15024] vhci_hcd: release socket
[  316.455671][T15024] vhci_hcd: disconnect device
[  316.466688][T21230] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4820: mark_inode_dirty error
[  316.487622][T21230] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  316.515771][T21230] EXT4-fs (loop8): 1 orphan inode deleted
[  316.522121][T21230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.535623][T15024] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1)
[  316.556312][T15024] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  316.564881][T15024] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 0
[  316.596005][T21230] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  316.627296][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.947930][T21248] netlink: 'syz.8.4825': attribute type 21 has an invalid length.
[  317.094476][T21258] rdma_op ffff8881195f2180 conn xmit_rdma 0000000000000000
[  317.226523][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4833'.
[  317.268577][T21260] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  317.298927][T21268] netlink: 'syz.8.4836': attribute type 39 has an invalid length.
[  317.321148][T21268] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  317.327722][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  317.335496][T21268] vhci_hcd vhci_hcd.0: Device attached
[  317.350451][T21268] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(9)
[  317.357020][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  317.364617][T21268] vhci_hcd vhci_hcd.0: Device attached
[  317.396255][T21268] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(11)
[  317.402915][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  317.411224][T21268] vhci_hcd vhci_hcd.0: Device attached
[  317.448036][T21280] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(13)
[  317.454701][T21280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  317.462425][T21280] vhci_hcd vhci_hcd.0: Device attached
[  317.497188][T21268] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16)
[  317.497519][T21285] netlink: 'syz.2.4839': attribute type 21 has an invalid length.
[  317.503919][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  317.520366][T21268] vhci_hcd vhci_hcd.0: Device attached
[  317.525933][ T4514] vhci_hcd: vhci_device speed not set
[  317.567515][T21280] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(15)
[  317.574214][T21280] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  317.581829][T21280] vhci_hcd vhci_hcd.0: Device attached
[  317.587821][ T4514] usb 17-1: new full-speed USB device number 7 using vhci_hcd
[  317.734263][T21268] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(20)
[  317.740935][T21268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  317.749830][T21268] vhci_hcd vhci_hcd.0: Device attached
[  317.770258][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4846'.
[  317.782871][T21310] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  317.806609][T21290] vhci_hcd: connection closed
[  317.806616][T21286] vhci_hcd: connection closed
[  317.807273][T21281] vhci_hcd: connection closed
[  317.813652][T21304] vhci_hcd: connection closed
[  317.817088][ T3403] vhci_hcd: stop threads
[  317.825842][T21275] vhci_hcd: connection closed
[  317.829924][ T3403] vhci_hcd: release socket
[  317.829943][ T3403] vhci_hcd: disconnect device
[  317.844036][T21273] vhci_hcd: connection closed
[  317.844177][T21269] vhci_hcd: connection reset by peer
[  317.849560][T21312] rdma_op ffff8881195f3180 conn xmit_rdma 0000000000000000
[  317.862772][ T3403] vhci_hcd: stop threads
[  317.867145][ T3403] vhci_hcd: release socket
[  317.871793][ T3403] vhci_hcd: disconnect device
[  317.878985][ T3403] vhci_hcd: stop threads
[  317.883291][ T3403] vhci_hcd: release socket
[  317.887746][ T3403] vhci_hcd: disconnect device
[  317.931020][ T3403] vhci_hcd: stop threads
[  317.935328][ T3403] vhci_hcd: release socket
[  317.939854][ T3403] vhci_hcd: disconnect device
[  317.949997][ T3403] vhci_hcd: stop threads
[  317.954296][ T3403] vhci_hcd: release socket
[  317.958857][ T3403] vhci_hcd: disconnect device
[  317.969012][T21320] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4848'.
[  317.978494][ T3403] vhci_hcd: stop threads
[  317.982770][ T3403] vhci_hcd: release socket
[  317.987799][ T3403] vhci_hcd: disconnect device
[  318.008321][ T3403] vhci_hcd: stop threads
[  318.012646][ T3403] vhci_hcd: release socket
[  318.017171][ T3403] vhci_hcd: disconnect device
[  318.037329][T21326] loop9: detected capacity change from 0 to 1024
[  318.044450][T21326] EXT4-fs: Ignoring removed bh option
[  318.050016][T21326] EXT4-fs: inline encryption not supported
[  318.057507][T21326] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  318.068612][T21326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  318.077786][T21326] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 2: comm syz.9.4852: lblock 2 mapped to illegal pblock 2 (length 1)
[  318.091971][T21326] Quota error (device loop9): qtree_write_dquot: dquota write failed
[  318.100310][T21326] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 48: comm syz.9.4852: lblock 0 mapped to illegal pblock 48 (length 1)
[  318.116892][T21326] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  318.125734][T21326] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4852: Failed to acquire dquot type 0
[  318.140907][T21326] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  318.150498][T21326] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.4852: mark_inode_dirty error
[  318.161978][T21326] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  318.172285][T21326] EXT4-fs (loop9): 1 orphan inode deleted
[  318.178618][T21326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.191306][ T3958] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  318.215674][ T3958] Quota error (device loop9): remove_tree: Can't read quota data block 1
[  318.224169][ T3958] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0
[  318.237015][T21326] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  318.273591][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.300619][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4858'.
[  318.313601][T21346] validate_nla: 1 callbacks suppressed
[  318.313617][T21346] netlink: 'syz.5.4861': attribute type 21 has an invalid length.
[  318.330928][T21340] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.397974][T21355] atomic_op ffff888174793128 conn xmit_atomic 0000000000000000
[  318.488720][T21362] loop9: detected capacity change from 0 to 512
[  318.498428][T21362] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13
[  318.507487][T21362] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  318.517986][T21362] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  318.544216][T21362] EXT4-fs (loop9): 1 truncate cleaned up
[  318.553450][T21362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.596324][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4871'.
[  318.608937][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.609064][T21371] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.656483][T21376] rdma_op ffff888174791580 conn xmit_rdma 0000000000000000
[  318.758651][T21371] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.770803][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4874'.
[  318.820816][T21382] syz!: rxe_newlink: already configured on team_slave_0
[  318.842311][T21386] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.896296][   T29] audit: type=1326 audit(1746658270.689:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c558e969 code=0x7ffc0000
[  318.920021][   T29] audit: type=1326 audit(1746658270.689:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c558e969 code=0x7ffc0000
[  318.944587][   T29] audit: type=1326 audit(1746658270.689:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f05c558e969 code=0x7ffc0000
[  318.969064][   T29] audit: type=1326 audit(1746658270.689:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21389 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05c558e9a3 code=0x7ffc0000
[  319.030123][T21371] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.199185][T21371] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.245867][T21397] syz!: rxe_newlink: already configured on team_slave_0
[  319.283924][T21371] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.310504][T21371] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.348327][T21371] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.395917][T21371] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.514147][T21424] rdma_op ffff88818fc50d80 conn xmit_rdma 0000000000000000
[  319.540417][T21426] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  319.599157][T21432] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  319.633721][T21444] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.677608][T21450] loop8: detected capacity change from 0 to 1024
[  319.684485][T21450] EXT4-fs: Ignoring removed bh option
[  319.690695][T21450] EXT4-fs: inline encryption not supported
[  319.698265][T21444] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.699179][T21450] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.720584][T21450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  319.730069][T21450] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4901: lblock 2 mapped to illegal pblock 2 (length 1)
[  319.745692][T21450] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4901: lblock 0 mapped to illegal pblock 48 (length 1)
[  319.761153][T21450] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4901: Failed to acquire dquot type 0
[  319.773982][T21444] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.786066][T21450] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  319.795697][T21450] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4901: mark_inode_dirty error
[  319.809027][T21450] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  319.819468][T21450] EXT4-fs (loop8): 1 orphan inode deleted
[  319.826811][T21450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.840242][T15024] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1)
[  319.841205][T21444] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.869337][T15024] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 0
[  319.898324][T21450] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  319.912749][T21444] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.922704][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.924874][T21444] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.943799][T21444] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.955400][T21444] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.968467][T21454] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  320.200677][T21469] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  320.228445][T21473] rdma_op ffff88818fc50580 conn xmit_rdma 0000000000000000
[  320.538279][T21491] netlink: 'syz.8.4918': attribute type 21 has an invalid length.
[  320.968677][ T3370] usb 5-1: enqueue for inactive port 0
[  320.988677][ T3370] usb 5-1: enqueue for inactive port 0
[  321.086641][ T3370] vhci_hcd: vhci_device speed not set
[  321.305546][T21514] __nla_validate_parse: 9 callbacks suppressed
[  321.305608][T21514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4930'.
[  321.332671][T21514] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  321.408852][T21525] loop8: detected capacity change from 0 to 128
[  321.847974][T21552] loop8: detected capacity change from 0 to 1024
[  321.854965][T21552] EXT4-fs: Ignoring removed bh option
[  321.860550][T21552] EXT4-fs: inline encryption not supported
[  321.886868][T21552] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  321.895025][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4942'.
[  321.931216][T21550] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  321.939070][T21552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  322.005021][T21552] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.4943: lblock 2 mapped to illegal pblock 2 (length 1)
[  322.075971][T21552] __quota_error: 86 callbacks suppressed
[  322.076066][T21552] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  322.094055][T21552] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.4943: lblock 0 mapped to illegal pblock 48 (length 1)
[  322.108860][T21552] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  322.117876][T21552] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4943: Failed to acquire dquot type 0
[  322.133116][T21552] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  322.142919][T21552] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.4943: mark_inode_dirty error
[  322.197190][T21552] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  322.218127][T21552] EXT4-fs (loop8): 1 orphan inode deleted
[  322.224694][T21552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.237853][T15024] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1)
[  322.286104][T15024] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  322.294691][T15024] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 0
[  322.335217][   T29] audit: type=1400 audit(1746658274.109:14700): avc:  denied  { create } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.355190][   T29] audit: type=1400 audit(1746658274.109:14701): avc:  denied  { bind } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.374952][   T29] audit: type=1400 audit(1746658274.109:14702): avc:  denied  { listen } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.394899][   T29] audit: type=1400 audit(1746658274.109:14703): avc:  denied  { connect } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.414906][   T29] audit: type=1400 audit(1746658274.109:14704): avc:  denied  { write } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.434669][   T29] audit: type=1400 audit(1746658274.119:14705): avc:  denied  { getopt } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.454691][   T29] audit: type=1400 audit(1746658274.119:14706): avc:  denied  { accept } for  pid=21574 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  322.516301][T21552] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  322.547881][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.579970][T21585] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4956'.
[  322.645906][ T4514] usb 17-1: enqueue for inactive port 0
[  322.656668][ T4514] usb 17-1: enqueue for inactive port 0
[  322.864744][ T4514] vhci_hcd: vhci_device speed not set
[  322.989205][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'.
[  323.117579][T21618] loop9: detected capacity change from 0 to 512
[  323.118829][T21609] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  323.143020][T21619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4964'.
[  323.171947][T21619] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  323.181890][T21619] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  323.193357][T21592] syz!: rxe_newlink: already configured on team_slave_0
[  323.215265][T21618] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  323.224270][T21618] EXT4-fs (loop9): 1 truncate cleaned up
[  323.234184][T21618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.267827][T21622] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  323.277688][T21622] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  323.321515][T21614] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  323.416282][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.460580][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4970'.
[  323.499995][T21628] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.568853][T21628] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.646610][ T3506] usb usb6-port7: attempt power cycle
[  323.659197][T21633] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4971'.
[  323.677041][T21628] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.787260][T21628] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.871494][T21628] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.899848][T21628] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.930985][T21639] FAULT_INJECTION: forcing a failure.
[  323.930985][T21639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.939852][T21628] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.944167][T21639] CPU: 0 UID: 0 PID: 21639 Comm: syz.1.4974 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  323.944209][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  323.944225][T21639] Call Trace:
[  323.944235][T21639]  <TASK>
[  323.944265][T21639]  __dump_stack+0x1d/0x30
[  323.944372][T21639]  dump_stack_lvl+0xe8/0x140
[  323.944399][T21639]  dump_stack+0x15/0x1b
[  323.944420][T21639]  should_fail_ex+0x265/0x280
[  323.944479][T21639]  should_fail+0xb/0x20
[  323.944537][T21639]  should_fail_usercopy+0x1a/0x20
[  323.944604][T21639]  _copy_to_user+0x20/0xa0
[  323.944688][T21639]  simple_read_from_buffer+0xb5/0x130
[  323.944727][T21639]  proc_fail_nth_read+0x100/0x140
[  323.944772][T21639]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  323.944878][T21639]  vfs_read+0x19d/0x6f0
[  323.944909][T21639]  ? __rcu_read_unlock+0x4f/0x70
[  323.944944][T21639]  ? __fget_files+0x184/0x1c0
[  323.944991][T21639]  ksys_read+0xda/0x1a0
[  323.945070][T21639]  __x64_sys_read+0x40/0x50
[  323.945103][T21639]  x64_sys_call+0x2d77/0x2fb0
[  323.945183][T21639]  do_syscall_64+0xd0/0x1a0
[  323.945219][T21639]  ? clear_bhb_loop+0x25/0x80
[  323.945248][T21639]  ? clear_bhb_loop+0x25/0x80
[  323.945351][T21639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.945378][T21639] RIP: 0033:0x7f2b0ff4d37c
[  323.945421][T21639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  323.945465][T21639] RSP: 002b:00007f2b0e5b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  323.945489][T21639] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4d37c
[  323.945514][T21639] RDX: 000000000000000f RSI: 00007f2b0e5b70a0 RDI: 000000000000000e
[  323.945531][T21639] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000000
[  323.945555][T21639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.945572][T21639] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  323.945659][T21639]  </TASK>
[  324.163372][T21628] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.355517][T21661] netlink: 'syz.9.4984': attribute type 21 has an invalid length.
[  324.388517][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4983'.
[  324.448114][T21662] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  324.656115][T21682] dummy0: entered promiscuous mode
[  324.682783][T21682] macsec1: entered allmulticast mode
[  324.707273][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4992'.
[  324.713014][T21682] dummy0: entered allmulticast mode
[  324.731744][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.744627][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.757445][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.770188][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.783014][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.795800][T21687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=21687 comm=syz.1.4991
[  324.980196][T21682] dummy0: left allmulticast mode
[  324.985237][T21682] dummy0: left promiscuous mode
[  325.064658][T21686] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.208431][T21686] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.280586][T21686] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.364810][T21686] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.433242][T21686] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.445874][T21686] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.458563][T21686] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.473577][T21686] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.528326][T21702] syz!: rxe_newlink: already configured on team_slave_0
[  325.545965][ T3506] usb usb6-port7: unable to enumerate USB device
[  325.565683][   T23] usb usb18-port7: attempt power cycle
[  326.170818][T21747] loop8: detected capacity change from 0 to 512
[  326.193755][T21747] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13
[  326.237326][T21747] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  326.255302][T21747] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  326.267812][T21747] EXT4-fs (loop8): 1 truncate cleaned up
[  326.273814][T21747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.300273][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.321834][T21757] __nla_validate_parse: 3 callbacks suppressed
[  326.321856][T21757] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5021'.
[  326.479847][T21762] loop8: detected capacity change from 0 to 512
[  326.487053][T21762] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  326.497606][T21762] EXT4-fs warning (device loop8): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  326.909204][T21782] netlink: 'syz.8.5031': attribute type 21 has an invalid length.
[  327.024121][T21786] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5033'.
[  327.149521][T21795] loop8: detected capacity change from 0 to 1024
[  327.168779][T21799] vlan2: entered allmulticast mode
[  327.173995][T21799] bond0: entered allmulticast mode
[  327.176194][T21795] EXT4-fs: Ignoring removed bh option
[  327.179171][T21799] bond_slave_0: entered allmulticast mode
[  327.184685][T21795] EXT4-fs: inline encryption not supported
[  327.190334][T21799] bond_slave_1: entered allmulticast mode
[  327.213730][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  327.213749][   T29] audit: type=1400 audit(1746658279.009:14776): avc:  denied  { create } for  pid=21796 comm="syz.5.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  327.240511][   T29] audit: type=1400 audit(1746658279.009:14777): avc:  denied  { ioctl } for  pid=21796 comm="syz.5.5038" path="socket:[66466]" dev="sockfs" ino=66466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  327.268192][T21795] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  327.296970][T21795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  327.318396][T21795] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5037: lblock 2 mapped to illegal pblock 2 (length 1)
[  327.343564][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'.
[  327.355211][T21808] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.366831][T21795] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  327.386764][   T23] usb usb18-port7: unable to enumerate USB device
[  327.425955][T21795] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5037: lblock 0 mapped to illegal pblock 48 (length 1)
[  327.449520][T21808] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.479400][T21795] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  327.488398][T21795] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5037: Failed to acquire dquot type 0
[  327.526421][T21795] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  327.545891][T21795] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5037: mark_inode_dirty error
[  327.559286][T21808] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.569790][T21795] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  327.586566][T21795] EXT4-fs (loop8): 1 orphan inode deleted
[  327.596522][T21795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.615665][ T3958] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  327.632250][T21808] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.667235][ T3958] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  327.675774][ T3958] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0
[  327.702148][T21795] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  327.717220][T21808] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.739660][T21808] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.769207][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.788425][T21808] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.823021][T21808] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.888057][T21823] syz.8.5045: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  327.902746][T21823] CPU: 0 UID: 0 PID: 21823 Comm: syz.8.5045 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  327.902812][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  327.902829][T21823] Call Trace:
[  327.902838][T21823]  <TASK>
[  327.902847][T21823]  __dump_stack+0x1d/0x30
[  327.902874][T21823]  dump_stack_lvl+0xe8/0x140
[  327.902899][T21823]  dump_stack+0x15/0x1b
[  327.902923][T21823]  warn_alloc+0x12b/0x1a0
[  327.902953][T21823]  ? schedule+0x5f/0xd0
[  327.902980][T21823]  ? futex_unqueue+0xb9/0xf0
[  327.903023][T21823]  __vmalloc_node_range_noprof+0x9c/0xdf0
[  327.903058][T21823]  ? __pfx_futex_wake_mark+0x10/0x10
[  327.903165][T21823]  ? __rcu_read_unlock+0x4f/0x70
[  327.903184][T21823]  ? avc_has_perm_noaudit+0x1b1/0x200
[  327.903241][T21823]  ? should_fail_ex+0x30/0x280
[  327.903282][T21823]  ? xskq_create+0x36/0xe0
[  327.903388][T21823]  ? should_failslab+0x8c/0xb0
[  327.903447][T21823]  vmalloc_user_noprof+0x59/0x70
[  327.903477][T21823]  ? xskq_create+0x80/0xe0
[  327.903508][T21823]  xskq_create+0x80/0xe0
[  327.903580][T21823]  xsk_init_queue+0x95/0xf0
[  327.903606][T21823]  xsk_setsockopt+0x35c/0x510
[  327.903630][T21823]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.903656][T21823]  __sys_setsockopt+0x181/0x200
[  327.903696][T21823]  ? fpregs_restore_userregs+0xbb/0x190
[  327.903725][T21823]  __x64_sys_setsockopt+0x64/0x80
[  327.903786][T21823]  x64_sys_call+0x2bd5/0x2fb0
[  327.903824][T21823]  do_syscall_64+0xd0/0x1a0
[  327.903847][T21823]  ? clear_bhb_loop+0x25/0x80
[  327.903945][T21823]  ? clear_bhb_loop+0x25/0x80
[  327.903974][T21823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.903998][T21823] RIP: 0033:0x7f618e25e969
[  327.904060][T21823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.904083][T21823] RSP: 002b:00007f618c8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.904182][T21823] RAX: ffffffffffffffda RBX: 00007f618e485fa0 RCX: 00007f618e25e969
[  327.904199][T21823] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  327.904215][T21823] RBP: 00007f618e2e0ab1 R08: 0000000000000004 R09: 0000000000000000
[  327.904227][T21823] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.904296][T21823] R13: 0000000000000000 R14: 00007f618e485fa0 R15: 00007ffe75393208
[  327.904317][T21823]  </TASK>
[  327.904325][T21823] Mem-Info:
[  328.142873][T21823] active_anon:6990 inactive_anon:32 isolated_anon:0
[  328.142873][T21823]  active_file:18535 inactive_file:2466 isolated_file:0
[  328.142873][T21823]  unevictable:0 dirty:144 writeback:0
[  328.142873][T21823]  slab_reclaimable:3426 slab_unreclaimable:17424
[  328.142873][T21823]  mapped:32283 shmem:3980 pagetables:788
[  328.142873][T21823]  sec_pagetables:0 bounce:0
[  328.142873][T21823]  kernel_misc_reclaimable:0
[  328.142873][T21823]  free:1772891 free_pcp:39268 free_cma:0
[  328.146961][T21829] loop8: detected capacity change from 0 to 2048
[  328.188104][T21823] Node 0 active_anon:28076kB inactive_anon:128kB active_file:74140kB inactive_file:9864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129248kB dirty:576kB writeback:0kB shmem:16036kB writeback_tmp:0kB kernel_stack:3792kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  328.188302][T21823] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  328.188483][T21823] lowmem_reserve[]: 0 2884 7863 7863
[  328.188537][T21823] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  328.188609][T21823] lowmem_reserve[]: 0 0 4978 4978
[  328.188692][T21823] Node 0 Normal free:4126168kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:28076kB inactive_anon:128kB active_file:74140kB inactive_file:9864kB unevictable:0kB writepending:576kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:153492kB local_pcp:77416kB free_cma:0kB
[  328.299089][   T29] audit: type=1400 audit(1746658280.099:14778): avc:  denied  { append } for  pid=21824 comm="syz.1.5046" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  328.320507][T21823] lowmem_reserve[]: 0 0 0 0
[  328.320548][T21823] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  328.320749][T21823] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB
[  328.321046][T21823] Node 0 Normal: 2414*4kB (UME) 2172*8kB (UME) 2173*16kB (UME) 1460*32kB (UME) 967*64kB (UME) 482*128kB (UME) 380*256kB (UME) 471*512kB (UME) 396*1024kB (UME) 66*2048kB (UM) 736*4096kB (UM) = 4125864kB
[  328.380971][T21829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.397968][T21823] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  328.397996][T21823] 25342 total pagecache pages
[  328.398006][T21823] 26 pages in swap cache
[  328.398012][T21823] Free swap  = 124768kB
[  328.398019][T21823] Total swap = 124996kB
[  328.433103][   T29] audit: type=1400 audit(1746658280.209:14779): avc:  denied  { create } for  pid=21824 comm="syz.1.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  328.436886][T21823] 2097051 pages RAM
[  328.436898][T21823] 0 pages HighMem/MovableOnly
[  328.436986][T21823] 80258 pages reserved
[  328.505028][   T29] audit: type=1400 audit(1746658280.269:14780): avc:  denied  { write } for  pid=21824 comm="syz.1.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  328.557636][T21841] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5048'.
[  328.568906][   T29] audit: type=1400 audit(1746658280.369:14781): avc:  denied  { read } for  pid=21822 comm="syz.8.5045" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  328.701694][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5050'.
[  328.716475][T21845] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.775229][   T29] audit: type=1326 audit(1746658280.569:14782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21852 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  328.828150][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5056'.
[  329.097076][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5063'.
[  329.118299][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'.
[  329.130598][T21874] syz!: rxe_newlink: already configured on team_slave_0
[  329.207002][T21807] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  329.344373][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.476368][T21890] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5069'.
[  329.580984][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5072'.
[  329.602537][T21894] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.677237][T21894] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.739259][T21894] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.790011][T21894] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.801373][T21897] netlink: 'syz.5.5073': attribute type 21 has an invalid length.
[  329.842823][T21894] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.859118][T21894] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.900990][T21894] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.923489][T21894] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.083850][T21907] rdma_op ffff888174792d80 conn xmit_rdma 0000000000000000
[  330.098572][T21908] loop8: detected capacity change from 0 to 1024
[  330.105346][T21908] EXT4-fs: Ignoring removed bh option
[  330.110939][T21908] EXT4-fs: inline encryption not supported
[  330.117289][T21908] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  330.147632][T21908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  330.172674][T21908] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5079: lblock 2 mapped to illegal pblock 2 (length 1)
[  330.192038][T21908] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5079: lblock 0 mapped to illegal pblock 48 (length 1)
[  330.207100][T21908] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5079: Failed to acquire dquot type 0
[  330.218635][T21908] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  330.228431][T21908] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5079: mark_inode_dirty error
[  330.249153][T21908] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  330.291146][T21908] EXT4-fs (loop8): 1 orphan inode deleted
[  330.297638][T21908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.312280][T21919] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  330.318106][ T3958] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  330.336304][ T3958] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0
[  330.349426][T21908] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  330.370190][T21929] netlink: 'syz.5.5085': attribute type 21 has an invalid length.
[  330.386169][T21930] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  330.407696][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.454051][T21939] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  330.506577][T21945] netlink: 'syz.5.5092': attribute type 21 has an invalid length.
[  330.697314][T21968] loop8: detected capacity change from 0 to 1024
[  330.712282][T21968] EXT4-fs: Ignoring removed bh option
[  330.717875][T21968] EXT4-fs: inline encryption not supported
[  330.744181][T21968] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  330.768370][T21968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  330.800787][T21968] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5098: lblock 2 mapped to illegal pblock 2 (length 1)
[  330.822827][T21968] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5098: lblock 0 mapped to illegal pblock 48 (length 1)
[  330.843456][T21968] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5098: Failed to acquire dquot type 0
[  330.885585][T21968] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  330.891789][T21989] netlink: 'syz.5.5103': attribute type 21 has an invalid length.
[  330.903275][T21968] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5098: mark_inode_dirty error
[  330.916497][T21968] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  330.942519][T21968] EXT4-fs (loop8): 1 orphan inode deleted
[  330.957004][ T3403] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  330.977972][T21968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.995212][ T3403] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0
[  331.010925][T21968] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  331.036096][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.138300][T22009] bridge0: port 3(geneve0) entered blocking state
[  331.145211][T22009] bridge0: port 3(geneve0) entered disabled state
[  331.161423][T22014] FAULT_INJECTION: forcing a failure.
[  331.161423][T22014] name failslab, interval 1, probability 0, space 0, times 0
[  331.174183][T22014] CPU: 0 UID: 0 PID: 22014 Comm: syz.5.5109 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  331.174223][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  331.174235][T22014] Call Trace:
[  331.174243][T22014]  <TASK>
[  331.174251][T22014]  __dump_stack+0x1d/0x30
[  331.174275][T22014]  dump_stack_lvl+0xe8/0x140
[  331.174301][T22014]  dump_stack+0x15/0x1b
[  331.174322][T22014]  should_fail_ex+0x265/0x280
[  331.174406][T22014]  ? audit_log_d_path+0x8d/0x150
[  331.174438][T22014]  should_failslab+0x8c/0xb0
[  331.174538][T22014]  __kmalloc_cache_noprof+0x4c/0x320
[  331.174566][T22014]  audit_log_d_path+0x8d/0x150
[  331.174605][T22014]  audit_log_d_path_exe+0x42/0x70
[  331.174753][T22014]  audit_log_task+0x1e9/0x250
[  331.174785][T22014]  audit_seccomp+0x61/0x100
[  331.174811][T22014]  ? __seccomp_filter+0x68c/0x10d0
[  331.174838][T22014]  __seccomp_filter+0x69d/0x10d0
[  331.174866][T22014]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  331.174967][T22014]  ? vfs_write+0x75e/0x8d0
[  331.175007][T22014]  __secure_computing+0x82/0x150
[  331.175042][T22014]  syscall_trace_enter+0xcf/0x1e0
[  331.175066][T22014]  do_syscall_64+0xaa/0x1a0
[  331.175122][T22014]  ? clear_bhb_loop+0x25/0x80
[  331.175147][T22014]  ? clear_bhb_loop+0x25/0x80
[  331.175226][T22014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.175248][T22014] RIP: 0033:0x7f05c558e969
[  331.175323][T22014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.175346][T22014] RSP: 002b:00007f05c3bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  331.175370][T22014] RAX: ffffffffffffffda RBX: 00007f05c57b5fa0 RCX: 00007f05c558e969
[  331.175448][T22014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  331.175466][T22014] RBP: 00007f05c3bf7090 R08: 0000000000000000 R09: 0000000000000000
[  331.175479][T22014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.175492][T22014] R13: 0000000000000000 R14: 00007f05c57b5fa0 R15: 00007fffcba74228
[  331.175516][T22014]  </TASK>
[  331.181574][T22009] geneve0: entered allmulticast mode
[  331.402773][T22009] geneve0: entered promiscuous mode
[  331.430267][T22009] bridge0: port 3(geneve0) entered blocking state
[  331.437557][T22009] bridge0: port 3(geneve0) entered forwarding state
[  331.461844][T22022] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  331.476268][T22018] geneve0: left allmulticast mode
[  331.481367][T22018] geneve0: left promiscuous mode
[  331.486551][T22018] bridge0: port 3(geneve0) entered disabled state
[  331.594000][T22030] loop8: detected capacity change from 0 to 1024
[  331.618752][T22030] EXT4-fs: Ignoring removed bh option
[  331.624289][T22030] EXT4-fs: inline encryption not supported
[  331.650454][T22030] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  331.661470][T22030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  331.681693][T22030] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5116: lblock 2 mapped to illegal pblock 2 (length 1)
[  331.713747][T22036] FAULT_INJECTION: forcing a failure.
[  331.713747][T22036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.726914][T22036] CPU: 0 UID: 0 PID: 22036 Comm: syz.9.5117 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  331.727023][T22036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  331.727040][T22036] Call Trace:
[  331.727048][T22036]  <TASK>
[  331.727058][T22036]  __dump_stack+0x1d/0x30
[  331.727086][T22036]  dump_stack_lvl+0xe8/0x140
[  331.727113][T22036]  dump_stack+0x15/0x1b
[  331.727135][T22036]  should_fail_ex+0x265/0x280
[  331.727217][T22036]  should_fail+0xb/0x20
[  331.727254][T22036]  should_fail_usercopy+0x1a/0x20
[  331.727278][T22036]  strncpy_from_user+0x25/0x230
[  331.727327][T22036]  ? __rcu_read_unlock+0x4f/0x70
[  331.727355][T22036]  strncpy_from_user_nofault+0x68/0xf0
[  331.727396][T22036]  bpf_probe_read_user_str+0x2a/0x70
[  331.727437][T22036]  bpf_prog_860dce4575eb4f0a+0x3e/0x40
[  331.727465][T22036]  bpf_trace_run2+0x104/0x1c0
[  331.727498][T22036]  __bpf_trace_sys_enter+0x10/0x30
[  331.727537][T22036]  trace_sys_enter+0x86/0x110
[  331.727669][T22036]  syscall_trace_enter+0x13e/0x1e0
[  331.727700][T22036]  do_syscall_64+0xaa/0x1a0
[  331.727729][T22036]  ? clear_bhb_loop+0x25/0x80
[  331.727761][T22036]  ? clear_bhb_loop+0x25/0x80
[  331.727803][T22036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.727896][T22036] RIP: 0033:0x7fc6bd03e969
[  331.727988][T22036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.728012][T22036] RSP: 002b:00007fc6bb6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  331.728036][T22036] RAX: ffffffffffffffda RBX: 00007fc6bd265fa0 RCX: 00007fc6bd03e969
[  331.728052][T22036] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004
[  331.728068][T22036] RBP: 00007fc6bb6a7090 R08: 0000000000000000 R09: 0000000000000000
[  331.728084][T22036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.728180][T22036] R13: 0000000000000000 R14: 00007fc6bd265fa0 R15: 00007ffc1369d9c8
[  331.728205][T22036]  </TASK>
[  331.733656][T22030] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5116: lblock 0 mapped to illegal pblock 48 (length 1)
[  331.955436][T22030] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5116: Failed to acquire dquot type 0
[  331.971399][T22030] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  331.981585][T22030] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5116: mark_inode_dirty error
[  331.993401][T22030] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  331.997584][T22040] __nla_validate_parse: 4 callbacks suppressed
[  331.997604][T22040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5118'.
[  332.006180][T22030] EXT4-fs (loop8): 1 orphan inode deleted
[  332.011913][T22040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5118'.
[  332.019043][ T3403] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  332.048907][T22030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.055651][ T3403] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0
[  332.075688][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5119'.
[  332.093644][T22040] xt_hashlimit: size too large, truncated to 1048576
[  332.106841][T22030] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  332.123048][T22045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5120'.
[  332.204692][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.273497][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5121'.
[  332.283665][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5122'.
[  332.309495][T22049] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  332.324215][T22052] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  332.351221][   T29] kauditd_printk_skb: 377 callbacks suppressed
[  332.351239][   T29] audit: type=1326 audit(1746658284.149:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  332.384946][   T29] audit: type=1326 audit(1746658284.159:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  332.408768][   T29] audit: type=1326 audit(1746658284.159:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  332.432473][   T29] audit: type=1326 audit(1746658284.159:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  332.456074][   T29] audit: type=1326 audit(1746658284.159:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22058 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6330b9e969 code=0x7ffc0000
[  332.479837][   T29] audit: type=1326 audit(1746658284.179:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.8.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618e25e969 code=0x7ffc0000
[  332.503760][   T29] audit: type=1326 audit(1746658284.179:15157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.8.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618e25e969 code=0x7ffc0000
[  332.530863][T22061] loop8: detected capacity change from 0 to 512
[  332.538538][T22061] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  332.555144][T22066] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5126'.
[  332.565088][T22061] EXT4-fs warning (device loop8): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  332.576252][   T29] audit: type=1326 audit(1746658284.329:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.8.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f618e25e969 code=0x7ffc0000
[  332.600060][   T29] audit: type=1326 audit(1746658284.329:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.8.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f618e25e9a3 code=0x7ffc0000
[  332.624262][   T29] audit: type=1326 audit(1746658284.329:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22059 comm="syz.8.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f618e25d41f code=0x7ffc0000
[  332.688622][T22071] loop8: detected capacity change from 0 to 512
[  332.712414][T22071] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal
[  332.744923][T22079] loop9: detected capacity change from 0 to 1024
[  332.751875][T22079] EXT4-fs: Ignoring removed i_version option
[  332.780783][T22079] EXT4-fs: Ignoring removed nobh option
[  332.799839][T22083] netlink: 'syz.8.5133': attribute type 21 has an invalid length.
[  332.858018][T22079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.872073][T22088] netlink: 'syz.8.5134': attribute type 21 has an invalid length.
[  332.942404][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5135'.
[  332.953718][T22091] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  332.981658][T22094] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.5131: error while reading EA inode 32 err=-116
[  332.996342][T22094] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.5131: corrupted xattr block 113: invalid header
[  333.011950][T22079] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.5131: corrupted xattr block 113: invalid header
[  333.044992][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5136'.
[  333.056217][T22096] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  333.089447][T17764] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.104865][T22105] loop8: detected capacity change from 0 to 512
[  333.131797][T22105] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  333.147172][T22105] EXT4-fs warning (device loop8): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  333.181633][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5141'.
[  333.199964][T22109] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  333.210384][T22111] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.257234][T22111] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.269491][T22116] netlink: 'syz.9.5144': attribute type 21 has an invalid length.
[  333.346595][T22111] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.447991][T22111] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.460459][T22124] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  333.542322][T22111] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.575375][T22111] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.599449][T22111] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.620082][T22111] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.840983][T22148] netlink: 'syz.8.5156': attribute type 21 has an invalid length.
[  333.969199][T22152] loop9: detected capacity change from 0 to 8192
[  334.066512][T22162] syz!: rxe_newlink: already configured on team_slave_0
[  334.212879][T22174] loop8: detected capacity change from 0 to 512
[  334.238559][T22174] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  334.251131][T22174] EXT4-fs warning (device loop8): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  334.517567][T22184] netlink: 'syz.9.5170': attribute type 21 has an invalid length.
[  334.777745][T22190] openvswitch: netlink: Message has 6 unknown bytes.
[  335.454729][T22214] netlink: 'syz.5.5181': attribute type 21 has an invalid length.
[  335.582111][T22222] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.638576][T22222] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.732177][T22222] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.797914][T22222] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.874325][T22222] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.890270][T22222] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.902408][T22222] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.914953][T22222] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.992485][T22247] netlink: 'syz.8.5194': attribute type 21 has an invalid length.
[  336.083603][T22255] loop8: detected capacity change from 0 to 1024
[  336.091264][T22255] EXT4-fs: Ignoring removed bh option
[  336.097503][T22255] EXT4-fs: inline encryption not supported
[  336.104600][T22255] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  336.129985][T22255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  336.140251][T22255] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5197: lblock 2 mapped to illegal pblock 2 (length 1)
[  336.154528][T22255] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5197: lblock 0 mapped to illegal pblock 48 (length 1)
[  336.171009][T22255] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5197: Failed to acquire dquot type 0
[  336.197047][T22255] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  336.228895][T22255] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5197: mark_inode_dirty error
[  336.249465][T22255] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  336.268437][T22255] EXT4-fs (loop8): 1 orphan inode deleted
[  336.274587][T22255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.288673][   T37] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  336.313020][   T37] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0
[  336.329171][T22268] rdma_op ffff88811a3e2d80 conn xmit_rdma 0000000000000000
[  336.352411][T22255] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  336.407417][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.463013][T22274] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.512307][T22281] netlink: 'syz.1.5207': attribute type 21 has an invalid length.
[  336.527551][T22274] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.541213][T22283] FAULT_INJECTION: forcing a failure.
[  336.541213][T22283] name failslab, interval 1, probability 0, space 0, times 0
[  336.553974][T22283] CPU: 0 UID: 0 PID: 22283 Comm: syz.1.5208 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  336.554082][T22283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  336.554094][T22283] Call Trace:
[  336.554100][T22283]  <TASK>
[  336.554106][T22283]  __dump_stack+0x1d/0x30
[  336.554132][T22283]  dump_stack_lvl+0xe8/0x140
[  336.554157][T22283]  dump_stack+0x15/0x1b
[  336.554178][T22283]  should_fail_ex+0x265/0x280
[  336.554253][T22283]  should_failslab+0x8c/0xb0
[  336.554290][T22283]  kmem_cache_alloc_noprof+0x50/0x310
[  336.554334][T22283]  ? audit_log_start+0x365/0x6c0
[  336.554400][T22283]  audit_log_start+0x365/0x6c0
[  336.554507][T22283]  audit_seccomp+0x48/0x100
[  336.554539][T22283]  ? __seccomp_filter+0x68c/0x10d0
[  336.554637][T22283]  __seccomp_filter+0x69d/0x10d0
[  336.554664][T22283]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  336.554774][T22283]  ? vfs_write+0x75e/0x8d0
[  336.554813][T22283]  __secure_computing+0x82/0x150
[  336.554837][T22283]  syscall_trace_enter+0xcf/0x1e0
[  336.554864][T22283]  do_syscall_64+0xaa/0x1a0
[  336.554965][T22283]  ? clear_bhb_loop+0x25/0x80
[  336.554993][T22283]  ? clear_bhb_loop+0x25/0x80
[  336.555022][T22283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.555049][T22283] RIP: 0033:0x7f2b0ff4e969
[  336.555132][T22283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.555156][T22283] RSP: 002b:00007f2b0e5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  336.555180][T22283] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4e969
[  336.555196][T22283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.555212][T22283] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000000
[  336.555227][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.555243][T22283] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  336.555271][T22283]  </TASK>
[  336.788750][T22274] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.873766][T22274] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.875820][T22295] rdma_op ffff888174792d80 conn xmit_rdma 0000000000000000
[  336.957081][T22297] hsr_slave_0: left promiscuous mode
[  336.962899][T22297] hsr_slave_1: left promiscuous mode
[  337.011362][T22274] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.036326][T22274] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.051454][T22274] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.082987][T22274] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.230303][T22303] blktrace: Concurrent blktraces are not allowed on loop18
[  337.232123][T22304] __nla_validate_parse: 17 callbacks suppressed
[  337.232151][T22304] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5215'.
[  337.504356][T22312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5217'.
[  337.510450][T22311] loop8: detected capacity change from 0 to 1024
[  337.521449][T22311] EXT4-fs: Ignoring removed bh option
[  337.527050][T22311] EXT4-fs: inline encryption not supported
[  337.569395][T22311] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  337.581395][T22311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  337.591400][T22311] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5219: lblock 2 mapped to illegal pblock 2 (length 1)
[  337.631540][T22311] __quota_error: 424 callbacks suppressed
[  337.631562][T22311] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  337.647493][T22311] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5219: lblock 0 mapped to illegal pblock 48 (length 1)
[  337.661928][T22311] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  337.671579][T22311] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5219: Failed to acquire dquot type 0
[  337.692886][T22311] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  337.703359][T22311] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5219: mark_inode_dirty error
[  337.732184][T22311] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  337.783974][T22311] EXT4-fs (loop8): 1 orphan inode deleted
[  337.791703][T22311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.805033][   T37] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  337.823347][   T37] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  337.831916][   T37] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0
[  337.847175][T22311] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  337.868554][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.921299][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'.
[  337.930666][   T29] audit: type=1400 audit(1746658289.729:15580): avc:  denied  { write } for  pid=22317 comm="syz.2.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  337.954081][T22320] syz!: rxe_newlink: already configured on team_slave_0
[  337.956186][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5224'.
[  337.973947][T22325] rxe_newlink: 2 callbacks suppressed
[  337.973961][T22325] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  338.010273][   T29] audit: type=1400 audit(1746658289.809:15581): avc:  denied  { bind } for  pid=22329 comm="syz.2.5225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  338.030549][   T29] audit: type=1400 audit(1746658289.809:15582): avc:  denied  { name_bind } for  pid=22329 comm="syz.2.5225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  338.051597][   T29] audit: type=1400 audit(1746658289.809:15583): avc:  denied  { node_bind } for  pid=22329 comm="syz.2.5225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  338.083700][   T29] audit: type=1400 audit(1746658289.869:15584): avc:  denied  { listen } for  pid=22329 comm="syz.2.5225" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  338.105439][   T29] audit: type=1400 audit(1746658289.869:15585): avc:  denied  { name_connect } for  pid=22329 comm="syz.2.5225" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  338.127080][   T29] audit: type=1400 audit(1746658289.869:15586): avc:  denied  { accept } for  pid=22329 comm="syz.2.5225" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  338.261188][T22349] rdma_op ffff888174790980 conn xmit_rdma 0000000000000000
[  338.324432][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'.
[  338.336925][T22356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.360097][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5235'.
[  338.397382][T22356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.467265][T22356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.527387][T22356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.604212][T22356] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.615985][T22356] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.639776][T22356] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.651972][T22356] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.825177][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5237'.
[  338.836552][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5238'.
[  338.848361][T22363] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  338.931506][T22374] FAULT_INJECTION: forcing a failure.
[  338.931506][T22374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.944752][T22374] CPU: 1 UID: 0 PID: 22374 Comm: syz.1.5242 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  338.944788][T22374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  338.944805][T22374] Call Trace:
[  338.944814][T22374]  <TASK>
[  338.944828][T22374]  __dump_stack+0x1d/0x30
[  338.944855][T22374]  dump_stack_lvl+0xe8/0x140
[  338.944881][T22374]  dump_stack+0x15/0x1b
[  338.944902][T22374]  should_fail_ex+0x265/0x280
[  338.944935][T22374]  should_fail+0xb/0x20
[  338.945028][T22374]  should_fail_usercopy+0x1a/0x20
[  338.945052][T22374]  _copy_from_user+0x1c/0xb0
[  338.945079][T22374]  generic_map_update_batch+0x3b9/0x540
[  338.945114][T22374]  ? __pfx_generic_map_update_batch+0x10/0x10
[  338.945223][T22374]  bpf_map_do_batch+0x255/0x380
[  338.945258][T22374]  __sys_bpf+0x2e0/0x790
[  338.945357][T22374]  __x64_sys_bpf+0x41/0x50
[  338.945381][T22374]  x64_sys_call+0x2478/0x2fb0
[  338.945402][T22374]  do_syscall_64+0xd0/0x1a0
[  338.945475][T22374]  ? clear_bhb_loop+0x25/0x80
[  338.945500][T22374]  ? clear_bhb_loop+0x25/0x80
[  338.945601][T22374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.945630][T22374] RIP: 0033:0x7f2b0ff4e969
[  338.945704][T22374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.945723][T22374] RSP: 002b:00007f2b0e5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  338.945744][T22374] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4e969
[  338.945756][T22374] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 000000000000001a
[  338.945769][T22374] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000000
[  338.945785][T22374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.945807][T22374] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  338.945832][T22374]  </TASK>
[  339.159096][T22379] FAULT_INJECTION: forcing a failure.
[  339.159096][T22379] name failslab, interval 1, probability 0, space 0, times 0
[  339.164171][T22377] loop8: detected capacity change from 0 to 512
[  339.171938][T22379] CPU: 0 UID: 0 PID: 22379 Comm: syz.1.5245 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  339.171976][T22379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  339.171992][T22379] Call Trace:
[  339.171997][T22379]  <TASK>
[  339.172007][T22379]  __dump_stack+0x1d/0x30
[  339.172042][T22379]  dump_stack_lvl+0xe8/0x140
[  339.172068][T22379]  dump_stack+0x15/0x1b
[  339.172092][T22379]  should_fail_ex+0x265/0x280
[  339.172138][T22379]  should_failslab+0x8c/0xb0
[  339.172229][T22379]  kmem_cache_alloc_noprof+0x50/0x310
[  339.172274][T22379]  ? security_file_alloc+0x32/0x100
[  339.172310][T22379]  security_file_alloc+0x32/0x100
[  339.172348][T22379]  init_file+0x5c/0x1d0
[  339.172389][T22379]  alloc_empty_file+0x8b/0x200
[  339.172432][T22379]  path_openat+0x68/0x2170
[  339.172478][T22379]  ? path_openat+0x1bf8/0x2170
[  339.172505][T22379]  ? _parse_integer_limit+0x170/0x190
[  339.172544][T22379]  ? _parse_integer+0x27/0x40
[  339.172579][T22379]  ? kstrtoull+0x111/0x140
[  339.172650][T22379]  do_filp_open+0x109/0x230
[  339.172682][T22379]  do_sys_openat2+0xa6/0x110
[  339.172702][T22379]  __se_sys_openat2+0x194/0x1f0
[  339.172806][T22379]  __x64_sys_openat2+0x55/0x70
[  339.172833][T22379]  x64_sys_call+0x21e0/0x2fb0
[  339.172861][T22379]  do_syscall_64+0xd0/0x1a0
[  339.172966][T22379]  ? clear_bhb_loop+0x25/0x80
[  339.172994][T22379]  ? clear_bhb_loop+0x25/0x80
[  339.173022][T22379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.173108][T22379] RIP: 0033:0x7f2b0ff4e969
[  339.173136][T22379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.173161][T22379] RSP: 002b:00007f2b0e5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[  339.173187][T22379] RAX: ffffffffffffffda RBX: 00007f2b10175fa0 RCX: 00007f2b0ff4e969
[  339.173210][T22379] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  339.173249][T22379] RBP: 00007f2b0e5b7090 R08: 0000000000000000 R09: 0000000000000000
[  339.173265][T22379] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  339.173282][T22379] R13: 0000000000000000 R14: 00007f2b10175fa0 R15: 00007ffe66596d28
[  339.173307][T22379]  </TASK>
[  339.424982][T22377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.441430][T22377] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.576705][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5251'.
[  339.589496][T22398] syz!: rxe_newlink: already configured on team_slave_0
[  339.627763][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.722980][T22414] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5253'.
[  339.735070][T22413] smc: net device bond0 applied user defined pnetid SYZ2
[  339.764844][T22413] smc: net device bond0 erased user defined pnetid SYZ2
[  340.022789][T22428] loop8: detected capacity change from 0 to 1024
[  340.030254][T22428] EXT4-fs: Ignoring removed bh option
[  340.036447][T22428] EXT4-fs: inline encryption not supported
[  340.042876][T22428] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  340.054250][T22428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  340.067161][T22428] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5262: lblock 2 mapped to illegal pblock 2 (length 1)
[  340.088359][T22428] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 48: comm syz.8.5262: lblock 0 mapped to illegal pblock 48 (length 1)
[  340.112117][T22428] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5262: Failed to acquire dquot type 0
[  340.124034][T22428] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  340.134871][T22428] EXT4-fs error (device loop8): ext4_evict_inode:259: inode #11: comm syz.8.5262: mark_inode_dirty error
[  340.147423][T22428] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  340.157817][T22428] EXT4-fs (loop8): 1 orphan inode deleted
[  340.164518][T22428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.192500][T15055] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1)
[  340.227754][T15055] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:65: Failed to release dquot type 0
[  340.259740][T22428] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  340.262144][T22432] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in;
[  340.262144][T22432]    program syz.1.5263 not setting count and/or reply_len properly
[  340.350842][T17471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.471540][T22454] rdma_op ffff888136300580 conn xmit_rdma 0000000000000000
[  340.680220][T22474] FAULT_INJECTION: forcing a failure.
[  340.680220][T22474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.693369][T22474] CPU: 1 UID: 0 PID: 22474 Comm: syz.9.5282 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  340.693439][T22474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  340.693452][T22474] Call Trace:
[  340.693458][T22474]  <TASK>
[  340.693466][T22474]  __dump_stack+0x1d/0x30
[  340.693489][T22474]  dump_stack_lvl+0xe8/0x140
[  340.693570][T22474]  dump_stack+0x15/0x1b
[  340.693586][T22474]  should_fail_ex+0x265/0x280
[  340.693670][T22474]  should_fail+0xb/0x20
[  340.693740][T22474]  should_fail_usercopy+0x1a/0x20
[  340.693758][T22474]  _copy_from_user+0x1c/0xb0
[  340.693780][T22474]  ___sys_sendmsg+0xc1/0x1d0
[  340.693877][T22474]  __x64_sys_sendmsg+0xd4/0x160
[  340.693901][T22474]  x64_sys_call+0x2999/0x2fb0
[  340.693939][T22474]  do_syscall_64+0xd0/0x1a0
[  340.693961][T22474]  ? clear_bhb_loop+0x25/0x80
[  340.694032][T22474]  ? clear_bhb_loop+0x25/0x80
[  340.694054][T22474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.694075][T22474] RIP: 0033:0x7fc6bd03e969
[  340.694090][T22474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.694108][T22474] RSP: 002b:00007fc6bb6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.694152][T22474] RAX: ffffffffffffffda RBX: 00007fc6bd265fa0 RCX: 00007fc6bd03e969
[  340.694165][T22474] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  340.694177][T22474] RBP: 00007fc6bb6a7090 R08: 0000000000000000 R09: 0000000000000000
[  340.694190][T22474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.694202][T22474] R13: 0000000000000000 R14: 00007fc6bd265fa0 R15: 00007ffc1369d9c8
[  340.694222][T22474]  </TASK>
[  340.898591][T22484] rdma_op ffff888174792580 conn xmit_rdma 0000000000000000
[  340.917141][T22478] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.974718][T22495] FAULT_INJECTION: forcing a failure.
[  340.974718][T22495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.988088][T22495] CPU: 0 UID: 0 PID: 22495 Comm: syz.2.5291 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  340.988121][T22495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  340.988202][T22495] Call Trace:
[  340.988208][T22495]  <TASK>
[  340.988216][T22495]  __dump_stack+0x1d/0x30
[  340.988241][T22495]  dump_stack_lvl+0xe8/0x140
[  340.988259][T22495]  dump_stack+0x15/0x1b
[  340.988283][T22495]  should_fail_ex+0x265/0x280
[  340.988322][T22495]  should_fail+0xb/0x20
[  340.988370][T22495]  should_fail_usercopy+0x1a/0x20
[  340.988388][T22495]  _copy_from_user+0x1c/0xb0
[  340.988414][T22495]  vmemdup_user+0x59/0xd0
[  340.988438][T22495]  path_setxattrat+0x1b6/0x310
[  340.988491][T22495]  __x64_sys_fsetxattr+0x6b/0x80
[  340.988581][T22495]  x64_sys_call+0x2f7c/0x2fb0
[  340.988655][T22495]  do_syscall_64+0xd0/0x1a0
[  340.988681][T22495]  ? clear_bhb_loop+0x25/0x80
[  340.988702][T22495]  ? clear_bhb_loop+0x25/0x80
[  340.988723][T22495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.988750][T22495] RIP: 0033:0x7f6330b9e969
[  340.988767][T22495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.988789][T22495] RSP: 002b:00007f632f207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  340.988854][T22495] RAX: ffffffffffffffda RBX: 00007f6330dc5fa0 RCX: 00007f6330b9e969
[  340.988870][T22495] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffffff
[  340.988886][T22495] RBP: 00007f632f207090 R08: 0000000000000003 R09: 0000000000000000
[  340.988902][T22495] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000001
[  340.988917][T22495] R13: 0000000000000000 R14: 00007f6330dc5fa0 R15: 00007ffe2a96cf68
[  340.988942][T22495]  </TASK>
[  341.196919][T22478] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.262309][T22478] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.309713][T22510] batman_adv: batadv0: Adding interface: dummy0
[  341.316102][T22510] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.342263][T22510] batman_adv: batadv0: Interface activated: dummy0
[  341.373209][T22478] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.389771][T22508] syz!: rxe_newlink: already configured on team_slave_0
[  341.464840][T22478] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.483183][T22478] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.502484][T22478] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.519138][T22478] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.527886][T22521] pim6reg1: entered promiscuous mode
[  341.533231][T22521] pim6reg1: entered allmulticast mode
[  341.593077][T22525] rdma_op ffff8881195f0180 conn xmit_rdma 0000000000000000
[  341.811749][T22541] ==================================================================
[  341.819896][T22541] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  341.827220][T22541] 
[  341.829574][T22541] write to 0xffff888107a86b00 of 8 bytes by task 22539 on cpu 0:
[  341.837312][T22541]  mas_wmb_replace+0x20e/0x14a0
[  341.842194][T22541]  mas_wr_store_entry+0x17ae/0x2b60
[  341.847412][T22541]  mas_store_prealloc+0x74d/0x9e0
[  341.852460][T22541]  vma_iter_store_new+0x1c5/0x200
[  341.857519][T22541]  vma_complete+0x125/0x570
[  341.862067][T22541]  __split_vma+0x54c/0x610
[  341.866530][T22541]  vma_modify+0x107/0x210
[  341.870910][T22541]  vma_modify_flags+0x101/0x130
[  341.875783][T22541]  mprotect_fixup+0x2cc/0x570
[  341.880487][T22541]  do_mprotect_pkey+0x6d6/0x980
[  341.885349][T22541]  __x64_sys_mprotect+0x48/0x60
[  341.890226][T22541]  x64_sys_call+0x2794/0x2fb0
[  341.894937][T22541]  do_syscall_64+0xd0/0x1a0
[  341.899465][T22541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.905372][T22541] 
[  341.907699][T22541] read to 0xffff888107a86b00 of 8 bytes by task 22541 on cpu 1:
[  341.915337][T22541]  mas_state_walk+0x485/0x650
[  341.920030][T22541]  mas_walk+0x30/0x120
[  341.924110][T22541]  lock_vma_under_rcu+0xa2/0x2f0
[  341.929096][T22541]  do_user_addr_fault+0x233/0x1090
[  341.934231][T22541]  exc_page_fault+0x54/0xc0
[  341.938761][T22541]  asm_exc_page_fault+0x26/0x30
[  341.943626][T22541] 
[  341.945954][T22541] value changed: 0xffff88810a8c26c1 -> 0xffff888107a86b00
[  341.953068][T22541] 
[  341.955395][T22541] Reported by Kernel Concurrency Sanitizer on:
[  341.961550][T22541] CPU: 1 UID: 0 PID: 22541 Comm: syz.9.5306 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) 
[  341.974062][T22541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  341.984129][T22541] ==================================================================