last executing test programs:

1m43.840985188s ago: executing program 3 (id=357):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)

1m43.79186288s ago: executing program 3 (id=358):
clock_adjtime(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
clock_adjtime(0x6, &(0x7f00000008c0)={0x3, 0x7fffffffffffffff, 0x5, 0x1ff, 0x8000000000000001, 0xfffffffffffffb95, 0x2, 0x2, 0x8, 0x1, 0x8, 0x1a, 0x1, 0xf, 0x2, 0x3, 0x9cb3, 0x7, 0x2, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffff, 0x5, 0x1})
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000004c0)=0x10, 0x800)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000500), &(0x7f0000000580)=0x4)
r3 = syz_io_uring_setup(0x73b2, 0x0, &(0x7f00000005c0), &(0x7f00000001c0))
syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x80, 0x7, 0x7, 0x7fff, 0x2, 0x5, 0xe, 0x2, 0x100000000, 0x10, 0x7, 0xee, 0x1, 0x2, 0x4, 0x5, 0x1, 0x3, 0x546, 0x0, 0x5, 0x4, 0xa41, 0x2, 0x5, 0x4e1})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000d82b9b00000000009500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1)

1m43.768091351s ago: executing program 3 (id=360):
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x857f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
clock_getres(0x1, 0x0)

1m43.751679452s ago: executing program 3 (id=361):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x12024, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x52}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000245, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
syz_clone(0x0, &(0x7f0000000300)="18c7ad77532760fae8ee922b02edc12e04703095b8bc0565fad82116c2ca8232b31f6d7f33473c7f3efdfdda83fdf4ea467f53c9f71b9a8c3687ce1d860ac02174310d", 0x43, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)="719de1e2f4d44052b8cbb9e58044d6f18be9d8f25408ea2319d7f15a714b248b5343225860d4b6279e8f")
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r6, &(0x7f0000000540)=[{&(0x7f00000003c0)="8df5863a27", 0x5}], 0x1, 0x7a00, 0x0, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x801, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0xffc0})
openat$cgroup_ro(r6, &(0x7f0000000580)='devices.list\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0)
clock_adjtime(0x6, &(0x7f00000000c0)={0xffffffff, 0x8cf9608000000000, 0x9, 0x8, 0x7, 0x9, 0x3d8d, 0x3, 0x709, 0x80, 0x0, 0x7, 0x40, 0x1000, 0x2, 0x8, 0x1ff, 0x40, 0xb, 0x7, 0xa, 0x6, 0x6, 0x8001, 0x0, 0x1})
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)

1m43.640356847s ago: executing program 3 (id=362):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000008000000000000003968cf2f1125a9145bd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18)
r13 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=<r14=>0x0, &(0x7f00000003c0)=<r15=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r14, r15, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000})
io_uring_enter(r13, 0x1b96, 0x106a, 0x22, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)

1m43.442642875s ago: executing program 3 (id=363):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@usrquota}, {@bsdgroups}]}, 0x1, 0x4eb, &(0x7f0000000fc0)="$eJzs3U1oXNUeAPAzM0mbpHkvbd/j0fbBa6EP6gfN5ANpom5cqYuCWHCjUGMyjTWTTMhMahMKprqr4EIUBXHh3p07N3ZlEcS17sWFVLRGUEG4cu/MpJNJJhnaNNPm/n5wO+d+ZP7ndPifuffce+cGILVOxP9kQugPIXwTQhiozq7f4ET1ZfXWlcl4yoQoOvdzJtkunq9vWv+7AyGElRBCTwjh+adDeCWzMW55aXlmolgsLNTm85XZ+Xx5afn0xdmJ6cJ0YW547Mz4+NjQ6Mj4jrX12juvXTv7+bP7Pv39rZs33v3yi7ha/bV1je24Ez0tlleb3h0ONSzrCiE8eTfB7iO5Wnt6O10R7kj8+f0rhHAyyf+BkEs+TSANoiiK/or2t1q9EgF7VjbZB85kB0MI1XI2OzhY3Yf/d+jLFkvlyqMXSotzU9V95YOhO3vhYrEwVDtWOBi6M/H8cFK+PT/SND8aQrIP/F6uN5kfnCwVp3a3qwOaHGjK/99y1fwHUiI55B/odC2ATjDkB+kl/yG9GvK/r5P1AHaf739IL/kP6SX/Ib3kP6SX/If0kv+QXg35/1kn6wHsqufOno2nqH7/+9SlpcWZ0qXTU4XyzODs4uTgZGlhfnC6VJpO7tmZ3e79iqXS/PBjYfFyvlIoV/LlpeXzs6XFucr55L7+84XuXWkV0I5Dx69/lwkhrDzem0yxfbV1chX2tijKhE7fgwx0Rq7THRDQMYb+Ib0c4wPNP9HbtTYKWNXq923DfGjaEnhQZDtdAaBjTh11/g/Syvg/pJfxf0gv+/jAJo/oW2er8X/gwdRq/N85Pdj7+ls8/+sfDc/uGgoh/DOE8G2ue3/9WV/AXpD9MVPb/z818P/+5rX7Mn8kpwji/YHXPzr3weWJTG35L2vLKx/GyyuVhZGGP2x5wHBbFEVv7GBDgG3U8zR59UUOAKm2euvKZH3azbg/PVW9CGFj/K7a2GRPco6ybzWz7lqFzA5du7ByNYRwpBo/E8JKY4Tq886rBzJ9q7kN8Q/XXjPVt0jq25U8N/3O4q9v//bxjzbE/19D/GN39T8C6XE97n+GNsu/bJLTYS3/1vc//Tt07UTr/i+71v/lWvR/x9uM8erHb/7QMv7VEI5tGr8eryeJ1Rw/rtupNuPffOmF/7RaF31SfZ/N4tfFpXxldj5fXlo+nfyO3HRhbnjszPj42NDoyHg+GaPO10eqN3riyNc3tmp/X4v4W7U/XvZwm+3/879fvXhii/gPndz88z+8RfzeEMIjbcb/deT7l1uti+NPtWh/dov48bLRNuOX339mf5ubAgC7oLy0PDNRLBYWFBQUOlK4en9Uo6nQ6Z4JuNfKS/GheZz07W3/9r2uEAAAAAAAAAAAALCt3bicuNNtBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYC/4OAAD//7fl0yg=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (fail_nth: 2)

1m43.424936286s ago: executing program 32 (id=363):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@usrquota}, {@bsdgroups}]}, 0x1, 0x4eb, &(0x7f0000000fc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (fail_nth: 2)

1m25.401051403s ago: executing program 1 (id=567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4000000}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000080)=0xfffffffb)
close_range(r4, 0xffffffffffffffff, 0x0)

1m25.366635235s ago: executing program 1 (id=568):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)

1m25.326799927s ago: executing program 1 (id=569):
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69394a090000320100000000000000000000ffff64010102ff0200006d1f6acb3d000000000000000000000001"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000500000004"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0x23, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)

1m25.326062847s ago: executing program 1 (id=570):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x40, 0xfe, 0x0, 0x75465d5d34dd81da, 0x1}}, 0x1c}}, 0x4000)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r2, r0, 0x0)
finit_module(r2, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1412, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x50001}, 0x4001)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x800, 0x14)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)

1m25.2391281s ago: executing program 1 (id=571):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x10}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$packet(0x11, 0x3, 0x300)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f000000fa00))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001880))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',jndno=', @ANYRESHEX=r6, @ANYBLOB=',version=9p2000,\x00'])
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c)
r9 = socket(0x28, 0x2, 0x2c3c)
sendmmsg$sock(r9, &(0x7f0000000a00)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="e5694582e6416980b1bf1ffb34a2d7e74ca401425edcfcfd43204c1c15d9978abfabb3f7742dcd652e543f7b228408a9059da12c4503517320ee6e39e9f4e3fbea3145f45670757017d5b93a14bceb2cb80bc8ae03988c8567268dc8ad5003814696bf2bf8369cb1939c0eb6445adc23", 0x70}, {&(0x7f0000000240)="1499e875e7dff0e30bc33173d4df0f68f1f49364775e5bef63a15a48582429563fbb3ee00568fd2f38748e9ad8", 0x2d}, {&(0x7f00000002c0)}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000340)="e1f2eca2937241a3af", 0x9}, {&(0x7f00000003c0)="5a52899c94afacfebcc3b810fe6b0a194db3f7cfc25e04e63e9db3260fc19e020e171667c00e60d305bdff5e365cf2f9446343955405f476585e6e9a997d82c4fc606e41a9f22ff13623895dfdb8ee3aa88ac6116c02a02c454d16ce3cd61e37eecb67679011b1cc2aeed9ac89bab88b0d94bb7fe407a2fc4334da7a46a50d70a73566d0a389c63be214115afe5f9a205f56c97d9d427fc4ddbd4e607f6a7c9caf67687cc0f8198dbd4474e566ae37925208", 0xb2}, {&(0x7f0000000680)="e78e83ed7eb0ced7d69bbba802917848f5fb55fb369ee41367eb218e6ec6c008e0ba7344d06616f3af84adde77166e200f44bd60359a86a272d92688eded9265baed3e65546eb2292ece12b1630022d009b9ba5f98072bf67c753a16cba5da819eed27fd560ca7a874422678a3ab46184d7609c9039ea06633f52af704147d509e8a4f3cb0c0930d69da3554f549b42c7cb09fccc41fcb6193b172133d159aa2637462cd2f9dd035986ac80db3c66abd97f896e16af2272223ac", 0xba}, {&(0x7f0000000740)="e8712320a41cd186600ef55638b394eca63b3763e28ac031e190e686348bf42fe63144dbcf72707c4ce64dc11bbbece8db9cc1f1841dcc2d6ce45f57e15ccb45472c3bb5fd9b60794164bd7bb45284778a1541dd9ba7f8f0c9ea66926f841f3db5b22081fd52ed8446d3d57790ce31b4a8aa1737f9a17d9910788b4a1d2f96c86e1d273b01dac4c40fdae8eff8261419bf756d02c0f22fb6ec313e4d5967494ac5770a31b6aedded670f96e13b8839027f4dc68fb804f01765cd92f1101effe6063fbc41dce41a882731e6a5bb04ba76a7af3aab76100e1f57ec18803ed62f03fe2aa6181f44110d68cf20a6460cc49dd9a94a4f6230", 0xf6}, {&(0x7f0000000480)="9c3b3fb1b77c048388c9c17e3734959102e8c025bb809a5ea88084f4aadad0e5976be7507c17d782fb402cd93ae82ecc7b0e684b31ec6270902373cc0595fada", 0x40}, {&(0x7f00000004c0)="fbc346b3fa479e621eca6ae2fca9ba7d8ecf2833add73eec81288a3926ca1f7507c2e73ff66f1de3d9dfdbd26b0f8f740317ba860d593be7bde067ff", 0x3c}], 0xa, &(0x7f0000000900)}}], 0x1, 0x2404c000)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m25.112432546s ago: executing program 1 (id=572):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xdd39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x8, 0x0, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x6, &(0x7f0000000680)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(r7, 0x0, 0x40000000, 0x0)

1m25.112158146s ago: executing program 33 (id=572):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xdd39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x8, 0x0, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x6, &(0x7f0000000680)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(r7, 0x0, 0x40000000, 0x0)

1m21.891681483s ago: executing program 6 (id=615):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb)
close_range(r1, 0xffffffffffffffff, 0x0)

1m21.844011275s ago: executing program 6 (id=618):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x3a, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r4, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f00000009c0)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@resuid}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@delalloc}, {@nolazytime}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") (async)
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', <r6=>0x0, 0x4, 0x4, 0x4, 0x7, 0x5a, @remote, @mcast2, 0x7800, 0x10, 0x8, 0xbf9}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r4, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/29, 0x1d, <r7=>0x0, &(0x7f0000000800)=""/215, 0xd7}}, 0x10) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000340)='GPL\x00', 0x67e, 0xdd, &(0x7f0000000580)=""/221, 0x40f00, 0x0, '\x00', r6, @fallback=0x21, r4, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7c2}, 0x10, r7, r8, 0x8, &(0x7f0000000980)=[r9, 0x1, r3, r0, r4], &(0x7f0000000ac0)=[{0x0, 0x1, 0x10, 0x3}, {0x4, 0x1, 0x9, 0x2}, {0x0, 0x2, 0xc, 0x3}, {0x4, 0x1, 0xa, 0x6}, {0x2, 0x1, 0xb, 0x9}, {0x1, 0x2, 0xa, 0xb}, {0x0, 0x2, 0x2}, {0x1, 0x2, 0x4}], 0x10, 0x9}, 0x94) (async)
fallocate(r5, 0x0, 0x0, 0x1001f0) (async)
copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc615, 0x101, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

1m21.780370138s ago: executing program 6 (id=619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)

1m21.700603091s ago: executing program 6 (id=622):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x40, 0xfe, 0x0, 0x75465d5d34dd81da, 0x1}}, 0x1c}}, 0x4000)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r2, r0, 0x0)
finit_module(r2, 0x0, 0x0)

1m21.652925553s ago: executing program 6 (id=623):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r3, 0xffffffffffffffff, 0x0)

1m18.400572802s ago: executing program 6 (id=673):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000900)=[{0x0, 0x48, 0x200000000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r1=>0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000104000082000000ff0f000000400000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0300000005020000000000000300000000004000000500603fb92115be0000000000"], 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)
getdents64(r3, &(0x7f0000000040)=""/49, 0x31)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
getdents(r3, 0xfffffffffffffffd, 0x58)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000780), 0x0}, 0x20)

1m18.400312522s ago: executing program 34 (id=673):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000900)=[{0x0, 0x48, 0x200000000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r1=>0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000104000082000000ff0f000000400000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0300000005020000000000000300000000004000000500603fb92115be0000000000"], 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8)
getdents64(r3, &(0x7f0000000040)=""/49, 0x31)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
getdents(r3, 0xfffffffffffffffd, 0x58)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000780), 0x0}, 0x20)

1m9.300501909s ago: executing program 5 (id=768):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000005, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x201, 0x0, 0x80}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50)
bind$tipc(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
setregid(0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r3, 0x3)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x4)

1m9.056506289s ago: executing program 5 (id=770):
r0 = syz_io_uring_setup(0x4553, &(0x7f0000000400)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES8=r1], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x5535, 0x3acd, 0x22, 0x0, 0x0)

1m9.023964901s ago: executing program 5 (id=773):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)

1m8.921688375s ago: executing program 5 (id=776):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000000)='./file0/file0\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

1m8.866954138s ago: executing program 5 (id=779):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x200000000000012e, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)

1m8.740479283s ago: executing program 5 (id=781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
epoll_create(0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c3000000000280012800b000100697036746e6c0000180002801400020000000000000000000000ffff640101010000000000"], 0x5c}}, 0x20000084)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1m8.740331183s ago: executing program 35 (id=781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
epoll_create(0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c3000000000280012800b000100697036746e6c0000180002801400020000000000000000000000ffff640101010000000000"], 0x5c}}, 0x20000084)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

4.088536306s ago: executing program 8 (id=1599):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x76bd43)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0)
pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x40000500, 0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e85")

3.000755802s ago: executing program 7 (id=1605):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901)

2.939730275s ago: executing program 7 (id=1606):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r4, 0x0, 0x40008003}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
unshare(0x8000000)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r7 = inotify_init1(0x800)
inotify_add_watch(r7, &(0x7f0000000080)='./file0/../file0\x00', 0x950009ba)

2.847898389s ago: executing program 7 (id=1609):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080)
r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0)

2.568378741s ago: executing program 4 (id=1613):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc3}, {0x6, 0x11, 0xa7}, {0x8, 0x15, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4014}, 0x8080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

2.471026675s ago: executing program 8 (id=1615):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_0\x00', {0x2, 0x4e22, @broadcast}})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800"/57, 0x39}, {&(0x7f0000000240)}, {&(0x7f0000001800)="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", 0x1000}], 0x3)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
pipe2(&(0x7f0000000280), 0x4080)
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18)
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = socket$unix(0x1, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, 0x0, &(0x7f00000000c0)=0x54)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_emit_ethernet(0x148, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000001c1a6e514494b81003d00861a81b794dd6036f544010e0600fe800000000000000000000000000011000000000000000000000000000000001d0a020000000000fc02000000000000000000000000000000000000000000000000ffffe0000001ff02000000000000000000000000000100000000000000000000000000000001fe800000076cc3960000000000000000000000aa000100000000000005020000040103c204000002450000000001000000000000010800"/198, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="20c2000990780003080a000000b0000000052204fb2c220a7d6a1cf0e6c20ecb1e0306131246683ce7866d890f1533218e9cd6c41101040200000000b229d67378f890179fed551fa6fb1df6f7694712fcbb2cc6d4075662b765d3d766676d8e2bf6c5702acfefbde75d1780a53c3d9f682125ab4dbe45050fa6"], 0x0)

2.411558628s ago: executing program 8 (id=1617):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18)
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

2.34856167s ago: executing program 8 (id=1620):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0)

2.264249054s ago: executing program 0 (id=1621):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket(0x1e, 0x4, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/223, 0xdf}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x40002000, 0x0)

2.142807209s ago: executing program 0 (id=1622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000005, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x201, 0x0, 0x80}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50)
bind$tipc(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
setregid(0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r3, 0x3)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x4)

2.12485328s ago: executing program 0 (id=1623):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

2.099685271s ago: executing program 0 (id=1624):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080)
r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.931569088s ago: executing program 7 (id=1625):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000600))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0xa, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x0, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x800, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)
syz_usb_disconnect(r0)

1.914391389s ago: executing program 4 (id=1626):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r2, 0xffffffffffffffff, 0x0)

1.89205056s ago: executing program 4 (id=1627):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x76bd43)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0)
pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x40000500, 0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e85")

1.41257635s ago: executing program 8 (id=1629):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901)

1.152255301s ago: executing program 2 (id=1630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xfffffffb)
close_range(r1, 0xffffffffffffffff, 0x0)

1.094711074s ago: executing program 0 (id=1631):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x64, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='\x00')
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)

915.528991ms ago: executing program 7 (id=1632):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0)

902.286962ms ago: executing program 2 (id=1633):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x18}, 0x1fa2, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000250900000000000055190100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000000bfc433c0963eec1a3412d76aeb74a6ab5694c9bf76ad1d37a3772da4b3757ff032b250da262a1901e18b199c7be42f2dc756349876c5cb9829a02dcb0c8e3e30933838a06a42bde04054d12e2a0cd009f02953ae75b304e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x39fb, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r6, &(0x7f00000004c0)="c9b8573bb6a15f1c6ea49c0c87b1301238ffb1b93cae867d46eeb991", &(0x7f0000000f80)=""/189}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x18)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

726.606609ms ago: executing program 2 (id=1634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

425.411482ms ago: executing program 8 (id=1635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

319.907176ms ago: executing program 2 (id=1636):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r1)

277.435509ms ago: executing program 2 (id=1637):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xfffffffb)
close_range(r1, 0xffffffffffffffff, 0x0)

267.694239ms ago: executing program 4 (id=1638):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r2, 0xffffffffffffffff, 0x0)

197.870042ms ago: executing program 4 (id=1639):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901)

164.186963ms ago: executing program 2 (id=1640):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x64, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='\x00')
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)

163.625473ms ago: executing program 4 (id=1641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080)
r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

69.585268ms ago: executing program 0 (id=1642):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_io_uring_complete(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001740), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564"], 0xfc, 0x1b8, &(0x7f0000001400)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read(r1, &(0x7f0000000400)=""/4096, 0x1000)

0s ago: executing program 7 (id=1643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xfffffffb)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

87] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53086 sclass=netlink_route_socket pid=7987 comm=syz.7.1131
[  125.322404][ T7989] FAULT_INJECTION: forcing a failure.
[  125.322404][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.335677][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.7.1132 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  125.335720][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  125.335736][ T7989] Call Trace:
[  125.335745][ T7989]  <TASK>
[  125.335757][ T7989]  __dump_stack+0x1d/0x30
[  125.335784][ T7989]  dump_stack_lvl+0xe8/0x140
[  125.335801][ T7989]  dump_stack+0x15/0x1b
[  125.335820][ T7989]  should_fail_ex+0x265/0x280
[  125.335859][ T7989]  should_fail+0xb/0x20
[  125.335873][ T7989]  should_fail_usercopy+0x1a/0x20
[  125.335909][ T7989]  fpu__restore_sig+0x12d/0xaa0
[  125.335938][ T7989]  ? should_fail_ex+0xdb/0x280
[  125.335993][ T7989]  __ia32_sys_rt_sigreturn+0x29f/0x350
[  125.336056][ T7989]  x64_sys_call+0x2d4b/0x3000
[  125.336076][ T7989]  do_syscall_64+0xd2/0x200
[  125.336094][ T7989]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  125.336120][ T7989]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  125.336193][ T7989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.336228][ T7989] RIP: 0033:0x7f2bb9d2df90
[  125.336280][ T7989] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  125.336296][ T7989] RSP: 002b:00007f2bb878eb70 EFLAGS: 00000293
[  125.336314][ T7989] RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 00007f2bb9d2df90
[  125.336325][ T7989] RDX: 0000000000000000 RSI: 00007f2bb878ec10 RDI: 00000000ffffff9c
[  125.336358][ T7989] RBP: 00007f2bb878ec10 R08: 0000000000000000 R09: 0000000000000000
[  125.336368][ T7989] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  125.336415][ T7989] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  125.336432][ T7989]  </TASK>
[  125.611969][ T8006] siw: device registration error -23
[  125.665677][ T8011] syzkaller0: entered promiscuous mode
[  125.671244][ T8011] syzkaller0: entered allmulticast mode
[  125.680139][ T8011] xt_SECMARK: invalid mode: 2
[  125.745829][ T8022] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  125.769835][ T8022] netlink: 'syz.0.1144': attribute type 1 has an invalid length.
[  125.800693][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'.
[  125.822371][ T8029] loop2: detected capacity change from 0 to 2048
[  125.839086][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1148'.
[  125.860558][ T8029]  loop2: p1 p2 p3
[  125.926712][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1155'.
[  125.937110][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8048 comm=syz.8.1155
[  125.952284][ T8048] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1155'.
[  125.961882][ T8048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8048 comm=syz.8.1155
[  126.024736][ T8048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8048 comm=syz.8.1155
[  126.043746][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8048 comm=syz.8.1155
[  126.151039][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'.
[  126.151876][ T8070] pim6reg: entered allmulticast mode
[  126.167412][ T8070] pim6reg: left allmulticast mode
[  126.221899][ T8065] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  126.228570][ T8065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  126.236239][ T8065] vhci_hcd vhci_hcd.0: Device attached
[  126.309995][ T8073] vhci_hcd: connection closed
[  126.310294][   T31] vhci_hcd: stop threads
[  126.319545][   T31] vhci_hcd: release socket
[  126.324030][   T31] vhci_hcd: disconnect device
[  126.864904][ T8083] sch_fq: defrate 53322 ignored.
[  126.881997][ T8087] FAULT_INJECTION: forcing a failure.
[  126.881997][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.895240][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.7.1165 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.895274][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  126.895355][ T8087] Call Trace:
[  126.895369][ T8087]  <TASK>
[  126.895378][ T8087]  __dump_stack+0x1d/0x30
[  126.895446][ T8087]  dump_stack_lvl+0xe8/0x140
[  126.895466][ T8087]  dump_stack+0x15/0x1b
[  126.895504][ T8087]  should_fail_ex+0x265/0x280
[  126.895548][ T8087]  should_fail+0xb/0x20
[  126.895568][ T8087]  should_fail_usercopy+0x1a/0x20
[  126.895601][ T8087]  _copy_from_user+0x1c/0xb0
[  126.895627][ T8087]  do_ip_setsockopt+0x338/0x2240
[  126.895711][ T8087]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[  126.895753][ T8087]  ip_setsockopt+0x58/0x110
[  126.895793][ T8087]  ipv6_setsockopt+0xfb/0x130
[  126.895874][ T8087]  udpv6_setsockopt+0x99/0xb0
[  126.895904][ T8087]  sock_common_setsockopt+0x69/0x80
[  126.895929][ T8087]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  126.895956][ T8087]  __sys_setsockopt+0x184/0x200
[  126.896082][ T8087]  __x64_sys_setsockopt+0x64/0x80
[  126.896122][ T8087]  x64_sys_call+0x20ec/0x3000
[  126.896165][ T8087]  do_syscall_64+0xd2/0x200
[  126.896191][ T8087]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  126.896250][ T8087]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  126.896311][ T8087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.896339][ T8087] RIP: 0033:0x7f2bb9d2f749
[  126.896411][ T8087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.896429][ T8087] RSP: 002b:00007f2bb878f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  126.896519][ T8087] RAX: ffffffffffffffda RBX: 00007f2bb9f85fa0 RCX: 00007f2bb9d2f749
[  126.896531][ T8087] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003
[  126.896546][ T8087] RBP: 00007f2bb878f090 R08: 0000000000000004 R09: 0000000000000000
[  126.896560][ T8087] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  126.896575][ T8087] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  126.896644][ T8087]  </TASK>
[  127.202517][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  127.331627][ T8106] loop2: detected capacity change from 0 to 1024
[  127.338800][ T8106] EXT4-fs: Ignoring removed orlov option
[  127.417219][ T8106] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.462893][ T8111] FAULT_INJECTION: forcing a failure.
[  127.462893][ T8111] name failslab, interval 1, probability 0, space 0, times 0
[  127.475770][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.2.1176 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  127.475804][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  127.475859][ T8111] Call Trace:
[  127.475868][ T8111]  <TASK>
[  127.475877][ T8111]  __dump_stack+0x1d/0x30
[  127.475904][ T8111]  dump_stack_lvl+0xe8/0x140
[  127.475930][ T8111]  dump_stack+0x15/0x1b
[  127.475952][ T8111]  should_fail_ex+0x265/0x280
[  127.475995][ T8111]  should_failslab+0x8c/0xb0
[  127.476066][ T8111]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  127.476103][ T8111]  ? __alloc_skb+0x101/0x320
[  127.476190][ T8111]  __alloc_skb+0x101/0x320
[  127.476225][ T8111]  netlink_alloc_large_skb+0xbf/0xf0
[  127.476258][ T8111]  netlink_sendmsg+0x3cf/0x6b0
[  127.476278][ T8111]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.476438][ T8111]  __sock_sendmsg+0x145/0x180
[  127.476465][ T8111]  ____sys_sendmsg+0x31e/0x4e0
[  127.476494][ T8111]  ___sys_sendmsg+0x17b/0x1d0
[  127.476626][ T8111]  __x64_sys_sendmsg+0xd4/0x160
[  127.476705][ T8111]  x64_sys_call+0x191e/0x3000
[  127.476804][ T8111]  do_syscall_64+0xd2/0x200
[  127.476857][ T8111]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  127.476884][ T8111]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  127.476922][ T8111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.476983][ T8111] RIP: 0033:0x7f4cb4d4f749
[  127.477002][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.477025][ T8111] RSP: 002b:00007f4cb37af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.477047][ T8111] RAX: ffffffffffffffda RBX: 00007f4cb4fa5fa0 RCX: 00007f4cb4d4f749
[  127.477059][ T8111] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  127.477071][ T8111] RBP: 00007f4cb37af090 R08: 0000000000000000 R09: 0000000000000000
[  127.477126][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.477145][ T8111] R13: 00007f4cb4fa6038 R14: 00007f4cb4fa5fa0 R15: 00007ffdffcbc298
[  127.477168][ T8111]  </TASK>
[  127.685894][ T8117] ip6t_srh: unknown srh match flags  4000
[  127.695968][ T8117] loop4: detected capacity change from 0 to 512
[  127.708207][ T8117] EXT4-fs (loop4): can't read group descriptor 0
[  127.776498][ T8118] lo speed is unknown, defaulting to 1000
[  127.782542][ T8118] lo speed is unknown, defaulting to 1000
[  127.892001][ T8131] lo speed is unknown, defaulting to 1000
[  127.898307][ T8131] lo speed is unknown, defaulting to 1000
[  127.968154][ T8142] FAULT_INJECTION: forcing a failure.
[  127.968154][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.981674][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) 
[  127.981711][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  127.981727][ T8142] Call Trace:
[  127.981736][ T8142]  <TASK>
[  127.981746][ T8142]  __dump_stack+0x1d/0x30
[  127.981774][ T8142]  dump_stack_lvl+0xe8/0x140
[  127.981861][ T8142]  dump_stack+0x15/0x1b
[  127.981884][ T8142]  should_fail_ex+0x265/0x280
[  127.981928][ T8142]  should_fail+0xb/0x20
[  127.981948][ T8142]  should_fail_usercopy+0x1a/0x20
[  127.981974][ T8142]  _copy_from_user+0x1c/0xb0
[  127.982007][ T8142]  kstrtouint_from_user+0x69/0xf0
[  127.982033][ T8142]  ? 0xffffffff81000000
[  127.982049][ T8142]  ? selinux_file_permission+0x1e4/0x320
[  127.982144][ T8142]  proc_fail_nth_write+0x50/0x160
[  127.982175][ T8142]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  127.982227][ T8142]  vfs_write+0x269/0x960
[  127.982257][ T8142]  ? vfs_read+0x4e6/0x770
[  127.982286][ T8142]  ? __rcu_read_unlock+0x4f/0x70
[  127.982327][ T8142]  ? __fget_files+0x184/0x1c0
[  127.982405][ T8142]  ksys_write+0xda/0x1a0
[  127.982429][ T8142]  __x64_sys_write+0x40/0x50
[  127.982476][ T8142]  x64_sys_call+0x2802/0x3000
[  127.982495][ T8142]  do_syscall_64+0xd2/0x200
[  127.982513][ T8142]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  127.982536][ T8142]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  127.982647][ T8142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.982667][ T8142] RIP: 0033:0x7f6bde4ce1ff
[  127.982708][ T8142] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  127.982724][ T8142] RSP: 002b:00007f6bdcf37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  127.982740][ T8142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6bde4ce1ff
[  127.982751][ T8142] RDX: 0000000000000001 RSI: 00007f6bdcf370a0 RDI: 0000000000000006
[  127.982761][ T8142] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  127.982847][ T8142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  127.982858][ T8142] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  127.982875][ T8142]  </TASK>
[  128.246210][ T8145] FAULT_INJECTION: forcing a failure.
[  128.246210][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.259809][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.8.1188 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.259843][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.259859][ T8145] Call Trace:
[  128.259867][ T8145]  <TASK>
[  128.259944][ T8145]  __dump_stack+0x1d/0x30
[  128.259971][ T8145]  dump_stack_lvl+0xe8/0x140
[  128.259997][ T8145]  dump_stack+0x15/0x1b
[  128.260020][ T8145]  should_fail_ex+0x265/0x280
[  128.260074][ T8145]  should_fail+0xb/0x20
[  128.260124][ T8145]  should_fail_usercopy+0x1a/0x20
[  128.260151][ T8145]  strncpy_from_user+0x25/0x230
[  128.260187][ T8145]  ? kmem_cache_alloc_noprof+0x242/0x480
[  128.260329][ T8145]  ? getname_flags+0x80/0x3b0
[  128.260430][ T8145]  getname_flags+0xae/0x3b0
[  128.260470][ T8145]  user_path_at+0x28/0x130
[  128.260519][ T8145]  __se_sys_name_to_handle_at+0xfd/0x640
[  128.260570][ T8145]  ? ksys_write+0x192/0x1a0
[  128.260615][ T8145]  __x64_sys_name_to_handle_at+0x67/0x80
[  128.260656][ T8145]  x64_sys_call+0x1552/0x3000
[  128.260727][ T8145]  do_syscall_64+0xd2/0x200
[  128.260788][ T8145]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  128.260824][ T8145]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  128.260912][ T8145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.260940][ T8145] RIP: 0033:0x7f41e771f749
[  128.261001][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.261024][ T8145] RSP: 002b:00007f41e617f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[  128.261048][ T8145] RAX: ffffffffffffffda RBX: 00007f41e7975fa0 RCX: 00007f41e771f749
[  128.261063][ T8145] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffffff
[  128.261155][ T8145] RBP: 00007f41e617f090 R08: 0000000000000200 R09: 0000000000000000
[  128.261171][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.261186][ T8145] R13: 00007f41e7976038 R14: 00007f41e7975fa0 R15: 00007ffe325604b8
[  128.261210][ T8145]  </TASK>
[  128.263172][ T8150] FAULT_INJECTION: forcing a failure.
[  128.263172][ T8150] name failslab, interval 1, probability 0, space 0, times 0
[  128.472496][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.7.1191 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.472547][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.472566][ T8150] Call Trace:
[  128.472574][ T8150]  <TASK>
[  128.472581][ T8150]  __dump_stack+0x1d/0x30
[  128.472602][ T8150]  dump_stack_lvl+0xe8/0x140
[  128.472706][ T8150]  dump_stack+0x15/0x1b
[  128.472720][ T8150]  should_fail_ex+0x265/0x280
[  128.472750][ T8150]  should_failslab+0x8c/0xb0
[  128.472774][ T8150]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  128.472846][ T8150]  ? __alloc_skb+0x101/0x320
[  128.472878][ T8150]  __alloc_skb+0x101/0x320
[  128.472947][ T8150]  tipc_nl_compat_dumpit+0xbb/0x420
[  128.472970][ T8150]  tipc_nl_compat_recv+0x64e/0x800
[  128.472992][ T8150]  ? __pfx_tipc_nl_sk_dump+0x10/0x10
[  128.473051][ T8150]  ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10
[  128.473097][ T8150]  genl_family_rcv_msg_doit+0x143/0x1b0
[  128.473127][ T8150]  genl_rcv_msg+0x422/0x460
[  128.473169][ T8150]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  128.473192][ T8150]  netlink_rcv_skb+0x123/0x220
[  128.473220][ T8150]  ? __pfx_genl_rcv_msg+0x10/0x10
[  128.473249][ T8150]  genl_rcv+0x28/0x40
[  128.473404][ T8150]  netlink_unicast+0x5c0/0x690
[  128.473433][ T8150]  netlink_sendmsg+0x58b/0x6b0
[  128.473453][ T8150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.473517][ T8150]  __sock_sendmsg+0x145/0x180
[  128.473541][ T8150]  ____sys_sendmsg+0x31e/0x4e0
[  128.473573][ T8150]  ___sys_sendmsg+0x17b/0x1d0
[  128.473605][ T8150]  __x64_sys_sendmsg+0xd4/0x160
[  128.473711][ T8150]  x64_sys_call+0x191e/0x3000
[  128.473732][ T8150]  do_syscall_64+0xd2/0x200
[  128.473807][ T8150]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  128.473832][ T8150]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  128.473932][ T8150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.473989][ T8150] RIP: 0033:0x7f2bb9d2f749
[  128.474008][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.474028][ T8150] RSP: 002b:00007f2bb878f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.474045][ T8150] RAX: ffffffffffffffda RBX: 00007f2bb9f85fa0 RCX: 00007f2bb9d2f749
[  128.474074][ T8150] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005
[  128.474085][ T8150] RBP: 00007f2bb878f090 R08: 0000000000000000 R09: 0000000000000000
[  128.474096][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.474106][ T8150] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  128.474124][ T8150]  </TASK>
[  128.482616][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.757316][ T8160] IPv6: NLM_F_CREATE should be specified when creating new route
[  128.969470][   T29] kauditd_printk_skb: 257 callbacks suppressed
[  128.969488][   T29] audit: type=1107 audit(1763742128.773:14483): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  129.050305][ T8177] lo speed is unknown, defaulting to 1000
[  129.056716][ T8177] lo speed is unknown, defaulting to 1000
[  129.153179][ T8176] siw: device registration error -23
[  129.357134][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.536512][ T8187] loop4: detected capacity change from 0 to 512
[  129.562764][ T8187] EXT4-fs: Ignoring removed i_version option
[  129.568836][ T8187] EXT4-fs: Ignoring removed bh option
[  129.711253][ T8187] EXT4-fs mount: 11 callbacks suppressed
[  129.711269][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.754357][ T8187] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.825516][ T8192] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  129.837408][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.881394][ T8199] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.889168][ T8199] FAULT_INJECTION: forcing a failure.
[  129.889168][ T8199] name failslab, interval 1, probability 0, space 0, times 0
[  129.901874][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.7.1208 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.901905][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  129.901922][ T8199] Call Trace:
[  129.901931][ T8199]  <TASK>
[  129.901974][ T8199]  __dump_stack+0x1d/0x30
[  129.901995][ T8199]  dump_stack_lvl+0xe8/0x140
[  129.902017][ T8199]  dump_stack+0x15/0x1b
[  129.902091][ T8199]  should_fail_ex+0x265/0x280
[  129.902128][ T8199]  ? fib6_new_table+0x97/0x210
[  129.902201][ T8199]  should_failslab+0x8c/0xb0
[  129.902235][ T8199]  __kmalloc_cache_noprof+0x4c/0x4a0
[  129.902269][ T8199]  fib6_new_table+0x97/0x210
[  129.902307][ T8199]  ip6_route_info_create+0xaf/0x390
[  129.902393][ T8199]  inet6_rtm_newroute+0x35e/0x1020
[  129.902448][ T8199]  ? __pfx_cmp_ex_search+0x10/0x10
[  129.902547][ T8199]  ? __memcg_slab_free_hook+0x135/0x230
[  129.902593][ T8199]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  129.902622][ T8199]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  129.902659][ T8199]  netlink_rcv_skb+0x123/0x220
[  129.902732][ T8199]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  129.902781][ T8199]  rtnetlink_rcv+0x1c/0x30
[  129.902800][ T8199]  netlink_unicast+0x5c0/0x690
[  129.902832][ T8199]  netlink_sendmsg+0x58b/0x6b0
[  129.902895][ T8199]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.902921][ T8199]  __sock_sendmsg+0x145/0x180
[  129.902953][ T8199]  ____sys_sendmsg+0x31e/0x4e0
[  129.903011][ T8199]  ___sys_sendmsg+0x17b/0x1d0
[  129.903046][ T8199]  __x64_sys_sendmsg+0xd4/0x160
[  129.903075][ T8199]  x64_sys_call+0x191e/0x3000
[  129.903104][ T8199]  do_syscall_64+0xd2/0x200
[  129.903130][ T8199]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  129.903238][ T8199]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  129.903278][ T8199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.903299][ T8199] RIP: 0033:0x7f2bb9d2f749
[  129.903329][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.903346][ T8199] RSP: 002b:00007f2bb878f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.903367][ T8199] RAX: ffffffffffffffda RBX: 00007f2bb9f85fa0 RCX: 00007f2bb9d2f749
[  129.903378][ T8199] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000005
[  129.903428][ T8199] RBP: 00007f2bb878f090 R08: 0000000000000000 R09: 0000000000000000
[  129.903443][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.903459][ T8199] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  129.903484][ T8199]  </TASK>
[  130.252461][ T8201] __nla_validate_parse: 5 callbacks suppressed
[  130.252490][ T8201] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1209'.
[  130.308926][ T8207] loop7: detected capacity change from 0 to 128
[  130.403508][ T8207] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.420868][ T8207] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.457803][ T6561] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.483117][ T8221] loop7: detected capacity change from 0 to 1024
[  130.492171][ T8220] loop4: detected capacity change from 0 to 512
[  130.497228][ T8221] EXT4-fs: Ignoring removed orlov option
[  130.498689][ T8220] EXT4-fs: Ignoring removed i_version option
[  130.510233][ T8220] EXT4-fs: Ignoring removed bh option
[  130.537832][ T8223] syzkaller0: entered promiscuous mode
[  130.543382][ T8223] syzkaller0: entered allmulticast mode
[  130.556097][ T8221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.559733][ T8223] xt_SECMARK: invalid mode: 2
[  130.631464][ T8220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.754442][   T29] audit: type=1400 audit(1763742130.448:14484): avc:  denied  { setattr } for  pid=8219 comm="syz.7.1217" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  130.778059][ T8220] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.828285][ T8234] netlink: 'syz.8.1221': attribute type 7 has an invalid length.
[  130.836232][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1221'.
[  130.845492][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.858255][ T8237] FAULT_INJECTION: forcing a failure.
[  130.858255][ T8237] name failslab, interval 1, probability 0, space 0, times 0
[  130.870952][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.2.1223 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  130.870983][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  130.870995][ T8237] Call Trace:
[  130.871006][ T8237]  <TASK>
[  130.871016][ T8237]  __dump_stack+0x1d/0x30
[  130.871046][ T8237]  dump_stack_lvl+0xe8/0x140
[  130.871073][ T8237]  dump_stack+0x15/0x1b
[  130.871103][ T8237]  should_fail_ex+0x265/0x280
[  130.871228][ T8237]  should_failslab+0x8c/0xb0
[  130.871266][ T8237]  __kmalloc_noprof+0xa5/0x570
[  130.871305][ T8237]  ? bpf_test_init+0x86/0x140
[  130.871361][ T8237]  bpf_test_init+0x86/0x140
[  130.871397][ T8237]  bpf_prog_test_run_xdp+0x305/0x970
[  130.871438][ T8237]  ? kstrtouint+0x31/0xc0
[  130.871471][ T8237]  ? __rcu_read_unlock+0x4f/0x70
[  130.871535][ T8237]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  130.871579][ T8237]  bpf_prog_test_run+0x22a/0x390
[  130.871667][ T8237]  __sys_bpf+0x4c0/0x7c0
[  130.871702][ T8237]  __x64_sys_bpf+0x41/0x50
[  130.871816][ T8237]  x64_sys_call+0x2aee/0x3000
[  130.871900][ T8237]  do_syscall_64+0xd2/0x200
[  130.871923][ T8237]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  130.871998][ T8237]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  130.872060][ T8237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.872094][ T8237] RIP: 0033:0x7f4cb4d4f749
[  130.872114][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.872210][ T8237] RSP: 002b:00007f4cb37af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  130.872230][ T8237] RAX: ffffffffffffffda RBX: 00007f4cb4fa5fa0 RCX: 00007f4cb4d4f749
[  130.872247][ T8237] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  130.872309][ T8237] RBP: 00007f4cb37af090 R08: 0000000000000000 R09: 0000000000000000
[  130.872325][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.872341][ T8237] R13: 00007f4cb4fa6038 R14: 00007f4cb4fa5fa0 R15: 00007ffdffcbc298
[  130.872366][ T8237]  </TASK>
[  131.114909][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.162213][ T4155] Bluetooth: hci0: sending frame failed (-49)
[  131.168397][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  131.213565][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1228'.
[  131.241864][ T8248] loop4: detected capacity change from 0 to 256
[  131.307155][ T8257] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1231'.
[  131.383381][ T8265] IPv6: NLM_F_CREATE should be specified when creating new route
[  131.397143][ T8265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.404465][ T8265] IPv6: NLM_F_CREATE should be set when creating new route
[  131.406506][ T8259] infiniband syz!: set active
[  131.416567][ T8259] infiniband syz!: added team_slave_0
[  131.443484][ T8267] loop4: detected capacity change from 0 to 512
[  131.456537][ T8259] RDS/IB: syz!: added
[  131.460575][ T8259] smc: adding ib device syz! with port count 1
[  131.475356][ T8267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.477661][ T8259] smc:    ib device syz! port 1 has no pnetid
[  131.494361][ T8267] ext4 filesystem being mounted at /281/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.516192][ T8267] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1235: corrupted inode contents
[  131.536208][ T8267] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1235: mark_inode_dirty error
[  131.569751][ T8267] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1235: corrupted inode contents
[  131.600999][ T8267] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1235: mark_inode_dirty error
[  131.627638][ T8252] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13)
[  131.634365][ T8252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  131.642195][ T8252] vhci_hcd vhci_hcd.0: Device attached
[  131.664209][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.693014][ T8275] vhci_hcd: connection closed
[  131.693195][ T2348] vhci_hcd: stop threads
[  131.702324][ T2348] vhci_hcd: release socket
[  131.706758][ T2348] vhci_hcd: disconnect device
[  131.722114][   T29] audit: type=1400 audit(1763742131.355:14485): avc:  denied  { watch } for  pid=8277 comm="syz.4.1236" path="/282" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  131.791093][ T8280] loop4: detected capacity change from 0 to 512
[  131.893162][ T8280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.905916][ T8280] ext4 filesystem being mounted at /283/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.934252][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1237: corrupted inode contents
[  132.018133][ T8280] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1237: mark_inode_dirty error
[  132.082023][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1237: corrupted inode contents
[  132.106960][ T8280] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1237: mark_inode_dirty error
[  132.152550][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.178024][   T29] audit: type=1326 audit(1763742131.767:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.1238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x0
[  132.346689][ T8290] siw: device registration error -23
[  132.353861][   T29] audit: type=1107 audit(1763742131.935:14487): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  132.408806][ T8293] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  132.512053][ T8294] syzkaller0: entered promiscuous mode
[  132.512078][ T8294] syzkaller0: entered allmulticast mode
[  132.639043][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1246'.
[  132.676784][ T8312] loop4: detected capacity change from 0 to 512
[  132.720406][ T8312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.724250][ T8315] siw: device registration error -23
[  132.747402][ T8312] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.802392][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.823947][ T8322] netlink: 'syz.0.1253': attribute type 21 has an invalid length.
[  132.854135][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1256'.
[  132.904850][ T8322] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1253'.
[  132.914020][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'.
[  132.955444][ T8329] loop7: detected capacity change from 0 to 256
[  132.987261][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1254'.
[  133.056962][   T29] audit: type=1400 audit(1763742132.599:14488): avc:  denied  { getopt } for  pid=8336 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  133.081547][   T29] audit: type=1326 audit(1763742132.627:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  133.086249][   T29] audit: type=1326 audit(1763742132.627:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  133.086361][   T29] audit: type=1326 audit(1763742132.627:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  133.086442][   T29] audit: type=1326 audit(1763742132.627:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06c456f783 code=0x7ffc0000
[  133.125970][ T8340] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.148107][ T2562] Bluetooth: hci0: Frame reassembly failed (-84)
[  133.148875][ T8342] Bluetooth: hci0: Frame reassembly failed (-90)
[  133.266950][ T8348] FAULT_INJECTION: forcing a failure.
[  133.266950][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.280220][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.4.1264 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  133.280254][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  133.280267][ T8348] Call Trace:
[  133.280275][ T8348]  <TASK>
[  133.280282][ T8348]  __dump_stack+0x1d/0x30
[  133.280382][ T8348]  dump_stack_lvl+0xe8/0x140
[  133.280391][ T8347] loop7: detected capacity change from 0 to 512
[  133.280409][ T8348]  dump_stack+0x15/0x1b
[  133.280428][ T8348]  should_fail_ex+0x265/0x280
[  133.280525][ T8348]  should_fail+0xb/0x20
[  133.280549][ T8348]  should_fail_usercopy+0x1a/0x20
[  133.280580][ T8348]  _copy_from_user+0x1c/0xb0
[  133.280614][ T8348]  dev_ethtool+0x183/0x1670
[  133.280682][ T8348]  ? full_name_hash+0x92/0xe0
[  133.280724][ T8348]  ? strcmp+0x22/0x50
[  133.280758][ T8348]  dev_ioctl+0x2e0/0x960
[  133.280787][ T8348]  sock_do_ioctl+0x197/0x220
[  133.280870][ T8348]  sock_ioctl+0x41b/0x610
[  133.280904][ T8348]  ? __pfx_sock_ioctl+0x10/0x10
[  133.280951][ T8348]  __se_sys_ioctl+0xce/0x140
[  133.280982][ T8348]  __x64_sys_ioctl+0x43/0x50
[  133.281010][ T8348]  x64_sys_call+0x1816/0x3000
[  133.281040][ T8348]  do_syscall_64+0xd2/0x200
[  133.281069][ T8348]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  133.281131][ T8348]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  133.281177][ T8348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.281207][ T8348] RIP: 0033:0x7f6bde4cf749
[  133.281227][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.281296][ T8348] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.281320][ T8348] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  133.281338][ T8348] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000004
[  133.281355][ T8348] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  133.281424][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.281441][ T8348] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  133.281467][ T8348]  </TASK>
[  133.371651][ T8356] loop2: detected capacity change from 0 to 256
[  133.384920][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.403495][ T8347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.407649][ T8360] netlink: 16158 bytes leftover after parsing attributes in process `syz.4.1270'.
[  133.407989][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.439435][ T8347] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.463069][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.552698][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.552997][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.560713][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.578126][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.586238][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.594326][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.605665][ T8369] loop7: detected capacity change from 0 to 1024
[  133.612733][ T8369] EXT4-fs: Ignoring removed orlov option
[  133.616346][ T8360] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  133.630123][ T8369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.666871][ T8369] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.687071][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.815001][ T8384] FAULT_INJECTION: forcing a failure.
[  133.815001][ T8384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.828173][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  133.828268][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  133.828285][ T8384] Call Trace:
[  133.828317][ T8384]  <TASK>
[  133.828326][ T8384]  __dump_stack+0x1d/0x30
[  133.828354][ T8384]  dump_stack_lvl+0xe8/0x140
[  133.828385][ T8384]  dump_stack+0x15/0x1b
[  133.828407][ T8384]  should_fail_ex+0x265/0x280
[  133.828449][ T8384]  should_fail+0xb/0x20
[  133.828560][ T8384]  should_fail_usercopy+0x1a/0x20
[  133.828587][ T8384]  _copy_from_user+0x1c/0xb0
[  133.828620][ T8384]  ____sys_sendmsg+0x1c5/0x4e0
[  133.828648][ T8384]  ___sys_sendmsg+0x17b/0x1d0
[  133.828721][ T8384]  __sys_sendmmsg+0x178/0x300
[  133.828758][ T8384]  __x64_sys_sendmmsg+0x57/0x70
[  133.828781][ T8384]  x64_sys_call+0x1c4a/0x3000
[  133.828887][ T8384]  do_syscall_64+0xd2/0x200
[  133.828913][ T8384]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  133.828949][ T8384]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  133.829036][ T8384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.829137][ T8384] RIP: 0033:0x7f6bde4cf749
[  133.829156][ T8384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.829180][ T8384] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  133.829203][ T8384] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  133.829218][ T8384] RDX: 0000000000000001 RSI: 0000200000001980 RDI: 0000000000000007
[  133.829232][ T8384] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  133.829288][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.829304][ T8384] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  133.829327][ T8384]  </TASK>
[  133.844814][ T8386] lo speed is unknown, defaulting to 1000
[  133.888325][ T8383] loop8: detected capacity change from 0 to 512
[  133.902530][ T8386] lo speed is unknown, defaulting to 1000
[  133.912942][ T8383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  134.042509][ T8389] FAULT_INJECTION: forcing a failure.
[  134.042509][ T8389] name failslab, interval 1, probability 0, space 0, times 0
[  134.055393][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: syz.4.1281 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.055420][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  134.055432][ T8389] Call Trace:
[  134.055438][ T8389]  <TASK>
[  134.055512][ T8389]  __dump_stack+0x1d/0x30
[  134.055540][ T8389]  dump_stack_lvl+0xe8/0x140
[  134.055566][ T8389]  dump_stack+0x15/0x1b
[  134.055588][ T8389]  should_fail_ex+0x265/0x280
[  134.055657][ T8389]  should_failslab+0x8c/0xb0
[  134.055699][ T8389]  __kvmalloc_node_noprof+0x12e/0x670
[  134.055741][ T8389]  ? bpf_test_run_xdp_live+0xed/0x11c0
[  134.055787][ T8389]  bpf_test_run_xdp_live+0xed/0x11c0
[  134.055831][ T8389]  ? __pfx_autoremove_wake_function+0x10/0x10
[  134.055861][ T8389]  ? 0xffffffffa0205240
[  134.055880][ T8389]  ? synchronize_rcu+0x45/0x320
[  134.055906][ T8389]  ? 0xffffffffa0205240
[  134.055924][ T8389]  ? 0xffffffffa0205240
[  134.055940][ T8389]  ? bpf_dispatcher_change_prog+0x6ec/0x7f0
[  134.055977][ T8389]  ? 0xffffffffa0205240
[  134.056003][ T8389]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  134.056059][ T8389]  bpf_prog_test_run_xdp+0x525/0x970
[  134.056109][ T8389]  ? kstrtouint+0x31/0xc0
[  134.056204][ T8389]  ? __rcu_read_unlock+0x4f/0x70
[  134.056232][ T8389]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  134.056270][ T8389]  bpf_prog_test_run+0x22a/0x390
[  134.056292][ T8389]  __sys_bpf+0x4c0/0x7c0
[  134.056345][ T8389]  __x64_sys_bpf+0x41/0x50
[  134.056376][ T8389]  x64_sys_call+0x2aee/0x3000
[  134.056398][ T8389]  do_syscall_64+0xd2/0x200
[  134.056485][ T8389]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  134.056512][ T8389]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  134.056554][ T8389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.056585][ T8389] RIP: 0033:0x7f6bde4cf749
[  134.056603][ T8389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.056624][ T8389] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.056645][ T8389] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  134.056660][ T8389] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  134.056671][ T8389] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  134.056744][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.056758][ T8389] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  134.056782][ T8389]  </TASK>
[  134.322917][ T8383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.338032][ T8383] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.353677][ T8383] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.1278: deleted inode referenced: 16
[  134.354092][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  134.354110][   T29] audit: type=1400 audit(1763742133.815:14563): avc:  denied  { rename } for  pid=8382 comm="syz.8.1278" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  134.415793][ T8398] loop4: detected capacity change from 0 to 512
[  134.443227][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.455625][ T8402] loop7: detected capacity change from 0 to 136
[  134.466918][ T8398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.481599][ T8398] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.493336][ T8402] rock: directory entry would overflow storage
[  134.499693][ T8402] rock: sig=0x4f50, size=4, remaining=3
[  134.505375][ T8402] iso9660: Corrupted directory entry in block 2 of inode 1472
[  134.515941][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.559240][ T8411] FAULT_INJECTION: forcing a failure.
[  134.559240][ T8411] name failslab, interval 1, probability 0, space 0, times 0
[  134.572021][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.4.1287 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.572054][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  134.572068][ T8411] Call Trace:
[  134.572158][ T8411]  <TASK>
[  134.572167][ T8411]  __dump_stack+0x1d/0x30
[  134.572190][ T8411]  dump_stack_lvl+0xe8/0x140
[  134.572211][ T8411]  dump_stack+0x15/0x1b
[  134.572233][ T8411]  should_fail_ex+0x265/0x280
[  134.572276][ T8411]  should_failslab+0x8c/0xb0
[  134.572319][ T8411]  __kmalloc_cache_node_noprof+0x54/0x4a0
[  134.572358][ T8411]  ? __get_vm_area_node+0x106/0x1d0
[  134.572405][ T8411]  __get_vm_area_node+0x106/0x1d0
[  134.572446][ T8411]  __vmalloc_node_range_noprof+0x28c/0xed0
[  134.572488][ T8411]  ? xstateregs_set+0xfe/0x1c0
[  134.572574][ T8411]  ? _parse_integer_limit+0x170/0x190
[  134.572697][ T8411]  ? xstateregs_set+0xfe/0x1c0
[  134.572800][ T8411]  vmalloc_noprof+0x82/0xc0
[  134.572917][ T8411]  ? xstateregs_set+0xfe/0x1c0
[  134.572955][ T8411]  xstateregs_set+0xfe/0x1c0
[  134.573011][ T8411]  ? __pfx_xstateregs_set+0x10/0x10
[  134.573075][ T8411]  ptrace_regset+0x22c/0x260
[  134.573106][ T8411]  ptrace_request+0xead/0x18a0
[  134.573211][ T8411]  ? get_pid_task+0x96/0xd0
[  134.573244][ T8411]  ? task_rq_lock+0x47/0xd0
[  134.573318][ T8411]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  134.573487][ T8411]  ? wait_task_inactive+0x1b5/0x2d0
[  134.573535][ T8411]  arch_ptrace+0x289/0x3f0
[  134.573561][ T8411]  __se_sys_ptrace+0xf3/0x2c0
[  134.573594][ T8411]  __x64_sys_ptrace+0x55/0x70
[  134.573649][ T8411]  x64_sys_call+0x2870/0x3000
[  134.573671][ T8411]  do_syscall_64+0xd2/0x200
[  134.573774][ T8411]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  134.573869][ T8411]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  134.573905][ T8411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.573926][ T8411] RIP: 0033:0x7f6bde4cf749
[  134.573941][ T8411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.573967][ T8411] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  134.573985][ T8411] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  134.573999][ T8411] RDX: 0000000000000202 RSI: 0000000000000310 RDI: 0000000000004205
[  134.574011][ T8411] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  134.574025][ T8411] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  134.574039][ T8411] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  134.574069][ T8411]  </TASK>
[  134.823773][ T8411] syz.4.1287: vmalloc error: size 832, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0
[  134.837442][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.4.1287 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.837476][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  134.837493][ T8411] Call Trace:
[  134.837501][ T8411]  <TASK>
[  134.837511][ T8411]  __dump_stack+0x1d/0x30
[  134.837541][ T8411]  dump_stack_lvl+0xe8/0x140
[  134.837570][ T8411]  dump_stack+0x15/0x1b
[  134.837593][ T8411]  warn_alloc+0x12b/0x1a0
[  134.837640][ T8411]  __vmalloc_node_range_noprof+0x2b1/0xed0
[  134.837762][ T8411]  ? _parse_integer_limit+0x170/0x190
[  134.837804][ T8411]  ? xstateregs_set+0xfe/0x1c0
[  134.837907][ T8411]  vmalloc_noprof+0x82/0xc0
[  134.837946][ T8411]  ? xstateregs_set+0xfe/0x1c0
[  134.837999][ T8411]  xstateregs_set+0xfe/0x1c0
[  134.838098][ T8411]  ? __pfx_xstateregs_set+0x10/0x10
[  134.838131][ T8411]  ptrace_regset+0x22c/0x260
[  134.838182][ T8411]  ptrace_request+0xead/0x18a0
[  134.838216][ T8411]  ? get_pid_task+0x96/0xd0
[  134.838325][ T8411]  ? task_rq_lock+0x47/0xd0
[  134.838455][ T8411]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  134.838493][ T8411]  ? wait_task_inactive+0x1b5/0x2d0
[  134.838528][ T8411]  arch_ptrace+0x289/0x3f0
[  134.838554][ T8411]  __se_sys_ptrace+0xf3/0x2c0
[  134.838610][ T8411]  __x64_sys_ptrace+0x55/0x70
[  134.838644][ T8411]  x64_sys_call+0x2870/0x3000
[  134.838674][ T8411]  do_syscall_64+0xd2/0x200
[  134.838701][ T8411]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  134.838755][ T8411]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  134.838857][ T8411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.838886][ T8411] RIP: 0033:0x7f6bde4cf749
[  134.838906][ T8411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.838929][ T8411] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  134.839039][ T8411] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  134.839063][ T8411] RDX: 0000000000000202 RSI: 0000000000000310 RDI: 0000000000004205
[  134.839156][ T8411] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  134.839172][ T8411] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  134.839187][ T8411] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  134.839206][ T8411]  </TASK>
[  134.839212][ T8411] Mem-Info:
[  135.066804][ T8411] active_anon:23395 inactive_anon:3 isolated_anon:0
[  135.066804][ T8411]  active_file:24968 inactive_file:2598 isolated_file:0
[  135.066804][ T8411]  unevictable:0 dirty:241 writeback:0
[  135.066804][ T8411]  slab_reclaimable:3648 slab_unreclaimable:18223
[  135.066804][ T8411]  mapped:34480 shmem:20051 pagetables:1011
[  135.066804][ T8411]  sec_pagetables:0 bounce:0
[  135.066804][ T8411]  kernel_misc_reclaimable:0
[  135.066804][ T8411]  free:1855111 free_pcp:13403 free_cma:0
[  135.111968][ T8411] Node 0 active_anon:93580kB inactive_anon:12kB active_file:99872kB inactive_file:10392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137920kB dirty:964kB writeback:0kB shmem:80204kB kernel_stack:3648kB pagetables:4044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  135.139597][ T8411] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  135.169382][ T8411] lowmem_reserve[]: 0 2881 7859 7859
[  135.174754][ T8411] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  135.205880][ T8411] lowmem_reserve[]: 0 0 4978 4978
[  135.210987][ T8411] Node 0 Normal free:4458356kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93580kB inactive_anon:12kB active_file:99872kB inactive_file:10392kB unevictable:0kB writepending:964kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:50084kB local_pcp:34116kB free_cma:0kB
[  135.244234][ T8411] lowmem_reserve[]: 0 0 0 0
[  135.248784][ T8411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  135.261412][ T8411] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB
[  135.277525][ T8411] Node 0 Normal: 785*4kB (UME) 824*8kB (UM) 541*16kB (M) 251*32kB (UM) 224*64kB (UME) 95*128kB (UME) 169*256kB (UM) 160*512kB (UM) 112*1024kB (UME) 40*2048kB (UM) 997*4096kB (UM) = 4458420kB
[  135.296594][ T8411] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  135.305933][ T8411] 47639 total pagecache pages
[  135.310651][ T8411] 0 pages in swap cache
[  135.314828][ T8411] Free swap  = 124996kB
[  135.319000][ T8411] Total swap = 124996kB
[  135.323261][ T8411] 2097051 pages RAM
[  135.327077][ T8411] 0 pages HighMem/MovableOnly
[  135.331845][ T8411] 81087 pages reserved
[  135.338260][ T4155] Bluetooth: hci0: command 0x1003 tx timeout
[  135.344386][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  135.350518][   T29] audit: type=1400 audit(1763742134.722:14564): avc:  denied  { setopt } for  pid=8423 comm="syz.8.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  135.421920][ T8434] loop4: detected capacity change from 0 to 256
[  135.467607][ T8432] syzkaller0: entered promiscuous mode
[  135.473286][ T8432] syzkaller0: entered allmulticast mode
[  135.498066][ T8439] loop4: detected capacity change from 0 to 512
[  135.530482][ T8443] loop8: detected capacity change from 0 to 512
[  135.538803][ T8439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.549733][ T8443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.561331][ T8447] net_ratelimit: 2 callbacks suppressed
[  135.561354][ T8447] Set syz1 is full, maxelem 14 reached
[  135.562809][ T8443] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.606704][ T8439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.621542][ T8439] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.636394][ T8439] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1294: deleted inode referenced: 16
[  135.648867][ T8439] __nla_validate_parse: 67 callbacks suppressed
[  135.648888][ T8439] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1294'.
[  135.700023][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.714290][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.735831][   T29] audit: type=1326 audit(1763742135.106:14565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  135.759432][   T29] audit: type=1326 audit(1763742135.106:14566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  135.784607][   T29] audit: type=1326 audit(1763742135.134:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  135.808190][   T29] audit: type=1326 audit(1763742135.134:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  135.831772][   T29] audit: type=1326 audit(1763742135.134:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  135.879535][ T8459] lo speed is unknown, defaulting to 1000
[  135.886134][ T8459] lo speed is unknown, defaulting to 1000
[  136.094209][ T8458] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.235172][ T8466] loop8: detected capacity change from 0 to 128
[  136.242708][   T29] audit: type=1326 audit(1763742135.405:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  136.266550][   T29] audit: type=1326 audit(1763742135.405:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  136.290136][   T29] audit: type=1326 audit(1763742135.405:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.8.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  136.329742][ T8466] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  136.337643][ T8466] FAT-fs (loop8): Filesystem has been set read-only
[  136.345274][ T8466] syz.8.1304: attempt to access beyond end of device
[  136.345274][ T8466] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  136.359698][ T8466] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  136.367595][ T8466] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  136.411409][ T8465] syz.8.1304: attempt to access beyond end of device
[  136.411409][ T8465] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.467867][ T8465] syz.8.1304: attempt to access beyond end of device
[  136.467867][ T8465] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.490243][ T8466] syz.8.1304: attempt to access beyond end of device
[  136.490243][ T8466] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.562233][ T8465] syz.8.1304: attempt to access beyond end of device
[  136.562233][ T8465] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.576013][ T8466] syz.8.1304: attempt to access beyond end of device
[  136.576013][ T8466] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.589851][ T8469] syz.8.1304: attempt to access beyond end of device
[  136.589851][ T8469] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.603566][ T8466] syz.8.1304: attempt to access beyond end of device
[  136.603566][ T8466] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.623156][ T8469] syz.8.1304: attempt to access beyond end of device
[  136.623156][ T8469] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.636773][ T8466] syz.8.1304: attempt to access beyond end of device
[  136.636773][ T8466] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128
[  136.961253][ T8478] dummy0: entered allmulticast mode
[  136.970961][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'.
[  137.001865][ T8478] team0: Port device dummy0 added
[  137.017093][ T8483] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.026348][ T8483] dummy0: left allmulticast mode
[  137.031791][ T8483] team0: Failed to send options change via netlink (err -105)
[  137.039401][ T8483] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.048830][ T8483] team0: Port device dummy0 removed
[  137.055652][ T8483] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  137.172768][ T8486] loop8: detected capacity change from 0 to 512
[  137.194816][ T8488] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1311'.
[  137.215282][ T8486] EXT4-fs: Ignoring removed i_version option
[  137.221400][ T8486] EXT4-fs: Ignoring removed bh option
[  137.351037][ T8500] FAULT_INJECTION: forcing a failure.
[  137.351037][ T8500] name failslab, interval 1, probability 0, space 0, times 0
[  137.363771][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: syz.0.1317 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  137.363805][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  137.363817][ T8500] Call Trace:
[  137.363824][ T8500]  <TASK>
[  137.363831][ T8500]  __dump_stack+0x1d/0x30
[  137.363891][ T8500]  dump_stack_lvl+0xe8/0x140
[  137.363975][ T8500]  dump_stack+0x15/0x1b
[  137.363991][ T8500]  should_fail_ex+0x265/0x280
[  137.364028][ T8500]  should_failslab+0x8c/0xb0
[  137.364059][ T8500]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  137.364125][ T8500]  ? v9fs_session_init+0x78/0xde0
[  137.364165][ T8500]  kstrdup+0x3e/0xd0
[  137.364270][ T8500]  v9fs_session_init+0x78/0xde0
[  137.364300][ T8500]  ? __rcu_read_unlock+0x4f/0x70
[  137.364325][ T8500]  ? avc_has_perm_noaudit+0x1b1/0x200
[  137.364350][ T8500]  ? should_fail_ex+0xdb/0x280
[  137.364417][ T8500]  ? v9fs_mount+0x51/0x5c0
[  137.364435][ T8500]  ? should_failslab+0x8c/0xb0
[  137.364479][ T8500]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  137.364520][ T8500]  v9fs_mount+0x67/0x5c0
[  137.364539][ T8500]  ? selinux_capable+0x31/0x40
[  137.364599][ T8500]  ? __pfx_v9fs_mount+0x10/0x10
[  137.364626][ T8500]  legacy_get_tree+0x78/0xd0
[  137.364661][ T8500]  vfs_get_tree+0x57/0x1d0
[  137.364731][ T8500]  do_new_mount+0x24d/0x660
[  137.364758][ T8500]  ? security_capable+0x83/0x90
[  137.364791][ T8500]  path_mount+0x4a5/0xb70
[  137.364885][ T8500]  ? user_path_at+0x109/0x130
[  137.364944][ T8500]  __se_sys_mount+0x28c/0x2e0
[  137.364972][ T8500]  ? fput+0x8f/0xc0
[  137.364996][ T8500]  __x64_sys_mount+0x67/0x80
[  137.365028][ T8500]  x64_sys_call+0x2b51/0x3000
[  137.365079][ T8500]  do_syscall_64+0xd2/0x200
[  137.365136][ T8500]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  137.365171][ T8500]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  137.365217][ T8500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.365238][ T8500] RIP: 0033:0x7f06c456f749
[  137.365253][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.365275][ T8500] RSP: 002b:00007f06c2fcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  137.365299][ T8500] RAX: ffffffffffffffda RBX: 00007f06c47c5fa0 RCX: 00007f06c456f749
[  137.365314][ T8500] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  137.365444][ T8500] RBP: 00007f06c2fcf090 R08: 0000200000000280 R09: 0000000000000000
[  137.365458][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.365473][ T8500] R13: 00007f06c47c6038 R14: 00007f06c47c5fa0 R15: 00007ffc11d8e2b8
[  137.365491][ T8500]  </TASK>
[  137.715787][ T8486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.758424][ T8486] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.855035][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1323'.
[  137.873520][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.912706][ T8561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.935795][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1326'.
[  137.950741][ T8582] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  137.963917][ T8584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8584 comm=syz.8.1326
[  137.987467][ T8586] loop4: detected capacity change from 0 to 2048
[  137.987801][ T8586] msdos: Unknown parameter ' '
[  138.045013][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1330'.
[  138.232780][ T8602] serio: Serial port ptm0
[  138.247462][ T8605] FAULT_INJECTION: forcing a failure.
[  138.247462][ T8605] name failslab, interval 1, probability 0, space 0, times 0
[  138.247495][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.7.1336 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  138.247536][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  138.247553][ T8605] Call Trace:
[  138.247561][ T8605]  <TASK>
[  138.247570][ T8605]  __dump_stack+0x1d/0x30
[  138.247639][ T8605]  dump_stack_lvl+0xe8/0x140
[  138.247665][ T8605]  dump_stack+0x15/0x1b
[  138.247686][ T8605]  should_fail_ex+0x265/0x280
[  138.247719][ T8605]  ? call_usermodehelper_setup+0x72/0x190
[  138.247738][ T8605]  should_failslab+0x8c/0xb0
[  138.247789][ T8605]  ? __pfx_free_modprobe_argv+0x10/0x10
[  138.247818][ T8605]  __kmalloc_cache_noprof+0x4c/0x4a0
[  138.247857][ T8605]  ? __kmalloc_node_track_caller_noprof+0x399/0x580
[  138.247900][ T8605]  ? __pfx_free_modprobe_argv+0x10/0x10
[  138.247975][ T8605]  call_usermodehelper_setup+0x72/0x190
[  138.247996][ T8605]  __request_module+0x264/0x3e0
[  138.248023][ T8605]  ? should_failslab+0x8c/0xb0
[  138.248104][ T8605]  snd_timer_open+0x333/0xa10
[  138.248136][ T8605]  snd_seq_timer_open+0x18b/0x360
[  138.248172][ T8605]  ? snd_timer_instance_free+0x5f/0x70
[  138.248216][ T8605]  snd_seq_queue_timer_open+0xaf/0x140
[  138.248260][ T8605]  snd_seq_ioctl_set_queue_timer+0x148/0x1b0
[  138.248288][ T8605]  snd_seq_ioctl+0x177/0x300
[  138.248323][ T8605]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  138.248349][ T8605]  __se_sys_ioctl+0xce/0x140
[  138.248447][ T8605]  __x64_sys_ioctl+0x43/0x50
[  138.248473][ T8605]  x64_sys_call+0x1816/0x3000
[  138.248497][ T8605]  do_syscall_64+0xd2/0x200
[  138.248600][ T8605]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  138.248664][ T8605]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  138.248711][ T8605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.248743][ T8605] RIP: 0033:0x7f2bb9d2f749
[  138.248763][ T8605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.248808][ T8605] RSP: 002b:00007f2bb878f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.248828][ T8605] RAX: ffffffffffffffda RBX: 00007f2bb9f85fa0 RCX: 00007f2bb9d2f749
[  138.248840][ T8605] RDX: 0000200000000400 RSI: 0000000040605346 RDI: 0000000000000003
[  138.248851][ T8605] RBP: 00007f2bb878f090 R08: 0000000000000000 R09: 0000000000000000
[  138.248862][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.248944][ T8605] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  138.248987][ T8605]  </TASK>
[  138.270599][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1337'.
[  138.338233][ T8610] loop2: detected capacity change from 0 to 256
[  138.416136][ T8611] lo speed is unknown, defaulting to 1000
[  138.525111][ T8611] lo speed is unknown, defaulting to 1000
[  138.565709][ T8615] loop7: detected capacity change from 0 to 512
[  138.574631][ T8615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.575024][ T8615] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.608328][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.641030][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'.
[  138.907306][ T8641] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  138.950687][ T8643] loop4: detected capacity change from 0 to 512
[  138.968519][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.981334][ T8643] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.002150][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.032624][ T8648] loop4: detected capacity change from 0 to 256
[  139.151161][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'.
[  139.161049][ T8661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8661 comm=syz.0.1359
[  139.707475][ T8670] loop7: detected capacity change from 0 to 512
[  139.758630][ T8670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.758779][ T8670] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.793045][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.835061][ T8679] loop7: detected capacity change from 0 to 256
[  139.946165][   T29] kauditd_printk_skb: 167 callbacks suppressed
[  139.946179][   T29] audit: type=1326 audit(1763742139.044:14740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946210][   T29] audit: type=1326 audit(1763742139.044:14741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946243][   T29] audit: type=1326 audit(1763742139.044:14742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946400][   T29] audit: type=1326 audit(1763742139.044:14743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946504][   T29] audit: type=1326 audit(1763742139.044:14744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946811][   T29] audit: type=1326 audit(1763742139.044:14745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.946899][   T29] audit: type=1326 audit(1763742139.044:14746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.947065][   T29] audit: type=1326 audit(1763742139.044:14747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.947508][   T29] audit: type=1326 audit(1763742139.044:14748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  139.947696][   T29] audit: type=1326 audit(1763742139.044:14749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  140.005988][ T8688] loop4: detected capacity change from 0 to 1024
[  140.006368][ T8688] EXT4-fs: Ignoring removed orlov option
[  140.070856][ T8689] lo speed is unknown, defaulting to 1000
[  140.071408][ T8689] lo speed is unknown, defaulting to 1000
[  140.245367][ T8688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.485449][ T8699] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.957591][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.230233][ T8715] lo speed is unknown, defaulting to 1000
[  141.245797][ T8715] lo speed is unknown, defaulting to 1000
[  141.432726][ T8718] loop8: detected capacity change from 0 to 256
[  141.528291][ T8723] FAULT_INJECTION: forcing a failure.
[  141.528291][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.541466][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: syz.0.1379 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  141.541501][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  141.541516][ T8723] Call Trace:
[  141.541523][ T8723]  <TASK>
[  141.541531][ T8723]  __dump_stack+0x1d/0x30
[  141.541615][ T8723]  dump_stack_lvl+0xe8/0x140
[  141.541706][ T8723]  dump_stack+0x15/0x1b
[  141.541727][ T8723]  should_fail_ex+0x265/0x280
[  141.541761][ T8723]  should_fail+0xb/0x20
[  141.541796][ T8723]  should_fail_usercopy+0x1a/0x20
[  141.541823][ T8723]  strncpy_from_user+0x25/0x230
[  141.541858][ T8723]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  141.541893][ T8723]  __se_sys_memfd_create+0x1ff/0x590
[  141.541965][ T8723]  __x64_sys_memfd_create+0x31/0x40
[  141.541987][ T8723]  x64_sys_call+0x2ac2/0x3000
[  141.542008][ T8723]  do_syscall_64+0xd2/0x200
[  141.542062][ T8723]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  141.542090][ T8723]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  141.542162][ T8723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.542187][ T8723] RIP: 0033:0x7f06c456f749
[  141.542205][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.542279][ T8723] RSP: 002b:00007f06c2fade18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  141.542304][ T8723] RAX: ffffffffffffffda RBX: 000000000000050e RCX: 00007f06c456f749
[  141.542320][ T8723] RDX: 00007f06c2fadef0 RSI: 0000000000000000 RDI: 00007f06c45f4960
[  141.542335][ T8723] RBP: 0000200000000e40 R08: 00007f06c2fadbb7 R09: 00007f06c2fade40
[  141.542420][ T8723] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140
[  141.542432][ T8723] R13: 00007f06c2fadef0 R14: 00007f06c2fadeb0 R15: 00002000000002c0
[  141.542455][ T8723]  </TASK>
[  141.984258][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1384'.
[  141.993309][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1384'.
[  142.040402][ T8735] loop7: detected capacity change from 0 to 512
[  142.056536][ T8735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.567102][ T8742] siw: device registration error -23
[  142.713099][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1387'.
[  142.744401][ T8744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8744 comm=syz.8.1387
[  143.006821][ T8720] syz.0.1379 (8720) used greatest stack depth: 6904 bytes left
[  143.074196][ T8735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  143.074267][ T8735] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.131436][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  143.191222][ T8753] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[  143.191297][ T8753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.191340][ T8753] vhci_hcd vhci_hcd.0: Device attached
[  143.192549][ T8753] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6)
[  143.192576][ T8753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.192641][ T8753] vhci_hcd vhci_hcd.0: Device attached
[  143.205824][ T8753] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8)
[  143.205859][ T8753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  143.205892][ T8753] vhci_hcd vhci_hcd.0: Device attached
[  143.206414][ T8753] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(10)
[  143.206435][ T8753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.206459][ T8753] vhci_hcd vhci_hcd.0: Device attached
[  143.211384][ T8753] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(12)
[  143.211437][ T8753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.211511][ T8753] vhci_hcd vhci_hcd.0: Device attached
[  143.230448][ T8753] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1390'.
[  143.291965][ T4155] Bluetooth: hci0: command 0x1003 tx timeout
[  143.292195][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  143.405200][ T8762] vhci_hcd: connection closed
[  143.405220][ T8758] vhci_hcd: connection closed
[  143.405382][ T8760] vhci_hcd: connection closed
[  143.405418][ T8756] vhci_hcd: connection closed
[  143.405561][ T8754] vhci_hcd: connection closed
[  143.405664][   T52] vhci_hcd: stop threads
[  143.405676][   T52] vhci_hcd: release socket
[  143.405691][   T52] vhci_hcd: disconnect device
[  143.405812][   T52] vhci_hcd: stop threads
[  143.405820][   T52] vhci_hcd: release socket
[  143.405833][   T52] vhci_hcd: disconnect device
[  143.405943][   T52] vhci_hcd: stop threads
[  143.405949][   T52] vhci_hcd: release socket
[  143.405958][   T52] vhci_hcd: disconnect device
[  143.406029][   T52] vhci_hcd: stop threads
[  143.406037][   T52] vhci_hcd: release socket
[  143.406049][   T52] vhci_hcd: disconnect device
[  143.407200][   T52] vhci_hcd: stop threads
[  143.407210][   T52] vhci_hcd: release socket
[  143.407223][   T52] vhci_hcd: disconnect device
[  143.446803][ T3399] usb 15-1: new low-speed USB device number 2 using vhci_hcd
[  143.446838][ T3399] usb 15-1: enqueue for inactive port 0
[  143.446856][ T3399] usb 15-1: enqueue for inactive port 0
[  143.446902][ T3399] usb 15-1: enqueue for inactive port 0
[  143.520262][ T3399] vhci_hcd: vhci_device speed not set
[  143.672105][ T8771] siw: device registration error -23
[  143.711815][ T8775] FAULT_INJECTION: forcing a failure.
[  143.711815][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.725042][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: syz.2.1395 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  143.725077][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  143.725160][ T8775] Call Trace:
[  143.725169][ T8775]  <TASK>
[  143.725178][ T8775]  __dump_stack+0x1d/0x30
[  143.725212][ T8775]  dump_stack_lvl+0xe8/0x140
[  143.725261][ T8775]  dump_stack+0x15/0x1b
[  143.725279][ T8775]  should_fail_ex+0x265/0x280
[  143.725424][ T8775]  should_fail+0xb/0x20
[  143.725472][ T8775]  should_fail_usercopy+0x1a/0x20
[  143.725493][ T8775]  _copy_from_iter+0xd2/0xe80
[  143.725535][ T8775]  ? __build_skb_around+0x1ab/0x200
[  143.725574][ T8775]  ? __alloc_skb+0x223/0x320
[  143.725618][ T8775]  netlink_sendmsg+0x471/0x6b0
[  143.725722][ T8775]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.725822][ T8775]  __sock_sendmsg+0x145/0x180
[  143.725854][ T8775]  ____sys_sendmsg+0x31e/0x4e0
[  143.725882][ T8775]  ___sys_sendmsg+0x17b/0x1d0
[  143.725919][ T8775]  __x64_sys_sendmsg+0xd4/0x160
[  143.725942][ T8775]  x64_sys_call+0x191e/0x3000
[  143.726020][ T8775]  do_syscall_64+0xd2/0x200
[  143.726078][ T8775]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  143.726105][ T8775]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  143.726144][ T8775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.726191][ T8775] RIP: 0033:0x7f4cb4d4f749
[  143.726206][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.726223][ T8775] RSP: 002b:00007f4cb37af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.726241][ T8775] RAX: ffffffffffffffda RBX: 00007f4cb4fa5fa0 RCX: 00007f4cb4d4f749
[  143.726256][ T8775] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  143.726271][ T8775] RBP: 00007f4cb37af090 R08: 0000000000000000 R09: 0000000000000000
[  143.726286][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.726297][ T8775] R13: 00007f4cb4fa6038 R14: 00007f4cb4fa5fa0 R15: 00007ffdffcbc298
[  143.726356][ T8775]  </TASK>
[  143.948043][ T8777] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1397'.
[  143.971518][ T8777] loop4: detected capacity change from 0 to 512
[  143.979759][ T8777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  143.989047][ T8777] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  144.014423][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'.
[  144.061427][ T8785] loop8: detected capacity change from 0 to 1024
[  144.081669][ T8789] loop7: detected capacity change from 0 to 512
[  144.101143][ T8785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.134971][ T8789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.147748][ T8789] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.170725][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.194548][ T8785] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.1401: Allocating blocks 449-513 which overlap fs metadata
[  144.229187][ T8783] EXT4-fs (loop8): pa ffff8881071ef5b0: logic 48, phys. 177, len 21
[  144.237305][ T8783] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[  144.256925][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1404'.
[  144.268520][ T8808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8808 comm=syz.7.1404
[  144.293285][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.768022][ T8804] loop2: detected capacity change from 0 to 512
[  144.816336][ T8804] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1403: bad orphan inode 11862016
[  144.823846][ T8804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  144.824004][ T8804] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.310463][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  145.522217][ T8837] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1412'.
[  145.577040][ T8841] loop7: detected capacity change from 0 to 512
[  145.591303][ T8843] loop8: detected capacity change from 0 to 512
[  145.600827][ T8841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.614124][ T8841] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.626521][ T8843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.647805][ T8843] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.661607][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.689484][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.767112][ T8857] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1420'.
[  145.795293][ T8858] loop8: detected capacity change from 0 to 4096
[  145.801995][ T8858] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.808569][ T8858] EXT4-fs: test_dummy_encryption option not supported
[  145.836831][ T8862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8862 comm=syz.7.1422
[  145.852585][ T8862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8862 comm=syz.7.1422
[  145.897181][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.906219][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.947180][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1417'.
[  145.979110][ T8875] siw: device registration error -23
[  146.152500][ T8892] loop2: detected capacity change from 0 to 1024
[  146.159274][ T8892] EXT4-fs: Ignoring removed orlov option
[  146.169601][ T8892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.322853][ T8895] xt_CT: You must specify a L4 protocol and not use inversions on it
[  146.423685][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.522846][ T8898] loop2: detected capacity change from 0 to 512
[  146.531357][ T8898] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.1434: inode #0: comm syz.2.1434: iget: illegal inode #
[  146.544693][ T8898] EXT4-fs (loop2): get orphan inode failed
[  146.550801][ T8898] EXT4-fs (loop2): mount failed
[  146.583380][   T29] kauditd_printk_skb: 300 callbacks suppressed
[  146.583398][   T29] audit: type=1326 audit(1763742145.255:15050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.618029][   T29] audit: type=1326 audit(1763742145.283:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.642401][   T29] audit: type=1326 audit(1763742145.292:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.666050][   T29] audit: type=1326 audit(1763742145.292:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.689916][   T29] audit: type=1326 audit(1763742145.320:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.713531][   T29] audit: type=1326 audit(1763742145.320:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.737088][   T29] audit: type=1326 audit(1763742145.320:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.760719][   T29] audit: type=1326 audit(1763742145.320:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.784305][   T29] audit: type=1326 audit(1763742145.320:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  146.808013][   T29] audit: type=1326 audit(1763742145.320:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.2.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  147.177818][ T8896] syz.2.1434 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  147.188947][ T8896] CPU: 0 UID: 0 PID: 8896 Comm: syz.2.1434 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  147.189016][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  147.189029][ T8896] Call Trace:
[  147.189037][ T8896]  <TASK>
[  147.189045][ T8896]  __dump_stack+0x1d/0x30
[  147.189067][ T8896]  dump_stack_lvl+0xe8/0x140
[  147.189087][ T8896]  dump_stack+0x15/0x1b
[  147.189109][ T8896]  dump_header+0x81/0x220
[  147.189185][ T8896]  oom_kill_process+0x342/0x400
[  147.189219][ T8896]  out_of_memory+0x979/0xb80
[  147.189253][ T8896]  try_charge_memcg+0x610/0xa10
[  147.189290][ T8896]  charge_memcg+0x51/0xc0
[  147.189317][ T8896]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  147.189345][ T8896]  __read_swap_cache_async+0x17b/0x2d0
[  147.189373][ T8896]  swap_cluster_readahead+0x262/0x3c0
[  147.189404][ T8896]  swapin_readahead+0xde/0x800
[  147.189504][ T8896]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  147.189616][ T8896]  ? __lruvec_stat_mod_folio+0xd6/0x120
[  147.189715][ T8896]  ? __rcu_read_unlock+0x4f/0x70
[  147.189786][ T8896]  ? swap_cache_get_folio+0x277/0x280
[  147.189870][ T8896]  do_swap_page+0x2ae/0x2370
[  147.189901][ T8896]  ? css_rstat_updated+0xb7/0x240
[  147.189982][ T8896]  ? __pfx_default_wake_function+0x10/0x10
[  147.190018][ T8896]  handle_mm_fault+0x9a5/0x2be0
[  147.190052][ T8896]  ? vma_start_read+0x141/0x1f0
[  147.190121][ T8896]  do_user_addr_fault+0x630/0x1080
[  147.190144][ T8896]  ? fpregs_restore_userregs+0xe2/0x1d0
[  147.190309][ T8896]  ? switch_fpu_return+0xe/0x20
[  147.190345][ T8896]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  147.190377][ T8896]  exc_page_fault+0x62/0xa0
[  147.190476][ T8896]  asm_exc_page_fault+0x26/0x30
[  147.190497][ T8896] RIP: 0033:0x7f4cb4c259ec
[  147.190517][ T8896] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  147.190540][ T8896] RSP: 002b:00007ffdffcbc400 EFLAGS: 00010287
[  147.190560][ T8896] RAX: 0000000000000000 RBX: 00007f4cb4fa6090 RCX: 0000000000000000
[  147.190575][ T8896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556ef57808
[  147.190616][ T8896] RBP: 00007f4cb4fa7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  147.190628][ T8896] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000239fa
[  147.190640][ T8896] R13: 00007f4cb4fa6090 R14: ffffffffffffffff R15: 00007ffdffcbc510
[  147.190659][ T8896]  </TASK>
[  147.190665][ T8896] memory: usage 307200kB, limit 307200kB, failcnt 207
[  147.432693][ T8896] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  147.440635][ T8896] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  147.447973][ T8896] Memory cgroup stats for /syz2:
[  147.669074][ T8911] __nla_validate_parse: 2 callbacks suppressed
[  147.669096][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1437'.
[  147.984713][ T8896] cache 0
[  147.987979][ T8896] rss 0
[  147.990803][ T8896] shmem 0
[  147.993761][ T8896] mapped_file 0
[  147.997502][ T8896] dirty 0
[  148.000466][ T8896] writeback 8192
[  148.004043][ T8896] workingset_refault_anon 448
[  148.008739][ T8896] workingset_refault_file 211
[  148.013650][ T8896] swap 200704
[  148.016940][ T8896] swapcached 12288
[  148.020683][ T8896] pgpgin 138673
[  148.024208][ T8896] pgpgout 138669
[  148.027755][ T8896] pgfault 136598
[  148.031393][ T8896] pgmajfault 89
[  148.034899][ T8896] inactive_anon 12288
[  148.038887][ T8896] active_anon 0
[  148.042372][ T8896] inactive_file 4096
[  148.046294][ T8896] active_file 0
[  148.049759][ T8896] unevictable 0
[  148.053246][ T8896] hierarchical_memory_limit 314572800
[  148.058645][ T8896] hierarchical_memsw_limit 9223372036854771712
[  148.064844][ T8896] total_cache 0
[  148.068325][ T8896] total_rss 0
[  148.071652][ T8896] total_shmem 0
[  148.075227][ T8896] total_mapped_file 0
[  148.079209][ T8896] total_dirty 0
[  148.082767][ T8896] total_writeback 8192
[  148.086851][ T8896] total_workingset_refault_anon 448
[  148.092050][ T8896] total_workingset_refault_file 211
[  148.097345][ T8896] total_swap 200704
[  148.101159][ T8896] total_swapcached 12288
[  148.105496][ T8896] total_pgpgin 138673
[  148.109542][ T8896] total_pgpgout 138669
[  148.113726][ T8896] total_pgfault 136598
[  148.117828][ T8896] total_pgmajfault 89
[  148.121819][ T8896] total_inactive_anon 12288
[  148.126330][ T8896] total_active_anon 0
[  148.130338][ T8896] total_inactive_file 4096
[  148.134756][ T8896] total_active_file 0
[  148.138772][ T8896] total_unevictable 0
[  148.142764][ T8896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1434,pid=8896,uid=0
[  148.157521][ T8896] Memory cgroup out of memory: Killed process 8896 (syz.2.1434) total-vm:96012kB, anon-rss:1136kB, file-rss:22592kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  148.212569][ T8921] siw: device registration error -23
[  148.781821][ T8943] loop4: detected capacity change from 0 to 512
[  148.788971][ T8943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  148.804671][ T8943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.821296][ T8943] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.853482][ T8949] loop7: detected capacity change from 0 to 256
[  148.862983][ T8943] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1450: deleted inode referenced: 16
[  148.909948][ T8952] loop2: detected capacity change from 0 to 1024
[  148.910003][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.920284][ T8952] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  148.953114][ T8955] loop7: detected capacity change from 0 to 512
[  148.960772][ T8955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  148.978470][ T8952] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  148.987160][ T8952] EXT4-fs (loop2): orphan cleanup on readonly fs
[  148.993944][ T8952] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.1452: Freeing blocks not in datazone - block = 0, count = 4096
[  149.007754][ T8952] EXT4-fs (loop2): 1 orphan inode deleted
[  149.014050][ T8952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.029550][ T8955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.044318][ T8955] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.062140][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'.
[  149.070369][ T8955] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.1454: deleted inode referenced: 16
[  149.098457][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.568687][ T8980] lo speed is unknown, defaulting to 1000
[  149.665114][ T8980] lo speed is unknown, defaulting to 1000
[  150.126312][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.360057][ T8991] loop2: detected capacity change from 0 to 512
[  150.467712][ T8991] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.606246][ T8999] loop4: detected capacity change from 0 to 4096
[  150.612921][ T8999] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.619532][ T8999] EXT4-fs: test_dummy_encryption option not supported
[  150.633456][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.641954][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.650496][ T8999] dummy0: entered promiscuous mode
[  150.655945][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'.
[  150.715954][ T8999] bond0: (slave dummy0): Releasing backup interface
[  150.723313][ T8999] dummy0 (unregistering): left promiscuous mode
[  150.734461][ T8991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.792234][ T8991] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.954803][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.996724][ T8536] Bluetooth: hci0: Frame reassembly failed (-84)
[  151.833454][ T9025] loop7: detected capacity change from 0 to 256
[  151.938154][   T29] kauditd_printk_skb: 372 callbacks suppressed
[  151.938172][   T29] audit: type=1326 audit(1763742150.269:15432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  151.968667][   T29] audit: type=1326 audit(1763742150.297:15433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  151.992710][   T29] audit: type=1326 audit(1763742150.325:15434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4cb4d4f749 code=0x7ffc0000
[  152.017589][ T9035] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  152.024144][ T9035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  152.031771][ T9035] vhci_hcd vhci_hcd.0: Device attached
[  152.044542][ T9035] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  152.051185][ T9035] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  152.059107][ T9035] vhci_hcd vhci_hcd.0: Device attached
[  152.065400][ T9035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  152.074532][ T9035] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10)
[  152.081242][ T9035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  152.088686][ T9035] vhci_hcd vhci_hcd.0: Device attached
[  152.096768][ T9035] binfmt_misc: register: failed to install interpreter file ./file2
[  152.109210][ T9035] can0: slcan on ttyS3.
[  152.115341][   T29] audit: type=1326 audit(1763742150.428:15435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.139555][   T29] audit: type=1326 audit(1763742150.428:15436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.163275][   T29] audit: type=1326 audit(1763742150.437:15437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.186901][   T29] audit: type=1326 audit(1763742150.437:15438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.210479][   T29] audit: type=1326 audit(1763742150.437:15439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.234154][   T29] audit: type=1326 audit(1763742150.437:15440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.361389][ T9035] can0 (unregistered): slcan off ttyS3.
[  152.367938][   T29] audit: type=1326 audit(1763742150.671:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.8.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e771f749 code=0x7ffc0000
[  152.372266][ T3421] usb 18-1: SetAddress Request (2) to port 0
[  152.397967][ T3421] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd
[  152.447731][ T9042] vhci_hcd: connection closed
[  152.447886][ T9036] vhci_hcd: connection closed
[  152.452789][ T9040] vhci_hcd: connection reset by peer
[  152.462823][ T8565] vhci_hcd: stop threads
[  152.467113][ T8565] vhci_hcd: release socket
[  152.471690][ T8565] vhci_hcd: disconnect device
[  152.476758][ T8565] vhci_hcd: stop threads
[  152.481065][ T8565] vhci_hcd: release socket
[  152.485551][ T8565] vhci_hcd: disconnect device
[  152.490491][ T8565] vhci_hcd: stop threads
[  152.494865][ T8565] vhci_hcd: release socket
[  152.499296][ T8565] vhci_hcd: disconnect device
[  152.964798][ T9051] loop7: detected capacity change from 0 to 1024
[  152.972864][ T9051] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  152.995141][ T9051] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.006168][ T9053] vlan1: entered allmulticast mode
[  153.008104][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1481'.
[  153.011350][ T9053] bridge_slave_0: entered allmulticast mode
[  153.050390][ T9057] FAULT_INJECTION: forcing a failure.
[  153.050390][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.063751][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.2.1482 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  153.063777][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  153.063789][ T9057] Call Trace:
[  153.063796][ T9057]  <TASK>
[  153.063803][ T9057]  __dump_stack+0x1d/0x30
[  153.063828][ T9057]  dump_stack_lvl+0xe8/0x140
[  153.063929][ T9057]  dump_stack+0x15/0x1b
[  153.063949][ T9057]  should_fail_ex+0x265/0x280
[  153.064003][ T9057]  should_fail+0xb/0x20
[  153.064018][ T9057]  should_fail_usercopy+0x1a/0x20
[  153.064043][ T9057]  _copy_from_user+0x1c/0xb0
[  153.064081][ T9057]  kstrtouint_from_user+0x69/0xf0
[  153.064106][ T9057]  ? 0xffffffff81000000
[  153.064123][ T9057]  ? selinux_file_permission+0x1e4/0x320
[  153.064219][ T9057]  proc_fail_nth_write+0x50/0x160
[  153.064259][ T9057]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  153.064302][ T9057]  vfs_write+0x269/0x960
[  153.064331][ T9057]  ? vfs_read+0x4e6/0x770
[  153.064352][ T9057]  ? __rcu_read_unlock+0x4f/0x70
[  153.064391][ T9057]  ? __fget_files+0x184/0x1c0
[  153.064420][ T9057]  ksys_write+0xda/0x1a0
[  153.064535][ T9057]  __x64_sys_write+0x40/0x50
[  153.064568][ T9057]  x64_sys_call+0x2802/0x3000
[  153.064596][ T9057]  do_syscall_64+0xd2/0x200
[  153.064617][ T9057]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  153.064698][ T9057]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  153.064749][ T9057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.064771][ T9057] RIP: 0033:0x7f4cb4d4e1ff
[  153.064786][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  153.064873][ T9057] RSP: 002b:00007f4cb378e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  153.064897][ T9057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cb4d4e1ff
[  153.064911][ T9057] RDX: 0000000000000001 RSI: 00007f4cb378e0a0 RDI: 0000000000000006
[  153.064926][ T9057] RBP: 00007f4cb378e090 R08: 0000000000000000 R09: 0000000000000000
[  153.064939][ T9057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  153.064953][ T9057] R13: 00007f4cb4fa6128 R14: 00007f4cb4fa6090 R15: 00007ffdffcbc298
[  153.064973][ T9057]  </TASK>
[  153.227708][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  153.238858][ T4155] Bluetooth: hci0: command 0x1003 tx timeout
[  153.336206][ T9072] loop8: detected capacity change from 0 to 1024
[  153.343222][ T9072] EXT4-fs: Ignoring removed orlov option
[  153.366835][ T9072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.383843][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'.
[  153.405445][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.301797][ T9113] syzkaller0: entered promiscuous mode
[  154.307344][ T9113] syzkaller0: entered allmulticast mode
[  154.361128][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'.
[  154.449485][ T9122] siw: device registration error -23
[  154.481340][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'.
[  154.547066][ T9136] syzkaller0: entered promiscuous mode
[  154.552678][ T9136] syzkaller0: entered allmulticast mode
[  154.792143][ T9146] lo speed is unknown, defaulting to 1000
[  154.798682][ T9146] lo speed is unknown, defaulting to 1000
[  155.004295][ T9149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9149 comm=syz.2.1514
[  155.024484][ T9149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9149 comm=syz.2.1514
[  155.063131][ T9149] loop2: detected capacity change from 0 to 512
[  155.145087][ T9149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.190152][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1515'.
[  155.201817][ T9149] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.347986][ T9155] siw: device registration error -23
[  155.568792][ T9149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.579122][ T9162] FAULT_INJECTION: forcing a failure.
[  155.579122][ T9162] name failslab, interval 1, probability 0, space 0, times 0
[  155.592179][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.7.1518 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  155.592214][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  155.592231][ T9162] Call Trace:
[  155.592239][ T9162]  <TASK>
[  155.592249][ T9162]  __dump_stack+0x1d/0x30
[  155.592277][ T9162]  dump_stack_lvl+0xe8/0x140
[  155.592301][ T9162]  dump_stack+0x15/0x1b
[  155.592380][ T9162]  should_fail_ex+0x265/0x280
[  155.592413][ T9162]  should_failslab+0x8c/0xb0
[  155.592444][ T9162]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  155.592503][ T9162]  ? kstrdup_const+0x3e/0x50
[  155.592535][ T9162]  kstrdup+0x3e/0xd0
[  155.592567][ T9162]  kstrdup_const+0x3e/0x50
[  155.592592][ T9162]  alloc_vfsmnt+0xe7/0x300
[  155.592633][ T9162]  clone_mnt+0x30/0x5d0
[  155.592657][ T9162]  copy_tree+0x2cd/0x8c0
[  155.592714][ T9162]  copy_mnt_ns+0x13d/0x610
[  155.592740][ T9162]  ? kmem_cache_alloc_noprof+0x2b8/0x480
[  155.592772][ T9162]  ? create_new_namespaces+0x3c/0x3d0
[  155.592902][ T9162]  create_new_namespaces+0x83/0x3d0
[  155.592942][ T9162]  unshare_nsproxy_namespaces+0xe8/0x120
[  155.592970][ T9162]  ksys_unshare+0x3d0/0x6d0
[  155.593010][ T9162]  ? ksys_write+0x192/0x1a0
[  155.593109][ T9162]  __x64_sys_unshare+0x1f/0x30
[  155.593141][ T9162]  x64_sys_call+0x2915/0x3000
[  155.593173][ T9162]  do_syscall_64+0xd2/0x200
[  155.593193][ T9162]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  155.593224][ T9162]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  155.593295][ T9162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.593321][ T9162] RIP: 0033:0x7f2bb9d2f749
[  155.593339][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.593357][ T9162] RSP: 002b:00007f2bb876e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  155.593379][ T9162] RAX: ffffffffffffffda RBX: 00007f2bb9f86090 RCX: 00007f2bb9d2f749
[  155.593431][ T9162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[  155.593447][ T9162] RBP: 00007f2bb876e090 R08: 0000000000000000 R09: 0000000000000000
[  155.593467][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  155.593595][ T9162] R13: 00007f2bb9f86128 R14: 00007f2bb9f86090 R15: 00007ffe3e563978
[  155.593619][ T9162]  </TASK>
[  155.854299][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1520'.
[  155.873956][ T9167] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  155.887483][ T9169] FAULT_INJECTION: forcing a failure.
[  155.887483][ T9169] name failslab, interval 1, probability 0, space 0, times 0
[  155.900215][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.4.1522 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  155.900248][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  155.900264][ T9169] Call Trace:
[  155.900269][ T9169]  <TASK>
[  155.900276][ T9169]  __dump_stack+0x1d/0x30
[  155.900301][ T9169]  dump_stack_lvl+0xe8/0x140
[  155.900389][ T9169]  dump_stack+0x15/0x1b
[  155.900407][ T9169]  should_fail_ex+0x265/0x280
[  155.900443][ T9169]  should_failslab+0x8c/0xb0
[  155.900480][ T9169]  __kmalloc_noprof+0xa5/0x570
[  155.900598][ T9169]  ? taskstats_user_cmd+0x2de/0x8a0
[  155.900627][ T9169]  taskstats_user_cmd+0x2de/0x8a0
[  155.900719][ T9169]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x190
[  155.900828][ T9169]  ? genl_family_rcv_msg_attrs_parse+0x184/0x190
[  155.900868][ T9169]  genl_family_rcv_msg_doit+0x143/0x1b0
[  155.900910][ T9169]  genl_rcv_msg+0x422/0x460
[  155.900990][ T9169]  ? __pfx_taskstats_user_cmd+0x10/0x10
[  155.901018][ T9169]  netlink_rcv_skb+0x123/0x220
[  155.901058][ T9169]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.901121][ T9169]  genl_rcv+0x28/0x40
[  155.901148][ T9169]  netlink_unicast+0x5c0/0x690
[  155.901199][ T9169]  netlink_sendmsg+0x58b/0x6b0
[  155.901259][ T9169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.901284][ T9169]  __sock_sendmsg+0x145/0x180
[  155.901317][ T9169]  ____sys_sendmsg+0x31e/0x4e0
[  155.901345][ T9169]  ___sys_sendmsg+0x17b/0x1d0
[  155.901386][ T9169]  __x64_sys_sendmsg+0xd4/0x160
[  155.901513][ T9169]  x64_sys_call+0x191e/0x3000
[  155.901608][ T9169]  do_syscall_64+0xd2/0x200
[  155.901635][ T9169]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  155.901671][ T9169]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  155.901785][ T9169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.901812][ T9169] RIP: 0033:0x7f6bde4cf749
[  155.901892][ T9169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.901915][ T9169] RSP: 002b:00007f6bdcf37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.901939][ T9169] RAX: ffffffffffffffda RBX: 00007f6bde725fa0 RCX: 00007f6bde4cf749
[  155.902022][ T9169] RDX: 0000000000008000 RSI: 0000200000001c00 RDI: 0000000000000003
[  155.902111][ T9169] RBP: 00007f6bdcf37090 R08: 0000000000000000 R09: 0000000000000000
[  155.902126][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.902205][ T9169] R13: 00007f6bde726038 R14: 00007f6bde725fa0 R15: 00007ffec9c6f138
[  155.902230][ T9169]  </TASK>
[  156.299035][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'.
[  156.531876][ T9181] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  156.903494][ T9198] lo speed is unknown, defaulting to 1000
[  156.910128][ T9198] lo speed is unknown, defaulting to 1000
[  157.824384][ T3421] usb 18-1: device descriptor read/8, error -110
[  158.689596][ T9205] loop4: detected capacity change from 0 to 512
[  158.696493][ T9205] EXT4-fs: Ignoring removed i_version option
[  158.702525][ T9205] EXT4-fs: Ignoring removed bh option
[  158.728725][ T9205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.741655][ T9205] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.774414][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1536'.
[  158.817442][ T3421] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd
[  158.850585][ T3421] usb 18-1: enqueue for inactive port 0
[  158.856206][ T3421] usb 18-1: enqueue for inactive port 0
[  158.875125][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1537'.
[  158.885516][ T3421] usb 18-1: enqueue for inactive port 0
[  158.892034][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.902340][ T9212] syzkaller0: entered promiscuous mode
[  158.908079][ T9212] syzkaller0: entered allmulticast mode
[  158.916505][ T9214] validate_nla: 58 callbacks suppressed
[  158.916522][ T9214] netlink: 'syz.7.1537': attribute type 30 has an invalid length.
[  158.976276][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1537'.
[  158.998482][ T9218] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  159.183630][   T29] kauditd_printk_skb: 366 callbacks suppressed
[  159.183646][   T29] audit: type=1107 audit(1763742157.050:15808): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  159.205671][ T9228] siw: device registration error -23
[  159.338097][ T9233] lo speed is unknown, defaulting to 1000
[  159.344925][ T9233] lo speed is unknown, defaulting to 1000
[  159.507892][   T29] audit: type=1107 audit(1763742157.340:15809): pid=9230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  159.521650][ T9235] siw: device registration error -23
[  159.967994][ T9237] syzkaller0: entered promiscuous mode
[  159.973587][ T9237] syzkaller0: entered allmulticast mode
[  160.356248][   T29] audit: type=1107 audit(1763742158.135:15810): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  160.382889][ T9248] siw: device registration error -23
[  160.773219][ T9252] lo speed is unknown, defaulting to 1000
[  160.779358][ T9252] lo speed is unknown, defaulting to 1000
[  160.923646][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1549'.
[  161.262077][ T9262] syzkaller0: entered promiscuous mode
[  161.267707][ T9262] syzkaller0: entered allmulticast mode
[  161.357996][   T29] audit: type=1326 audit(1763742159.080:15811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.381538][   T29] audit: type=1326 audit(1763742159.080:15812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.469102][   T29] audit: type=1326 audit(1763742159.118:15813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.492857][   T29] audit: type=1326 audit(1763742159.118:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.516616][   T29] audit: type=1326 audit(1763742159.118:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.540292][   T29] audit: type=1326 audit(1763742159.127:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.563820][   T29] audit: type=1326 audit(1763742159.127:15817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c456f749 code=0x7ffc0000
[  161.684461][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1556'.
[  161.693476][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1556'.
[  161.718414][ T9274] netlink: 'syz.4.1555': attribute type 21 has an invalid length.
[  161.732662][ T9272] loop7: detected capacity change from 0 to 512
[  161.748476][ T9272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.769463][ T3421] usb usb18-port1: attempt power cycle
[  161.781752][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1555'.
[  161.792852][ T9272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  161.814113][ T9272] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.844165][ T3399] vhci_hcd: vhci_device speed not set
[  161.866989][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  162.039744][ T9287] xt_limit: Overflow, try lower: 268435456/134217728
[  162.340324][ T9289] lo speed is unknown, defaulting to 1000
[  162.346613][ T9289] lo speed is unknown, defaulting to 1000
[  162.984402][ T9308] loop4: detected capacity change from 0 to 4096
[  162.991152][ T9308] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.997638][ T9308] EXT4-fs: test_dummy_encryption option not supported
[  163.012173][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.020735][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.083464][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'.
[  163.251584][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1569'.
[  163.261721][ T9318] FAULT_INJECTION: forcing a failure.
[  163.261721][ T9318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.274848][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.7.1569 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  163.274958][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  163.274975][ T9318] Call Trace:
[  163.274983][ T9318]  <TASK>
[  163.274991][ T9318]  __dump_stack+0x1d/0x30
[  163.275099][ T9318]  dump_stack_lvl+0xe8/0x140
[  163.275137][ T9318]  dump_stack+0x15/0x1b
[  163.275159][ T9318]  should_fail_ex+0x265/0x280
[  163.275240][ T9318]  should_fail+0xb/0x20
[  163.275305][ T9318]  should_fail_usercopy+0x1a/0x20
[  163.275329][ T9318]  _copy_to_user+0x20/0xa0
[  163.275357][ T9318]  simple_read_from_buffer+0xb5/0x130
[  163.275462][ T9318]  proc_fail_nth_read+0x10e/0x150
[  163.275500][ T9318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.275540][ T9318]  vfs_read+0x1a8/0x770
[  163.275589][ T9318]  ? __rcu_read_unlock+0x4f/0x70
[  163.275673][ T9318]  ? __fget_files+0x184/0x1c0
[  163.275710][ T9318]  ksys_read+0xda/0x1a0
[  163.275777][ T9318]  __x64_sys_read+0x40/0x50
[  163.275810][ T9318]  x64_sys_call+0x27c0/0x3000
[  163.275838][ T9318]  do_syscall_64+0xd2/0x200
[  163.275858][ T9318]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  163.275966][ T9318]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  163.276003][ T9318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.276104][ T9318] RIP: 0033:0x7f2bb9d2e15c
[  163.276123][ T9318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  163.276141][ T9318] RSP: 002b:00007f2bb878f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.276160][ T9318] RAX: ffffffffffffffda RBX: 00007f2bb9f85fa0 RCX: 00007f2bb9d2e15c
[  163.276172][ T9318] RDX: 000000000000000f RSI: 00007f2bb878f0a0 RDI: 0000000000000007
[  163.276232][ T9318] RBP: 00007f2bb878f090 R08: 0000000000000000 R09: 0000000000000000
[  163.276247][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  163.276258][ T9318] R13: 00007f2bb9f86038 R14: 00007f2bb9f85fa0 R15: 00007ffe3e563978
[  163.276288][ T9318]  </TASK>
[  163.726947][ T9328] loop2: detected capacity change from 0 to 512
[  163.758750][ T9328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.877560][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  163.925599][ T9328] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.022978][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  164.051474][ T9336] loop8: detected capacity change from 0 to 1024
[  164.065117][ T9336] EXT4-fs: Ignoring removed orlov option
[  164.080974][ T9336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.228281][ T9353] loop7: detected capacity change from 0 to 512
[  164.234843][ T9353] EXT4-fs: Ignoring removed i_version option
[  164.240991][ T9353] EXT4-fs: Ignoring removed bh option
[  164.259358][ T9353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.259499][ T9356] xt_CT: You must specify a L4 protocol and not use inversions on it
[  164.282969][ T9353] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.351066][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.663294][ T9375] lo speed is unknown, defaulting to 1000
[  164.669645][ T9375] lo speed is unknown, defaulting to 1000
[  164.820680][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.120947][ T9378] loop8: detected capacity change from 0 to 512
[  165.137728][ T9378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.248892][ T9378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  165.379575][ T9378] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.402890][ T9385] loop2: detected capacity change from 0 to 512
[  165.420391][ T9385] EXT4-fs: Ignoring removed i_version option
[  165.426532][ T9385] EXT4-fs: Ignoring removed bh option
[  165.458146][ T6945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  165.480561][ T9385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.504682][ T9385] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.645515][ T9394] loop7: detected capacity change from 0 to 512
[  165.673971][ T9394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.686805][ T9394] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.835325][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.845078][ T6561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.938315][ T9408] loop7: detected capacity change from 0 to 512
[  165.945022][ T9408] ext4: Unknown parameter 'hash'
[  166.200513][ T9408] lo speed is unknown, defaulting to 1000
[  166.207329][ T9408] lo speed is unknown, defaulting to 1000
[  166.253179][ T9417] lo speed is unknown, defaulting to 1000
[  166.259597][ T9417] lo speed is unknown, defaulting to 1000
[  166.301990][   T29] kauditd_printk_skb: 116 callbacks suppressed
[  166.302007][   T29] audit: type=1326 audit(1763742163.673:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.331701][   T29] audit: type=1326 audit(1763742163.673:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.355293][   T29] audit: type=1326 audit(1763742163.673:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.378849][   T29] audit: type=1326 audit(1763742163.673:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.402430][   T29] audit: type=1326 audit(1763742163.673:15938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.426354][   T29] audit: type=1326 audit(1763742163.673:15939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.449910][   T29] audit: type=1326 audit(1763742163.673:15940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.473465][   T29] audit: type=1326 audit(1763742163.673:15941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.497164][   T29] audit: type=1326 audit(1763742163.673:15942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.520879][   T29] audit: type=1326 audit(1763742163.673:15943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bde4cf749 code=0x7ffc0000
[  166.848786][ T9429] loop4: detected capacity change from 0 to 512
[  166.860302][ T9429] EXT4-fs: Ignoring removed i_version option
[  166.866356][ T9429] EXT4-fs: Ignoring removed bh option
[  166.963572][ T9427] loop2: detected capacity change from 0 to 512
[  166.983820][ T9427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  167.057266][ T9427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  167.076341][ T9429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.106826][ T9429] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.117416][ T9427] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.189498][ T3421] usb usb18-port1: unable to enumerate USB device
[  167.226927][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  167.250224][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.594701][ T4155] Bluetooth: hci0: sending frame failed (-49)
[  167.601054][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  167.706785][ T9467] netlink: 'syz.8.1615': attribute type 4 has an invalid length.
[  168.024343][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1623'.
[  168.478663][ T9504] lo speed is unknown, defaulting to 1000
[  168.485426][ T9504] lo speed is unknown, defaulting to 1000
[  168.742999][ T9509] netlink: 'syz.2.1628': attribute type 27 has an invalid length.
[  168.755261][ T9509] ipvlan0: left allmulticast mode
[  168.760390][ T9509] veth0_vlan: left allmulticast mode
[  168.766792][ T9509] veth2: left promiscuous mode
[  168.771683][ T9509] veth2: left allmulticast mode
[  169.196503][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'.
[  169.249472][ T9515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9515 comm=syz.0.1631
[  169.286398][ T9519] siw: device registration error -23
[  169.430783][ T9522] loop2: detected capacity change from 0 to 1024
[  169.431281][ T9522] EXT4-fs: Ignoring removed orlov option
[  169.440015][ T9522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.563672][ T9525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.761511][ T9527] loop8: detected capacity change from 0 to 1024
[  169.762074][ T9527] EXT4-fs: Ignoring removed orlov option
[  169.777373][ T9527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.822362][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.957524][ T9535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.006220][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'.
[  170.047646][ T9540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9540 comm=syz.2.1640
[  170.095699][ T9527] ==================================================================
[  170.095739][ T9527] BUG: KCSAN: data-race in filemap_read / filemap_read
[  170.095800][ T9527] 
[  170.095808][ T9527] read to 0xffff888104792168 of 8 bytes by task 9531 on cpu 1:
[  170.095828][ T9527]  filemap_read+0x6f/0xa00
[  170.095865][ T9527]  generic_file_read_iter+0x79/0x330
[  170.095897][ T9527]  ext4_file_read_iter+0x1cc/0x290
[  170.095922][ T9527]  copy_splice_read+0x442/0x660
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  170.095950][ T9527]  splice_direct_to_actor+0x290/0x680
[  170.095980][ T9527]  do_splice_direct+0xda/0x150
[  170.096007][ T9527]  do_sendfile+0x380/0x650
[  170.096045][ T9527]  __x64_sys_sendfile64+0x105/0x150
[  170.096074][ T9527]  x64_sys_call+0x2bb4/0x3000
[  170.096095][ T9527]  do_syscall_64+0xd2/0x200
[  170.096119][ T9527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.096147][ T9527] 
[  170.096154][ T9527] write to 0xffff888104792168 of 8 bytes by task 9527 on cpu 0:
[  170.096174][ T9527]  filemap_read+0x974/0xa00
[  170.096222][ T9527]  generic_file_read_iter+0x79/0x330
[  170.096264][ T9527]  ext4_file_read_iter+0x1cc/0x290
[  170.096287][ T9527]  copy_splice_read+0x442/0x660
[  170.096306][ T9527]  splice_direct_to_actor+0x290/0x680
[  170.096332][ T9527]  do_splice_direct+0xda/0x150
[  170.096360][ T9527]  do_sendfile+0x380/0x650
[  170.096399][ T9527]  __x64_sys_sendfile64+0x105/0x150
[  170.096436][ T9527]  x64_sys_call+0x2bb4/0x3000
[  170.096460][ T9527]  do_syscall_64+0xd2/0x200
[  170.096478][ T9527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.096502][ T9527] 
[  170.096507][ T9527] value changed: 0x00000000000002a2 -> 0x00000000000002a3
[  170.096522][ T9527] 
[  170.096527][ T9527] Reported by Kernel Concurrency Sanitizer on:
[  170.096541][ T9527] CPU: 0 UID: 0 PID: 9527 Comm: syz.8.1635 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  170.096566][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  170.096579][ T9527] ==================================================================
[  170.554035][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.719997][ T8565] bridge_slave_1: left allmulticast mode
[  170.725746][ T8565] bridge_slave_1: left promiscuous mode
[  170.731426][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.739516][ T8565] bridge_slave_0: left allmulticast mode
[  170.745160][ T8565] bridge_slave_0: left promiscuous mode
[  170.750848][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.900600][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.910137][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.919104][ T8565] bond0 (unregistering): Released all slaves
[  170.928392][ T8565] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  170.937063][ T8565] bond1 (unregistering): Released all slaves
[  170.945401][ T8565] bond2 (unregistering): Released all slaves
[  171.007824][ T8565] hsr_slave_0: left promiscuous mode
[  171.013546][ T8565] hsr_slave_1: left promiscuous mode
[  171.019377][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.026911][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.058239][ T8565] team_slave_1 (unregistering): left allmulticast mode
[  171.065610][ T8565] team0 (unregistering): Port device team_slave_1 removed
[  171.075036][ T8565] team_slave_0 (unregistering): left allmulticast mode
[  171.082256][ T8565] team0 (unregistering): Port device team_slave_0 removed
[  171.447389][ T8565] IPVS: stop unused estimator thread 0...
[  171.780297][ T8565] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.831769][ T8565] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.885359][ T8565] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.938443][ T8565] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.994205][ T8565] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.045577][ T8565] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.088199][ T8565] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.141790][ T8565] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.196058][ T8565] bridge_slave_1: left allmulticast mode
[  172.201722][ T8565] bridge_slave_1: left promiscuous mode
[  172.207386][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.215190][ T8565] bridge_slave_0: left allmulticast mode
[  172.220978][ T8565] bridge_slave_0: left promiscuous mode
[  172.226732][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.235820][ T8565] bridge_slave_1: left allmulticast mode
[  172.241471][ T8565] bridge_slave_1: left promiscuous mode
[  172.247312][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.255193][ T8565] bridge_slave_0: left allmulticast mode
[  172.260950][ T8565] bridge_slave_0: left promiscuous mode
[  172.266653][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.329175][ T8565] dvmrp1 (unregistering): left allmulticast mode
[  172.339878][ T8565] $Hÿ (unregistering): Released all slaves
[  172.348204][ T8565] bond0 (unregistering): Released all slaves
[  172.472666][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.482652][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.492191][ T8565] bond0 (unregistering): Released all slaves
[  172.548039][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.557792][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.567472][ T8565] bond0 (unregistering): Released all slaves
[  172.687717][ T8565] hsr_slave_0: left promiscuous mode
[  172.693573][ T8565] hsr_slave_1: left promiscuous mode
[  172.701210][ T8565] hsr_slave_0: left promiscuous mode
[  172.706885][ T8565] hsr_slave_1: left promiscuous mode
[  172.712544][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.719952][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.727608][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.734990][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.744208][ T8565] hsr_slave_0: left promiscuous mode
[  172.749853][ T8565] hsr_slave_1: left promiscuous mode
[  172.755477][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.762940][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.770533][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.777976][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.788838][ T8565] veth1_macvtap: left promiscuous mode
[  172.794476][ T8565] veth0_macvtap: left promiscuous mode
[  172.800022][ T8565] veth1_vlan: left promiscuous mode
[  172.805368][ T8565] veth0_vlan: left promiscuous mode
[  172.811084][ T8565] veth1_macvtap: left promiscuous mode
[  172.816673][ T8565] veth0_macvtap: left promiscuous mode
[  172.822189][ T8565] veth1_vlan: left promiscuous mode
[  172.827472][ T8565] veth0_vlan: left promiscuous mode
[  172.975085][ T8565] team0 (unregistering): Port device team_slave_1 removed
[  172.984732][ T8565] team0 (unregistering): Port device team_slave_0 removed
[  173.017547][ T8565] pim6reg (unregistering): left allmulticast mode
[  173.048559][ T8565] team0 (unregistering): Port device team_slave_1 removed
[  173.058181][ T8565] team0 (unregistering): Port device team_slave_0 removed
[  173.069098][  T299] smc: removing ib device syz!
[  173.727489][ T8565] IPVS: stop unused estimator thread 0...
[  176.031848][ T8536] bond0 (unregistering): Released all slaves
[  176.375183][ T8536] IPVS: stop unused estimator thread 0...