last executing test programs:

2m9.234584168s ago: executing program 4 (id=24):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
epoll_create(0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='('], &(0x7f00000001c0), 0x1200)

2m9.178404389s ago: executing program 4 (id=25):
socket(0x10, 0x5, 0x8001)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000200)='%pK    \x00'}, 0x20)
connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

2m9.09360851s ago: executing program 4 (id=26):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

2m9.072640231s ago: executing program 4 (id=27):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = epoll_create1(0x80000)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140dffffffff0000000038000000000000000000000007"], 0x58}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x104, 0x1)
getdents64(r4, 0x0, 0x4f)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="b142d5c09507c2c65817f345407c07b6054a752a6e9b393c0aaf8dbd2cc9bd32769930a9489d399c8f08249d169240")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f00000002c0)=0xc, 0x2)
epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91105100000000009524000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8, 0x3, '\x00', 0x0, r7, 0x3, 0x80}, 0x50)
kexec_load(0x8, 0x0, 0x0, 0x0)

2m8.841065375s ago: executing program 4 (id=30):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
r3 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00')
readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$eJzs3UFvI1cdAPD/eO3d7G62SYEDVGoptGi3grWThrYRh1IkBKdKiMJ5CYkTRXHiKHbaTVRB9hMgIQRInODCBYkPgIRW4sKxQqoEZ5CKQIhuQYIDdJDtcRKcceKsnHjX+f2kybz3xjP/9xy/8YznaSaAC+vZiHgtIj5M0/SFiJjKygvZFHudqfW6Dx68vdiakkjTN/6eRJKVdbeVZPPr2WoTEfH1r0Z8Ozkat7Gzu7ZQqxW7+UpzfbPS2Nm9vbq+sFJdqW7Mzc2+PP/K/EvzM0Np542IePXLf/7h937+lVd//bm3/nTnr7e+06rWZLb8cDtOqXjcwk7TS1cmelbYeshgj6JWe0rdzNXB1rl3hvUBAKC/1jH+RyLi0xHxQkzFpeMPZwEAAIDHUPrFyfhPEpHmu9ynHAAAAHiMFNpjYJNCORsLMBmFQrncGcP7sbhWqNUbzc8u17c3ljpjZaejVFherVVnsrHC01FKWvnZdvog/2JPfi4inoyIH0xdbefLi/Xa0qh//AAAAIAL4nrP+f8/pzrn/wAAAMCYmT5+8dR51QMAAAA4Oyec/wMAAABjwPk/AAAAjLWvvf56a0q7z79eenNne63+5u2lamOtvL69WF6sb22WV+r1lfY9+9ZP2l6tXt/8fGxs3600q41mpbGze2e9vr3RvLMaE+fSIAAAAOCIJz95/w9JROx94Wp7ark86koB56K4n0qyeU7v/+MTnfl751Qp4FxcGuA1713JL3ecAI+3Ym9Bn74OjJ/SqCsAjFxywvKewTvX9lPvZPNPDb9OAADAcN38RP71/5OvC+wVzqF6wBnSieHi6vmeTz3rBy6O9vX/QQfyOFiAsVIaaAQgMM5Oef3/wDuDRkjTU1UIAAAYusn2lBTK2c97k1EolMsRN9qPBSgly6u16kxEPBERv58qXWnlZ9trJieeMwAAAAAAAAAAAAAAAAAAAAAAAAAAHWmaRAoAAACMtYjCX5LfdO7lf3Pq+cne3wcuJ/9uPxL4ckS89ZM3fnR3odncmm2Vv79f3vxxVv7iKH7BAAAAAHp1z9Pb83+NujYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjJsPHry92J0GePnVYcX925ciYjovfjEm2vOJKEXEtX8kUTy0XhIRl4YQf+9eRHw8L37SqtZ+yLz4w3gTTogf09m7kBf/+hDiw0V2v7X/eS2v/xXi2fY8v/8VI/4v/7D67/9if/93qU//vzFgjKfe/WWlb/x7EU8V8/c/3fhJn/jPDRj/W9/Y3e23LP1pxM3u9097j3c4wkGq0lzfrDR2dm+vri+sVFeqG3Nzsy/PvzL/0vxMZXm1Vs3+5sb4/tO/+vC49l/L/f5Lstr0b//zOdvL+07677t3H3y0m9k7Gv/Wcznxf/uz7BVH4xeyOJ/J0kn2XrXTe53387BnfvG7Z45r/9JB+0un+f/f6rfRXkc6ytODfnQAgDPQ2NldW6jVqltjm2idpT8C1bjoiW++/wh+2L471A2maZq2+lTOovsRMch2khhySwv59TlI9P2njHrPBAAADNvBQf+oawIAAAAAAAAAAAAAAAAAAAAX13ncZa035sEtkJNh3EIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//A/7SsQ==")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x12062, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
renameat2(r2, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = dup(r5)
ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, &(0x7f0000000040))
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

2m7.628194436s ago: executing program 4 (id=48):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 6)

2m7.628030836s ago: executing program 32 (id=48):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 6)

1m58.167411324s ago: executing program 5 (id=183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')
readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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")
socket$unix(0x1, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
renameat2(r2, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = dup(r4)
ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d06, &(0x7f0000000040))
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1m57.945084708s ago: executing program 5 (id=188):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x98fa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x28c}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x60700, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x2, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0xffffffffffffffff], &(0x7f00000001c0)=[{0x0, 0x3, 0xa, 0x7}, {0x2, 0x5, 0x10, 0xb}, {0x5, 0x3, 0x5, 0x1}, {0x4, 0x400, 0x3, 0x9}], 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='mem_return_failed\x00', r0, 0x0, 0x2}, 0x18)
chmod(0x0, 0x8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRES32], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
read$hiddev(r1, &(0x7f00000014c0)=""/4108, 0x100c)
pread64(r1, &(0x7f00000013c0)=""/208, 0xd0, 0x800)

1m57.618923344s ago: executing program 5 (id=191):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) (fail_nth: 3)

1m57.579934924s ago: executing program 5 (id=193):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x2040)
r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x27b, 0x24000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
umount2(0x0, 0x0)

1m57.497806356s ago: executing program 5 (id=198):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x28, r2, 0x10, 0x0, 0x25dfdbf9, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x14, 0xa8, @random="46d1054711bee409960f72ab6ebeb17f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)

1m57.195318651s ago: executing program 5 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup(r8)
setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r13, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c860, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xd1a}, 0x1c)

1m57.195060811s ago: executing program 33 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup(r8)
setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r13, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c860, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xd1a}, 0x1c)

1m27.784754833s ago: executing program 0 (id=636):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4)
ioprio_get$uid(0x0, r3)

1m27.631801706s ago: executing program 0 (id=638):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

1m27.41578726s ago: executing program 0 (id=639):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xff03}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000005c0), 0x8400, 0x0)
lseek(r1, 0x9, 0x3)

1m27.247601483s ago: executing program 0 (id=640):
r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x1e4)
sendto$inet(r1, &(0x7f00000004c0)="ea9dadc92ba241dbc60066e8256a7ef2e2979cf63b76f41416f9d9d57784bef62c4b1e0f0c08b90f3e1c075c0a6e3458a399dcb9e013edd2ab32a63e38837df306fcc7aca465674d6647b778db271f98d4fc5a5c073497ffd595547dfe65e23267adf317646bf8365edc9a6891f6d14b5c8cd346bccad91117b727a963936930a774203da7c46b166d07edd919f24e6632ed15ed44aa0f10f35099231dfd49270a7b6e02a41df62ac8cdf0337847a400066a8927f543c389855f001bc3ffe52518410bdd387593fa28246a5ae1bdd23dad7df51f17afdf569d51b1763d71e9b83ad786b75df828622a8dd78d7cc44b37a538a6db95", 0xf5, 0x81, &(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10)
read$char_usb(r2, &(0x7f00000001c0)=""/14, 0xe)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000380)='\f', 0x1}], 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x1, 0x0)
sendmsg$tipc(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000005485000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_queue_async_work\x00', r7, 0x0, 0x2}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00')
r9 = socket(0xb, 0x6, 0x5)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r4}, 0x20)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r4, 0x58, "4cb655f3c7e27ede93d94e9b0a8268b77d971a09fabd3173cbc99a36b99cbb7b212f9d652deefd2492e303f77194987ce82c430f256f8b5088a28687b1eee6bc5ce97a29bb645a86268bfb44185d046d71d37207d548cf17"}, &(0x7f0000000040)=0x60)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x4}, 0x18)
ptrace(0x10, r0)

1m27.066283956s ago: executing program 0 (id=646):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}, 0x20040001)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}, 0x20040001) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)

1m26.634010383s ago: executing program 0 (id=654):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x5})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x44520}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

1m26.600476824s ago: executing program 34 (id=654):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x5})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x44520}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

4.092506887s ago: executing program 2 (id=2072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')
readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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")
socket$unix(0x1, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
renameat2(r2, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = dup(r4)
ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d06, &(0x7f0000000040))
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.251573822s ago: executing program 2 (id=2101):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, 0x0, 0x20000010)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x150, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x80, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x6}, {0x0, 0x3, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa0, 0x80, "e30c4a833114d85163740408cffe3c2c1be2ca05"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendfile(r5, r5, 0x0, 0xb)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000032000107fcffff060100000004000000"], 0x14}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x8000000}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
syz_emit_ethernet(0x2a, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642cf266646e6f3d", @ANYRESHEX, @ANYBLOB=',fdno=', @ANYBLOB="66e454098c3b22f4e2bfd9418f2662ab34c933bdae1199e25bd35356d19c17a4abdc5cd06a23432ca7c031d425640371103b10720035d800689b6147f9ce4666817aacf89db3aaf816ef354061b4d39edf036995fc60f55736e5e4ce4638fa12a54663313b82d0b6c90ba82c51eb88b7442cb60aec35ed91ac3f9d8d17cb", @ANYRES8=0x0])
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18)
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/23, 0x17}, &(0x7f0000000180), 0x2b}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

3.146876024s ago: executing program 2 (id=2108):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=0x30, 0x0)

3.071717415s ago: executing program 2 (id=2110):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='cachefiles_mkdir\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000400700000000000000000100009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x100}, 0x94)
socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)

1.778231898s ago: executing program 2 (id=2120):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=0x30, 0x0)

1.69321174s ago: executing program 2 (id=2122):
r0 = socket$netlink(0x10, 0x3, 0x10)
setresuid(0x0, 0xee00, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
shutdown(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00')
pread64(r6, &(0x7f0000000100)=""/199, 0xc7, 0x5)
lseek(r6, 0xd2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
unshare(0x42000600)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)

1.486800424s ago: executing program 3 (id=2129):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

1.412912645s ago: executing program 3 (id=2134):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

1.380177776s ago: executing program 3 (id=2136):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d000100756470"], 0x54}}, 0x0)

1.323566896s ago: executing program 3 (id=2139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$getflags(r0, 0x3)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
read(r4, &(0x7f00000019c0)=""/4097, 0x1001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.263212227s ago: executing program 3 (id=2142):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0xf00}], 0x1, 0x4008804)

1.223224318s ago: executing program 6 (id=2145):
r0 = openat(0xffffffffffffff9c, 0x0, 0x20042, 0x1)
fallocate(r0, 0x10, 0x0, 0x8000c62)
syz_read_part_table(0x5d6, &(0x7f0000000880)="$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")
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0)
ioprio_get$uid(0x0, 0x0)
getpeername$l2tp(r9, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.12813238s ago: executing program 3 (id=2146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000180))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x80, 0x0, 0x1d8})

1.102644751s ago: executing program 7 (id=2148):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, 0x0)
close(0xffffffffffffffff)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a504000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000093e5ca8f58141b91774312eaac4c43ac4adfeb7f37caae0db873590552bdf4756ca625e6ef25adfb879b1bd9f22b0c6f02e2e824381dd0db631630a921ef5430021150f71c39fd038726a492d7930cc308841388e9562fa09e60753206770a0ff1b4d08d5cfc13b3d2043929633f2c8cc9ab7a2362ee149131c3e1d6b227133caa48287741eb2d50c5e9566143a910d0fa003e5f33f767df82440c67bb4c156598e11a277154388d1ca2fc4f0d52c1eaf6524824f8ea5fb5263038fe24aa5ca2a83", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006)
r10 = socket$unix(0x1, 0x3, 0x0)
getpeername$unix(r10, &(0x7f00000004c0), &(0x7f0000000000)=0x6e)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})

987.131702ms ago: executing program 6 (id=2149):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x1c71c1, 0x170)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x3, 0x7de0, 0x8e, 0xfff, 0xb92, 0x7fff, {0x0, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0xf96}}, 0xf247, 0x401, 0x82e7f8, 0x800, 0x6}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x9}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb77qOa+dVP0j9+Ugbz+yuO/P1ztizM7UDGFij6Z8kYmdE/B4RwxFRaD5htPZw68al6b9vXJpOolp946+klB6+eePSdH5qkj3uyDOliMInSRxoUe784sWzU5XK7IUsP75w7t3x+cWLz5w5N3V69vTs+ckTJ44dnXju+OSzHYkzjevm/g/mDu575a2rr02fvPr2T98kefxNcXTI6EoHH69WO1xcf+1qSNdaBptBsdZNo7zU/4ejGLcv3nC8/HFfKwd0VbVard7X/vDlKnAPS6LfNQD6I/+gT+9/861HQ4//hOsv1G6A0rhvZVvtSKk+D1Juur/tpNGIOHn5ny/TLbozDwEAsMx36fjn6Vbjv0I0zgvtztZQRiLifxGxJyKOR8TeiPh/xNK590fEA+ssv3mR5M7xT+HahgJbo3T893y2trV8/FdfBRspZrldS/GXk1NnKrNHstfkUJS3pPmJFcr4/qVfP2t3rHH8l25p+flYMKvHtdKW5c+ZmVqYupuYG13/KGJ/qVX8SX0lIImIfRGxf4NlnDn89cF2x1aPfwUdWGeqfhXxRO36X46m+HPJyuuT41ujMntkPG8Vd/r5lyuvtyv/ruLvgPT6b2/Z/uvxjySN67Xz6/nXv3gy/Xvlj0/b3tNstP0PJW8u2/f+1MLChYmIoeTVWqUb9082nTd5+/w0/kOPtu7/e+L2K3EgItJG/GBEPBQRD2d1f+S33au+Cj+++Ng7G4+/u9L4Z9Z+/avDEXlDWByKLFHf0zpRPPvDt8sKHWkd/+621//YUupQtmct739rqdd6WzMAAABsVoWI2BlJYayeLhTGxmr/h39vbC9U5uYXnjo19975mdp3BEaiXMhnuoYb5kMnstv6PD/ZlD+azRt/Xty2lB+bnqvM9Dt4GHA72vT/1J/FftcO6Drf14LBpf/D4NL/YXDd2f+39qUeQO+1+Pzf1o96AL3Xavz/4VqeuLPzdQF6q6n/W/aDAWL+DwbXRvq/9wy4N5RW+snmoZ5WBeid+W2x+pfkJTZTIv/lmm4UUU5by+GIWLwYhb5HKtHFRL/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj3wAAAP//fnHhbQ==")

871.978304ms ago: executing program 7 (id=2150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r2, &(0x7f0000000040), 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4118831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_clone(0x20000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
close(r2)

828.706645ms ago: executing program 6 (id=2151):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0xf44, 0x30, 0xb, 0x0, 0x0, {}, [{0xf30, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xee4, 0x2, 0x0, 0x0, {{0xa}, {0xeb8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1, 0x0, [{0x4, 0x5, 0x0, 0x3, 0xfffffff8, 0x7}, {0xffff, 0x7, 0x3, 0x44ba8a23, 0x9, 0x5}, {0x32, 0x7, 0x4, 0x4, 0x10001}, {0xfffffffa, 0x2, 0x908e, 0x7031, 0xffffffff, 0x2}, {0x7fffffff, 0x9, 0x1, 0x9, 0x6, 0x1}, {0x80000001, 0x9, 0x9, 0x4, 0xffffd16d, 0x3}]}, [{0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x6}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x80000000}, {0x7}, {0xfffffffc, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {0x2}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x7fff, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000, 0x100, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x1, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe, 0x2}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x0, 0x2}, {0x0, 0xcb1, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff, 0x0, 0x80000000}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd28d}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x4, 0xdbbd}, {}, {0x0, 0x0, 0x0, 0x200002}, {0x800000}, {0x0, 0x8}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x70}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf44}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, 0x0, 0x20000010)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x150, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x80, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x6}, {0x0, 0x3, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa0, 0x80, "e30c4a833114d85163740408cffe3c2c1be2ca05"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendfile(r5, r5, 0x0, 0xb)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000032000107fcffff060100000004000000"], 0x14}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x8000000}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
syz_emit_ethernet(0x2a, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642cf266646e6f3d", @ANYRESHEX, @ANYBLOB=',fdno=', @ANYBLOB="66e454098c3b22f4e2bfd9418f2662ab34c933bdae1199e25bd35356d19c17a4abdc5cd06a23432ca7c031d425640371103b10720035d800689b6147f9ce4666817aacf89db3aaf816ef354061b4d39edf036995fc60f55736e5e4ce4638fa12a54663313b82d0b6c90ba82c51eb88b7442cb60aec35ed91ac3f9d8d17cb", @ANYRES8=0x0])
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18)
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/23, 0x17}, &(0x7f0000000180), 0x2b}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

802.226036ms ago: executing program 7 (id=2152):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a18329bd70000000000005"], 0x28}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
pipe(&(0x7f0000000280)={<r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000001dc0)={{r7}, 0x0, 0x6, @unused=[0x8, 0x7fffffffffffffff, 0x5, 0x9], @name="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"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioperm(0x1, 0x9, 0xfffffffffffffff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=ANY=[@ANYRES64=r3, @ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r4], 0x48)

343.442794ms ago: executing program 1 (id=2153):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0xf44, 0x30, 0xb, 0x0, 0x0, {}, [{0xf30, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xee4, 0x2, 0x0, 0x0, {{0xa}, {0xeb8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1, 0x0, [{0x4, 0x5, 0x0, 0x3, 0xfffffff8, 0x7}, {0xffff, 0x7, 0x3, 0x44ba8a23, 0x9, 0x5}, {0x32, 0x7, 0x4, 0x4, 0x10001}, {0xfffffffa, 0x2, 0x908e, 0x7031, 0xffffffff, 0x2}, {0x7fffffff, 0x9, 0x1, 0x9, 0x6, 0x1}, {0x80000001, 0x9, 0x9, 0x4, 0xffffd16d, 0x3}]}, [{0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x6}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x80000000}, {0x7}, {0xfffffffc, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {0x2}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x7fff, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000, 0x100, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x1, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe, 0x2}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x0, 0x2}, {0x0, 0xcb1, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff, 0x0, 0x80000000}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd28d}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x4, 0xdbbd}, {}, {0x0, 0x0, 0x0, 0x200002}, {0x800000}, {0x0, 0x8}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x70}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf44}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, 0x0, 0x20000010)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x150, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x80, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x6}, {0x0, 0x3, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa0, 0x80, "e30c4a833114d85163740408cffe3c2c1be2ca05"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendfile(r5, r5, 0x0, 0xb)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000032000107fcffff060100000004000000"], 0x14}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x8000000}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
syz_emit_ethernet(0x2a, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642cf266646e6f3d", @ANYRESHEX, @ANYBLOB=',fdno=', @ANYBLOB="66e454098c3b22f4e2bfd9418f2662ab34c933bdae1199e25bd35356d19c17a4abdc5cd06a23432ca7c031d425640371103b10720035d800689b6147f9ce4666817aacf89db3aaf816ef354061b4d39edf036995fc60f55736e5e4ce4638fa12a54663313b82d0b6c90ba82c51eb88b7442cb60aec35ed91ac3f9d8d17cb", @ANYRES8=0x0])
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18)
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/23, 0x17}, &(0x7f0000000180), 0x2b}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

330.600314ms ago: executing program 6 (id=2154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="846574acfcfd0f93273d3fdb75eb326cca9fccabbca31294a1b14eccf81d7b9b4a95f7878e5c22c7120e671614ce859c1e02f90dd506bde66b4e5019af7ce73d5411832f8f97f4149b474e85859dd032ebc9dfad07ad5b159cd553d1a24ea2ed6c2696b00698cafec1448a1707f732a875ffdf4f8999fcaf2faa9c0847be98b7d026ef19f68227104fbd19584e208a840ef2916e9d7e0be5d3bec1"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', <r5=>0x0, 0x29, 0xcf, 0x1, 0x401, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x4, 0x2930}}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00', <r9=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000580)={'gretap0\x00', <r11=>0x0, 0x8, 0x1, 0x5, 0x8, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @local, {[@noop]}}}}}) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', <r12=>0x0, 0x106513a31ba0d136, 0x1, 0x80000000, 0xd, {{0x12, 0x4, 0x3, 0x2, 0x48, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x1b, 0xe2, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0x6, "90fc42b5"}, @end, @ssrr={0x89, 0xb, 0x89, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (rerun: 64)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000840)={'gretap0\x00', r12, 0x10, 0x7, 0xc, 0x84, {{0xb, 0x4, 0x3, 0x3f, 0x2c, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}, {[@ssrr={0x89, 0xb, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @generic={0x88, 0xa, "4bb68598bfd36b36"}]}}}}})
fsetxattr$security_selinux(r15, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async)
r16 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8801)
ioctl$EVIOCSCLOCKID(r16, 0x400445a0, &(0x7f0000000080)=0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu~=0||!')

302.036135ms ago: executing program 7 (id=2155):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18)
rename(&(0x7f0000000040)='./file1\x00', 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x9a80, 0x6, 0x0)

246.966605ms ago: executing program 1 (id=2156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = io_uring_setup(0x59b8, &(0x7f0000000180)={0x0, 0x5bc4, 0x80, 0x3, 0xe0})
syz_io_uring_setup(0x4f13, &(0x7f0000000240)={0x0, 0xa535, 0x1, 0x403, 0x4002a6, 0x0, r1}, &(0x7f00000003c0), &(0x7f00000004c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x14000080}, 0x0)
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_delete(0x0)

204.239066ms ago: executing program 7 (id=2157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

203.955886ms ago: executing program 6 (id=2158):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

174.822767ms ago: executing program 1 (id=2159):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

173.923767ms ago: executing program 7 (id=2160):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x808080, &(0x7f0000000080)={[{@dax_inode}, {@acl}]}, 0x2c, 0x524, &(0x7f0000000240)="$eJzs3c9vI1cdAPDvOHHizWabFHooCOhSCgtarZN426jqhXJBQlVVpMIJoW2UeKModhzFTmlCJNIzVyQqcYI/gQMSB6SeuHODG5dyQCqwAm2QEDIae7ybX05MEsfZ+PORRn5vZuzv91ma9+znHy+AoXU7InYjYiwi3ouIqWx/km3xZntLz3v8aGdx79HOYhLN5rt/H83O3FnsnN9xM3vMQsQ7aX38mLj1re3VhUqlvJHV81Fdn6lvbd9bqS4sl5fLa6XS/Nz87Ov3XytdWFtfqv7602+vvPX93/32i5/8YfcbP05z/mZ2LG3bhQXap/285GNy3770mXurH8EGYCRrz9igE+FMchHxmYh4OSs/URhcTgBAfzWbU9Gc2l/vLunhHADg6kvf809Gkitm7/8nI5crFltzeIUXYiJXqdUbdx/WNteWojWHNR353MOVSnk2myucjnyS1uda5af10qH6/Yh4PiJ+Nn6jVS8u1ipLg3rRAwBD7uah8f9f4+3xvwc+IQCAZ5mRHACGz9HxPz+QPACAy+P9PwAMn33j/3G/1QUArqHCod/+AwDX36nz/y/GT354OakAAJfE5/8AMFS++/bb6dbcy/7/eun9rc3V2vv3lsr11WJ1c7G4WNtYLy7Xasut/+ypnvZ4lVptfe7V2PxgplGuN2bqW9sPqrXNtcaD1v96Pyj7YQEADN7zL338pyQidt+40dqis5aDLwTAtecyh+E1MugEgIEZHXQCwMCYjweSU453/YrQR93vc+Mc+QD9d+dzXeb/T35t8N/m5aQH9JH5fxhe55v/N3sAzzLz/zC8ms3Eev4AMGR6eAfvK4JwzZ35838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYYpOtLckVs7XAJyOXKxYjbkXEdOSThyuV8mxEPBcRfxzPj6f1uUEnDQCcU+6vSbb+152pVyYPHx1L/j3euo2IH/3i3Z9/sNBobMyl+//xZH/jo2x/6dgA4/1vAwCwz+jhHZ1xujOOd9b3ffxoZ7GzXWaCn36rvbhoGncv2zqpt5MvRD4iJv6ZHGhMckELE+9+GBEvHm5/7snx6Wzl04nk4FOZxr7Vt/jRauHkvvijkTvQ/lzrWPs2fS4+ewG5wLD5OO1/3jzu+svF7dZt5/o/2JkW4qdHO9cz6PR/e83D/V/7en/nVqHV1xzX/93uNcarv/9O12MfjjQ/Pxqxd6T/7awIXWiVjov/So/x//yFL73c7VjzlxF34qT47dJMo7o+U9/avrdSXVguL5fXSqX5ufnZ1++/VpppzVHPdGaqj/rbG3ef697+iIku8QuntP+rPbb/V/957wdfPiH+179yXPxcvHBC/HRM/FqP8RcmftN1+e40/lKX9o8eiD924H7pvrs9xv/kL9tLPZ4KAFyC+tb26kKlUt74vwrJ7lnudc0LhX498s0r0sABFuJqpHFCYSQqnfmoK5HPuQsD7piAvnt60Q86EwAAAAAAAAAAAAAAoJv697K//Ovjj+EG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACur/8FAAD//+HUxlM=")
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xd175}}, './file1\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x4e, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}, 0x50)
r3 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r3}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2404c885)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = semget$private(0x0, 0x5, 0x0)
semtimedop(r8, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0)
semop(r8, &(0x7f00000007c0)=[{0x4, 0x81}, {0x0, 0xfffd, 0x1000}], 0x2)
semctl$IPC_RMID(r8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18)
r9 = syz_io_uring_setup(0x1d9e, &(0x7f00000000c0)={0x0, 0xe866, 0x40, 0x0, 0x2d1}, &(0x7f0000000040), &(0x7f0000000540))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000007c0)='xen_mmu_pte_clear\x00', r1, 0x0, 0x2e}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r10, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)
chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

153.345047ms ago: executing program 6 (id=2161):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r0, &(0x7f0000000000)="c7563afc371bb3951a61ce07d580d747ff6bbb02798e1968823235792ac598558e6afa4e8a6f473bf5bdd89a262e4941178265977d6ff4144eb5b874a9e91cbbc6e275f9cf43bbaaa648aa96cd0ef1422e74226a8160ee9fe411a3f0927c9aecce2ca8a3582c2b995046c27ab78bf0569d289969994e92381d3b3d8901cccd8ed03bbde4688d97fd4d766eb6bd3bad5c59acf6feef48c8eb890bdc128ee55541a7eac91db72111176f9195a2215c046b49976fa23a6da8396d628835f7f45f71f6d9f6c946d97d342bea0ef801180806262e9e6ff7afdea001c0025023c4e5a4c6addbb9de4e0736fa81f9578be731c276cdfaf6c79f", 0xf6, 0x8000, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @loopback, 0x2}, 0x1c)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @remote, <r1=>0x0}, &(0x7f0000000180)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r2=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x6, 0x4e23, 0x7, 0x2, 0x0, 0x20, 0x2c, r1, r2}, {0x7, 0x1, 0xff, 0x34, 0x5, 0x200, 0x7fffffff, 0xd}, {0x8000, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3506, 0x2, 0x1, 0xca, 0xdc2d, 0x5, 0x200}}, 0xe8)
r3 = io_uring_setup(0x3d76, &(0x7f0000000300)={0x0, 0xb4de, 0x10000, 0x3, 0x283})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000380)={0x6, r0, 0x28, {0x8, 0x8}, 0x5}, 0x1)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x3, 0x5, 0xc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xe6dd, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x9, 0x8, 0x8, 0x4, 0x7, 0x8, 0x8, 0x0, 0x5, 0x0, 0x3}, r5, 0x3, r0, 0x0)
capset(&(0x7f00000004c0)={0x20071026, r5}, &(0x7f0000000500)={0x2, 0x8, 0x8, 0x2, 0xff, 0x9})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1e, 0x5, 0x7, 0x2, 0x41001, r4, 0x2, '\x00', r1, r4, 0x1, 0x4, 0x4}, 0x50)
r6 = open(&(0x7f00000005c0)='./file0\x00', 0x8400, 0x12c)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000680)={0x9, &(0x7f0000000600)=[{0x5, 0x0, 0xff, 0x4}, {0x1, 0xfe, 0x5, 0x4}, {0x10, 0x5, 0x1, 0x4}, {0x3, 0xf0, 0x7, 0xdd8}, {0xc, 0xfd, 0x1, 0x4}, {0x1, 0x9}, {0x9, 0xdf, 0x65, 0x4}, {0x1, 0x3, 0xb, 0x7}, {0x8, 0xac, 0xa, 0x8}]})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
statfs(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)=""/239)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000800)=[r3, r3, r6, r6], 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000840)=@gcm_128={{0x304}, "f57414f7bfeef5fc", "6dc88befecdb1b09594c9a4ae74bd0f5", "192a8406", "3e3e2cb8ad3cc5f2"}, 0x28)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x4041, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000008c0)={'ipvlan0\x00', {0x2, 0x4e22, @private=0xa010101}})
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x400, 0x10c)
unlinkat(r8, &(0x7f0000000940)='./file0\x00', 0x200)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000980)=<r9=>0x0)
ptrace$peekuser(0x3, r9, 0x0)
capset(&(0x7f00000009c0)={0xf1504, r9}, &(0x7f0000000a00)={0x9, 0x5, 0x8000, 0x3, 0x9, 0xfffff801})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x80010, r0, 0xcea08000)
fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0xdd, 0x5, 0x4, "f27efe7d7699e6ccb22bb5017141c968", "e158177d58a2f204b657667854a2412eb0836415024ad31d29a5fbda4af1b35c1443ddf0e9b56f65835c8d7ad66fcfaa125360775ea4df3e0f3c77399c74ffe72f98cbdb5e56887cc378bb704c755a69c9fccc0316f5a81debc52baabb976a494e219f61eb242f80ecb933b38c6525406e012ff3eb314704453fa4facad45a4c55be8696243da31f5d7a2e7b54dd49573c9289cedf998cc7a5c5286f0e72692ba686a64f4920a5fcfb2989e5a069293b844a462036a5f973408d907f7131090c4f97db2ed7f4e84b"}, 0xdd, 0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0x8001, 0x2)

129.638507ms ago: executing program 1 (id=2162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r2, &(0x7f0000000040), 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4118831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_clone(0x20000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
close(r2)

80.399519ms ago: executing program 1 (id=2163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) (fail_nth: 3)

0s ago: executing program 1 (id=2164):
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[], [{@fowner_lt={'fowner<', r0}}, {@fsname={'fsname', 0x3d, '\x00'}}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xc}}, 0x20)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[], [{@fowner_lt={'fowner<', r0}}, {@fsname={'fsname', 0x3d, '\x00'}}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") (async)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async)
ftruncate(r1, 0x2007ffc) (async)
sendfile(r1, r1, 0x0, 0x800000009) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xc}}, 0x20) (async)

kernel console output (not intermixed with test programs):

T6386] EXT4-fs: Ignoring removed orlov option
[   88.545127][ T6386] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.558037][ T6386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.597440][ T6391] loop7: detected capacity change from 0 to 512
[   88.617839][ T6391] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.723: Failed to acquire dquot type 1
[   88.629731][ T6391] EXT4-fs (loop7): 1 truncate cleaned up
[   88.636370][ T6391] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.649329][ T6391] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.723: Failed to acquire dquot type 1
[   89.082323][ T6400] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   89.090680][ T6400] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   89.159496][ T6402] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   89.206111][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[   89.224183][ T6404] loop3: detected capacity change from 0 to 512
[   89.247877][ T6404] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.727: Failed to acquire dquot type 1
[   89.261067][ T6404] EXT4-fs (loop3): 1 truncate cleaned up
[   89.270045][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'.
[   89.277886][ T6404] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.295494][ T6404] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.727: Failed to acquire dquot type 1
[   89.312299][ T6411] netlink: 'syz.6.729': attribute type 1 has an invalid length.
[   89.334358][ T6416] 9pnet_fd: Insufficient options for proto=fd
[   89.362448][ T6416] lo speed is unknown, defaulting to 1000
[   89.382532][ T6412] loop2: detected capacity change from 0 to 512
[   89.391731][ T6412] journal_path: Lookup failure for './file0/../file0'
[   89.398699][ T6412] EXT4-fs: error: could not find journal device path
[   89.440103][ T6423] __nla_validate_parse: 2 callbacks suppressed
[   89.440121][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.732'.
[   89.513672][ T6429] loop2: detected capacity change from 0 to 512
[   89.540749][ T6429] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.734: Failed to acquire dquot type 1
[   89.552841][ T6429] EXT4-fs (loop2): 1 truncate cleaned up
[   89.560099][ T6429] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.579494][ T6429] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.734: Failed to acquire dquot type 1
[   89.645166][ T6443] IPv6: Can't replace route, no match found
[   89.677331][ T6452] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   89.678822][ T6450] IPVS: stopping master sync thread 6452 ...
[   89.754790][ T6459] loop1: detected capacity change from 0 to 2048
[   89.773399][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.745'.
[   89.782477][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.745'.
[   89.910635][ T6455] loop7: detected capacity change from 0 to 128
[   89.928789][ T6473] loop1: detected capacity change from 0 to 512
[   89.937874][ T6473] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.748: Failed to acquire dquot type 1
[   89.950167][ T6473] EXT4-fs (loop1): 1 truncate cleaned up
[   89.956454][ T6473] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.970291][ T6473] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.748: Failed to acquire dquot type 1
[   90.028219][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.037045][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.146459][ T6486] loop1: detected capacity change from 0 to 512
[   90.158198][ T6486] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.752: Failed to acquire dquot type 1
[   90.170972][ T6486] EXT4-fs (loop1): 1 truncate cleaned up
[   90.177541][ T6486] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.192985][ T6486] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.752: Failed to acquire dquot type 1
[   90.247500][ T6491] IPv6: Can't replace route, no match found
[   90.307382][ T6493] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[   90.318338][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.
[   90.385808][ T6496] loop1: detected capacity change from 0 to 512
[   90.401235][ T6496] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   90.420471][ T6499] loop2: detected capacity change from 0 to 2048
[   90.553260][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'.
[   90.562882][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[   90.664102][ T6518] loop7: detected capacity change from 0 to 128
[   90.710581][ T6520] loop2: detected capacity change from 0 to 512
[   90.737964][ T6520] journal_path: Lookup failure for './file0/../file0'
[   90.744991][ T6520] EXT4-fs: error: could not find journal device path
[   90.986689][ T6531] loop2: detected capacity change from 0 to 512
[   91.027843][ T6531] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.766: Failed to acquire dquot type 1
[   91.049512][ T6531] EXT4-fs (loop2): 1 truncate cleaned up
[   91.062292][ T6531] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.091245][ T6531] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.766: Failed to acquire dquot type 1
[   91.210948][ T6536] tipc: Enabling of bearer <udp:�> rejected, already enabled
[   91.285319][ T6539] 9pnet_fd: Insufficient options for proto=fd
[   91.301824][ T6539] lo speed is unknown, defaulting to 1000
[   91.348250][ T6543] loop1: detected capacity change from 0 to 2048
[   91.382889][ T6545] loop7: detected capacity change from 0 to 4096
[   91.445479][ T6545] tipc: Can't bind to reserved service type 1
[   91.456749][ T6545] loop7: detected capacity change from 0 to 1024
[   91.551404][ T6564] loop7: detected capacity change from 0 to 512
[   91.617944][ T6568] loop1: detected capacity change from 0 to 512
[   91.626636][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'.
[   91.644333][ T6568] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   91.739929][   T29] kauditd_printk_skb: 981 callbacks suppressed
[   91.739947][   T29] audit: type=1326 audit(1753478298.704:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.853274][   T29] audit: type=1326 audit(1753478298.734:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.876892][   T29] audit: type=1326 audit(1753478298.734:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.900422][   T29] audit: type=1326 audit(1753478298.734:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.923854][   T29] audit: type=1326 audit(1753478298.734:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.947236][   T29] audit: type=1326 audit(1753478298.734:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.970621][   T29] audit: type=1326 audit(1753478298.734:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   91.994123][   T29] audit: type=1326 audit(1753478298.734:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   92.017391][   T29] audit: type=1326 audit(1753478298.734:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   92.041702][   T29] audit: type=1326 audit(1753478298.734:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.7.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[   92.048043][ T6583] 9pnet_fd: Insufficient options for proto=fd
[   92.086057][ T6583] lo speed is unknown, defaulting to 1000
[   92.145870][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.784'.
[   92.154970][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.784'.
[   92.491074][ T6608] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   92.499454][ T6608] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   92.565901][ T6614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.793'.
[   92.669115][ T6624] loop1: detected capacity change from 0 to 128
[   92.677585][ T6624] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.194222][ T6668] netlink: 'syz.6.812': attribute type 1 has an invalid length.
[   93.215998][ T6669] loop7: detected capacity change from 0 to 128
[   93.224606][ T6669] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.341813][ T6679] IPv6: Can't replace route, no match found
[   93.470623][ T6676] lo speed is unknown, defaulting to 1000
[   93.584282][ T6694] loop1: detected capacity change from 0 to 1024
[   93.592558][ T6694] EXT4-fs: Ignoring removed orlov option
[   93.598461][ T6694] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.635808][ T6698] IPv6: Can't replace route, no match found
[   93.663853][ T6700] tipc: Enabling of bearer <udp:�> rejected, already enabled
[   93.803159][ T6705] loop1: detected capacity change from 0 to 1024
[   93.834191][ T6705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.824: inode #2838694243: comm syz.1.824: iget: illegal inode #
[   93.848874][ T6705] EXT4-fs (loop1): Remounting filesystem read-only
[   93.857412][ T6714] IPv6: Can't replace route, no match found
[   93.863690][ T6705] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.824: dec ref error=-30
[   93.912932][ T6720] syz.6.830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   93.946683][ T6727] 9pnet_fd: Insufficient options for proto=fd
[   94.050775][ T6733] loop1: detected capacity change from 0 to 1024
[   94.084057][ T6735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 54635 - 0
[   94.087167][ T6733] EXT4-fs: Ignoring removed orlov option
[   94.093026][ T6735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 54635 - 0
[   94.098957][ T6733] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.114723][ T6735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 54635 - 0
[   94.123817][ T6735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 54635 - 0
[   94.145240][ T6735] geneve2: entered promiscuous mode
[   94.150909][ T6735] geneve2: entered allmulticast mode
[   94.177415][ T6740] tipc: Started in network mode
[   94.182427][ T6740] tipc: Node identity ac14140f, cluster identity 4711
[   94.189580][ T6740] tipc: New replicast peer: 255.255.255.83
[   94.195454][ T6740] tipc: Enabled bearer <udp:�>, priority 10
[   94.544818][ T6771] IPv6: Can't replace route, no match found
[   94.561783][ T6775] loop7: detected capacity change from 0 to 2048
[   94.687298][ T6783] tipc: Enabling of bearer <udp:�> rejected, already enabled
[   94.725580][ T6790] loop1: detected capacity change from 0 to 512
[   94.733036][ T6790] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   94.766072][ T6792] loop7: detected capacity change from 0 to 512
[   94.791366][ T6792] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.031810][ T6818] pim6reg: entered allmulticast mode
[   95.307279][ T3400] tipc: Node number set to 2886997007
[   95.599293][ T6855] loop1: detected capacity change from 0 to 1024
[   95.606380][ T6855] EXT4-fs: Ignoring removed nobh option
[   95.612048][ T6855] EXT4-fs: inline encryption not supported
[   95.630574][ T6856] netlink: 'syz.3.876': attribute type 1 has an invalid length.
[   95.651160][ T6856] __nla_validate_parse: 6 callbacks suppressed
[   95.651181][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'.
[   95.671263][ T6855] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.875: Allocating blocks 385-513 which overlap fs metadata
[   95.709087][ T6855] FAULT_INJECTION: forcing a failure.
[   95.709087][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.722344][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: wޣ� Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[   95.722421][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   95.722437][ T6855] Call Trace:
[   95.722446][ T6855]  <TASK>
[   95.722456][ T6855]  __dump_stack+0x1d/0x30
[   95.722484][ T6855]  dump_stack_lvl+0xe8/0x140
[   95.722537][ T6855]  dump_stack+0x15/0x1b
[   95.722557][ T6855]  should_fail_ex+0x265/0x280
[   95.722596][ T6855]  should_fail+0xb/0x20
[   95.722640][ T6855]  should_fail_usercopy+0x1a/0x20
[   95.722680][ T6855]  copy_folio_from_iter_atomic+0x278/0x1170
[   95.722721][ T6855]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[   95.722821][ T6855]  generic_perform_write+0x2c2/0x490
[   95.722851][ T6855]  ext4_buffered_write_iter+0x1ee/0x3c0
[   95.722957][ T6855]  ? ext4_file_write_iter+0xfe/0xf00
[   95.722980][ T6855]  ext4_file_write_iter+0x383/0xf00
[   95.723016][ T6855]  ? path_openat+0x1bf8/0x2170
[   95.723044][ T6855]  ? _parse_integer_limit+0x170/0x190
[   95.723078][ T6855]  do_iter_readv_writev+0x421/0x4c0
[   95.723194][ T6855]  vfs_writev+0x2df/0x8b0
[   95.723253][ T6855]  __se_sys_pwritev2+0xfc/0x1c0
[   95.723283][ T6855]  __x64_sys_pwritev2+0x67/0x80
[   95.723304][ T6855]  x64_sys_call+0x1cea/0x2fb0
[   95.723325][ T6855]  do_syscall_64+0xd2/0x200
[   95.723345][ T6855]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   95.723407][ T6855]  ? clear_bhb_loop+0x40/0x90
[   95.723428][ T6855]  ? clear_bhb_loop+0x40/0x90
[   95.723450][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.723471][ T6855] RIP: 0033:0x7fc474c4e9a9
[   95.723523][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.723542][ T6855] RSP: 002b:00007fc4732b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   95.723562][ T6855] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4e9a9
[   95.723575][ T6855] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
[   95.723653][ T6855] RBP: 00007fc4732b7090 R08: 0000000000000000 R09: 0000000000000002
[   95.723665][ T6855] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001
[   95.723677][ T6855] R13: 0000000000000000 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[   95.723745][ T6855]  </TASK>
[   95.954709][ T6855] EXT4-fs (loop1): pa ffff88810056a2a0: logic 16, phys. 129, len 24
[   95.963621][ T6855] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   96.070913][ T6865] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   96.079573][ T6865] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   96.282098][ T6898] netlink: 'syz.6.891': attribute type 1 has an invalid length.
[   96.291949][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'.
[   96.352443][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.6.892'.
[   96.361500][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.892'.
[   96.754606][ T6933] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[   96.762964][ T6933] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[   96.784015][ T6937] netlink: 'syz.3.903': attribute type 1 has an invalid length.
[   96.816346][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'.
[   96.899093][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'.
[   96.958863][   T29] kauditd_printk_skb: 902 callbacks suppressed
[   96.958883][   T29] audit: type=1326 audit(1753478532.923:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.044023][   T29] audit: type=1326 audit(1753478532.923:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.067495][   T29] audit: type=1326 audit(1753478532.923:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.091152][   T29] audit: type=1326 audit(1753478532.923:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.114601][   T29] audit: type=1326 audit(1753478532.923:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.138803][   T29] audit: type=1326 audit(1753478532.923:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.162330][   T29] audit: type=1326 audit(1753478532.923:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.170142][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.904'.
[   97.186077][   T29] audit: type=1326 audit(1753478532.923:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.218486][   T29] audit: type=1326 audit(1753478532.923:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.242200][   T29] audit: type=1326 audit(1753478532.923:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[   97.367915][ T6970] loop7: detected capacity change from 0 to 512
[   97.376542][ T6970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   97.409158][ T6970] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.915: invalid block
[   97.431698][ T6970] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.915: invalid indirect mapped block 4294967295 (level 1)
[   97.481294][ T6981] netlink: 'syz.6.917': attribute type 1 has an invalid length.
[   97.492465][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.917'.
[   97.562426][ T6970] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.915: invalid indirect mapped block 4294967295 (level 1)
[   97.624917][ T6970] EXT4-fs (loop7): 2 truncates cleaned up
[   97.689064][ T6970] ALSA: seq fatal error: cannot create timer (-19)
[   97.733121][ T6989] pim6reg: entered allmulticast mode
[   98.451233][ T7000] loop1: detected capacity change from 0 to 512
[   98.488608][ T7000] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.924: Failed to acquire dquot type 1
[   98.509513][ T7000] EXT4-fs (loop1): 1 truncate cleaned up
[   98.515865][ T7000] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.643997][ T7000] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.924: Failed to acquire dquot type 1
[   98.816946][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'.
[   99.104679][ T7051] loop7: detected capacity change from 0 to 128
[   99.133096][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.942'.
[   99.143795][ T7051] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.292881][ T6154] EXT4-fs unmount: 40 callbacks suppressed
[   99.292901][ T6154] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.468579][ T7075] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[   99.476920][ T7075] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[   99.717130][ T7088] loop1: detected capacity change from 0 to 1024
[   99.732455][ T7085] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   99.740796][ T7085] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   99.766809][ T7088] EXT4-fs: Ignoring removed orlov option
[   99.772553][ T7088] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.856154][ T7088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.894851][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.920797][ T7103] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   99.933370][ T7107] loop1: detected capacity change from 0 to 512
[   99.981410][ T7107] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.957: Failed to acquire dquot type 1
[  100.014668][ T7107] EXT4-fs (loop1): 1 truncate cleaned up
[  100.020944][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.125026][ T7107] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.149806][ T7107] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.957: Failed to acquire dquot type 1
[  100.181577][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.205614][ T7116] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  100.214015][ T7116] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  100.375369][ T7121] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 58089 - 0
[  100.384346][ T7121] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 58089 - 0
[  100.393285][ T7121] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 58089 - 0
[  100.402199][ T7121] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 58089 - 0
[  100.432540][ T7121] geneve2: entered promiscuous mode
[  100.437853][ T7121] geneve2: entered allmulticast mode
[  100.502581][ T7123] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  101.009111][ T7151] netlink: 'syz.3.974': attribute type 1 has an invalid length.
[  101.020043][ T7151] __nla_validate_parse: 4 callbacks suppressed
[  101.020059][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'.
[  101.089380][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'.
[  101.426857][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'.
[  101.435890][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  101.504840][ T7171] loop1: detected capacity change from 0 to 512
[  101.511916][ T7171] journal_path: Lookup failure for './file0/../file0'
[  101.519278][ T7171] EXT4-fs: error: could not find journal device path
[  102.076415][ T7194] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  102.156676][   T29] kauditd_printk_skb: 468 callbacks suppressed
[  102.156694][   T29] audit: type=1400 audit(1753478538.123:7769): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  102.249889][   T29] audit: type=1326 audit(1753478538.173:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.273772][   T29] audit: type=1326 audit(1753478538.173:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.297426][   T29] audit: type=1326 audit(1753478538.173:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.320835][   T29] audit: type=1326 audit(1753478538.173:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.344316][   T29] audit: type=1326 audit(1753478538.173:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.367790][   T29] audit: type=1326 audit(1753478538.173:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.391396][   T29] audit: type=1326 audit(1753478538.173:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.414810][   T29] audit: type=1326 audit(1753478538.173:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.429193][ T7221] loop7: detected capacity change from 0 to 2048
[  102.438258][   T29] audit: type=1326 audit(1753478538.173:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  102.743021][ T7238] FAULT_INJECTION: forcing a failure.
[  102.743021][ T7238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.756265][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.7.1000 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  102.756368][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.756384][ T7238] Call Trace:
[  102.756394][ T7238]  <TASK>
[  102.756403][ T7238]  __dump_stack+0x1d/0x30
[  102.756430][ T7238]  dump_stack_lvl+0xe8/0x140
[  102.756557][ T7238]  dump_stack+0x15/0x1b
[  102.756598][ T7238]  should_fail_ex+0x265/0x280
[  102.756636][ T7238]  should_fail+0xb/0x20
[  102.756774][ T7238]  should_fail_usercopy+0x1a/0x20
[  102.756821][ T7238]  _copy_to_user+0x20/0xa0
[  102.756847][ T7238]  __x64_sys_getrlimit+0x104/0x150
[  102.756884][ T7238]  x64_sys_call+0x1657/0x2fb0
[  102.756905][ T7238]  do_syscall_64+0xd2/0x200
[  102.757002][ T7238]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  102.757034][ T7238]  ? clear_bhb_loop+0x40/0x90
[  102.757054][ T7238]  ? clear_bhb_loop+0x40/0x90
[  102.757149][ T7238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.757176][ T7238] RIP: 0033:0x7f4f40fbe9a9
[  102.757195][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.757216][ T7238] RSP: 002b:00007f4f3f61f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000061
[  102.757240][ T7238] RAX: ffffffffffffffda RBX: 00007f4f411e5fa0 RCX: 00007f4f40fbe9a9
[  102.757256][ T7238] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a
[  102.757272][ T7238] RBP: 00007f4f3f61f090 R08: 0000000000000000 R09: 0000000000000000
[  102.757349][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.757363][ T7238] R13: 0000000000000000 R14: 00007f4f411e5fa0 R15: 00007ffd5cca15e8
[  102.757382][ T7238]  </TASK>
[  102.965438][ T7242] netlink: 'syz.7.1003': attribute type 1 has an invalid length.
[  102.974578][ T7242] xt_hashlimit: size too large, truncated to 1048576
[  103.364309][ T7271] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  103.401239][ T7268] loop7: detected capacity change from 0 to 512
[  103.410225][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'.
[  103.447355][ T7268] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  103.449234][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  103.474493][ T7268] EXT4-fs (loop7): orphan cleanup on readonly fs
[  103.494547][ T7268] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  103.522884][ T7268] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  103.577462][ T7268] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1011: bg 0: block 40: padding at end of block bitmap is not set
[  103.619089][ T7268] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  103.654061][ T7268] EXT4-fs (loop7): 1 truncate cleaned up
[  103.686622][ T7268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.107907][ T7294] loop1: detected capacity change from 0 to 128
[  104.116683][ T7294] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  104.140690][ T7294] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.152760][ T6154] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.184033][ T7299] loop7: detected capacity change from 0 to 2048
[  104.255920][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.295291][ T7308] netlink: 'syz.7.1027': attribute type 10 has an invalid length.
[  104.307564][ T7308] team0: Port device dummy0 added
[  104.525292][ T7332] loop1: detected capacity change from 0 to 512
[  104.548110][ T7332] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1034: Failed to acquire dquot type 1
[  104.560006][ T7332] EXT4-fs (loop1): 1 truncate cleaned up
[  104.566151][ T7332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.591543][ T7332] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.645897][ T7332] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1034: Failed to acquire dquot type 1
[  104.731318][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'.
[  104.741345][ T7347] netlink: 'syz.2.1039': attribute type 1 has an invalid length.
[  104.963837][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.978367][ T7360] 9pnet_fd: Insufficient options for proto=fd
[  105.012879][ T7369] loop1: detected capacity change from 0 to 1024
[  105.022747][ T7370] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  105.031942][ T7369] EXT4-fs: Ignoring removed orlov option
[  105.038010][ T7369] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.069400][ T7369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.144913][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.209885][ T7383] infiniband syz!: set active
[  106.214659][ T7383] infiniband syz!: added team_slave_0
[  106.272692][ T7383] RDS/IB: syz!: added
[  106.276848][ T7383] smc: adding ib device syz! with port count 1
[  106.283136][ T7383] smc:    ib device syz! port 1 has pnetid 
[  106.368472][ T7404] 9pnet: Unknown protocol version 9p280�+

[  106.534090][ T7417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 54635 - 0
[  106.607840][ T7417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 54635 - 0
[  106.730508][ T7417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 54635 - 0
[  106.757864][ T7428] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  106.850684][ T7417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 54635 - 0
[  106.917999][ T7417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 54635 - 0
[  106.932011][ T7417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 54635 - 0
[  106.950586][ T7417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 54635 - 0
[  107.004596][ T7417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 54635 - 0
[  107.192055][ T7440] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  107.200367][ T7440] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  107.287677][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1077'.
[  107.430234][ T7459] loop7: detected capacity change from 0 to 2048
[  107.517166][   T29] kauditd_printk_skb: 427 callbacks suppressed
[  107.517245][   T29] audit: type=1326 audit(1753478543.483:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  107.547726][   T29] audit: type=1326 audit(1753478543.483:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  107.647368][ T7476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1085'.
[  107.677090][   T29] audit: type=1326 audit(1753478543.633:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.700864][   T29] audit: type=1326 audit(1753478543.633:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.724780][   T29] audit: type=1326 audit(1753478543.633:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.748488][   T29] audit: type=1326 audit(1753478543.633:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.772155][   T29] audit: type=1326 audit(1753478543.633:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.795943][   T29] audit: type=1326 audit(1753478543.633:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.819561][   T29] audit: type=1326 audit(1753478543.633:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.843270][   T29] audit: type=1326 audit(1753478543.633:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  107.890071][ T7486] 9pnet_fd: Insufficient options for proto=fd
[  107.925147][ T7492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.945514][ T7494] loop7: detected capacity change from 0 to 128
[  107.969772][ T7494] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  107.983747][ T7494] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.026496][ T7500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.084920][ T7506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.128921][ T6154] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.151601][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.161079][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.769139][ T7529] 9pnet_fd: Insufficient options for proto=fd
[  109.022479][ T7543] netlink: 'syz.2.1111': attribute type 4 has an invalid length.
[  109.030481][ T7543] netlink: 'syz.2.1111': attribute type 4 has an invalid length.
[  109.039096][ T7543] netlink: 'syz.2.1111': attribute type 2 has an invalid length.
[  109.047040][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'.
[  109.095361][ T7554] tipc: Enabling of bearer <edp:s> rejected, media not registered
[  109.157762][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'.
[  109.243746][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'.
[  109.806560][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1129'.
[  110.002045][ T7605] netlink: 'syz.3.1136': attribute type 1 has an invalid length.
[  110.036075][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'.
[  110.206627][ T7612] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.1139'.
[  110.239547][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'.
[  110.485788][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'.
[  110.498559][ T7633] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.506953][ T7633] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.515139][ T7633] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.523467][ T7633] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.532604][ T7633] vxlan0: entered promiscuous mode
[  110.614208][ T7644] netlink: 'syz.1.1149': attribute type 1 has an invalid length.
[  110.681334][ T7646] loop1: detected capacity change from 0 to 128
[  110.700628][ T7646] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  110.723722][ T7646] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.784735][ T7651] team0: Cannot enslave team device to itself
[  110.804657][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.824579][ T7653] loop1: detected capacity change from 0 to 512
[  110.831952][ T7653] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  110.841458][ T7653] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  110.861610][ T7653] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  110.873228][ T7653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  110.882854][ T7653] System zones: 0-2, 18-18, 34-35
[  110.888667][ T7653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.958857][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.985180][ T7664] 9pnet_fd: Insufficient options for proto=fd
[  110.990568][ T7675] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  111.028845][ T7679] loop1: detected capacity change from 0 to 1024
[  111.058692][ T7679] EXT4-fs: Ignoring removed orlov option
[  111.064480][ T7679] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.081432][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.102304][ T7688] netlink: 'syz.7.1160': attribute type 1 has an invalid length.
[  111.149099][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.292851][ T7712] 9pnet_fd: Insufficient options for proto=fd
[  111.455791][ T7724] 9pnet_fd: Insufficient options for proto=fd
[  111.582451][ T7732] netlink: 'syz.2.1175': attribute type 1 has an invalid length.
[  111.955991][ T7759] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  111.964305][ T7759] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  112.047836][ T7765] netlink: 'syz.7.1187': attribute type 1 has an invalid length.
[  112.633895][ T7786] FAULT_INJECTION: forcing a failure.
[  112.633895][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.647173][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.1.1196 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  112.647250][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  112.647298][ T7786] Call Trace:
[  112.647313][ T7786]  <TASK>
[  112.647322][ T7786]  __dump_stack+0x1d/0x30
[  112.647345][ T7786]  dump_stack_lvl+0xe8/0x140
[  112.647364][ T7786]  dump_stack+0x15/0x1b
[  112.647416][ T7786]  should_fail_ex+0x265/0x280
[  112.647471][ T7786]  should_fail+0xb/0x20
[  112.647538][ T7786]  should_fail_usercopy+0x1a/0x20
[  112.647579][ T7786]  _copy_to_user+0x20/0xa0
[  112.647606][ T7786]  simple_read_from_buffer+0xb5/0x130
[  112.647669][ T7786]  proc_fail_nth_read+0x100/0x140
[  112.647852][ T7786]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.647925][ T7786]  vfs_read+0x1a0/0x6f0
[  112.648035][ T7786]  ? __rcu_read_unlock+0x4f/0x70
[  112.648063][ T7786]  ? __fget_files+0x184/0x1c0
[  112.648090][ T7786]  ksys_read+0xda/0x1a0
[  112.648210][ T7786]  __x64_sys_read+0x40/0x50
[  112.648281][ T7786]  x64_sys_call+0x2d77/0x2fb0
[  112.648311][ T7786]  do_syscall_64+0xd2/0x200
[  112.648407][ T7786]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  112.648432][ T7786]  ? clear_bhb_loop+0x40/0x90
[  112.648489][ T7786]  ? clear_bhb_loop+0x40/0x90
[  112.648571][ T7786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.648639][ T7786] RIP: 0033:0x7fc474c4d3bc
[  112.648689][ T7786] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  112.648713][ T7786] RSP: 002b:00007fc4732b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  112.648741][ T7786] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4d3bc
[  112.648757][ T7786] RDX: 000000000000000f RSI: 00007fc4732b70a0 RDI: 0000000000000003
[  112.648813][ T7786] RBP: 00007fc4732b7090 R08: 0000000000000000 R09: 0000000000000000
[  112.648824][ T7786] R10: 00000000000003b6 R11: 0000000000000246 R12: 0000000000000001
[  112.648835][ T7786] R13: 0000000000000001 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[  112.648870][ T7786]  </TASK>
[  112.896729][ T7784] __nla_validate_parse: 6 callbacks suppressed
[  112.896812][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1195'.
[  112.960339][   T29] kauditd_printk_skb: 668 callbacks suppressed
[  112.960354][   T29] audit: type=1326 audit(1753478548.923:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.7.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[  113.014178][ T7791] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  113.024009][ T7791] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  113.055585][ T7795] netlink: 'syz.7.1199': attribute type 1 has an invalid length.
[  113.065101][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1199'.
[  113.153360][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1202'.
[  113.218093][   T29] audit: type=1400 audit(1753478549.183:8880): avc:  denied  { accept } for  pid=7802 comm="syz.3.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  113.369256][   T29] audit: type=1326 audit(1753478549.333:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.393150][   T29] audit: type=1326 audit(1753478549.333:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.435759][   T29] audit: type=1326 audit(1753478549.333:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.480882][   T29] audit: type=1326 audit(1753478549.393:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.504721][   T29] audit: type=1326 audit(1753478549.393:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.528282][   T29] audit: type=1326 audit(1753478549.393:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.552310][   T29] audit: type=1326 audit(1753478549.393:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.576051][   T29] audit: type=1326 audit(1753478549.393:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  113.622917][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1210'.
[  113.631928][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'.
[  113.648603][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'.
[  113.658399][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.665917][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.674577][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.682188][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.812860][ T7827] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003
[  113.873924][ T7829] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  113.882271][ T7829] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  114.489939][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  114.499530][ T7864] bridge_slave_1: left allmulticast mode
[  114.505223][ T7864] bridge_slave_1: left promiscuous mode
[  114.511033][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.527778][ T7864] bridge_slave_0: left allmulticast mode
[  114.533851][ T7864] bridge_slave_0: left promiscuous mode
[  114.539727][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.580985][ T7867] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.649039][ T7863] delete_channel: no stack
[  114.705174][ T7878] loop1: detected capacity change from 0 to 512
[  114.717433][ T7878] EXT4-fs: dax option not supported
[  115.729411][ T7894] loop1: detected capacity change from 0 to 2048
[  115.738512][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1233'.
[  115.747603][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1233'.
[  115.874812][ T7903] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  115.883165][ T7903] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  116.043651][ T7918] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  116.119052][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.145308][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.188029][ T7930] 9pnet_fd: Insufficient options for proto=fd
[  116.228846][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1247'.
[  116.597757][ T7946] wg2: entered promiscuous mode
[  116.602755][ T7946] wg2: entered allmulticast mode
[  116.653472][ T7953] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  116.870353][ T7956] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  116.923478][ T7958] loop1: detected capacity change from 0 to 1024
[  116.980807][ T7958] EXT4-fs: Ignoring removed orlov option
[  116.986636][ T7958] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.150933][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.199661][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.227116][ T7977] xt_connbytes: Forcing CT accounting to be enabled
[  117.233818][ T7977] set match dimension is over the limit!
[  117.235069][ T7975] netlink: 'syz.7.1265': attribute type 13 has an invalid length.
[  117.267815][ T7975] gretap0: refused to change device tx_queue_len
[  117.274250][ T7975] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  117.309526][ T7983] xt_connbytes: Forcing CT accounting to be enabled
[  117.316558][ T7983] set match dimension is over the limit!
[  118.156767][   T29] kauditd_printk_skb: 305 callbacks suppressed
[  118.156783][   T29] audit: type=1326 audit(1753478554.103:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.186753][   T29] audit: type=1326 audit(1753478554.103:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.210359][   T29] audit: type=1326 audit(1753478554.113:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.233849][   T29] audit: type=1326 audit(1753478554.113:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.257477][   T29] audit: type=1326 audit(1753478554.113:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.281289][   T29] audit: type=1326 audit(1753478554.113:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.304814][   T29] audit: type=1326 audit(1753478554.113:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.328691][   T29] audit: type=1326 audit(1753478554.113:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.352269][   T29] audit: type=1326 audit(1753478554.113:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.378133][   T29] audit: type=1326 audit(1753478554.243:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  118.513143][ T8005] openvswitch: netlink: Message has 6 unknown bytes.
[  118.593538][ T8001] loop1: detected capacity change from 0 to 512
[  118.617188][ T8001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002]
[  118.625293][ T8001] System zones: 1-12
[  118.785355][ T8001] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1272: corrupted in-inode xattr: e_value size too large
[  119.052100][ T8001] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1272: couldn't read orphan inode 15 (err -117)
[  119.086179][ T8001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.178678][ T8001] FAULT_INJECTION: forcing a failure.
[  119.178678][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.191984][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.1.1272 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  119.192086][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.192103][ T8001] Call Trace:
[  119.192112][ T8001]  <TASK>
[  119.192122][ T8001]  __dump_stack+0x1d/0x30
[  119.192148][ T8001]  dump_stack_lvl+0xe8/0x140
[  119.192228][ T8001]  dump_stack+0x15/0x1b
[  119.192328][ T8001]  should_fail_ex+0x265/0x280
[  119.192359][ T8001]  should_fail+0xb/0x20
[  119.192385][ T8001]  should_fail_usercopy+0x1a/0x20
[  119.192422][ T8001]  strncpy_from_user+0x25/0x230
[  119.192517][ T8001]  ? kmem_cache_alloc_noprof+0x186/0x310
[  119.192548][ T8001]  ? getname_flags+0x80/0x3b0
[  119.192577][ T8001]  getname_flags+0xae/0x3b0
[  119.192604][ T8001]  __x64_sys_mknod+0x40/0x60
[  119.192678][ T8001]  x64_sys_call+0x181c/0x2fb0
[  119.192706][ T8001]  do_syscall_64+0xd2/0x200
[  119.192727][ T8001]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  119.192752][ T8001]  ? clear_bhb_loop+0x40/0x90
[  119.192831][ T8001]  ? clear_bhb_loop+0x40/0x90
[  119.192856][ T8001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.192950][ T8001] RIP: 0033:0x7fc474c4e9a9
[  119.192966][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.192986][ T8001] RSP: 002b:00007fc4732b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  119.193016][ T8001] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4e9a9
[  119.193030][ T8001] RDX: 0000000000000009 RSI: 0000000000000008 RDI: 0000200000000080
[  119.193047][ T8001] RBP: 00007fc4732b7090 R08: 0000000000000000 R09: 0000000000000000
[  119.193059][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.193070][ T8001] R13: 0000000000000000 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[  119.193116][ T8001]  </TASK>
[  119.398945][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.465964][ T8025] netlink: 'syz.7.1280': attribute type 83 has an invalid length.
[  119.495745][ T8022] loop1: detected capacity change from 0 to 2048
[  119.503028][ T8022] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  119.504780][ T8025] __nla_validate_parse: 2 callbacks suppressed
[  119.504798][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1280'.
[  119.625013][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1283'.
[  119.651913][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1283'.
[  119.686287][ T8043] netlink: 'syz.1.1285': attribute type 3 has an invalid length.
[  119.694229][ T8043] netlink: 'syz.1.1285': attribute type 8 has an invalid length.
[  119.702130][ T8043] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.1285'.
[  119.714241][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  119.864412][ T8054] loop1: detected capacity change from 0 to 128
[  119.937372][ T8054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  119.972600][ T8054] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.202992][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'.
[  120.254994][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.309454][ T8077] loop1: detected capacity change from 0 to 1024
[  120.385353][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.399053][ T8077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.472134][ T8077] loop1: detected capacity change from 0 to 1024
[  120.502502][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.527735][ T8077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.054123][ T8077] loop1: detected capacity change from 0 to 1024
[  121.072958][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.088173][ T8077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.117956][ T8077] loop1: detected capacity change from 0 to 1024
[  121.150591][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1304'.
[  121.168153][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  121.182109][ T8113] macvtap1: entered promiscuous mode
[  121.187528][ T8113] erspan0: entered promiscuous mode
[  121.192872][ T8113] macvtap1: entered allmulticast mode
[  121.198431][ T8113] erspan0: entered allmulticast mode
[  121.259907][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1306'.
[  121.281181][ T8118] erspan0: left allmulticast mode
[  121.286511][ T8118] erspan0: left promiscuous mode
[  121.298841][ T8125] netlink: 'syz.7.1310': attribute type 1 has an invalid length.
[  121.308562][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1310'.
[  121.351323][ T8122] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.362726][ T8129] netlink: 'syz.2.1311': attribute type 21 has an invalid length.
[  121.416761][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.429858][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.442738][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.456028][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.469117][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.482247][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.495007][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.507760][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8135 comm=syz.2.1311
[  121.543705][ T8122] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.558527][ T8143] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  121.847786][ T8122] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.302347][ T8122] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.410848][ T8166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18960 sclass=netlink_route_socket pid=8166 comm=syz.3.1322
[  122.468698][ T8166] capability: warning: `syz.3.1322' uses deprecated v2 capabilities in a way that may be insecure
[  122.514145][ T8171] veth3: entered promiscuous mode
[  122.519296][ T8171] veth3: entered allmulticast mode
[  122.553585][ T8122] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.566111][ T8122] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.583686][ T8122] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.598540][ T8122] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.627660][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.659640][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.740019][ T8182] netlink: 'syz.7.1329': attribute type 1 has an invalid length.
[  123.473375][ T8224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.641568][ T8228] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  123.743238][ T8226] loop1: detected capacity change from 0 to 512
[  123.750232][ T8226] EXT4-fs: Ignoring removed orlov option
[  123.757996][ T8226] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  123.829819][   T29] kauditd_printk_skb: 587 callbacks suppressed
[  123.829841][   T29] audit: type=1326 audit(1753478559.743:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.7.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[  123.859814][   T29] audit: type=1326 audit(1753478559.743:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.7.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[  123.887808][ T8224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.991332][ T8224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.078508][ T8224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.153604][ T8224] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.179848][ T8224] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.200144][ T8224] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.230053][ T8224] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.313092][   T29] audit: type=1326 audit(1753478560.263:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.336705][   T29] audit: type=1326 audit(1753478560.263:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.360737][   T29] audit: type=1326 audit(1753478560.263:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.384210][   T29] audit: type=1326 audit(1753478560.263:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.407688][   T29] audit: type=1326 audit(1753478560.263:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.431208][   T29] audit: type=1326 audit(1753478560.273:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.454888][   T29] audit: type=1326 audit(1753478560.273:9799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.478445][   T29] audit: type=1326 audit(1753478560.273:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.6.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  124.515017][ T8267] __nla_validate_parse: 10 callbacks suppressed
[  124.515087][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'.
[  124.530569][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'.
[  124.539769][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'.
[  124.553293][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'.
[  124.562456][ T8267] netlink: 'syz.3.1356': attribute type 6 has an invalid length.
[  124.662008][ T8269] 9pnet_fd: Insufficient options for proto=fd
[  124.712350][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.721701][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.374923][ T8302] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1366'.
[  125.496306][ T8310] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  125.820280][ T8293] Set syz1 is full, maxelem 65536 reached
[  126.064348][ T8333] loop1: detected capacity change from 0 to 128
[  126.072810][ T8333] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  126.085739][ T8333] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.504905][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.054960][ T8370] loop1: detected capacity change from 0 to 512
[  128.127344][ T8370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.140532][ T8370] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.168114][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  129.086443][   T29] kauditd_printk_skb: 162 callbacks suppressed
[  129.086485][   T29] audit: type=1326 audit(1753478564.923:9963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.116300][   T29] audit: type=1326 audit(1753478564.923:9964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.139772][   T29] audit: type=1326 audit(1753478564.933:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.163697][   T29] audit: type=1326 audit(1753478564.933:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.187218][   T29] audit: type=1326 audit(1753478564.933:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.211317][   T29] audit: type=1326 audit(1753478564.933:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.234939][   T29] audit: type=1326 audit(1753478564.933:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.258584][   T29] audit: type=1326 audit(1753478564.933:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.282076][   T29] audit: type=1326 audit(1753478564.933:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.305596][   T29] audit: type=1326 audit(1753478564.943:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  129.350041][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.576874][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1401'.
[  129.841616][ T8418] loop1: detected capacity change from 0 to 164
[  130.078824][ T8427] loop1: detected capacity change from 0 to 2048
[  130.182990][ T8429] 9pnet_fd: Insufficient options for proto=fd
[  130.692734][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'.
[  131.208215][ T8460] loop1: detected capacity change from 0 to 128
[  131.214847][ T8460] vfat: Unknown parameter 'iocarset'
[  131.262130][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1429'.
[  132.230180][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1441'.
[  132.610626][ T8542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.625166][ T8539] tipc: Resetting bearer <eth:syzkaller0>
[  132.655582][ T8539] tipc: Disabling bearer <eth:syzkaller0>
[  133.091458][ T8562] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.101966][ T8562] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58089 - 0
[  133.300057][ T8562] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.310472][ T8562] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58089 - 0
[  133.470436][ T8562] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.481102][ T8562] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58089 - 0
[  133.551865][ T8562] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.562393][ T8562] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58089 - 0
[  133.743560][ T8562] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 58089 - 0
[  133.752171][ T8562] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  133.805496][ T8562] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 58089 - 0
[  133.814122][ T8562] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  133.827544][ T8562] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 58089 - 0
[  133.835912][ T8562] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  133.872412][ T8583] tipc: Enabling of bearer <udp:�> rejected, already enabled
[  133.908472][ T8562] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 58089 - 0
[  133.916955][ T8562] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  133.929704][ T8587] netlink: 'syz.3.1463': attribute type 1 has an invalid length.
[  133.964887][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'.
[  134.097016][   T29] kauditd_printk_skb: 753 callbacks suppressed
[  134.097036][   T29] audit: type=1326 audit(1753478570.063:10726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.127620][   T29] audit: type=1326 audit(1753478570.063:10727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.151646][   T29] audit: type=1326 audit(1753478570.063:10728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.231535][   T29] audit: type=1326 audit(1753478570.063:10729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.255777][   T29] audit: type=1326 audit(1753478570.063:10730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.279795][   T29] audit: type=1326 audit(1753478570.063:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.303672][   T29] audit: type=1326 audit(1753478570.063:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.327347][   T29] audit: type=1326 audit(1753478570.063:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.351116][   T29] audit: type=1326 audit(1753478570.063:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.375251][   T29] audit: type=1326 audit(1753478570.063:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.1.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  134.409726][ T8603] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.490480][ T8603] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.708197][ T8603] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.969673][ T8603] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.099818][ T8615] loop1: detected capacity change from 0 to 128
[  135.207445][ T8615] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.229457][ T8615] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.246723][ T8603] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.316985][ T8615] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  135.341599][ T8603] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.462152][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.556900][ T8603] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.730765][ T8603] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.816638][ T8631] FAULT_INJECTION: forcing a failure.
[  135.816638][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.829999][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.1.1475 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  135.830031][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.830046][ T8631] Call Trace:
[  135.830054][ T8631]  <TASK>
[  135.830106][ T8631]  __dump_stack+0x1d/0x30
[  135.830134][ T8631]  dump_stack_lvl+0xe8/0x140
[  135.830157][ T8631]  dump_stack+0x15/0x1b
[  135.830188][ T8631]  should_fail_ex+0x265/0x280
[  135.830235][ T8631]  should_fail+0xb/0x20
[  135.830281][ T8631]  should_fail_usercopy+0x1a/0x20
[  135.830344][ T8631]  _copy_from_user+0x1c/0xb0
[  135.830371][ T8631]  __sys_bpf+0x178/0x790
[  135.830411][ T8631]  __x64_sys_bpf+0x41/0x50
[  135.830519][ T8631]  x64_sys_call+0x2478/0x2fb0
[  135.830542][ T8631]  do_syscall_64+0xd2/0x200
[  135.830566][ T8631]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  135.830666][ T8631]  ? clear_bhb_loop+0x40/0x90
[  135.830693][ T8631]  ? clear_bhb_loop+0x40/0x90
[  135.830721][ T8631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.830749][ T8631] RIP: 0033:0x7fc474c4e9a9
[  135.830767][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.830784][ T8631] RSP: 002b:00007fc4732b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.830847][ T8631] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4e9a9
[  135.830861][ T8631] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003
[  135.830873][ T8631] RBP: 00007fc4732b7090 R08: 0000000000000000 R09: 0000000000000000
[  135.830884][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.830896][ T8631] R13: 0000000000000000 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[  135.830918][ T8631]  </TASK>
[  136.089168][ T8635] netlink: 'syz.3.1477': attribute type 1 has an invalid length.
[  136.269397][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.306417][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.738908][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'.
[  136.750883][ T8664] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[  136.956594][ T8676] 9pnet_fd: Insufficient options for proto=fd
[  137.229378][ T8697] 9pnet_fd: Insufficient options for proto=fd
[  137.342951][ T8704] loop1: detected capacity change from 0 to 512
[  137.369002][ T8704] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1505: Failed to acquire dquot type 1
[  137.390673][ T8704] EXT4-fs (loop1): 1 truncate cleaned up
[  137.406081][ T8704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.446007][ T8704] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.479906][ T8704] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1505: Failed to acquire dquot type 1
[  137.532843][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.021172][ T8719] netlink: 'syz.2.1510': attribute type 10 has an invalid length.
[  138.084639][ T8719] team0: Port device dummy0 added
[  139.057631][ T8749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1519'.
[  139.286125][   T29] kauditd_printk_skb: 401 callbacks suppressed
[  139.286144][   T29] audit: type=1326 audit(1753478575.173:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4f40fbea37 code=0x7ffc0000
[  139.316104][   T29] audit: type=1326 audit(1753478575.173:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f40fbd310 code=0x7ffc0000
[  139.339671][   T29] audit: type=1326 audit(1753478575.173:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4f40fbd60a code=0x7ffc0000
[  139.363150][   T29] audit: type=1326 audit(1753478575.173:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[  139.386679][   T29] audit: type=1326 audit(1753478575.173:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.7.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f40fbe9a9 code=0x7ffc0000
[  139.410414][   T29] audit: type=1326 audit(1753478575.223:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  139.434037][   T29] audit: type=1326 audit(1753478575.223:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  139.457625][   T29] audit: type=1326 audit(1753478575.223:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  139.481263][   T29] audit: type=1326 audit(1753478575.223:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  139.504899][   T29] audit: type=1326 audit(1753478575.223:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  139.867997][ T8777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8777 comm=syz.2.1527
[  140.089540][ T8784] loop1: detected capacity change from 0 to 164
[  140.146810][ T8787] 9pnet_fd: Insufficient options for proto=fd
[  140.182254][ T8791] loop1: detected capacity change from 0 to 128
[  140.315640][ T8791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.476818][ T8791] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.048394][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.402569][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'.
[  141.465364][ T8856] 9pnet_fd: Insufficient options for proto=fd
[  142.308868][ T8886] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2471)
[  142.318167][ T8886] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  142.807874][ T8888] loop1: detected capacity change from 0 to 128
[  143.019232][ T8919] loop9: detected capacity change from 0 to 7
[  143.032556][ T8917] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1573'.
[  143.045191][ T8919] Buffer I/O error on dev loop9, logical block 0, async page read
[  143.054117][ T8919] Buffer I/O error on dev loop9, logical block 0, async page read
[  143.062117][ T8919]  loop9: unable to read partition table
[  143.088220][ T8919] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  143.088220][ T8919] 
) failed (rc=-5)
[  143.159569][ T8931] netlink: 'syz.6.1578': attribute type 4 has an invalid length.
[  143.201572][ T8914] netlink: 'syz.1.1572': attribute type 13 has an invalid length.
[  143.213385][ T8914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  143.267514][ T8945] netlink: 'syz.1.1582': attribute type 1 has an invalid length.
[  143.289174][ T8945] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.376587][ T8946] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  143.461184][ T8946] bond1 (unregistering): Released all slaves
[  143.644725][ T8959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  143.831814][ T8954] loop1: detected capacity change from 0 to 128
[  144.014348][ T8971] 9pnet_fd: Insufficient options for proto=fd
[  144.136786][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'.
[  144.212427][ T8977] FAULT_INJECTION: forcing a failure.
[  144.212427][ T8977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.225605][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.1.1592 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  144.225638][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  144.225654][ T8977] Call Trace:
[  144.225660][ T8977]  <TASK>
[  144.225700][ T8977]  __dump_stack+0x1d/0x30
[  144.225728][ T8977]  dump_stack_lvl+0xe8/0x140
[  144.225752][ T8977]  dump_stack+0x15/0x1b
[  144.225772][ T8977]  should_fail_ex+0x265/0x280
[  144.225865][ T8977]  should_fail+0xb/0x20
[  144.225979][ T8977]  should_fail_usercopy+0x1a/0x20
[  144.226128][ T8977]  _copy_from_user+0x1c/0xb0
[  144.226156][ T8977]  sock_do_ioctl+0xe6/0x220
[  144.226265][ T8977]  sock_ioctl+0x41b/0x610
[  144.226307][ T8977]  ? __pfx_sock_ioctl+0x10/0x10
[  144.226337][ T8977]  __se_sys_ioctl+0xce/0x140
[  144.226408][ T8977]  __x64_sys_ioctl+0x43/0x50
[  144.226487][ T8977]  x64_sys_call+0x19a8/0x2fb0
[  144.226535][ T8977]  do_syscall_64+0xd2/0x200
[  144.226560][ T8977]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  144.226676][ T8977]  ? clear_bhb_loop+0x40/0x90
[  144.226704][ T8977]  ? clear_bhb_loop+0x40/0x90
[  144.226733][ T8977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.226760][ T8977] RIP: 0033:0x7fc474c4e9a9
[  144.226828][ T8977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.226889][ T8977] RSP: 002b:00007fc4732b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.226954][ T8977] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4e9a9
[  144.226970][ T8977] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000b
[  144.226987][ T8977] RBP: 00007fc4732b7090 R08: 0000000000000000 R09: 0000000000000000
[  144.227002][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.227018][ T8977] R13: 0000000000000000 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[  144.227044][ T8977]  </TASK>
[  144.256062][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'.
[  144.470955][ T9000] loop1: detected capacity change from 0 to 512
[  144.514072][ T9000] __quota_error: 499 callbacks suppressed
[  144.514092][ T9000] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  144.530128][ T9000] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  144.540359][ T9000] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1599: Failed to acquire dquot type 1
[  144.597613][ T9000] EXT4-fs (loop1): 1 truncate cleaned up
[  144.603838][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.615013][ T9012] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2471)
[  144.625813][ T9012] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  144.626507][ T9000] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.662233][ T9000] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  144.672522][ T9000] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  144.682573][ T9000] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1599: Failed to acquire dquot type 1
[  144.744595][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1606'.
[  144.747569][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.788743][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1607'.
[  144.797848][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1607'.
[  144.853809][ T9030] loop1: detected capacity change from 0 to 512
[  144.869654][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9023 comm=syz.7.1608
[  144.883775][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1608'.
[  144.904021][ T9030] EXT4-fs: dax option not supported
[  144.923423][   T29] audit: type=1400 audit(1753478580.883:11642): avc:  denied  { bind } for  pid=9045 comm="syz.2.1613" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  144.943926][   T29] audit: type=1400 audit(1753478580.883:11643): avc:  denied  { node_bind } for  pid=9045 comm="syz.2.1613" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  144.966566][   T29] audit: type=1400 audit(1753478580.893:11644): avc:  denied  { connect } for  pid=9045 comm="syz.2.1613" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  144.969971][ T9049] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2471)
[  145.002760][ T9049] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  145.062065][   T29] audit: type=1326 audit(1753478581.023:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  145.086355][   T29] audit: type=1326 audit(1753478581.023:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  145.118881][   T29] audit: type=1326 audit(1753478581.083:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  145.263824][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1618'.
[  145.424091][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1624'.
[  147.017354][ T9171] loop1: detected capacity change from 0 to 512
[  147.024509][ T9171] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  147.037299][ T9171] EXT4-fs (loop1): 1 truncate cleaned up
[  147.043363][ T9171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.106736][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.127191][ T9174] loop1: detected capacity change from 0 to 164
[  147.290221][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.299007][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.649672][ T9197] rdma_op ffff88812582dd80 conn xmit_rdma 0000000000000000
[  147.910492][ T9215] loop1: detected capacity change from 0 to 8192
[  147.923383][ T9215] syz.1.1678: attempt to access beyond end of device
[  147.923383][ T9215] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  147.964271][ T9215] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  147.972192][ T9215] FAT-fs (loop1): Filesystem has been set read-only
[  148.008337][ T9215] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  148.031090][ T9215] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  148.041620][ T9218] netlink: 'syz.1.1678': attribute type 4 has an invalid length.
[  148.066017][ T9224] __nla_validate_parse: 12 callbacks suppressed
[  148.066036][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1677'.
[  148.271674][ T9240] 9pnet_fd: Insufficient options for proto=fd
[  149.151252][ T9266] netlink: 'syz.6.1694': attribute type 4 has an invalid length.
[  149.552669][   T29] kauditd_printk_skb: 734 callbacks suppressed
[  149.558945][   T29] audit: type=1326 audit(1753478585.423:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  149.582371][   T29] audit: type=1326 audit(1753478585.423:12383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  149.606224][   T29] audit: type=1326 audit(1753478585.423:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  149.630281][   T29] audit: type=1326 audit(1753478585.423:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  149.653992][   T29] audit: type=1326 audit(1753478585.423:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f17a5450774 code=0x7ffc0000
[  149.677626][   T29] audit: type=1326 audit(1753478585.423:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f17a5450774 code=0x7ffc0000
[  149.701235][   T29] audit: type=1326 audit(1753478585.423:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f17a544d60a code=0x7ffc0000
[  149.724755][   T29] audit: type=1326 audit(1753478585.423:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  149.748404][   T29] audit: type=1326 audit(1753478585.423:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  150.165816][ T9300] 9pnet_fd: Insufficient options for proto=fd
[  150.654860][   T29] audit: type=1326 audit(1753478586.163:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd105e9a9 code=0x7ffc0000
[  150.939584][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1725'.
[  151.993294][ T9382] loop1: detected capacity change from 0 to 512
[  152.001041][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1736'.
[  152.056055][ T9382] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1737: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  152.096448][ T9382] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1737: Bad quota inode: 3, type: 0
[  152.142827][ T9382] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  152.220764][ T9382] EXT4-fs (loop1): mount failed
[  152.343785][ T9402] loop1: detected capacity change from 0 to 2048
[  153.160336][ T9418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'.
[  153.307782][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1750'.
[  153.447516][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1754'.
[  153.456798][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1754'.
[  153.540144][ T9461] loop1: detected capacity change from 0 to 128
[  153.573963][ T9461] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  153.594941][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1760'.
[  153.611314][ T9461] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.739902][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.828105][ T9484] loop1: detected capacity change from 0 to 2048
[  154.181653][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'.
[  154.669515][   T29] kauditd_printk_skb: 257 callbacks suppressed
[  154.669535][   T29] audit: type=1326 audit(1753478590.633:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  154.699497][   T29] audit: type=1326 audit(1753478590.633:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  154.723168][   T29] audit: type=1326 audit(1753478590.633:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  154.746764][   T29] audit: type=1326 audit(1753478590.633:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17a544e9e3 code=0x7ffc0000
[  154.774232][   T29] audit: type=1326 audit(1753478590.633:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17a544d45f code=0x7ffc0000
[  154.797655][   T29] audit: type=1326 audit(1753478590.633:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f17a544ea37 code=0x7ffc0000
[  154.821218][   T29] audit: type=1326 audit(1753478590.633:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17a544d310 code=0x7ffc0000
[  154.844842][   T29] audit: type=1326 audit(1753478590.633:12656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f17a544d60a code=0x7ffc0000
[  154.868233][   T29] audit: type=1326 audit(1753478590.633:12657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  154.892028][   T29] audit: type=1326 audit(1753478590.633:12658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f17a544e9a9 code=0x7ffc0000
[  155.350646][ T9546] netem: incorrect ge model size
[  155.355678][ T9546] netem: change failed
[  155.981008][ T9580] lo speed is unknown, defaulting to 1000
[  155.987337][ T9580] lo speed is unknown, defaulting to 1000
[  155.993716][ T9580] lo speed is unknown, defaulting to 1000
[  156.001141][ T9580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  156.015723][ T9580] lo speed is unknown, defaulting to 1000
[  156.022657][ T9580] lo speed is unknown, defaulting to 1000
[  156.029323][ T9580] lo speed is unknown, defaulting to 1000
[  156.036291][ T9580] lo speed is unknown, defaulting to 1000
[  156.044473][ T9580] lo speed is unknown, defaulting to 1000
[  156.143841][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'.
[  156.163000][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'.
[  156.262305][ T9611] bridge0: port 3(batadv1) entered blocking state
[  156.268999][ T9611] bridge0: port 3(batadv1) entered disabled state
[  156.276009][ T9611] batadv1: entered allmulticast mode
[  156.282207][ T9611] batadv1: entered promiscuous mode
[  156.292346][ T9611] netlink: 12 bytes leftover after parsing attributes in process `wޣ�'.
[  156.432076][ T9628] siw: device registration error -23
[  156.569349][ T9635] lo speed is unknown, defaulting to 1000
[  156.758592][ T3447] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  156.767979][ T3447] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  156.774904][ T9655] loop1: detected capacity change from 0 to 512
[  156.802674][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'.
[  156.808197][ T9655] EXT4-fs: dax option not supported
[  156.895972][ T9665] bridge0: entered promiscuous mode
[  156.907866][ T9665] bond0: entered promiscuous mode
[  156.913007][ T9665] bond_slave_0: entered promiscuous mode
[  156.918994][ T9665] bond_slave_1: entered promiscuous mode
[  156.929127][ T9665] dummy0: entered promiscuous mode
[  156.950991][ T9665] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  156.967381][ T9665] hsr1: entered allmulticast mode
[  156.972794][ T9665] bridge0: entered allmulticast mode
[  156.979275][ T9665] bond0: entered allmulticast mode
[  156.984594][ T9665] bond_slave_0: entered allmulticast mode
[  156.990633][ T9665] bond_slave_1: entered allmulticast mode
[  157.011432][ T9665] dummy0: entered allmulticast mode
[  157.020079][ T9685] loop1: detected capacity change from 0 to 128
[  157.057947][ T9685] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.088688][ T9685] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.884614][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.161852][ T9783] pimreg: entered allmulticast mode
[  158.300156][ T9804] __nla_validate_parse: 11 callbacks suppressed
[  158.300179][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1895'.
[  158.793154][ T9810] loop1: detected capacity change from 0 to 2048
[  159.011483][ T9837] loop1: detected capacity change from 0 to 512
[  159.067030][ T9837] EXT4-fs: dax option not supported
[  159.229541][ T9852] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.254651][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1914'.
[  159.263799][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  159.432311][ T9852] lo speed is unknown, defaulting to 1000
[  159.503805][ T9861] loop1: detected capacity change from 0 to 512
[  159.551051][ T9861] journal_path: Lookup failure for './file0/../file0'
[  159.557986][ T9861] EXT4-fs: error: could not find journal device path
[  159.812973][   T29] kauditd_printk_skb: 422 callbacks suppressed
[  159.812991][   T29] audit: type=1326 audit(1753478595.773:13081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  159.942139][   T29] audit: type=1326 audit(1753478595.803:13082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  159.966060][   T29] audit: type=1326 audit(1753478595.803:13083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  159.989740][   T29] audit: type=1326 audit(1753478595.803:13084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.013340][   T29] audit: type=1326 audit(1753478595.803:13085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.037377][   T29] audit: type=1326 audit(1753478595.813:13086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.060931][   T29] audit: type=1326 audit(1753478595.813:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.084691][   T29] audit: type=1326 audit(1753478595.813:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.108533][   T29] audit: type=1326 audit(1753478595.813:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.132094][   T29] audit: type=1326 audit(1753478595.813:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe805e9a9 code=0x7ffc0000
[  160.243317][ T9892] loop1: detected capacity change from 0 to 512
[  160.244838][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1920'.
[  160.285606][ T9892] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1923: Failed to acquire dquot type 1
[  160.299830][ T9892] EXT4-fs (loop1): 1 truncate cleaned up
[  160.328459][ T9892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.352355][ T9902] 9pnet_fd: Insufficient options for proto=fd
[  160.360666][ T9904] netlink: 'syz.2.1928': attribute type 1 has an invalid length.
[  160.387010][ T9892] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.388496][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'.
[  160.408364][ T9892] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1923: Failed to acquire dquot type 1
[  160.449487][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.487154][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1931'.
[  160.496383][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'.
[  160.591732][ T9916] loop1: detected capacity change from 0 to 512
[  160.621159][ T9916] journal_path: Lookup failure for './file0/../file0'
[  160.628129][ T9916] EXT4-fs: error: could not find journal device path
[  160.649790][ T9921] lo speed is unknown, defaulting to 1000
[  160.929031][ T9942] 9pnet_fd: Insufficient options for proto=fd
[  160.955021][ T9944] loop1: detected capacity change from 0 to 512
[  160.979972][ T9944] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1942: Failed to acquire dquot type 1
[  161.038607][ T9944] EXT4-fs (loop1): 1 truncate cleaned up
[  161.066092][ T9944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.086507][ T9954] bridge0: port 3(batadv1) entered blocking state
[  161.093087][ T9954] bridge0: port 3(batadv1) entered disabled state
[  161.121557][ T9944] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.138751][ T9958] netlink: 'syz.7.1946': attribute type 1 has an invalid length.
[  161.150219][ T9954] batadv1: entered allmulticast mode
[  161.156695][ T9954] batadv1: entered promiscuous mode
[  161.187450][ T9944] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1942: Failed to acquire dquot type 1
[  161.200671][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1946'.
[  161.274832][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1949'.
[  161.283910][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'.
[  161.682472][   T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  161.691871][   T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  161.697168][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.729384][ T9981] 9pnet: Could not find request transport: r
[  162.170902][ T9995] loop1: detected capacity change from 0 to 1024
[  162.234586][ T9995] EXT4-fs: inline encryption not supported
[  162.252997][ T9995] EXT4-fs: Ignoring removed bh option
[  162.281106][ T9995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.513556][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.567109][T10034] loop1: detected capacity change from 0 to 512
[  162.574238][T10034] EXT4-fs: dax option not supported
[  162.734267][T10055] bridge0: port 3(batadv0) entered blocking state
[  162.741336][T10055] bridge0: port 3(batadv0) entered disabled state
[  162.748418][T10055] batadv0: entered allmulticast mode
[  162.754368][T10055] batadv0: entered promiscuous mode
[  162.810647][T10066] FAULT_INJECTION: forcing a failure.
[  162.810647][T10066] name failslab, interval 1, probability 0, space 0, times 0
[  162.823466][T10066] CPU: 0 UID: 0 PID: 10066 Comm: syz.1.1985 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  162.823495][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  162.823507][T10066] Call Trace:
[  162.823514][T10066]  <TASK>
[  162.823522][T10066]  __dump_stack+0x1d/0x30
[  162.823602][T10066]  dump_stack_lvl+0xe8/0x140
[  162.823626][T10066]  dump_stack+0x15/0x1b
[  162.823646][T10066]  should_fail_ex+0x265/0x280
[  162.823731][T10066]  should_failslab+0x8c/0xb0
[  162.823752][T10066]  __kmalloc_node_noprof+0xa9/0x410
[  162.823814][T10066]  ? crypto_create_tfm_node+0x5c/0x250
[  162.823847][T10066]  crypto_create_tfm_node+0x5c/0x250
[  162.823876][T10066]  ? crypto_alg_mod_lookup+0x2f9/0x490
[  162.823905][T10066]  crypto_alloc_tfm_node+0xdc/0x2b0
[  162.823951][T10066]  crypto_alloc_ahash+0x2d/0x40
[  162.823997][T10066]  tcp_sigpool_alloc_ahash+0x44f/0x660
[  162.824029][T10066]  tcp_md5_alloc_sigpool+0x1b/0x60
[  162.824047][T10066]  tcp_md5_do_add+0x7f/0x1c0
[  162.824075][T10066]  tcp_v4_parse_md5_keys+0x314/0x3c0
[  162.824113][T10066]  do_tcp_setsockopt+0xf21/0x1670
[  162.824283][T10066]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[  162.824325][T10066]  tcp_setsockopt+0x51/0xb0
[  162.824381][T10066]  sock_common_setsockopt+0x66/0x80
[  162.824409][T10066]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  162.824475][T10066]  smc_setsockopt+0x180/0x750
[  162.824500][T10066]  ? __pfx_smc_setsockopt+0x10/0x10
[  162.824542][T10066]  __sys_setsockopt+0x181/0x200
[  162.824577][T10066]  __x64_sys_setsockopt+0x64/0x80
[  162.824676][T10066]  x64_sys_call+0x2bd5/0x2fb0
[  162.824698][T10066]  do_syscall_64+0xd2/0x200
[  162.824718][T10066]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  162.824808][T10066]  ? clear_bhb_loop+0x40/0x90
[  162.824875][T10066]  ? clear_bhb_loop+0x40/0x90
[  162.824898][T10066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.824920][T10066] RIP: 0033:0x7fc474c4e9a9
[  162.824998][T10066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.825017][T10066] RSP: 002b:00007fc4732b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  162.825037][T10066] RAX: ffffffffffffffda RBX: 00007fc474e75fa0 RCX: 00007fc474c4e9a9
[  162.825194][T10066] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003
[  162.825228][T10066] RBP: 00007fc4732b7090 R08: 00000000000000d8 R09: 0000000000000000
[  162.825240][T10066] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  162.825252][T10066] R13: 0000000000000000 R14: 00007fc474e75fa0 R15: 00007ffedf018c38
[  162.825324][T10066]  </TASK>
[  162.838058][T10059] lo speed is unknown, defaulting to 1000
[  163.225270][T10089] loop1: detected capacity change from 0 to 164
[  163.236590][ T3337] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  163.245914][ T3337] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  163.298505][T10094] netlink: 'syz.3.1995': attribute type 1 has an invalid length.
[  163.315156][T10098] bridge0: port 4(batadv2) entered blocking state
[  163.321901][T10098] bridge0: port 4(batadv2) entered disabled state
[  163.335995][T10101] __nla_validate_parse: 4 callbacks suppressed
[  163.336012][T10101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1999'.
[  163.354030][T10098] batadv2: entered allmulticast mode
[  163.361922][T10098] batadv2: entered promiscuous mode
[  163.375166][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  163.475792][T10118] loop1: detected capacity change from 0 to 512
[  163.514327][T10118] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2005: Failed to acquire dquot type 1
[  163.555839][T10118] EXT4-fs (loop1): 1 truncate cleaned up
[  163.563079][T10118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.576059][T10118] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.588898][T10131] netlink: 'syz.2.2011': attribute type 1 has an invalid length.
[  163.624623][T10118] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2005: Failed to acquire dquot type 1
[  163.626032][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'.
[  163.661743][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.825128][   T51] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  163.834639][   T51] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  164.091475][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2030'.
[  164.166995][T10179] netlink: 'syz.6.2030': attribute type 1 has an invalid length.
[  164.389712][T10147] Set syz1 is full, maxelem 65536 reached
[  164.439046][T10216] netlink: 'syz.1.2044': attribute type 1 has an invalid length.
[  164.464748][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  164.569861][T10225] loop1: detected capacity change from 0 to 512
[  164.619227][T10225] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2048: Failed to acquire dquot type 1
[  164.631359][T10225] EXT4-fs (loop1): 1 truncate cleaned up
[  164.638956][T10225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.651835][T10225] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.667399][T10225] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2048: Failed to acquire dquot type 1
[  164.729505][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.951472][T10253] loop1: detected capacity change from 0 to 2048
[  164.965163][   T29] kauditd_printk_skb: 477 callbacks suppressed
[  164.965179][   T29] audit: type=1326 audit(1753478600.923:13552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10240 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.003933][T10253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.109796][   T29] audit: type=1400 audit(1753478601.073:13553): avc:  denied  { create } for  pid=10252 comm="syz.1.2060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  165.218375][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.241165][T10269] 9pnet_fd: Insufficient options for proto=fd
[  165.315692][T10275] loop1: detected capacity change from 0 to 2048
[  165.386304][T10275] EXT4-fs (loop1): failed to initialize system zone (-117)
[  165.393600][T10275] EXT4-fs (loop1): mount failed
[  165.497037][T10298] netlink: 'syz.1.2077': attribute type 1 has an invalid length.
[  165.517523][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'.
[  165.629579][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'.
[  165.685900][T10312] SELinux:  policydb table sizes (0,0) do not match mine (6,6)
[  165.697798][T10312] SELinux: failed to load policy
[  165.704248][   T29] audit: type=1400 audit(1753478601.663:13554): avc:  denied  { setopt } for  pid=10311 comm="syz.1.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  165.776247][   T29] audit: type=1326 audit(1753478601.663:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.800059][   T29] audit: type=1326 audit(1753478601.663:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.823829][   T29] audit: type=1326 audit(1753478601.663:13557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.847470][   T29] audit: type=1326 audit(1753478601.663:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.871272][   T29] audit: type=1326 audit(1753478601.663:13559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.894819][   T29] audit: type=1326 audit(1753478601.663:13560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.918594][   T29] audit: type=1326 audit(1753478601.663:13561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc474c4e9a9 code=0x7ffc0000
[  165.944319][T10327] loop1: detected capacity change from 0 to 128
[  165.959095][T10327] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  165.974503][T10327] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.008571][T10333] netlink: 'syz.6.2090': attribute type 1 has an invalid length.
[  166.018776][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2090'.
[  166.057263][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.140231][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  166.263995][T10362] 9pnet_fd: Insufficient options for proto=fd
[  166.270140][T10361] 9pnet_fd: Insufficient options for proto=fd
[  166.342290][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'.
[  166.560857][T10379] loop1: detected capacity change from 0 to 512
[  166.571861][T10379] journal_path: Lookup failure for './file0/../file0'
[  166.578880][T10379] EXT4-fs: error: could not find journal device path
[  167.171576][T10408] loop1: detected capacity change from 0 to 128
[  167.576844][T10408] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  167.656292][T10408] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.750747][T10393] Set syz1 is full, maxelem 65536 reached
[  167.899830][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.929870][T10433] bridge0: port 5(batadv3) entered blocking state
[  167.936491][T10433] bridge0: port 5(batadv3) entered disabled state
[  167.947134][T10433] batadv3: entered allmulticast mode
[  167.954372][T10433] batadv3: entered promiscuous mode
[  168.010628][T10441] loop1: detected capacity change from 0 to 1024
[  168.049105][T10441] EXT4-fs: Ignoring removed orlov option
[  168.092940][T10441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.238803][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.323245][T10484] netlink: 'syz.1.2147': attribute type 13 has an invalid length.
[  168.379208][T10485] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.436339][ T3447] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  168.445645][ T3447] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  168.473255][T10487] veth1_macvtap: left promiscuous mode
[  168.496428][T10487] macsec0: entered promiscuous mode
[  168.535485][T10485] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.757232][T10505] 9pnet_fd: Insufficient options for proto=fd
[  168.981614][T10484] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.990084][T10484] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.998889][T10484] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.007398][T10484] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.052190][T10477] lo speed is unknown, defaulting to 1000
[  169.084172][T10485] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.112334][T10506] __nla_validate_parse: 4 callbacks suppressed
[  169.112352][T10506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2152'.
[  169.199068][T10518] 9pnet_fd: Insufficient options for proto=fd
[  169.253110][T10485] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.305597][T10485] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.379819][T10485] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.427745][T10485] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.455737][T10541] loop1: detected capacity change from 0 to 1024
[  169.476777][T10541] ext4: Unknown parameter 'fowner<00000000000000000000'
[  169.508828][T10543] ==================================================================
[  169.509861][T10485] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.519336][T10543] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  169.519395][T10543] 
[  169.519403][T10543] write to 0xffff888106758468 of 8 bytes by task 10540 on cpu 0:
[  169.545476][T10543]  mas_wr_store_entry+0x1581/0x2b50
[  169.550728][T10543]  mas_store_prealloc+0x74d/0x9e0
[  169.555902][T10543]  commit_merge+0x6a5/0x730
[  169.560532][T10543]  vma_modify+0xad7/0xc80
[  169.564899][T10543]  vma_modify_flags+0x101/0x130
[  169.569893][T10543]  mprotect_fixup+0x2cc/0x570
[  169.574719][T10543]  do_mprotect_pkey+0x6d6/0x980
[  169.579616][T10543]  __x64_sys_mprotect+0x48/0x60
[  169.584513][T10543]  x64_sys_call+0x2794/0x2fb0
[  169.589230][T10543]  do_syscall_64+0xd2/0x200
[  169.593782][T10543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.599804][T10543] 
[  169.602157][T10543] read to 0xffff888106758468 of 8 bytes by task 10543 on cpu 1:
[  169.610007][T10543]  mas_state_walk+0x2f5/0x650
[  169.614746][T10543]  mas_walk+0x30/0x120
[  169.618860][T10543]  lock_vma_under_rcu+0xa2/0x2f0
[  169.623832][T10543]  do_user_addr_fault+0x233/0x1090
[  169.628992][T10543]  exc_page_fault+0x62/0xa0
[  169.633534][T10543]  asm_exc_page_fault+0x26/0x30
[  169.638415][T10543] 
[  169.640781][T10543] value changed: 0x00007fc46ae54fff -> 0x00007fc46ae34fff
[  169.647908][T10543] 
[  169.650248][T10543] Reported by Kernel Concurrency Sanitizer on:
[  169.656424][T10543] CPU: 1 UID: 0 PID: 10543 Comm: syz.1.2164 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) 
[  169.669041][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  169.679132][T10543] ==================================================================