last executing test programs:

7m3.75988896s ago: executing program 32 (id=1521):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000250200c3d6002020207b1af8ef00000000bfa1000000df87ea2cfe946162bc00000007010000f8ffffffb702000000000000b703000000000000850a9ac6953900000072000000950000000000faedd4cb11fd0f008488ce79dce59ac44d4a3eea046e26909a02471e133f1cb91880381943f461c2ac4678fbf0a2ce5ae8f97f733927da28bcfa8b5f6718f38cb9f9f8f13d85f49d561a303cec044a29d3f38960520981a644ee4e9435f0f4e4656376785a92bc12d50ece22bf7f9c78d80ea37e90d083fc272efb3fab1f981c69e80334828cf9fd035a000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000250200c3d6002020207b1af8ef00000000bfa1000000df87ea2cfe946162bc00000007010000f8ffffffb702000000000000b703000000000000850a9ac6953900000072000000950000000000faedd4cb11fd0f008488ce79dce59ac44d4a3eea046e26909a02471e133f1cb91880381943f461c2ac4678fbf0a2ce5ae8f97f733927da28bcfa8b5f6718f38cb9f9f8f13d85f49d561a303cec044a29d3f38960520981a644ee4e9435f0f4e4656376785a92bc12d50ece22bf7f9c78d80ea37e90d083fc272efb3fab1f981c69e80334828cf9fd035a000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"/72], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
write$UHID_CREATE(r1, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r10}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r10}, 0x18)
fsopen(&(0x7f0000000040)='erofs\x00', 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0x10000}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)

5m39.070450978s ago: executing program 33 (id=3134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
r3 = syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0xb8e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0xee, 0x2, 0xffffff80, 0x0, 0x6, 0x10001, 0x950bd19, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x44)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x878, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x8, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x108, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x7, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x8, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x8, 0x645, 0x2, 0x80000800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0xfffffffd, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0x7f, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x8, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x10003, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x3, 0xa5, 0x80, 0xfffffffe, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x84, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x4009366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x210b, 0x6, 0x8002, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xc, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xff, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0xc, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x23, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x4005, 0x7, 0x6, 0x81, 0xd9fa, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x203, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x3c5, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x901, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x3, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0xffff, 0x4ed, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x100, 0x9, 0xfc, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x100080, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x3, 0x336c, 0x5, 0x8000, r3, 0x4, '\x00', 0x0, r3, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x11, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13438b05, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@u}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x10, 0xb, 0x5}, 0x10, 0x32f, r3, 0x0, &(0x7f00000002c0)=[r0, r8, r0, r0, r3, r0], 0x0, 0x10, 0x9}, 0x94)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10)

5m37.95834426s ago: executing program 0 (id=3151):
r0 = io_uring_setup(0x454b, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168})
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x7, 0xd215)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xfa, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0xed, 0x40, 0x7, 0x21, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x710, 0x0, 0xe}})
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
fcntl$lock(r5, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x1})
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)

5m37.840792702s ago: executing program 0 (id=3154):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

5m37.570852377s ago: executing program 0 (id=3157):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040cb06f6730000000109022400010000100009040001020300020009210100000122030009058103ff03000005"], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', <r6=>0x0, 0x4, 0x9, 0x1, 0x1aa, 0x9, @mcast1, @local, 0x7800, 0x7800, 0x3, 0x401}})
r7 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil)
shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000400)=""/124)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r9 = dup(r8)
setsockopt(r4, 0x3b71, 0x9, &(0x7f0000000380)="f664954985447017275f91", 0xb)
write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bcfd9d024e251172ffff00000000020000641097d20e59ac0400d200028d", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="04000000010000000100"/28], 0x50)
write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a)

5m37.379584731s ago: executing program 1 (id=3160):
r0 = syz_open_dev$sg(0x0, 0x0, 0x22c43)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1000}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

5m36.91700817s ago: executing program 0 (id=3161):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x4050000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
chown(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8dfda5cbc0ed64501d01a074360ceb102b6bb864f69ff642fda46f1036f3d25959f6d9ff0e9eb3d4356ae1b44b4bd5bc21e9f77a07991149652f331b72b9b2cf103222d106e1fd834df6c268cbe0e16d422d8f912e4dc66e56e174dc9e28178973d1767dcdd042af", @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1)

5m36.569269087s ago: executing program 0 (id=3164):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
pivot_root(0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0)

5m36.40461383s ago: executing program 1 (id=3166):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000bd1ec7e290797fec5800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60c439a7001806ffff010000000000000000000000000001200100000000000000000000000000020000000000000000000000000000000000004e2100004e24"], 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00')
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300ebf153915d8ec30faf4023ca2e1a9", 0x10, r9)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x214004, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00'])

5m36.322398022s ago: executing program 0 (id=3167):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_destroy(0x0)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
r3 = semget$private(0x0, 0x20000000102, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d])
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd")

5m36.234632713s ago: executing program 34 (id=3167):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_destroy(0x0)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
r3 = semget$private(0x0, 0x20000000102, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d])
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x597, &(0x7f0000000b80)="$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")

5m35.865308011s ago: executing program 1 (id=3171):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x8000, @local, 0x2}, 0x1c, &(0x7f00000006c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000004304000054f0ffff0000000024000000000000fe8000000000000000000000000000bb000000000000000000", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000ff00000000000000"], 0x58}, 0x20000080)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)

5m35.725450263s ago: executing program 1 (id=3174):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x4050000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2c8, &(0x7f0000002500)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r2, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
chown(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8dfda5cbc0ed64501d01a074360ceb102b6bb864f69ff642fda46f1036f3d25959f6d9ff0e9eb3d4356ae1b44b4bd5bc21e9f77a07991149652f331b72b9b2cf103222d106e1fd834df6c268cbe0e16d422d8f912e4dc66e56e174dc9e28178973d1767dcdd042af", @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1)

5m35.318295531s ago: executing program 1 (id=3177):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000004c0)={0x3})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rxrpc_retransmit\x00', r2, 0x0, 0x8}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/91, 0x5b, 0x5, &(0x7f0000000580)={0x77359400})
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x1, 0x4, 0x8}}, 0x14)
r3 = socket(0x10, 0x3, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r7}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000598000/0x1000)=nil, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x60})

5m35.189969014s ago: executing program 1 (id=3178):
socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

5m35.189790674s ago: executing program 35 (id=3178):
socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

5m30.19365904s ago: executing program 4 (id=3244):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='neigh_update\x00', r1}, 0x18)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

5m30.19327839s ago: executing program 4 (id=3245):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000070000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
close(r0)

5m30.168555541s ago: executing program 4 (id=3246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

5m30.045221213s ago: executing program 4 (id=3248):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x4050000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
chown(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8dfda5cbc0ed64501d01a074360ceb102b6bb864f69ff642fda46f1036f3d25959f6d9ff0e9eb3d4356ae1b44b4bd5bc21e9f77a07991149652f331b72b9b2cf103222d106e1fd834df6c268cbe0e16d422d8f912e4dc66e56e174dc9e28178973d1767dcdd042af", @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1)

5m29.782340498s ago: executing program 4 (id=3253):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6cf4bb400000000000000000000000000100"/28], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
unlink(&(0x7f0000000000)='./file1\x00')
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timerfd_create(0x2, 0x80c00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x826c, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

5m29.082282162s ago: executing program 4 (id=3259):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f0000000780)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10)

5m29.069584272s ago: executing program 36 (id=3259):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f0000000780)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10)

4m32.228108022s ago: executing program 8 (id=4184):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6cf4bb400000000000000000000000000100"/28], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x39}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000880), 0x0}, 0x20)
unlink(&(0x7f0000000000)='./file1\x00')
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timerfd_create(0x2, 0x80c00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000540))
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x826c, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r6 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

4m32.127928954s ago: executing program 8 (id=4187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r4, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

4m31.946618238s ago: executing program 8 (id=4189):
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@dioread_nolock}, {@nodelalloc}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x16d242, 0x19)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

4m31.789572271s ago: executing program 8 (id=4194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000006007654a79a00000000000000000000ff0000000000000000"], 0x50)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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")
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x3000)
fallocate(r6, 0x0, 0x0, 0x1000f4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfffffffd, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="1b00", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000063607ea926cd0cf4f0b61872463671315814ed85a6ef43a3f7f0fdef73e53d7a18e9bc6ce243143da6552c0c81b6282b281746a20ebd2055e4f3c786a6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000480), &(0x7f00000004c0)="48f4a80fa13c13a45fe756b850a095665885fda15f8871e0f359f3b94aa71ba58fcdcd17ddce7796cfb395d0cf8404c0d670d374458c29283e9c87d4e7c9525ae648e53f18cb6fe78ee4adf24dee1a9bc73bfe27940acbee38bdaa9e3df8c6ba372a7fabce4ae201b6335988876f62704f15")

4m31.332470799s ago: executing program 8 (id=4201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}})
r2 = socket(0xa, 0x3, 0x87)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x890b, &(0x7f0000000000))

4m30.364472878s ago: executing program 8 (id=4206):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = inotify_init()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69)
close(r3)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

4m30.364278998s ago: executing program 37 (id=4206):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = inotify_init()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69)
close(r3)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

2m54.686837559s ago: executing program 6 (id=6140):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x39}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20)
unlink(&(0x7f0000000000)='./file1\x00')
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timerfd_create(0x2, 0x80c00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000540))
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x826c, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r6 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

2m54.566255502s ago: executing program 6 (id=6144):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2m54.078677501s ago: executing program 6 (id=6148):
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@dioread_nolock}, {@nodelalloc}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x16d242, 0x19)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

2m53.924882084s ago: executing program 6 (id=6149):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0})
getgroups(0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/vlan/vlan1\x00')
socket(0x2, 0x2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
pipe2(&(0x7f0000000040), 0x84000)
socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
sendto$inet6(r5, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0)
writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000400)="557ac8", 0x3}], 0x1)

2m53.765882627s ago: executing program 6 (id=6153):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
epoll_create(0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
flock(r3, 0x5)
fcntl$lock(r4, 0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x8003}}}}]}, 0x4c}}, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x12, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x248100)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68)
socket$nl_rdma(0x10, 0x3, 0x14)

2m53.460459933s ago: executing program 6 (id=6159):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ufshcd_command\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18)
r0 = gettid()
rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8)
tkill(r0, 0x7)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000080000000000000000000000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x50)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r2 = syz_open_pts(r1, 0x20800)
r3 = dup3(r2, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0x8, 0x8)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)

2m53.460337783s ago: executing program 38 (id=6159):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ufshcd_command\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18)
r0 = gettid()
rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8)
tkill(r0, 0x7)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000080000000000000000000000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x50)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r2 = syz_open_pts(r1, 0x20800)
r3 = dup3(r2, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0x8, 0x8)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)

1.324494144s ago: executing program 3 (id=9631):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x10)

1.301466685s ago: executing program 3 (id=9632):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0001850000006a002300"/25], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r0, @ANYRESHEX=r3, @ANYRES16=r3, @ANYRESOCT=r2], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r5}, 0x10)
timer_settime(0x0, 0x0, 0x0, &(0x7f00000001c0))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x63, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa2800, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x48)
r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x0)
signalfd4(r6, &(0x7f00000002c0)={[0xfa3]}, 0x8, 0x80000)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef80"], 0xfe33)
writev(r11, &(0x7f00000025c0)=[{&(0x7f0000000240)}, {0x0}], 0x2)
syz_read_part_table(0x104f, &(0x7f0000001dc0)="$eJzsz7sNwkAQBNA5/JEJ6IGm6AcHtEJACyR0RAcYnX0BDSCE9F6wq52b5MJP3fd1dkmpe0qGJY9Sr/6jdaitea1k17JlyJCpP16nrp6v7TVl3Paz1VqceZ3nfrx0pYUlp9u3/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/+AdAAD//zvjCaY=")
fcntl$lock(r5, 0x24, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x9})

804.404185ms ago: executing program 5 (id=9641):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18)
unshare(0x400)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r8}, 0x38)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x1, 0x9, {{0x5, 0x4, 0x3, 0x34, 0x14, 0x67, 0x0, 0xb6, 0x29, 0x0, @private=0xa010100, @private=0xa010100}}}})
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94)
r14 = socket$kcm(0x2, 0x200000000000006, 0x0)
setsockopt$sock_attach_bpf(r14, 0x1, 0x50, &(0x7f0000000100), 0x48)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x0, 0xfff2}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
socket(0x400000000010, 0x3, 0x0)

804.096045ms ago: executing program 2 (id=9642):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x10)

785.257055ms ago: executing program 2 (id=9643):
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x24000844)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x15c, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unlink(0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac24896"}, 0x12)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)

699.480027ms ago: executing program 3 (id=9645):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0})
write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r3, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0xfe4e}], 0x1)

621.116288ms ago: executing program 5 (id=9646):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000852000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

593.218909ms ago: executing program 7 (id=9647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = socket(0x2c, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r3, 0x0, 0x0)
close_range(r2, r3, 0x0)

592.607029ms ago: executing program 2 (id=9648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd605, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054)

572.398509ms ago: executing program 9 (id=9649):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x2, 0xf}, {}, {0x2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

570.479009ms ago: executing program 5 (id=9650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5}, {0x4, 0x2, 0xd61}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
clock_gettime(0x0, &(0x7f0000000100))

534.13678ms ago: executing program 7 (id=9651):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18)
unshare(0x400)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r8}, 0x38)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x1, 0x9, {{0x5, 0x4, 0x3, 0x34, 0x14, 0x67, 0x0, 0xb6, 0x29, 0x0, @private=0xa010100, @private=0xa010100}}}})
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94)
r14 = socket$kcm(0x2, 0x200000000000006, 0x0)
setsockopt$sock_attach_bpf(r14, 0x1, 0x50, &(0x7f0000000100), 0x48)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x0, 0xfff2}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
socket(0x400000000010, 0x3, 0x0)

493.266001ms ago: executing program 5 (id=9652):
syz_emit_ethernet(0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000803afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aaff020000000000000000000000000001010b909f50c218fa30165debb32c1997043f1c9ffeca5ab1225605024d58164e9cea3822ef2d41c58f08089a7f8687c5062f504a94e0dad5a7e2cfee3e4542e3d1342a4a735d0c9d276a7d7767714d09be6e294917c383563ab509a81514b52fbca20df61403741531f70dcbceff3deef4f94616c7a67849a7f1da0f6fc4088c6bfa0ba27c92c4c01bcbbc6a4a0d7da1674ef1bf45f5955fae90222fee6ee8"], 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000095000000f500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

492.667391ms ago: executing program 3 (id=9653):
syz_emit_ethernet(0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000095000000f500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

439.535002ms ago: executing program 2 (id=9654):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0)
utimes(&(0x7f0000000400)='.\x00', 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="320a050023080034040012800b00010069703667726500001800028014000700ff00000000000000000000000000000108000400220ecf"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

368.865193ms ago: executing program 2 (id=9655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea04850000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r1, 0x5, 0x4)

325.612734ms ago: executing program 7 (id=9656):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xe88}], 0x1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
getgid()

303.092724ms ago: executing program 9 (id=9657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000500)={@mcast2}, &(0x7f0000000540)=0x14)
sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x20000080)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

257.927135ms ago: executing program 9 (id=9658):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x54000000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x7c, &(0x7f0000000480)=""/124, 0x40f00, 0x14, '\x00', r2, 0x25, r0, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x3, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, 0xffffffffffffffff, r1], 0x0, 0x10, 0x9}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x48000)
pipe2(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84000) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r8=>0x0}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x80, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3b000000, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x60008040}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18) (async)
r14 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000b00), 0x4) (async)
setsockopt$sock_int(r14, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r14, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYRESOCT], 0xb4}}, 0x0) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, r3, 0x308, 0x1000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)

257.258355ms ago: executing program 7 (id=9659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1b, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7f4ffffffffe6057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ee30f2c1719e8e6d000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000879078ac1414bbac14140c8907efe000000ddb0000000000000000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)

244.283596ms ago: executing program 5 (id=9660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000852000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

218.505866ms ago: executing program 7 (id=9661):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = socket(0x2c, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r3, 0x0, 0x0)
close_range(r2, r3, 0x0)

207.493696ms ago: executing program 3 (id=9662):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x6)

189.168296ms ago: executing program 5 (id=9663):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0)

167.100167ms ago: executing program 9 (id=9664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000"], 0x118}}, 0x0)

166.575747ms ago: executing program 7 (id=9665):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0)
utimes(&(0x7f0000000400)='.\x00', 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="320a050023080034040012800b00010069703667726500001800028014000700ff00000000000000000000000000000108000400220ecf"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

149.749307ms ago: executing program 9 (id=9666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18)
unshare(0x400)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r8}, 0x38)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x1, 0x9, {{0x5, 0x4, 0x3, 0x34, 0x14, 0x67, 0x0, 0xb6, 0x29, 0x0, @private=0xa010100, @private=0xa010100}}}})
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94)
r14 = socket$kcm(0x2, 0x200000000000006, 0x0)
setsockopt$sock_attach_bpf(r14, 0x1, 0x50, &(0x7f0000000100), 0x48)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x0, 0xfff2}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
socket(0x400000000010, 0x3, 0x0)

52.450019ms ago: executing program 2 (id=9667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xffffffff, 0xd215)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x10510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r5, &(0x7f0000000300)="ca0e80", 0x3)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
write$char_usb(r5, &(0x7f0000002600)="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", 0xffe)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040)=0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==")

46.28733ms ago: executing program 9 (id=9668):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket(0x1e, 0x4, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000500)=0x3b1b)
futex(&(0x7f0000000380), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000006000000e27f00000100000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="f66e30895b4afb42d1070eb7281847a1180000000000000000000000030000006d200000040000ff0300000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0xfffbfffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P \x00\x00', @ANYRES16=r10, @ANYBLOB="8ea72cbd7000fcdbdf25270000000c009900080000003d00000012003400e7ba34783242d6a72bf9c9b8359000000a00060050505050505000000a0034000202020202020000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x24004081)

0s ago: executing program 3 (id=9669):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") (async, rerun: 64)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x200) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")

kernel console output (not intermixed with test programs):

90][T30934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30934 comm=syz.3.8983
[  521.145156][T30830] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.161884][T30830] 8021q: adding VLAN 0 to HW filter on device team0
[  521.172096][T25185] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.179235][T25185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.201767][T25185] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.208426][T30944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.208976][T25185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.230548][T30944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.244702][T30830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  521.265845][T30946] batadv1: entered promiscuous mode
[  521.271190][T30946] batadv1: entered allmulticast mode
[  521.352432][T30830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.463462][T30964] loop9: detected capacity change from 0 to 512
[  521.483892][T30964] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  521.501060][T30964] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  521.526570][T30972] netlink: 'syz.5.8989': attribute type 1 has an invalid length.
[  521.532874][T30964] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8988: bg 0: block 248: padding at end of block bitmap is not set
[  521.549783][T30964] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.8988: Failed to acquire dquot type 1
[  521.563476][T30964] EXT4-fs (loop9): 1 truncate cleaned up
[  521.569794][T30964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  521.586960][T30976] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  521.614121][T22501] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  521.622168][T30830] veth0_vlan: entered promiscuous mode
[  521.642274][T30830] veth1_vlan: entered promiscuous mode
[  521.673396][T30830] veth0_macvtap: entered promiscuous mode
[  521.683107][T30830] veth1_macvtap: entered promiscuous mode
[  521.698757][T30985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30985 comm=syz.5.8995
[  521.704800][T30830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.742767][T30830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.770470][T25192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.780464][T25192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.798606][T25192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.834180][T25192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.893736][T31004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31004 comm=syz.2.9003
[  521.923374][T30997] SELinux: ebitmap: truncated map
[  521.938278][T30997] SELinux: failed to load policy
[  521.958867][T30997] loop5: detected capacity change from 0 to 512
[  521.985605][T31010] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  521.995115][T31013] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  522.013740][T30997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.150205][T30997] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9001: corrupted inode contents
[  522.167121][T30997] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.9001: mark_inode_dirty error
[  522.187519][T30997] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9001: corrupted inode contents
[  522.207103][T30997] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.9001: mark_inode_dirty error
[  522.210942][T31029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.231935][T31029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.240024][T30997] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.9001: mark inode dirty (error -117)
[  522.272461][T30997] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  522.274945][T31033] batadv1: entered promiscuous mode
[  522.283491][T31006] 9pnet_fd: Insufficient options for proto=fd
[  522.286959][T31033] batadv1: entered allmulticast mode
[  522.326315][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.372793][T31048] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  522.548238][T31067] SELinux: ebitmap: truncated map
[  522.558487][T31067] SELinux: failed to load policy
[  522.941363][T31086] netlink: 'syz.2.9036': attribute type 1 has an invalid length.
[  523.057810][T31092] SELinux: ebitmap: truncated map
[  523.063538][T31092] SELinux: failed to load policy
[  523.223844][T31099] bridge: RTM_NEWNEIGH with invalid ether address
[  523.686925][T31128] SELinux: ebitmap: truncated map
[  523.696470][T31128] SELinux: failed to load policy
[  523.705045][T31128] loop5: detected capacity change from 0 to 512
[  523.719375][T31128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.774212][T31128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9051: corrupted inode contents
[  523.786420][T31128] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.9051: mark_inode_dirty error
[  523.797999][T31128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9051: corrupted inode contents
[  523.810102][T31128] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.9051: mark_inode_dirty error
[  523.822411][T31128] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.9051: mark inode dirty (error -117)
[  523.835322][T31128] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  523.869519][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.870373][   T29] kauditd_printk_skb: 466 callbacks suppressed
[  523.870391][   T29] audit: type=1326 audit(531.841:42152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  523.907994][   T29] audit: type=1326 audit(531.851:42153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  523.931157][   T29] audit: type=1326 audit(531.851:42154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  523.954748][   T29] audit: type=1326 audit(531.851:42155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  523.970773][T31136] loop5: detected capacity change from 0 to 512
[  523.977948][   T29] audit: type=1326 audit(531.851:42156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  523.985115][T31136] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  524.007515][   T29] audit: type=1326 audit(531.851:42157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  524.039570][   T29] audit: type=1326 audit(531.851:42158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  524.063014][   T29] audit: type=1326 audit(531.851:42159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  524.069124][T31136] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  524.086115][   T29] audit: type=1326 audit(531.851:42160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  524.102499][T31136] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9052: bg 0: block 248: padding at end of block bitmap is not set
[  524.123594][   T29] audit: type=1326 audit(531.851:42161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31133 comm="syz.9.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd093ebe9 code=0x7ffc0000
[  524.163068][T31136] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.9052: Failed to acquire dquot type 1
[  524.178841][T31136] EXT4-fs (loop5): 1 truncate cleaned up
[  524.185153][T31136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  524.258300][T31146] __nla_validate_parse: 31 callbacks suppressed
[  524.258321][T31146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9057'.
[  524.285295][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  524.354991][T31150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9058'.
[  524.397681][T31156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9062'.
[  524.417793][T31156] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9062'.
[  524.448986][T31159] SELinux: ebitmap: truncated map
[  524.454625][T31159] SELinux: failed to load policy
[  524.463335][T31159] loop7: detected capacity change from 0 to 512
[  524.490712][T31159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.523882][T31166] loop9: detected capacity change from 0 to 1024
[  524.555928][T31166] ext4: Unknown parameter 'nouser_xattr'
[  524.634859][T31159] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9063: corrupted inode contents
[  524.669864][T31159] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.9063: mark_inode_dirty error
[  524.692283][T31159] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9063: corrupted inode contents
[  524.693803][T31181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9069'.
[  524.704922][T31159] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.9063: mark_inode_dirty error
[  524.746443][T31159] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.9063: mark inode dirty (error -117)
[  524.797333][T31159] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  524.823576][T31193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9074'.
[  524.839213][T31193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9074'.
[  524.856070][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.893403][   T23] IPVS: starting estimator thread 0...
[  524.905523][T31199] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  524.987108][T31200] IPVS: using max 1872 ests per chain, 93600 per kthread
[  525.078717][T31214] netlink: 'syz.7.9082': attribute type 1 has an invalid length.
[  525.133726][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9085'.
[  525.281179][T31222] SELinux: ebitmap: truncated map
[  525.297148][T31222] SELinux: failed to load policy
[  525.311389][T31222] loop7: detected capacity change from 0 to 512
[  525.347586][T31174] syz.5.9068 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  525.358753][T31174] CPU: 0 UID: 0 PID: 31174 Comm: syz.5.9068 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  525.358820][T31174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  525.358836][T31174] Call Trace:
[  525.358844][T31174]  <TASK>
[  525.358853][T31174]  __dump_stack+0x1d/0x30
[  525.358917][T31174]  dump_stack_lvl+0xe8/0x140
[  525.359008][T31174]  dump_stack+0x15/0x1b
[  525.359028][T31174]  dump_header+0x81/0x220
[  525.359101][T31174]  oom_kill_process+0x342/0x400
[  525.359191][T31174]  out_of_memory+0x979/0xb80
[  525.359264][T31174]  try_charge_memcg+0x5e6/0x9e0
[  525.359301][T31174]  charge_memcg+0x51/0xc0
[  525.359320][T31174]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  525.359343][T31174]  __read_swap_cache_async+0x1df/0x350
[  525.359466][T31174]  swap_cluster_readahead+0x277/0x3e0
[  525.359527][T31174]  swapin_readahead+0xde/0x6f0
[  525.359559][T31174]  ? __filemap_get_folio+0x4f7/0x6b0
[  525.359594][T31174]  ? swap_cache_get_folio+0x77/0x200
[  525.359682][T31174]  do_swap_page+0x301/0x2430
[  525.359711][T31174]  ? css_rstat_updated+0xb7/0x240
[  525.359772][T31174]  ? __pfx_default_wake_function+0x10/0x10
[  525.359806][T31174]  handle_mm_fault+0x9a5/0x2c20
[  525.359848][T31174]  do_user_addr_fault+0x636/0x1090
[  525.359888][T31174]  ? fpregs_restore_userregs+0xe2/0x1d0
[  525.359992][T31174]  ? switch_fpu_return+0xe/0x20
[  525.360029][T31174]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  525.360070][T31174]  exc_page_fault+0x62/0xa0
[  525.360181][T31174]  asm_exc_page_fault+0x26/0x30
[  525.360202][T31174] RIP: 0033:0x7f629d53560c
[  525.360217][T31174] Code: 66 0f 1f 44 00 00 69 3d a6 00 e9 00 e8 03 00 00 48 8d 1d a7 09 36 00 e8 42 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  525.360235][T31174] RSP: 002b:00007fff774253a0 EFLAGS: 00010202
[  525.360256][T31174] RAX: 0000000000000000 RBX: 00007f629d895fa0 RCX: 0000000000000000
[  525.360271][T31174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a4ee808
[  525.360345][T31174] RBP: 00007f629d897da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  525.360357][T31174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080475
[  525.360369][T31174] R13: 00007f629d896180 R14: ffffffffffffffff R15: 00007fff774254b0
[  525.360393][T31174]  </TASK>
[  525.360402][T31174] memory: usage 307200kB, limit 307200kB, failcnt 6137
[  525.395644][T31225] bridge: RTM_NEWNEIGH with invalid ether address
[  525.396188][T31174] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0
[  525.602316][T31174] kmem: usage 114248kB, limit 9007199254740988kB, failcnt 0
[  525.609639][T31174] Memory cgroup stats for /syz5:
[  525.612072][T31174] cache 0
[  525.619982][T31174] rss 0
[  525.622935][T31174] shmem 0
[  525.625883][T31174] mapped_file 0
[  525.629394][T31174] dirty 0
[  525.632338][T31174] writeback 0
[  525.635631][T31174] workingset_refault_anon 419
[  525.640353][T31174] workingset_refault_file 1834
[  525.645140][T31174] swap 389120
[  525.648472][T31174] swapcached 0
[  525.651868][T31174] pgpgin 671546
[  525.655349][T31174] pgpgout 671544
[  525.658913][T31174] pgfault 662322
[  525.662502][T31174] pgmajfault 242
[  525.666052][T31174] inactive_anon 0
[  525.669728][T31174] active_anon 0
[  525.673194][T31174] inactive_file 0
[  525.676835][T31174] active_file 8192
[  525.680668][T31174] unevictable 0
[  525.684142][T31174] hierarchical_memory_limit 314572800
[  525.689546][T31174] hierarchical_memsw_limit 9223372036854771712
[  525.695097][T31222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.695735][T31174] total_cache 0
[  525.695745][T31174] total_rss 0
[  525.695753][T31174] total_shmem 0
[  525.695762][T31174] total_mapped_file 0
[  525.695771][T31174] total_dirty 0
[  525.726342][T31174] total_writeback 0
[  525.730393][T31174] total_workingset_refault_anon 419
[  525.735594][T31174] total_workingset_refault_file 1834
[  525.740941][T31174] total_swap 389120
[  525.744766][T31174] total_swapcached 0
[  525.748714][T31174] total_pgpgin 671546
[  525.752693][T31174] total_pgpgout 671544
[  525.756766][T31174] total_pgfault 662322
[  525.760858][T31174] total_pgmajfault 242
[  525.764925][T31174] total_inactive_anon 0
[  525.769114][T31174] total_active_anon 0
[  525.773290][T31174] total_inactive_file 0
[  525.777595][T31174] total_active_file 8192
[  525.782020][T31174] total_unevictable 0
[  525.786024][T31174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9068,pid=31174,uid=0
[  525.800803][T31174] Memory cgroup out of memory: Killed process 31174 (syz.5.9068) total-vm:93960kB, anon-rss:1008kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  525.842434][T31222] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9088: corrupted inode contents
[  525.855529][T31222] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.9088: mark_inode_dirty error
[  525.886708][T31222] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9088: corrupted inode contents
[  525.911546][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9094'.
[  525.922289][T31222] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.9088: mark_inode_dirty error
[  525.941920][T31222] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.9088: mark inode dirty (error -117)
[  525.958466][T31222] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  525.981922][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9096'.
[  526.024755][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.083642][T31258] SELinux: ebitmap: truncated map
[  526.089800][T31258] SELinux: failed to load policy
[  526.098669][T31258] loop7: detected capacity change from 0 to 512
[  526.125377][T31258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.293914][T31281] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9100: corrupted inode contents
[  526.335260][T31281] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.9100: mark_inode_dirty error
[  526.359822][T31281] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9100: corrupted inode contents
[  526.359911][T31281] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.9100: mark_inode_dirty error
[  526.359982][T31281] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.9100: mark inode dirty (error -117)
[  526.360076][T31281] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  526.420360][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.542097][T31270] lo speed is unknown, defaulting to 1000
[  526.975991][T31316] netlink: 'syz.5.9121': attribute type 3 has an invalid length.
[  527.110335][ T7416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.119803][ T7416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.129329][ T7416] bond0 (unregistering): Released all slaves
[  527.138894][T31300] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  527.168450][ T7416] tipc: Left network mode
[  527.251504][ T7416] hsr_slave_0: left promiscuous mode
[  527.264675][ T7416] hsr_slave_1: left promiscuous mode
[  527.271161][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.349721][ T7416] team0 (unregistering): Port device team_slave_1 removed
[  527.361156][ T7416] team0 (unregistering): Port device C removed
[  527.469950][T31270] chnl_net:caif_netlink_parms(): no params data found
[  527.548276][T31270] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.555447][T31270] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.564555][T31270] bridge_slave_0: entered allmulticast mode
[  527.571509][T31270] bridge_slave_0: entered promiscuous mode
[  527.579084][T31270] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.586246][T31270] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.601726][T31270] bridge_slave_1: entered allmulticast mode
[  527.608881][T31270] bridge_slave_1: entered promiscuous mode
[  527.635086][T31270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.656085][T31270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.670871][ T7416] IPVS: stop unused estimator thread 0...
[  527.695453][T31375] batadv0: entered promiscuous mode
[  527.700803][T31375] batadv0: entered allmulticast mode
[  527.744046][T31270] team0: Port device team_slave_0 added
[  527.765682][T31270] team0: Port device team_slave_1 added
[  527.798313][T31270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.805316][T31270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.831518][T31270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.843440][T31270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.850583][T31270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.876630][T31270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.958439][T31270] hsr_slave_0: entered promiscuous mode
[  527.970098][T31270] hsr_slave_1: entered promiscuous mode
[  527.976182][T31270] debugfs: 'hsr0' already exists in 'hsr'
[  527.982003][T31270] Cannot create hsr debugfs directory
[  528.373988][T31270] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  528.389180][T31409] netlink: 'syz.9.9154': attribute type 1 has an invalid length.
[  528.398248][T31270] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  528.407930][T31270] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  528.427155][T31270] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  528.553681][T31270] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.591648][T31270] 8021q: adding VLAN 0 to HW filter on device team0
[  528.622193][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.629537][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.662452][T25195] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.669590][T25195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.715570][T31270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  528.726258][T31270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  528.835232][T31270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.014499][T31270] veth0_vlan: entered promiscuous mode
[  529.022350][T31462] SELinux: ebitmap: truncated map
[  529.028846][T31270] veth1_vlan: entered promiscuous mode
[  529.047112][T31462] SELinux: failed to load policy
[  529.052855][T31270] veth0_macvtap: entered promiscuous mode
[  529.060793][T31270] veth1_macvtap: entered promiscuous mode
[  529.071642][T31462] loop5: detected capacity change from 0 to 512
[  529.094946][T31462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.098589][T31270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.136761][T31270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.156540][ T7416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.186723][ T7416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.229244][ T7416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.245169][ T7416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.257901][T31462] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9168: corrupted inode contents
[  529.271923][T31462] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.9168: mark_inode_dirty error
[  529.282600][T31475] __nla_validate_parse: 11 callbacks suppressed
[  529.282622][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9170'.
[  529.284230][T31462] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.9168: corrupted inode contents
[  529.311806][T31462] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.9168: mark_inode_dirty error
[  529.325283][T31462] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.9168: mark inode dirty (error -117)
[  529.341411][T31462] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  529.417702][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.435781][   T29] kauditd_printk_skb: 204 callbacks suppressed
[  529.435796][   T29] audit: type=1400 audit(537.401:42364): avc:  denied  { mount } for  pid=31482 comm="syz.5.9172" name="/" dev="ramfs" ino=94614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  529.486527][   T29] audit: type=1400 audit(537.411:42365): avc:  denied  { write } for  pid=31482 comm="syz.5.9172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  529.506364][   T29] audit: type=1400 audit(537.411:42366): avc:  denied  { nlmsg_write } for  pid=31482 comm="syz.5.9172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  529.531534][T31484] loop3: detected capacity change from 0 to 128
[  529.600239][   T29] audit: type=1400 audit(537.571:42367): avc:  denied  { mount } for  pid=31472 comm="syz.3.9104" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  529.621872][   T29] audit: type=1400 audit(537.571:42368): avc:  denied  { write } for  pid=31472 comm="syz.3.9104" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  529.898957][T31496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9176'.
[  529.934309][T31499] netlink: 'syz.9.9174': attribute type 1 has an invalid length.
[  529.978186][   T29] audit: type=1326 audit(537.951:42369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  530.001345][   T29] audit: type=1326 audit(537.951:42370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  530.024657][   T29] audit: type=1326 audit(537.951:42371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  530.047765][   T29] audit: type=1326 audit(537.951:42372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  530.070819][   T29] audit: type=1326 audit(537.951:42373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.5.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  530.187513][T31512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9183'.
[  530.258108][T31515] SELinux: ebitmap: truncated map
[  530.264157][T31515] SELinux: failed to load policy
[  530.361760][T31528] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9188'.
[  530.413167][T31523] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  530.476441][T31534] netlink: 'syz.2.9191': attribute type 1 has an invalid length.
[  530.509049][T31544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9196'.
[  530.639131][T31559] SELinux: ebitmap: truncated map
[  530.647671][T31559] SELinux: failed to load policy
[  530.657607][T31559] loop3: detected capacity change from 0 to 512
[  530.670603][T31561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.687079][T31561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.708304][T31559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.807853][T31559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.9201: corrupted inode contents
[  530.841249][T31559] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.9201: mark_inode_dirty error
[  530.860022][T31559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.9201: corrupted inode contents
[  530.884792][T31559] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.9201: mark_inode_dirty error
[  530.898678][T31559] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.9201: mark inode dirty (error -117)
[  530.913576][T31559] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  530.967609][T31270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.050596][T31577] netlink: 'syz.3.9208': attribute type 1 has an invalid length.
[  531.127301][T31585] netlink: 'syz.2.9212': attribute type 1 has an invalid length.
[  531.146306][T31585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9212'.
[  531.157911][T31537] syz.7.9192 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  531.167755][T31585] bridge_slave_1: left allmulticast mode
[  531.169279][T31537] CPU: 0 UID: 0 PID: 31537 Comm: syz.7.9192 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  531.169317][T31537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  531.169337][T31537] Call Trace:
[  531.169345][T31537]  <TASK>
[  531.169355][T31537]  __dump_stack+0x1d/0x30
[  531.169418][T31537]  dump_stack_lvl+0xe8/0x140
[  531.169446][T31537]  dump_stack+0x15/0x1b
[  531.169471][T31537]  dump_header+0x81/0x220
[  531.169516][T31537]  oom_kill_process+0x342/0x400
[  531.169652][T31537]  out_of_memory+0x979/0xb80
[  531.169701][T31537]  try_charge_memcg+0x5e6/0x9e0
[  531.169745][T31537]  charge_memcg+0x51/0xc0
[  531.169772][T31537]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  531.169805][T31537]  __read_swap_cache_async+0x1df/0x350
[  531.169870][T31537]  swap_cluster_readahead+0x277/0x3e0
[  531.169938][T31537]  swapin_readahead+0xde/0x6f0
[  531.169984][T31537]  ? __filemap_get_folio+0x4f7/0x6b0
[  531.170035][T31537]  ? swap_cache_get_folio+0x77/0x200
[  531.170093][T31537]  do_swap_page+0x301/0x2430
[  531.170123][T31537]  ? ctx_sched_in+0x34d/0x370
[  531.170175][T31537]  ? __rcu_read_unlock+0x4f/0x70
[  531.170208][T31537]  ? __pfx_default_wake_function+0x10/0x10
[  531.170265][T31537]  handle_mm_fault+0x9a5/0x2c20
[  531.170317][T31537]  ? __rcu_read_lock+0x37/0x50
[  531.170347][T31537]  ? __pte_offset_map_lock+0x1d4/0x230
[  531.170402][T31537]  __get_user_pages+0x102e/0x1fa0
[  531.170501][T31537]  __gup_longterm_locked+0x8f4/0xe60
[  531.170547][T31537]  ? count_memcg_events+0x167/0x230
[  531.170586][T31537]  ? __rcu_read_lock+0x37/0x50
[  531.170649][T31537]  ? ___pte_offset_map+0xea/0x150
[  531.170744][T31537]  gup_fast_fallback+0x1f5/0x1420
[  531.170793][T31537]  get_user_pages_fast+0x5f/0x90
[  531.170906][T31537]  get_futex_key+0x5c4/0xbd0
[  531.170954][T31537]  futex_wait_requeue_pi+0x15c/0x640
[  531.171000][T31537]  ? __pfx_futex_wake_mark+0x10/0x10
[  531.171061][T31537]  do_futex+0x136/0x380
[  531.171140][T31537]  __se_sys_futex+0x2ed/0x360
[  531.171250][T31537]  __x64_sys_futex+0x78/0x90
[  531.171291][T31537]  x64_sys_call+0x2e39/0x2ff0
[  531.171321][T31537]  do_syscall_64+0xd2/0x200
[  531.171366][T31537]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  531.171401][T31537]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  531.171509][T31537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.171557][T31537] RIP: 0033:0x7f64c8ecebe9
[  531.171594][T31537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.171620][T31537] RSP: 002b:00007f64c7937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  531.171691][T31537] RAX: ffffffffffffffda RBX: 00007f64c9105fa0 RCX: 00007f64c8ecebe9
[  531.171710][T31537] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000200000000380
[  531.171728][T31537] RBP: 00007f64c8f51e19 R08: 0000200000048000 R09: 0000000000000300
[  531.171746][T31537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  531.171764][T31537] R13: 00007f64c9106038 R14: 00007f64c9105fa0 R15: 00007ffc92a49648
[  531.171866][T31537]  </TASK>
[  531.171876][T31537] memory: usage 307200kB, limit 307200kB, failcnt 2287
[  531.174785][T31585] bridge_slave_1: left promiscuous mode
[  531.184669][T31537] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  531.194917][T31585] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.198059][T31537] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  531.506591][T31537] Memory cgroup stats for /syz7:
[  531.509217][T31585] bridge_slave_0: left allmulticast mode
[  531.520112][T31585] bridge_slave_0: left promiscuous mode
[  531.523341][T31537] cache 0
[  531.525990][T31585] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.528775][T31537] rss 0
[  531.528784][T31537] shmem 0
[  531.528791][T31537] mapped_file 0
[  531.528798][T31537] dirty 0
[  531.528804][T31537] writeback 0
[  531.528811][T31537] workingset_refault_anon 355
[  531.528819][T31537] workingset_refault_file 0
[  531.528827][T31537] swap 225280
[  531.528833][T31537] swapcached 0
[  531.567336][T31537] pgpgin 413512
[  531.570863][T31537] pgpgout 413510
[  531.574420][T31537] pgfault 498774
[  531.578063][T31537] pgmajfault 155
[  531.581623][T31537] inactive_anon 0
[  531.585277][T31537] active_anon 0
[  531.588801][T31537] inactive_file 0
[  531.592531][T31537] active_file 8192
[  531.596781][T31537] unevictable 0
[  531.600311][T31537] hierarchical_memory_limit 314572800
[  531.605783][T31537] hierarchical_memsw_limit 9223372036854771712
[  531.612019][T31537] total_cache 0
[  531.615493][T31537] total_rss 0
[  531.618839][T31537] total_shmem 0
[  531.622387][T31537] total_mapped_file 0
[  531.626398][T31537] total_dirty 0
[  531.629891][T31537] total_writeback 0
[  531.633709][T31537] total_workingset_refault_anon 355
[  531.638943][T31537] total_workingset_refault_file 0
[  531.643978][T31537] total_swap 225280
[  531.647836][T31537] total_swapcached 0
[  531.651855][T31537] total_pgpgin 413512
[  531.655841][T31537] total_pgpgout 413510
[  531.659957][T31537] total_pgfault 498774
[  531.664044][T31537] total_pgmajfault 155
[  531.668171][T31537] total_inactive_anon 0
[  531.672359][T31537] total_active_anon 0
[  531.676408][T31537] total_inactive_file 0
[  531.680603][T31537] total_active_file 8192
[  531.684854][T31537] total_unevictable 0
[  531.688859][T31537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.9192,pid=31535,uid=0
[  531.703653][T31537] Memory cgroup out of memory: Killed process 31535 (syz.7.9192) total-vm:96008kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  531.794998][T31612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9222'.
[  531.816542][T31596] pim6reg1: entered promiscuous mode
[  531.917406][T31629] netlink: 3 bytes leftover after parsing attributes in process `syz.7.9232'.
[  531.930507][T31626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9229'.
[  531.935077][T31629] batadv1: entered promiscuous mode
[  531.944900][T31629] batadv1: entered allmulticast mode
[  531.980441][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9234'.
[  532.125817][T31655] netlink: 'syz.2.9240': attribute type 1 has an invalid length.
[  532.461147][T31692] netlink: 'syz.5.9258': attribute type 1 has an invalid length.
[  532.658474][T31706] SELinux: ebitmap: truncated map
[  532.675588][T31706] SELinux: failed to load policy
[  532.692556][T31704] pim6reg1: entered promiscuous mode
[  532.694797][T31645] syz.3.9238 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  532.709037][T31645] CPU: 0 UID: 0 PID: 31645 Comm: syz.3.9238 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  532.709076][T31645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  532.709132][T31645] Call Trace:
[  532.709138][T31645]  <TASK>
[  532.709145][T31645]  __dump_stack+0x1d/0x30
[  532.709166][T31645]  dump_stack_lvl+0xe8/0x140
[  532.709219][T31645]  dump_stack+0x15/0x1b
[  532.709321][T31645]  dump_header+0x81/0x220
[  532.709415][T31645]  oom_kill_process+0x342/0x400
[  532.709452][T31645]  out_of_memory+0x979/0xb80
[  532.709544][T31645]  try_charge_memcg+0x5e6/0x9e0
[  532.709583][T31645]  charge_memcg+0x51/0xc0
[  532.709602][T31645]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  532.709624][T31645]  __read_swap_cache_async+0x1df/0x350
[  532.709668][T31645]  swap_cluster_readahead+0x277/0x3e0
[  532.709727][T31645]  swapin_readahead+0xde/0x6f0
[  532.709760][T31645]  ? __filemap_get_folio+0x4f7/0x6b0
[  532.709866][T31645]  ? swap_cache_get_folio+0x77/0x200
[  532.709901][T31645]  do_swap_page+0x301/0x2430
[  532.709927][T31645]  ? merge_sched_in+0x605/0xa60
[  532.709955][T31645]  ? rb_next+0x5c/0x80
[  532.710039][T31645]  ? __pfx_default_wake_function+0x10/0x10
[  532.710068][T31645]  handle_mm_fault+0x9a5/0x2c20
[  532.710097][T31645]  ? __rcu_read_unlock+0x4f/0x70
[  532.710136][T31645]  do_user_addr_fault+0x3fe/0x1090
[  532.710177][T31645]  ? rb_insert_color+0x71/0x2b0
[  532.710209][T31645]  exc_page_fault+0x62/0xa0
[  532.710330][T31645]  asm_exc_page_fault+0x26/0x30
[  532.710392][T31645] RIP: 0010:rep_stos_alternative+0x40/0x80
[  532.710417][T31645] Code: c9 75 f6 e9 52 04 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  532.710449][T31645] RSP: 0018:ffffc90001363c88 EFLAGS: 00050246
[  532.710469][T31645] RAX: 0000000000000000 RBX: 00007ff8ccb9ef84 RCX: 0000000000000040
[  532.710565][T31645] RDX: ffffc9000fc03000 RSI: 0000000000000d45 RDI: 00007ff8ccb9ee40
[  532.710580][T31645] RBP: ffff88813c20df80 R08: 000188813c20df57 R09: 0000000000000000
[  532.710593][T31645] R10: fffffffffffffe00 R11: 0000000000000002 R12: 00007ffffffff000
[  532.710605][T31645] R13: 00007ff8ccb9ec40 R14: 00007ff8ccb9ec40 R15: ffff88813c20d280
[  532.710624][T31645]  copy_fpstate_to_sigframe+0xb0/0x7d0
[  532.710671][T31645]  ? _raw_spin_unlock+0x26/0x50
[  532.710698][T31645]  ? posixtimer_deliver_signal+0x2de/0x320
[  532.710806][T31645]  ? dequeue_signal+0x39c/0x3b0
[  532.710905][T31645]  ? x86_task_fpu+0x36/0x60
[  532.710980][T31645]  get_sigframe+0x34d/0x490
[  532.710998][T31645]  ? get_signal+0xdc8/0xf70
[  532.711024][T31645]  x64_setup_rt_frame+0xa8/0x580
[  532.711067][T31645]  arch_do_signal_or_restart+0x27c/0x480
[  532.711100][T31645]  exit_to_user_mode_loop+0x7a/0x100
[  532.711174][T31645]  do_syscall_64+0x1d6/0x200
[  532.711215][T31645]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  532.711254][T31645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.711288][T31645] RIP: 0033:0x7ff8ce13ebe7
[  532.711321][T31645] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  532.711344][T31645] RSP: 002b:00007ff8ccb9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  532.711370][T31645] RAX: 00000000000000ca RBX: 00007ff8ce375fa0 RCX: 00007ff8ce13ebe9
[  532.711384][T31645] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000200000000380
[  532.711398][T31645] RBP: 00007ff8ce1c1e19 R08: 0000200000048000 R09: 0000000000000300
[  532.711487][T31645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.711503][T31645] R13: 00007ff8ce376038 R14: 00007ff8ce375fa0 R15: 00007ffea97e8d78
[  532.711527][T31645]  </TASK>
[  532.711567][T31645] memory: usage 307200kB, limit 307200kB, failcnt 4465
[  533.077558][T31645] memory+swap: usage 1496kB, limit 9007199254740988kB, failcnt 0
[  533.085285][T31645] kmem: usage 596kB, limit 9007199254740988kB, failcnt 0
[  533.092459][T31645] Memory cgroup stats for /syz3:
[  533.092686][T31645] cache 524288
[  533.101041][T31645] rss 118784
[  533.104268][T31645] shmem 0
[  533.107241][T31645] mapped_file 65536
[  533.111079][T31645] dirty 4096
[  533.114444][T31645] writeback 4096
[  533.118071][T31645] workingset_refault_anon 197
[  533.122844][T31645] workingset_refault_file 1313
[  533.127752][T31645] swap 69632
[  533.130967][T31645] swapcached 155648
[  533.134828][T31645] pgpgin 382752
[  533.138392][T31645] pgpgout 382580
[  533.141951][T31645] pgfault 425155
[  533.145497][T31645] pgmajfault 169
[  533.149097][T31645] inactive_anon 12288
[  533.153182][T31645] active_anon 151552
[  533.157107][T31645] inactive_file 16384
[  533.161203][T31645] active_file 524288
[  533.165176][T31645] unevictable 0
[  533.168649][T31645] hierarchical_memory_limit 314572800
[  533.174189][T31645] hierarchical_memsw_limit 9223372036854771712
[  533.180429][T31645] total_cache 524288
[  533.184415][T31645] total_rss 118784
[  533.188232][T31645] total_shmem 0
[  533.191825][T31645] total_mapped_file 65536
[  533.196258][T31645] total_dirty 4096
[  533.200085][T31645] total_writeback 4096
[  533.204148][T31645] total_workingset_refault_anon 197
[  533.209371][T31645] total_workingset_refault_file 1313
[  533.214652][T31645] total_swap 69632
[  533.218381][T31645] total_swapcached 155648
[  533.222704][T31645] total_pgpgin 382752
[  533.226731][T31645] total_pgpgout 382580
[  533.230808][T31645] total_pgfault 425155
[  533.234868][T31645] total_pgmajfault 169
[  533.238949][T31645] total_inactive_anon 12288
[  533.243512][T31645] total_active_anon 151552
[  533.247953][T31645] total_inactive_file 16384
[  533.252482][T31645] total_active_file 524288
[  533.256908][T31645] total_unevictable 0
[  533.260902][T31645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9238,pid=31644,uid=0
[  533.275928][T31645] Memory cgroup out of memory: Killed process 31644 (syz.3.9238) total-vm:93960kB, anon-rss:1008kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  533.354524][T31715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.369581][T31715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.493486][T31728] netlink: 'syz.7.9273': attribute type 1 has an invalid length.
[  533.503031][T31728] bridge_slave_1: left allmulticast mode
[  533.509026][T31728] bridge_slave_1: left promiscuous mode
[  533.514826][T31728] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.523595][T31728] bridge_slave_0: left allmulticast mode
[  533.529408][T31728] bridge_slave_0: left promiscuous mode
[  533.535116][T31728] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.216131][T31799] batadv1: entered promiscuous mode
[  534.221472][T31799] batadv1: entered allmulticast mode
[  534.238797][T31802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  534.262824][   T37] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.273309][   T37] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.328941][T31804] __nla_validate_parse: 13 callbacks suppressed
[  534.329027][T31804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9303'.
[  534.350943][T27192] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  534.361925][T27192] CPU: 1 UID: 0 PID: 27192 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  534.361953][T27192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  534.361968][T27192] Call Trace:
[  534.361976][T27192]  <TASK>
[  534.361985][T27192]  __dump_stack+0x1d/0x30
[  534.362014][T27192]  dump_stack_lvl+0xe8/0x140
[  534.362036][T27192]  dump_stack+0x15/0x1b
[  534.362057][T27192]  dump_header+0x81/0x220
[  534.362098][T27192]  oom_kill_process+0x342/0x400
[  534.362157][T27192]  out_of_memory+0x979/0xb80
[  534.362200][T27192]  try_charge_memcg+0x5e6/0x9e0
[  534.362281][T27192]  charge_memcg+0x51/0xc0
[  534.362305][T27192]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  534.362329][T27192]  __read_swap_cache_async+0x1df/0x350
[  534.362370][T27192]  swap_cluster_readahead+0x277/0x3e0
[  534.362497][T27192]  swapin_readahead+0xde/0x6f0
[  534.362537][T27192]  ? __filemap_get_folio+0x4f7/0x6b0
[  534.362569][T27192]  ? ktime_get+0x1eb/0x210
[  534.362592][T27192]  ? ktime_get_mono_fast_ns+0x171/0x190
[  534.362687][T27192]  ? swap_cache_get_folio+0x77/0x200
[  534.362724][T27192]  do_swap_page+0x301/0x2430
[  534.362747][T27192]  ? finish_task_switch+0xad/0x2b0
[  534.362800][T27192]  ? __pfx_default_wake_function+0x10/0x10
[  534.362832][T27192]  handle_mm_fault+0x9a5/0x2c20
[  534.362944][T27192]  do_user_addr_fault+0x636/0x1090
[  534.362985][T27192]  ? fpregs_restore_userregs+0xe2/0x1d0
[  534.363024][T27192]  ? switch_fpu_return+0xe/0x20
[  534.363066][T27192]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  534.363099][T27192]  exc_page_fault+0x62/0xa0
[  534.363135][T27192]  asm_exc_page_fault+0x26/0x30
[  534.363157][T27192] RIP: 0033:0x7f629d691465
[  534.363174][T27192] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  534.363249][T27192] RSP: 002b:00007fff77425578 EFLAGS: 00010246
[  534.363265][T27192] RAX: 0000000000000000 RBX: 00000000000002e5 RCX: 00007f629d691463
[  534.363282][T27192] RDX: 00007fff77425590 RSI: 0000000000000000 RDI: 0000000000000000
[  534.363298][T27192] RBP: 00007fff774255fc R08: 000000000fe9b0a6 R09: 0000000000000000
[  534.363314][T27192] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  534.363330][T27192] R13: 00000000000927c0 R14: 00000000000824a9 R15: 00007fff77425650
[  534.363355][T27192]  </TASK>
[  534.363440][T27192] memory: usage 307200kB, limit 307200kB, failcnt 6908
[  534.570463][T31812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9304'.
[  534.576260][T27192] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0
[  534.576280][T27192] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  534.576294][T27192] Memory cgroup stats for /syz5:
[  534.639199][T27192] cache 0
[  534.647147][T27192] rss 8192
[  534.650264][T27192] shmem 0
[  534.653197][T27192] mapped_file 0
[  534.656659][T27192] dirty 0
[  534.659623][T27192] writeback 8192
[  534.663177][T27192] workingset_refault_anon 517
[  534.667998][T27192] workingset_refault_file 2131
[  534.672780][T27192] swap 364544
[  534.676080][T27192] swapcached 28672
[  534.679889][T27192] pgpgin 677985
[  534.683374][T27192] pgpgout 677976
[  534.686925][T27192] pgfault 670025
[  534.690518][T27192] pgmajfault 304
[  534.694078][T27192] inactive_anon 8192
[  534.698023][T27192] active_anon 20480
[  534.701852][T27192] inactive_file 0
[  534.705564][T27192] active_file 8192
[  534.709459][T27192] unevictable 0
[  534.712937][T27192] hierarchical_memory_limit 314572800
[  534.718583][T27192] hierarchical_memsw_limit 9223372036854771712
[  534.724751][T27192] total_cache 0
[  534.728279][T27192] total_rss 8192
[  534.731948][T27192] total_shmem 0
[  534.735430][T27192] total_mapped_file 0
[  534.739649][T27192] total_dirty 0
[  534.743122][T27192] total_writeback 8192
[  534.747238][T27192] total_workingset_refault_anon 517
[  534.752521][T27192] total_workingset_refault_file 2131
[  534.757847][T27192] total_swap 364544
[  534.761706][T27192] total_swapcached 28672
[  534.766141][T27192] total_pgpgin 677985
[  534.770170][T27192] total_pgpgout 677976
[  534.774356][T27192] total_pgfault 670025
[  534.778486][T27192] total_pgmajfault 304
[  534.782572][T27192] total_inactive_anon 8192
[  534.785995][T31788] lo speed is unknown, defaulting to 1000
[  534.787023][T27192] total_active_anon 20480
[  534.787035][T27192] total_inactive_file 0
[  534.787044][T27192] total_active_file 8192
[  534.787053][T27192] total_unevictable 0
[  534.787062][T27192] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9278,pid=31738,uid=0
[  534.824866][T27192] Memory cgroup out of memory: Killed process 31738 (syz.5.9278) total-vm:93960kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  534.878835][   T37] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.889259][   T37] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.954733][   T37] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.965269][   T37] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.005952][T31788] chnl_net:caif_netlink_parms(): no params data found
[  535.043548][   T37] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.054144][   T37] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.090544][T31788] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.094213][T31851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9319'.
[  535.097805][T31788] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.113964][T31788] bridge_slave_0: entered allmulticast mode
[  535.120903][T31788] bridge_slave_0: entered promiscuous mode
[  535.127908][T31788] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.135213][T31788] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.142512][T31788] bridge_slave_1: entered allmulticast mode
[  535.149170][T31788] bridge_slave_1: entered promiscuous mode
[  535.184410][T31788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.195953][T31788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.237472][T31788] team0: Port device team_slave_0 added
[  535.244349][T31788] team0: Port device team_slave_1 added
[  535.279722][T31861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9323'.
[  535.768548][   T37] smc: removing net device bond0 with user defined pnetid SYZ2
[  535.776847][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.786730][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.796304][   T37] bond0 (unregistering): Released all slaves
[  535.805043][T31788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.812100][T31788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.838190][T31788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.863968][T31788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.871020][T31788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.897061][T31788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.955252][   T37] hsr_slave_0: left promiscuous mode
[  535.966679][   T37] hsr_slave_1: left promiscuous mode
[  535.974585][T31883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.983760][T31883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.994413][   T29] kauditd_printk_skb: 178 callbacks suppressed
[  535.994432][   T29] audit: type=1326 audit(543.961:42552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.024091][   T37] veth1_macvtap: left promiscuous mode
[  536.031223][   T37] veth0_macvtap: left promiscuous mode
[  536.036084][T31886] netlink: 'syz.7.9329': attribute type 1 has an invalid length.
[  536.036786][   T37] veth1_vlan: left promiscuous mode
[  536.045660][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9329'.
[  536.051348][   T37] veth0_vlan: left promiscuous mode
[  536.064381][   T29] audit: type=1326 audit(543.961:42553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.088096][   T29] audit: type=1326 audit(543.961:42554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.111748][   T29] audit: type=1326 audit(543.961:42555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.135114][   T29] audit: type=1326 audit(543.961:42556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.159093][   T29] audit: type=1326 audit(543.961:42557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.182022][   T29] audit: type=1326 audit(543.961:42558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.205126][   T29] audit: type=1326 audit(543.961:42559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.228290][   T29] audit: type=1326 audit(543.961:42560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.251494][   T29] audit: type=1326 audit(543.961:42561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31882 comm="syz.5.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f629d65ebe9 code=0x7ffc0000
[  536.351110][   T37] team0 (unregistering): Port device team_slave_1 removed
[  536.362644][   T37] team0 (unregistering): Port device team_slave_0 removed
[  536.413155][T31899] netlink: 'syz.2.9336': attribute type 1 has an invalid length.
[  536.442499][T31788] hsr_slave_0: entered promiscuous mode
[  536.453500][T31788] hsr_slave_1: entered promiscuous mode
[  536.461284][T31788] debugfs: 'hsr0' already exists in 'hsr'
[  536.467138][T31788] Cannot create hsr debugfs directory
[  536.483379][   T23] lo speed is unknown, defaulting to 1000
[  536.489270][   T23] infiniband syz2: ib_query_port failed (-19)
[  536.592758][T31909] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9339'.
[  536.608746][T31914] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9343'.
[  536.686326][T31923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9346'.
[  536.781601][T31934] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9351'.
[  536.808448][T31934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9351'.
[  536.831492][T31934] loop7: detected capacity change from 0 to 512
[  536.852439][T31934] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  536.885918][T31934] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.9351: iget: bad i_size value: -67835469387268086
[  536.919267][T31934] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.9351: couldn't read orphan inode 15 (err -117)
[  536.963436][T31788] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  536.970802][T31934] EXT4-fs (loop7): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.994799][T31788] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  537.014915][T31940] netlink: 'syz.3.9352': attribute type 1 has an invalid length.
[  537.039988][T31788] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  537.088529][T30830] EXT4-fs (loop7): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  537.091901][T31788] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  537.213244][T31788] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.249200][T31788] 8021q: adding VLAN 0 to HW filter on device team0
[  537.283952][T31908] syz.2.9341 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  537.291434][T31788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.295275][T31908] CPU: 1 UID: 0 PID: 31908 Comm: syz.2.9341 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  537.295312][T31908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  537.295338][T31908] Call Trace:
[  537.295346][T31908]  <TASK>
[  537.295355][T31908]  __dump_stack+0x1d/0x30
[  537.295386][T31908]  dump_stack_lvl+0xe8/0x140
[  537.295413][T31908]  dump_stack+0x15/0x1b
[  537.295488][T31908]  dump_header+0x81/0x220
[  537.295532][T31908]  oom_kill_process+0x342/0x400
[  537.295596][T31908]  out_of_memory+0x979/0xb80
[  537.295645][T31908]  try_charge_memcg+0x5e6/0x9e0
[  537.295685][T31908]  charge_memcg+0x51/0xc0
[  537.295711][T31908]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  537.295824][T31908]  __read_swap_cache_async+0x1df/0x350
[  537.295872][T31908]  swap_cluster_readahead+0x277/0x3e0
[  537.295939][T31908]  swapin_readahead+0xde/0x6f0
[  537.295992][T31908]  ? __filemap_get_folio+0x4f7/0x6b0
[  537.296049][T31908]  ? ktime_get+0x1eb/0x210
[  537.296085][T31908]  ? swap_cache_get_folio+0x77/0x200
[  537.296130][T31908]  do_swap_page+0x301/0x2430
[  537.296214][T31908]  ? finish_task_switch+0xad/0x2b0
[  537.296267][T31908]  ? __pfx_default_wake_function+0x10/0x10
[  537.296301][T31908]  handle_mm_fault+0x9a5/0x2c20
[  537.296346][T31908]  do_user_addr_fault+0x636/0x1090
[  537.296397][T31908]  ? fpregs_restore_userregs+0xad/0x1d0
[  537.296442][T31908]  ? switch_fpu_return+0xe/0x20
[  537.296516][T31908]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  537.296629][T31908]  exc_page_fault+0x62/0xa0
[  537.296669][T31908]  asm_exc_page_fault+0x26/0x30
[  537.296698][T31908] RIP: 0033:0x7f9107f2560c
[  537.296719][T31908] Code: 66 0f 1f 44 00 00 69 3d a6 00 e9 00 e8 03 00 00 48 8d 1d a7 09 36 00 e8 42 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  537.296757][T31908] RSP: 002b:00007ffe69ef5490 EFLAGS: 00010206
[  537.296792][T31908] RAX: 0000000000000000 RBX: 00007f9108285fa0 RCX: 0000000000000000
[  537.296810][T31908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558feb3808
[  537.296825][T31908] RBP: 00007f9108287da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  537.296843][T31908] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008331e
[  537.296860][T31908] R13: 00007f9108286180 R14: ffffffffffffffff R15: 00007ffe69ef55a0
[  537.296887][T31908]  </TASK>
[  537.296897][T31908] memory: usage 307200kB, limit 307200kB, failcnt 6184
[  537.305545][T31788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.315411][T31908] memory+swap: usage 311736kB, limit 9007199254740988kB, failcnt 0
[  537.338304][T25185] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.340914][T31908] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  537.345053][T25185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.349376][T31908] Memory cgroup stats for /syz2
[  537.364788][T25185] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.368138][T31908] :
[  537.374090][T25185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.497428][T31908] cache 0
[  537.598518][T31788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.599299][T31908] rss 0
[  537.612099][T31908] shmem 0
[  537.615351][T31908] mapped_file 0
[  537.618928][T31908] dirty 0
[  537.621889][T31908] writeback 4096
[  537.625456][T31908] workingset_refault_anon 294
[  537.630214][T31908] workingset_refault_file 0
[  537.634747][T31908] swap 4644864
[  537.638388][T31908] swapcached 12288
[  537.642149][T31908] pgpgin 578175
[  537.645625][T31908] pgpgout 578169
[  537.649239][T31908] pgfault 557752
[  537.652808][T31908] pgmajfault 125
[  537.656411][T31908] inactive_anon 12288
[  537.660582][T31908] active_anon 0
[  537.664105][T31908] inactive_file 12288
[  537.668241][T31908] active_file 0
[  537.671755][T31908] unevictable 0
[  537.675215][T31908] hierarchical_memory_limit 314572800
[  537.680616][T31908] hierarchical_memsw_limit 9223372036854771712
[  537.686780][T31908] total_cache 0
[  537.690303][T31908] total_rss 0
[  537.693586][T31908] total_shmem 0
[  537.697119][T31908] total_mapped_file 0
[  537.701159][T31908] total_dirty 0
[  537.704704][T31908] total_writeback 4096
[  537.708814][T31908] total_workingset_refault_anon 294
[  537.714026][T31908] total_workingset_refault_file 0
[  537.719104][T31908] total_swap 4644864
[  537.723015][T31908] total_swapcached 12288
[  537.727298][T31908] total_pgpgin 578175
[  537.731296][T31908] total_pgpgout 578169
[  537.735402][T31908] total_pgfault 557752
[  537.739613][T31908] total_pgmajfault 125
[  537.743742][T31908] total_inactive_anon 12288
[  537.748349][T31908] total_active_anon 0
[  537.752337][T31908] total_inactive_file 12288
[  537.756856][T31908] total_active_file 0
[  537.760882][T31908] total_unevictable 0
[  537.764882][T31908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8936,pid=30816,uid=0
[  537.779671][T31908] Memory cgroup out of memory: Killed process 30816 (syz.2.8936) total-vm:98196kB, anon-rss:1068kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[  537.905134][T31788] veth0_vlan: entered promiscuous mode
[  537.935873][T31788] veth1_vlan: entered promiscuous mode
[  537.951270][T31993] netlink: 'syz.5.9364': attribute type 1 has an invalid length.
[  537.963182][T31999] loop7: detected capacity change from 0 to 128
[  537.980720][T31788] veth0_macvtap: entered promiscuous mode
[  538.008343][T31788] veth1_macvtap: entered promiscuous mode
[  538.021891][T31788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.036867][T31788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.048596][T31999] FAULT_INJECTION: forcing a failure.
[  538.048596][T31999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.061774][T31999] CPU: 0 UID: 0 PID: 31999 Comm: syz.7.9367 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  538.061809][T31999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  538.061899][T31999] Call Trace:
[  538.061907][T31999]  <TASK>
[  538.061916][T31999]  __dump_stack+0x1d/0x30
[  538.061943][T31999]  dump_stack_lvl+0xe8/0x140
[  538.061968][T31999]  dump_stack+0x15/0x1b
[  538.061989][T31999]  should_fail_ex+0x265/0x280
[  538.062081][T31999]  should_fail+0xb/0x20
[  538.062107][T31999]  should_fail_usercopy+0x1a/0x20
[  538.062139][T31999]  _copy_from_user+0x1c/0xb0
[  538.062205][T31999]  __sys_bpf+0x178/0x7b0
[  538.062248][T31999]  __x64_sys_bpf+0x41/0x50
[  538.062278][T31999]  x64_sys_call+0x2aea/0x2ff0
[  538.062346][T31999]  do_syscall_64+0xd2/0x200
[  538.062392][T31999]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  538.062424][T31999]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  538.062462][T31999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.062527][T31999] RIP: 0033:0x7f64c8ecebe9
[  538.062565][T31999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.062587][T31999] RSP: 002b:00007f64c7937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.062611][T31999] RAX: ffffffffffffffda RBX: 00007f64c9105fa0 RCX: 00007f64c8ecebe9
[  538.062628][T31999] RDX: 0000000000000014 RSI: 00002000000003c0 RDI: 000000000000001c
[  538.062674][T31999] RBP: 00007f64c7937090 R08: 0000000000000000 R09: 0000000000000000
[  538.062686][T31999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.062697][T31999] R13: 00007f64c9106038 R14: 00007f64c9105fa0 R15: 00007ffc92a49648
[  538.062721][T31999]  </TASK>
[  538.065680][T25185] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.245520][T25185] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.265770][T25185] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.274922][T25185] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.383919][T32028] bridge_slave_1: left allmulticast mode
[  538.389807][T32028] bridge_slave_1: left promiscuous mode
[  538.395791][T32028] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.418391][T32028] bridge_slave_0: left allmulticast mode
[  538.424254][T32028] bridge_slave_0: left promiscuous mode
[  538.430135][T32028] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.451647][T32037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.460408][T32037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.513279][T32035] batadv1: entered promiscuous mode
[  538.518580][T32035] batadv1: entered allmulticast mode
[  538.655481][T32015] syz.5.9374 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  538.666822][T32015] CPU: 1 UID: 0 PID: 32015 Comm: syz.5.9374 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  538.666854][T32015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  538.666868][T32015] Call Trace:
[  538.666875][T32015]  <TASK>
[  538.666883][T32015]  __dump_stack+0x1d/0x30
[  538.666908][T32015]  dump_stack_lvl+0xe8/0x140
[  538.666936][T32015]  dump_stack+0x15/0x1b
[  538.666959][T32015]  dump_header+0x81/0x220
[  538.667037][T32015]  oom_kill_process+0x342/0x400
[  538.667083][T32015]  out_of_memory+0x979/0xb80
[  538.667130][T32015]  try_charge_memcg+0x5e6/0x9e0
[  538.667170][T32015]  charge_memcg+0x51/0xc0
[  538.667277][T32015]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  538.667303][T32015]  __read_swap_cache_async+0x1df/0x350
[  538.667338][T32015]  swap_cluster_readahead+0x376/0x3e0
[  538.667381][T32015]  swapin_readahead+0xde/0x6f0
[  538.667439][T32015]  ? __filemap_get_folio+0x4f7/0x6b0
[  538.667515][T32015]  ? swap_cache_get_folio+0x77/0x200
[  538.667548][T32015]  do_swap_page+0x301/0x2430
[  538.667576][T32015]  ? merge_sched_in+0x605/0xa60
[  538.667604][T32015]  ? rb_next+0x5c/0x80
[  538.667683][T32015]  ? __pfx_default_wake_function+0x10/0x10
[  538.667710][T32015]  handle_mm_fault+0x9a5/0x2c20
[  538.667735][T32015]  ? __rcu_read_unlock+0x4f/0x70
[  538.667768][T32015]  do_user_addr_fault+0x3fe/0x1090
[  538.667889][T32015]  ? rb_insert_color+0x71/0x2b0
[  538.667921][T32015]  exc_page_fault+0x62/0xa0
[  538.667948][T32015]  asm_exc_page_fault+0x26/0x30
[  538.667972][T32015] RIP: 0010:rep_stos_alternative+0x40/0x80
[  538.668017][T32015] Code: c9 75 f6 e9 52 04 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  538.668040][T32015] RSP: 0018:ffffc90003267c88 EFLAGS: 00050246
[  538.668120][T32015] RAX: 0000000000000000 RBX: 00007f629c0c6f84 RCX: 0000000000000040
[  538.668132][T32015] RDX: ffffc9000c6b0000 RSI: 00000000000007e8 RDI: 00007f629c0c6e40
[  538.668193][T32015] RBP: ffff88810241f000 R08: 000188810241efd7 R09: 0000000000000000
[  538.668205][T32015] R10: fffffffffffffe00 R11: 0000000000000002 R12: 00007ffffffff000
[  538.668216][T32015] R13: 00007f629c0c6c40 R14: 00007f629c0c6c40 R15: ffff88810241e300
[  538.668239][T32015]  copy_fpstate_to_sigframe+0xb0/0x7d0
[  538.668280][T32015]  ? _raw_spin_unlock+0x26/0x50
[  538.668363][T32015]  ? posixtimer_deliver_signal+0x2de/0x320
[  538.668396][T32015]  ? dequeue_signal+0x39c/0x3b0
[  538.668427][T32015]  ? x86_task_fpu+0x36/0x60
[  538.668464][T32015]  get_sigframe+0x34d/0x490
[  538.668482][T32015]  ? get_signal+0xdc8/0xf70
[  538.668507][T32015]  x64_setup_rt_frame+0xa8/0x580
[  538.668535][T32015]  arch_do_signal_or_restart+0x27c/0x480
[  538.668593][T32015]  exit_to_user_mode_loop+0x7a/0x100
[  538.668621][T32015]  do_syscall_64+0x1d6/0x200
[  538.668714][T32015]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  538.668741][T32015]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  538.668772][T32015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.668839][T32015] RIP: 0033:0x7f629d65ebe7
[  538.668858][T32015] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  538.668879][T32015] RSP: 002b:00007f629c0c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  538.668896][T32015] RAX: 00000000000000ca RBX: 00007f629d895fa0 RCX: 00007f629d65ebe9
[  538.668989][T32015] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000200000000380
[  538.669002][T32015] RBP: 00007f629d6e1e19 R08: 0000200000048000 R09: 0000000000000300
[  538.669014][T32015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.669026][T32015] R13: 00007f629d896038 R14: 00007f629d895fa0 R15: 00007fff77425238
[  538.669045][T32015]  </TASK>
[  539.032771][T32015] memory: usage 307200kB, limit 307200kB, failcnt 7269
[  539.039989][T32015] memory+swap: usage 291180kB, limit 9007199254740988kB, failcnt 0
[  539.048189][T32015] kmem: usage 270548kB, limit 9007199254740988kB, failcnt 0
[  539.055510][T32015] Memory cgroup stats for /syz5:
[  539.057345][T32015] cache 0
[  539.065262][T32015] rss 28672
[  539.068398][T32015] shmem 0
[  539.071438][T32015] mapped_file 0
[  539.074943][T32015] dirty 0
[  539.077905][T32015] writeback 0
[  539.081197][T32015] workingset_refault_anon 541
[  539.085898][T32015] workingset_refault_file 2259
[  539.090792][T32015] swap 368640
[  539.094084][T32015] swapcached 28672
[  539.098019][T32015] pgpgin 679432
[  539.101692][T32015] pgpgout 679423
[  539.105239][T32015] pgfault 672029
[  539.108814][T32015] pgmajfault 317
[  539.112371][T32015] inactive_anon 28672
[  539.116445][T32015] active_anon 0
[  539.119981][T32015] inactive_file 8192
[  539.123885][T32015] active_file 0
[  539.127380][T32015] unevictable 0
[  539.130852][T32015] hierarchical_memory_limit 314572800
[  539.136277][T32015] hierarchical_memsw_limit 9223372036854771712
[  539.142467][T32015] total_cache 0
[  539.145936][T32015] total_rss 28672
[  539.149597][T32015] total_shmem 0
[  539.153062][T32015] total_mapped_file 0
[  539.157140][T32015] total_dirty 0
[  539.160652][T32015] total_writeback 0
[  539.164458][T32015] total_workingset_refault_anon 541
[  539.169728][T32015] total_workingset_refault_file 2259
[  539.175014][T32015] total_swap 368640
[  539.178890][T32015] total_swapcached 28672
[  539.183223][T32015] total_pgpgin 679432
[  539.187249][T32015] total_pgpgout 679423
[  539.187279][T32015] total_pgfault 672029
[  539.187286][T32015] total_pgmajfault 317
[  539.187293][T32015] total_inactive_anon 28672
[  539.187305][T32015] total_active_anon 0
[  539.187315][T32015] total_inactive_file 8192
[  539.187344][T32015] total_active_file 0
[  539.187354][T32015] total_unevictable 0
[  539.187366][T32015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9374,pid=32014,uid=0
[  539.236826][T32015] Memory cgroup out of memory: Killed process 32014 (syz.5.9374) total-vm:93960kB, anon-rss:1008kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  539.346441][T32057] __nla_validate_parse: 8 callbacks suppressed
[  539.346472][T32057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9386'.
[  539.368065][T32055] loop3: detected capacity change from 0 to 1024
[  539.369714][T32059] FAULT_INJECTION: forcing a failure.
[  539.369714][T32059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.387636][T32059] CPU: 1 UID: 0 PID: 32059 Comm: syz.7.9390 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  539.387669][T32059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  539.387684][T32059] Call Trace:
[  539.387692][T32059]  <TASK>
[  539.387709][T32059]  __dump_stack+0x1d/0x30
[  539.387788][T32059]  dump_stack_lvl+0xe8/0x140
[  539.387814][T32059]  dump_stack+0x15/0x1b
[  539.387836][T32059]  should_fail_ex+0x265/0x280
[  539.387885][T32059]  should_fail+0xb/0x20
[  539.387912][T32059]  should_fail_usercopy+0x1a/0x20
[  539.387992][T32059]  _copy_to_user+0x20/0xa0
[  539.388030][T32059]  simple_read_from_buffer+0xb5/0x130
[  539.388060][T32059]  proc_fail_nth_read+0x10e/0x150
[  539.388092][T32059]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  539.388171][T32059]  vfs_read+0x1a5/0x770
[  539.388270][T32059]  ? __rcu_read_unlock+0x4f/0x70
[  539.388300][T32059]  ? __fget_files+0x184/0x1c0
[  539.388336][T32059]  ksys_read+0xda/0x1a0
[  539.388366][T32059]  __x64_sys_read+0x40/0x50
[  539.388551][T32059]  x64_sys_call+0x27bc/0x2ff0
[  539.388573][T32059]  do_syscall_64+0xd2/0x200
[  539.388644][T32059]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  539.388675][T32059]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  539.388731][T32059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.388761][T32059] RIP: 0033:0x7f64c8ecd5fc
[  539.388792][T32059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  539.388816][T32059] RSP: 002b:00007f64c7937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  539.388908][T32059] RAX: ffffffffffffffda RBX: 00007f64c9105fa0 RCX: 00007f64c8ecd5fc
[  539.388924][T32059] RDX: 000000000000000f RSI: 00007f64c79370a0 RDI: 0000000000000005
[  539.388940][T32059] RBP: 00007f64c7937090 R08: 0000000000000000 R09: 0000000000000000
[  539.388956][T32059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.388971][T32059] R13: 00007f64c9106038 R14: 00007f64c9105fa0 R15: 00007ffc92a49648
[  539.388996][T32059]  </TASK>
[  539.632016][T32067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.635042][T32069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9394'.
[  539.640863][T32067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.686715][T32074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9394'.
[  539.800004][T32090] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9403'.
[  539.813191][T32090] batadv1: entered promiscuous mode
[  539.818866][T32090] batadv1: entered allmulticast mode
[  539.843041][T32095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9405'.
[  539.999903][T32099] vhci_hcd: invalid port number 96
[  540.005211][T32099] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  540.009526][T32103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9408'.
[  540.034419][T32103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9408'.
[  540.133967][T32114] pimreg: entered allmulticast mode
[  540.140154][T32114] pimreg: left allmulticast mode
[  540.182686][T32075] syz.7.9396 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  540.194177][T32075] CPU: 1 UID: 0 PID: 32075 Comm: syz.7.9396 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  540.194289][T32075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  540.194306][T32075] Call Trace:
[  540.194313][T32075]  <TASK>
[  540.194322][T32075]  __dump_stack+0x1d/0x30
[  540.194349][T32075]  dump_stack_lvl+0xe8/0x140
[  540.194373][T32075]  dump_stack+0x15/0x1b
[  540.194395][T32075]  dump_header+0x81/0x220
[  540.194451][T32075]  oom_kill_process+0x342/0x400
[  540.194490][T32075]  out_of_memory+0x979/0xb80
[  540.194555][T32075]  try_charge_memcg+0x5e6/0x9e0
[  540.194590][T32075]  charge_memcg+0x51/0xc0
[  540.194612][T32075]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  540.194718][T32075]  __read_swap_cache_async+0x1df/0x350
[  540.194761][T32075]  swap_cluster_readahead+0x277/0x3e0
[  540.194826][T32075]  swapin_readahead+0xde/0x6f0
[  540.194873][T32075]  ? __filemap_get_folio+0x4f7/0x6b0
[  540.194989][T32075]  ? swap_cache_get_folio+0x77/0x200
[  540.195067][T32075]  do_swap_page+0x301/0x2430
[  540.195093][T32075]  ? merge_sched_in+0x605/0xa60
[  540.195119][T32075]  ? rb_next+0x5c/0x80
[  540.195155][T32075]  ? __pfx_default_wake_function+0x10/0x10
[  540.195245][T32075]  handle_mm_fault+0x9a5/0x2c20
[  540.195292][T32075]  ? __rcu_read_unlock+0x4f/0x70
[  540.195330][T32075]  do_user_addr_fault+0x3fe/0x1090
[  540.195370][T32075]  ? rb_insert_color+0x277/0x2b0
[  540.195491][T32075]  exc_page_fault+0x62/0xa0
[  540.195518][T32075]  asm_exc_page_fault+0x26/0x30
[  540.195544][T32075] RIP: 0010:rep_stos_alternative+0x40/0x80
[  540.195578][T32075] Code: c9 75 f6 e9 52 04 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  540.195661][T32075] RSP: 0018:ffffc90001fefc88 EFLAGS: 00050246
[  540.195677][T32075] RAX: 0000000000000000 RBX: 00007f64c7936f84 RCX: 0000000000000040
[  540.195689][T32075] RDX: ffffc900054e7000 RSI: 0000000000000931 RDI: 00007f64c7936e40
[  540.195701][T32075] RBP: ffff888102440d00 R08: 0001888102440cd7 R09: 0000000000000000
[  540.195715][T32075] R10: fffffffffffffe00 R11: 0000000000000002 R12: 00007ffffffff000
[  540.195791][T32075] R13: 00007f64c7936c40 R14: 00007f64c7936c40 R15: ffff888102440000
[  540.195838][T32075]  copy_fpstate_to_sigframe+0xb0/0x7d0
[  540.195881][T32075]  ? _raw_spin_unlock+0x26/0x50
[  540.195902][T32075]  ? posixtimer_deliver_signal+0x2de/0x320
[  540.196009][T32075]  ? dequeue_signal+0x39c/0x3b0
[  540.196044][T32075]  ? x86_task_fpu+0x36/0x60
[  540.196079][T32075]  get_sigframe+0x34d/0x490
[  540.196098][T32075]  ? get_signal+0xdc8/0xf70
[  540.196119][T32075]  x64_setup_rt_frame+0xa8/0x580
[  540.196141][T32075]  arch_do_signal_or_restart+0x27c/0x480
[  540.196173][T32075]  exit_to_user_mode_loop+0x7a/0x100
[  540.196200][T32075]  do_syscall_64+0x1d6/0x200
[  540.196239][T32075]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  540.196325][T32075]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  540.196362][T32075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.196465][T32075] RIP: 0033:0x7f64c8ecebe7
[  540.196483][T32075] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  540.196581][T32075] RSP: 002b:00007f64c7937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  540.196603][T32075] RAX: 00000000000000ca RBX: 00007f64c9105fa0 RCX: 00007f64c8ecebe9
[  540.196619][T32075] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000200000000380
[  540.196640][T32075] RBP: 00007f64c8f51e19 R08: 0000200000048000 R09: 0000000000000300
[  540.196740][T32075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.196754][T32075] R13: 00007f64c9106038 R14: 00007f64c9105fa0 R15: 00007ffc92a49648
[  540.196777][T32075]  </TASK>
[  540.196871][T32075] memory: usage 304600kB, limit 307200kB, failcnt 2560
[  540.250062][T32116] loop5: detected capacity change from 0 to 8192
[  540.250767][T32075] memory+swap: usage 234064kB, limit 9007199254740988kB, failcnt 0
[  540.565976][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9416'.
[  540.571599][T32075] kmem: usage 98100kB, limit 9007199254740988kB, failcnt 0
[  540.602809][T32075] Memory cgroup stats for /syz7:
[  540.604236][T32075] cache 0
[  540.612803][T32075] rss 110592
[  540.616035][T32075] shmem 0
[  540.619116][T32075] mapped_file 0
[  540.622611][T32075] dirty 0
[  540.625559][T32075] writeback 32768
[  540.629307][T32075] workingset_refault_anon 406
[  540.633999][T32075] workingset_refault_file 0
[  540.638527][T32075] swap 90112
[  540.641732][T32075] swapcached 143360
[  540.645561][T32075] pgpgin 419263
[  540.649226][T32075] pgpgout 419226
[  540.652822][T32075] pgfault 506858
[  540.656400][T32075] pgmajfault 168
[  540.659983][T32075] inactive_anon 45056
[  540.664233][T32075] active_anon 98304
[  540.668074][T32075] inactive_file 8192
[  540.671987][T32075] active_file 0
[  540.675521][T32075] unevictable 0
[  540.679017][T32075] hierarchical_memory_limit 314572800
[  540.684436][T32075] hierarchical_memsw_limit 9223372036854771712
[  540.690654][T32075] total_cache 0
[  540.694130][T32075] total_rss 110592
[  540.698011][T32075] total_shmem 0
[  540.699948][T32125] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9418'.
[  540.701659][T32075] total_mapped_file 0
[  540.714419][T32075] total_dirty 0
[  540.717935][T32075] total_writeback 32768
[  540.722102][T32075] total_workingset_refault_anon 406
[  540.727324][T32075] total_workingset_refault_file 0
[  540.732382][T32075] total_swap 90112
[  540.736115][T32075] total_swapcached 143360
[  540.740621][T32075] total_pgpgin 419263
[  540.744609][T32075] total_pgpgout 419226
[  540.748814][T32075] total_pgfault 506858
[  540.753030][T32075] total_pgmajfault 168
[  540.755626][T32125] batadv1: entered promiscuous mode
[  540.757241][T32075] total_inactive_anon 45056
[  540.762412][T32125] batadv1: entered allmulticast mode
[  540.767002][T32075] total_active_anon 98304
[  540.776655][T32075] total_inactive_file 8192
[  540.781277][T32075] total_active_file 0
[  540.785276][T32075] total_unevictable 0
[  540.789297][T32075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.9396,pid=32073,uid=0
[  540.804201][T32075] Memory cgroup out of memory: Killed process 32073 (syz.7.9396) total-vm:93960kB, anon-rss:1008kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  540.824496][T32128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9419'.
[  540.995286][T32143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.010851][T32143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.023163][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  541.023628][   T29] audit: type=1326 audit(548.991:42743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.069555][T32147] syzkaller0: refused to change device tx_queue_len
[  541.074606][   T29] audit: type=1326 audit(549.031:42744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.099653][   T29] audit: type=1326 audit(549.031:42745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.122865][   T29] audit: type=1326 audit(549.031:42746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.145916][   T29] audit: type=1326 audit(549.041:42747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.168936][   T29] audit: type=1326 audit(549.041:42748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.192060][   T29] audit: type=1326 audit(549.041:42749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.215226][   T29] audit: type=1326 audit(549.041:42750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.238360][   T29] audit: type=1326 audit(549.041:42751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.261551][   T29] audit: type=1326 audit(549.041:42752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.3.9425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  541.293060][T32152] FAULT_INJECTION: forcing a failure.
[  541.293060][T32152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.306269][T32152] CPU: 1 UID: 0 PID: 32152 Comm: syz.2.9430 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  541.306299][T32152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  541.306311][T32152] Call Trace:
[  541.306317][T32152]  <TASK>
[  541.306384][T32152]  __dump_stack+0x1d/0x30
[  541.306406][T32152]  dump_stack_lvl+0xe8/0x140
[  541.306431][T32152]  dump_stack+0x15/0x1b
[  541.306453][T32152]  should_fail_ex+0x265/0x280
[  541.306484][T32152]  should_fail+0xb/0x20
[  541.306542][T32152]  should_fail_usercopy+0x1a/0x20
[  541.306575][T32152]  _copy_from_user+0x1c/0xb0
[  541.306616][T32152]  io_submit_one+0x52/0x11d0
[  541.306737][T32152]  __se_sys_io_submit+0xfb/0x280
[  541.306773][T32152]  __x64_sys_io_submit+0x43/0x50
[  541.306805][T32152]  x64_sys_call+0x2d5d/0x2ff0
[  541.306830][T32152]  do_syscall_64+0xd2/0x200
[  541.306863][T32152]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  541.306894][T32152]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  541.306922][T32152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.306960][T32152] RIP: 0033:0x7f910804ebe9
[  541.306980][T32152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.307017][T32152] RSP: 002b:00007f9106aaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  541.307045][T32152] RAX: ffffffffffffffda RBX: 00007f9108285fa0 RCX: 00007f910804ebe9
[  541.307060][T32152] RDX: 0000200000000240 RSI: 0000000000000002 RDI: 00007f9108dc3000
[  541.307074][T32152] RBP: 00007f9106aaf090 R08: 0000000000000000 R09: 0000000000000000
[  541.307086][T32152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.307098][T32152] R13: 00007f9108286038 R14: 00007f9108285fa0 R15: 00007ffe69ef5328
[  541.307117][T32152]  </TASK>
[  541.583672][T32173] batadv1: entered promiscuous mode
[  541.589295][T32173] batadv1: entered allmulticast mode
[  541.773445][T32186] loop7: detected capacity change from 0 to 128
[  541.786900][T31788] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  541.798152][T31788] CPU: 0 UID: 0 PID: 31788 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  541.798180][T31788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  541.798275][T31788] Call Trace:
[  541.798283][T31788]  <TASK>
[  541.798291][T31788]  __dump_stack+0x1d/0x30
[  541.798355][T31788]  dump_stack_lvl+0xe8/0x140
[  541.798375][T31788]  dump_stack+0x15/0x1b
[  541.798391][T31788]  dump_header+0x81/0x220
[  541.798424][T31788]  oom_kill_process+0x342/0x400
[  541.798519][T31788]  out_of_memory+0x979/0xb80
[  541.798557][T31788]  try_charge_memcg+0x5e6/0x9e0
[  541.798648][T31788]  charge_memcg+0x51/0xc0
[  541.798669][T31788]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  541.798693][T31788]  __read_swap_cache_async+0x1df/0x350
[  541.798728][T31788]  swap_cluster_readahead+0x277/0x3e0
[  541.798875][T31788]  swapin_readahead+0xde/0x6f0
[  541.798938][T31788]  ? __filemap_get_folio+0x4f7/0x6b0
[  541.798981][T31788]  ? rb_next+0x37/0x80
[  541.799089][T31788]  ? swap_cache_get_folio+0x77/0x200
[  541.799122][T31788]  do_swap_page+0x301/0x2430
[  541.799180][T31788]  ? finish_task_switch+0xad/0x2b0
[  541.799205][T31788]  ? __pfx_default_wake_function+0x10/0x10
[  541.799238][T31788]  handle_mm_fault+0x9a5/0x2c20
[  541.799280][T31788]  do_user_addr_fault+0x636/0x1090
[  541.799376][T31788]  ? fpregs_restore_userregs+0xe2/0x1d0
[  541.799409][T31788]  ? switch_fpu_return+0xe/0x20
[  541.799436][T31788]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  541.799462][T31788]  exc_page_fault+0x62/0xa0
[  541.799553][T31788]  asm_exc_page_fault+0x26/0x30
[  541.799576][T31788] RIP: 0033:0x7f360c3a1465
[  541.799596][T31788] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  541.799618][T31788] RSP: 002b:00007ffd6bad1e88 EFLAGS: 00010246
[  541.799637][T31788] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f360c3a1463
[  541.799649][T31788] RDX: 00007ffd6bad1ea0 RSI: 0000000000000000 RDI: 0000000000000000
[  541.799661][T31788] RBP: 00007ffd6bad1f0c R08: 000000002a4b1a97 R09: 0000000000000000
[  541.799673][T31788] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  541.799686][T31788] R13: 00000000000927c0 R14: 0000000000084317 R15: 00007ffd6bad1f60
[  541.799735][T31788]  </TASK>
[  541.799744][T31788] memory: usage 307200kB, limit 307200kB, failcnt 1239
[  542.031910][T31788] memory+swap: usage 168776kB, limit 9007199254740988kB, failcnt 0
[  542.039968][T31788] kmem: usage 162904kB, limit 9007199254740988kB, failcnt 0
[  542.047386][T31788] Memory cgroup stats for /syz9:
[  542.048165][T31788] cache 0
[  542.056112][T31788] rss 32768
[  542.059251][T31788] shmem 0
[  542.062257][T31788] mapped_file 0
[  542.065760][T31788] dirty 0
[  542.068807][T31788] writeback 28672
[  542.072454][T31788] workingset_refault_anon 1602
[  542.077252][T31788] workingset_refault_file 69
[  542.081877][T31788] swap 159744
[  542.085239][T31788] swapcached 57344
[  542.089057][T31788] pgpgin 442482
[  542.092571][T31788] pgpgout 442463
[  542.096227][T31788] pgfault 463124
[  542.099849][T31788] pgmajfault 244
[  542.103515][T31788] inactive_anon 28672
[  542.107538][T31788] active_anon 32768
[  542.111353][T31788] inactive_file 16384
[  542.115484][T31788] active_file 0
[  542.119018][T31788] unevictable 0
[  542.122532][T31788] hierarchical_memory_limit 314572800
[  542.128043][T31788] hierarchical_memsw_limit 9223372036854771712
[  542.134257][T31788] total_cache 0
[  542.137771][T31788] total_rss 32768
[  542.141417][T31788] total_shmem 0
[  542.144884][T31788] total_mapped_file 0
[  542.148956][T31788] total_dirty 0
[  542.152456][T31788] total_writeback 28672
[  542.156634][T31788] total_workingset_refault_anon 1602
[  542.161976][T31788] total_workingset_refault_file 69
[  542.167160][T31788] total_swap 159744
[  542.170974][T31788] total_swapcached 57344
[  542.175222][T31788] total_pgpgin 442482
[  542.179268][T31788] total_pgpgout 442463
[  542.183364][T31788] total_pgfault 463124
[  542.187513][T31788] total_pgmajfault 244
[  542.191615][T31788] total_inactive_anon 28672
[  542.196136][T31788] total_active_anon 32768
[  542.200519][T31788] total_inactive_file 16384
[  542.205123][T31788] total_active_file 0
[  542.209137][T31788] total_unevictable 0
[  542.213300][T31788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9431,pid=32153,uid=0
[  542.228107][T31788] Memory cgroup out of memory: Killed process 32153 (syz.9.9431) total-vm:98124kB, anon-rss:1004kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  542.252199][T32186] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  542.711989][T30830] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  542.731613][T32218] netlink: 'syz.5.9452': attribute type 1 has an invalid length.
[  542.796560][T32220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.825800][T32220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.842696][T32222] batadv1: entered promiscuous mode
[  542.848040][T32222] batadv1: entered allmulticast mode
[  543.369584][T32237] netlink: 'syz.2.9460': attribute type 1 has an invalid length.
[  543.450836][T32248] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  543.581806][T32254] SELinux: ebitmap: truncated map
[  543.597191][T32254] SELinux: failed to load policy
[  543.625385][T32254] loop3: detected capacity change from 0 to 512
[  543.673391][T32254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.838201][T32254] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.9468: corrupted inode contents
[  543.858855][T32275] loop7: detected capacity change from 0 to 512
[  543.875415][T32254] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.9468: mark_inode_dirty error
[  543.902428][T32254] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.9468: corrupted inode contents
[  543.918455][T32275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.931255][T32254] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.9468: mark_inode_dirty error
[  543.961011][T32254] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.9468: mark inode dirty (error -117)
[  543.975075][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.989842][T32254] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  543.999389][T32273] 9pnet_fd: Insufficient options for proto=fd
[  544.023007][T32279] netlink: 'syz.7.9478': attribute type 1 has an invalid length.
[  544.073719][T31270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.217746][T32295] netlink: 'syz.3.9485': attribute type 1 has an invalid length.
[  544.262972][T32297] batadv1: entered promiscuous mode
[  544.268404][T32297] batadv1: entered allmulticast mode
[  544.288350][T32295] bridge_slave_1: left allmulticast mode
[  544.294075][T32295] bridge_slave_1: left promiscuous mode
[  544.296485][T32301] SELinux: ebitmap: truncated map
[  544.299901][T32295] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.310461][T32301] SELinux: failed to load policy
[  544.331240][T32301] loop9: detected capacity change from 0 to 512
[  544.347823][T32295] bridge_slave_0: left allmulticast mode
[  544.353695][T32295] bridge_slave_0: left promiscuous mode
[  544.359518][T32295] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.378676][T32301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.460789][T32311] netlink: 'syz.7.9492': attribute type 1 has an invalid length.
[  544.488763][T32301] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.9488: corrupted inode contents
[  544.525733][T32316] FAULT_INJECTION: forcing a failure.
[  544.525733][T32316] name failslab, interval 1, probability 0, space 0, times 0
[  544.526350][T32301] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #18: comm syz.9.9488: mark_inode_dirty error
[  544.539154][T32316] CPU: 1 UID: 0 PID: 32316 Comm: syz.3.9494 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  544.539268][T32316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  544.539285][T32316] Call Trace:
[  544.539297][T32316]  <TASK>
[  544.539308][T32316]  __dump_stack+0x1d/0x30
[  544.539340][T32316]  dump_stack_lvl+0xe8/0x140
[  544.539392][T32316]  dump_stack+0x15/0x1b
[  544.539415][T32316]  should_fail_ex+0x265/0x280
[  544.539463][T32316]  should_failslab+0x8c/0xb0
[  544.539499][T32316]  kmem_cache_alloc_noprof+0x50/0x310
[  544.539537][T32316]  ? fcntl_getlk+0x3d/0x6e0
[  544.539608][T32316]  fcntl_getlk+0x3d/0x6e0
[  544.539716][T32316]  ? should_fail_ex+0xdb/0x280
[  544.539750][T32316]  do_fcntl+0x6d5/0xdf0
[  544.539799][T32316]  ? selinux_file_fcntl+0x1cb/0x1e0
[  544.539833][T32316]  __se_sys_fcntl+0xb1/0x120
[  544.539876][T32316]  __x64_sys_fcntl+0x43/0x50
[  544.539963][T32316]  x64_sys_call+0x29a0/0x2ff0
[  544.540044][T32316]  do_syscall_64+0xd2/0x200
[  544.540087][T32316]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  544.540120][T32316]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  544.540151][T32316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.540189][T32316] RIP: 0033:0x7ff8ce13ebe9
[  544.540247][T32316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  544.540273][T32316] RSP: 002b:00007ff8ccb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  544.540299][T32316] RAX: ffffffffffffffda RBX: 00007ff8ce375fa0 RCX: 00007ff8ce13ebe9
[  544.540317][T32316] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000006
[  544.540334][T32316] RBP: 00007ff8ccb9f090 R08: 0000000000000000 R09: 0000000000000000
[  544.540352][T32316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.540369][T32316] R13: 00007ff8ce376038 R14: 00007ff8ce375fa0 R15: 00007ffea97e8d78
[  544.540415][T32316]  </TASK>
[  544.665910][T32324] __nla_validate_parse: 19 callbacks suppressed
[  544.665930][T32324] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9496'.
[  544.752564][T32321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9496'.
[  544.766131][T32301] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.9488: corrupted inode contents
[  544.781432][T32301] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #18: comm syz.9.9488: mark_inode_dirty error
[  544.817758][T32301] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #18: comm syz.9.9488: mark inode dirty (error -117)
[  544.840831][T32301] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117)
[  544.851736][T32313] 9pnet_fd: Insufficient options for proto=fd
[  544.863202][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9499'.
[  544.887263][T32326] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9497'.
[  544.922604][T32336] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9502'.
[  544.935540][T31788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.953983][T32336] batadv1: entered promiscuous mode
[  544.959585][T32336] batadv1: entered allmulticast mode
[  545.169520][T32353] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  545.277054][T32361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9512'.
[  545.402296][T32365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9515'.
[  545.516475][T32382] FAULT_INJECTION: forcing a failure.
[  545.516475][T32382] name failslab, interval 1, probability 0, space 0, times 0
[  545.529461][T32382] CPU: 1 UID: 0 PID: 32382 Comm: syz.7.9513 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  545.529496][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  545.529513][T32382] Call Trace:
[  545.529520][T32382]  <TASK>
[  545.529529][T32382]  __dump_stack+0x1d/0x30
[  545.529555][T32382]  dump_stack_lvl+0xe8/0x140
[  545.529580][T32382]  dump_stack+0x15/0x1b
[  545.529657][T32382]  should_fail_ex+0x265/0x280
[  545.529688][T32382]  should_failslab+0x8c/0xb0
[  545.529719][T32382]  kmem_cache_alloc_noprof+0x50/0x310
[  545.529756][T32382]  ? alloc_empty_file+0x76/0x200
[  545.529813][T32382]  alloc_empty_file+0x76/0x200
[  545.529846][T32382]  path_openat+0x68/0x2170
[  545.529886][T32382]  ? bloom_map_peek_elem+0xb7/0xd0
[  545.529934][T32382]  ? __rcu_read_unlock+0x4f/0x70
[  545.529962][T32382]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  545.530003][T32382]  ? _raw_spin_unlock+0x26/0x50
[  545.530033][T32382]  do_filp_open+0x109/0x230
[  545.530065][T32382]  do_sys_openat2+0xa6/0x110
[  545.530098][T32382]  __x64_sys_creat+0x65/0x90
[  545.530206][T32382]  x64_sys_call+0x2d94/0x2ff0
[  545.530234][T32382]  do_syscall_64+0xd2/0x200
[  545.530274][T32382]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  545.530367][T32382]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  545.530405][T32382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.530433][T32382] RIP: 0033:0x7f64c8ecebe9
[  545.530451][T32382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.530530][T32382] RSP: 002b:00007f64c78f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  545.530549][T32382] RAX: ffffffffffffffda RBX: 00007f64c9106180 RCX: 00007f64c8ecebe9
[  545.530561][T32382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  545.530575][T32382] RBP: 00007f64c78f5090 R08: 0000000000000000 R09: 0000000000000000
[  545.530591][T32382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.530607][T32382] R13: 00007f64c9106218 R14: 00007f64c9106180 R15: 00007ffc92a49648
[  545.530706][T32382]  </TASK>
[  545.822876][T32385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9520'.
[  546.515728][T32409] netlink: 3 bytes leftover after parsing attributes in process `syz.7.9529'.
[  546.531481][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9530'.
[  546.544165][T32409] batadv1: entered promiscuous mode
[  546.549491][T32409] batadv1: entered allmulticast mode
[  546.561276][   T29] kauditd_printk_skb: 350 callbacks suppressed
[  546.561293][   T29] audit: type=1400 audit(554.531:43103): avc:  denied  { write } for  pid=32397 comm="syz.3.9526" name="igmp" dev="proc" ino=4026533003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  546.734292][T32417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.757417][T32417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.792908][   T29] audit: type=1326 audit(554.761:43104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32420 comm="syz.7.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c8ecebe9 code=0x7ffc0000
[  546.816058][   T29] audit: type=1326 audit(554.761:43105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32420 comm="syz.7.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c8ecebe9 code=0x7ffc0000
[  546.839139][   T29] audit: type=1326 audit(554.761:43106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32420 comm="syz.7.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f64c8ecebe9 code=0x7ffc0000
[  546.871075][   T29] audit: type=1326 audit(554.841:43107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  546.894436][   T29] audit: type=1326 audit(554.841:43108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  546.917577][   T29] audit: type=1326 audit(554.841:43109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  546.940675][   T29] audit: type=1326 audit(554.841:43110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  546.964125][   T29] audit: type=1326 audit(554.841:43111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  546.987176][   T29] audit: type=1326 audit(554.841:43112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.2.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910804ebe9 code=0x7ffc0000
[  547.045208][T32426] pim6reg1: entered promiscuous mode
[  547.103648][T32434] FAULT_INJECTION: forcing a failure.
[  547.103648][T32434] name failslab, interval 1, probability 0, space 0, times 0
[  547.116343][T32434] CPU: 0 UID: 0 PID: 32434 Comm: syz.5.9539 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  547.116378][T32434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  547.116390][T32434] Call Trace:
[  547.116440][T32434]  <TASK>
[  547.116451][T32434]  __dump_stack+0x1d/0x30
[  547.116477][T32434]  dump_stack_lvl+0xe8/0x140
[  547.116559][T32434]  dump_stack+0x15/0x1b
[  547.116579][T32434]  should_fail_ex+0x265/0x280
[  547.116648][T32434]  should_failslab+0x8c/0xb0
[  547.116681][T32434]  kmem_cache_alloc_node_noprof+0x57/0x320
[  547.116768][T32434]  ? __alloc_skb+0x101/0x320
[  547.116797][T32434]  __alloc_skb+0x101/0x320
[  547.116825][T32434]  netlink_alloc_large_skb+0xba/0xf0
[  547.116854][T32434]  netlink_sendmsg+0x3cf/0x6b0
[  547.116890][T32434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  547.116986][T32434]  __sock_sendmsg+0x142/0x180
[  547.117039][T32434]  ____sys_sendmsg+0x31e/0x4e0
[  547.117127][T32434]  ___sys_sendmsg+0x17b/0x1d0
[  547.117182][T32434]  __x64_sys_sendmsg+0xd4/0x160
[  547.117221][T32434]  x64_sys_call+0x191e/0x2ff0
[  547.117322][T32434]  do_syscall_64+0xd2/0x200
[  547.117361][T32434]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  547.117400][T32434]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  547.117457][T32434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.117483][T32434] RIP: 0033:0x7f629d65ebe9
[  547.117502][T32434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  547.117526][T32434] RSP: 002b:00007f629c0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  547.117550][T32434] RAX: ffffffffffffffda RBX: 00007f629d895fa0 RCX: 00007f629d65ebe9
[  547.117566][T32434] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  547.117582][T32434] RBP: 00007f629c0c7090 R08: 0000000000000000 R09: 0000000000000000
[  547.117647][T32434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.117659][T32434] R13: 00007f629d896038 R14: 00007f629d895fa0 R15: 00007fff77425238
[  547.117678][T32434]  </TASK>
[  547.423346][ T3413] IPVS: starting estimator thread 0...
[  547.440129][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.447980][T32456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.455979][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.463412][T32456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  547.517292][T32454] IPVS: using max 1920 ests per chain, 96000 per kthread
[  547.663352][T32477] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in;
[  547.663352][T32477]    program syz.7.9557 not setting count and/or reply_len properly
[  547.757920][T32484] netlink: 'syz.9.9559': attribute type 1 has an invalid length.
[  547.862160][T32495] batadv1: entered promiscuous mode
[  547.867579][T32495] batadv1: entered allmulticast mode
[  547.905129][T32497] serio: Serial port ptm0
[  548.014729][T32504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.044761][T32504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.339106][T32518] netlink: 'syz.3.9571': attribute type 1 has an invalid length.
[  548.654546][T32544] netlink: 'syz.9.9582': attribute type 1 has an invalid length.
[  548.736872][T32548] SELinux: ebitmap: truncated map
[  548.745228][T32548] SELinux: failed to load policy
[  548.754461][T32548] loop9: detected capacity change from 0 to 512
[  548.777908][T32548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.799381][T32555] loop5: detected capacity change from 0 to 512
[  548.839915][T32555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.881116][T32561] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.9584: corrupted inode contents
[  548.910698][T32561] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #18: comm syz.9.9584: mark_inode_dirty error
[  548.951574][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.979510][T32561] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.9584: corrupted inode contents
[  548.995526][T32561] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #18: comm syz.9.9584: mark_inode_dirty error
[  549.013277][T32564] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  549.013418][T32561] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #18: comm syz.9.9584: mark inode dirty (error -117)
[  549.033133][T32564] SELinux: failed to load policy
[  549.042253][T32561] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117)
[  549.052409][T32548] 9pnet_fd: Insufficient options for proto=fd
[  549.063242][T32566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.071801][T32564] loop7: detected capacity change from 0 to 512
[  549.080810][T32566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.091192][T32564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.127297][T31788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.187233][T32564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9589: corrupted inode contents
[  549.199338][T32564] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.9589: mark_inode_dirty error
[  549.212100][T32564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.9589: corrupted inode contents
[  549.224086][T32564] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.9589: mark_inode_dirty error
[  549.236439][T32564] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.9589: mark inode dirty (error -117)
[  549.251132][T32564] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  549.261273][T32572] 9pnet_fd: Insufficient options for proto=fd
[  549.290153][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.346197][T32578] FAULT_INJECTION: forcing a failure.
[  549.346197][T32578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.359666][T32578] CPU: 0 UID: 0 PID: 32578 Comm: syz.7.9593 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  549.359700][T32578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  549.359716][T32578] Call Trace:
[  549.359722][T32578]  <TASK>
[  549.359729][T32578]  __dump_stack+0x1d/0x30
[  549.359750][T32578]  dump_stack_lvl+0xe8/0x140
[  549.359820][T32578]  dump_stack+0x15/0x1b
[  549.359840][T32578]  should_fail_ex+0x265/0x280
[  549.359872][T32578]  should_fail+0xb/0x20
[  549.359973][T32578]  should_fail_usercopy+0x1a/0x20
[  549.360058][T32578]  _copy_from_user+0x1c/0xb0
[  549.360098][T32578]  kstrtouint_from_user+0x69/0xf0
[  549.360199][T32578]  ? 0xffffffff81000000
[  549.360216][T32578]  ? selinux_file_permission+0x1e4/0x320
[  549.360246][T32578]  proc_fail_nth_write+0x50/0x160
[  549.360281][T32578]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  549.360337][T32578]  vfs_write+0x266/0x960
[  549.360432][T32578]  ? vfs_read+0x4e6/0x770
[  549.360455][T32578]  ? __rcu_read_unlock+0x4f/0x70
[  549.360483][T32578]  ? __fget_files+0x184/0x1c0
[  549.360558][T32578]  ? __sys_setsockopt+0x18e/0x200
[  549.360590][T32578]  ksys_write+0xda/0x1a0
[  549.360621][T32578]  __x64_sys_write+0x40/0x50
[  549.360645][T32578]  x64_sys_call+0x27fe/0x2ff0
[  549.360746][T32578]  do_syscall_64+0xd2/0x200
[  549.360827][T32578]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  549.360860][T32578]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  549.360898][T32578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.361005][T32578] RIP: 0033:0x7f64c8ecd69f
[  549.361020][T32578] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  549.361038][T32578] RSP: 002b:00007f64c7937030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  549.361060][T32578] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64c8ecd69f
[  549.361075][T32578] RDX: 0000000000000001 RSI: 00007f64c79370a0 RDI: 0000000000000004
[  549.361090][T32578] RBP: 00007f64c7937090 R08: 0000000000000000 R09: 0000000000000000
[  549.361105][T32578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  549.361119][T32578] R13: 00007f64c9106038 R14: 00007f64c9105fa0 R15: 00007ffc92a49648
[  549.361175][T32578]  </TASK>
[  549.643895][T32584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.654356][T32584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.689482][T32591] loop7: detected capacity change from 0 to 512
[  549.703409][T32584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.714110][T32584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.719488][T32591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.749758][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.780317][T32584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.790760][T32584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.852683][T32584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.863254][T32584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.931630][T32609] netlink: 'syz.9.9600': attribute type 10 has an invalid length.
[  549.948336][T32608] netlink: 'syz.5.9604': attribute type 1 has an invalid length.
[  549.959489][T25197] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  549.967826][T25197] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.976103][T32609] team0: Device dummy0 is up. Set it down before adding it as a team port
[  549.976570][T32608] __nla_validate_parse: 15 callbacks suppressed
[  549.976588][T32608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9604'.
[  550.000582][T25197] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  550.008809][T25197] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.024741][T25197] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  550.033055][T25197] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.044332][T25197] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  550.052678][T25197] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.085225][T32612] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9605'.
[  550.100021][T32612] batadv0: entered promiscuous mode
[  550.105315][T32612] batadv0: entered allmulticast mode
[  550.125184][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9606'.
[  550.211098][T32620] pim6reg1: entered promiscuous mode
[  550.399175][T32630] syzkaller0: entered promiscuous mode
[  550.404706][T32630] syzkaller0: entered allmulticast mode
[  550.527941][T32635] netlink: 'syz.5.9614': attribute type 1 has an invalid length.
[  550.536191][T32635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9614'.
[  550.634682][T32638] pim6reg1: entered promiscuous mode
[  550.668362][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9616'.
[  550.699642][T32648] FAULT_INJECTION: forcing a failure.
[  550.699642][T32648] name failslab, interval 1, probability 0, space 0, times 0
[  550.712654][T32648] CPU: 1 UID: 0 PID: 32648 Comm: syz.9.9619 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  550.712688][T32648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  550.712703][T32648] Call Trace:
[  550.712712][T32648]  <TASK>
[  550.712736][T32648]  __dump_stack+0x1d/0x30
[  550.712761][T32648]  dump_stack_lvl+0xe8/0x140
[  550.712860][T32648]  dump_stack+0x15/0x1b
[  550.712877][T32648]  should_fail_ex+0x265/0x280
[  550.712901][T32648]  should_failslab+0x8c/0xb0
[  550.712959][T32648]  kmem_cache_alloc_node_noprof+0x57/0x320
[  550.713013][T32648]  ? __alloc_skb+0x101/0x320
[  550.713036][T32648]  __alloc_skb+0x101/0x320
[  550.713063][T32648]  netlink_alloc_large_skb+0xba/0xf0
[  550.713095][T32648]  netlink_sendmsg+0x3cf/0x6b0
[  550.713122][T32648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  550.713227][T32648]  __sock_sendmsg+0x142/0x180
[  550.713267][T32648]  ____sys_sendmsg+0x31e/0x4e0
[  550.713296][T32648]  ___sys_sendmsg+0x17b/0x1d0
[  550.713408][T32648]  __x64_sys_sendmsg+0xd4/0x160
[  550.713445][T32648]  x64_sys_call+0x191e/0x2ff0
[  550.713468][T32648]  do_syscall_64+0xd2/0x200
[  550.713581][T32648]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  550.713606][T32648]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  550.713638][T32648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.713709][T32648] RIP: 0033:0x7f360c36ebe9
[  550.713742][T32648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.713766][T32648] RSP: 002b:00007f360add7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  550.713824][T32648] RAX: ffffffffffffffda RBX: 00007f360c5a5fa0 RCX: 00007f360c36ebe9
[  550.713841][T32648] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  550.713857][T32648] RBP: 00007f360add7090 R08: 0000000000000000 R09: 0000000000000000
[  550.713872][T32648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.713907][T32648] R13: 00007f360c5a6038 R14: 00007f360c5a5fa0 R15: 00007ffd6bad1b48
[  550.713929][T32648]  </TASK>
[  551.439529][T32662] 9pnet_fd: Insufficient options for proto=fd
[  551.711656][T32670] netlink: 'syz.9.9626': attribute type 1 has an invalid length.
[  551.724814][T32672] loop7: detected capacity change from 0 to 512
[  551.733234][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9626'.
[  551.750611][T32672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.772742][T32672] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.9627: corrupted inode contents
[  551.783474][T32676] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9628'.
[  551.796947][T32676] batadv1: entered promiscuous mode
[  551.802384][T32676] batadv1: entered allmulticast mode
[  551.803391][T32672] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.9627: mark_inode_dirty error
[  551.821464][T32672] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.9627: corrupted inode contents
[  551.833997][T32672] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.9627: mark_inode_dirty error
[  551.836148][T32618] syz.2.9608 (32618) used greatest stack depth: 7304 bytes left
[  551.885221][T32672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9627'.
[  551.949390][   T29] kauditd_printk_skb: 242 callbacks suppressed
[  551.949408][   T29] audit: type=1326 audit(559.921:43355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  551.983462][T30830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.996199][   T29] audit: type=1326 audit(559.951:43356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.019736][   T29] audit: type=1326 audit(559.951:43357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.042868][   T29] audit: type=1326 audit(559.951:43358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.065982][   T29] audit: type=1326 audit(559.961:43359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.089004][   T29] audit: type=1326 audit(559.961:43360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.112059][   T29] audit: type=1326 audit(559.961:43361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.135403][   T29] audit: type=1326 audit(559.961:43362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.137264][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9629'.
[  552.159630][   T29] audit: type=1326 audit(559.961:43363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.168380][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9629'.
[  552.200945][   T29] audit: type=1326 audit(559.961:43364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32682 comm="syz.3.9632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce13ebe9 code=0x7ffc0000
[  552.372401][T32684] loop3: detected capacity change from 0 to 8192
[  552.418556][T32684]  loop3: p1 p4 < >
[  552.432838][T32684] loop3: p1 start 4261412864 is beyond EOD, truncated
[  552.651779][T32723] loop3: detected capacity change from 0 to 512
[  552.675491][T32730] macvlan1: entered promiscuous mode
[  552.683238][T32730] ipvlan0: entered promiscuous mode
[  552.689719][T32723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.695872][T32730] ipvlan0: left promiscuous mode
[  552.709494][T32730] macvlan1: left promiscuous mode
[  552.718953][T32735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.726718][T32735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.740504][T32735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.748094][T32735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.756248][T31270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.786592][T32742] batadv0: entered promiscuous mode
[  552.792688][T32742] batadv0: entered allmulticast mode
[  552.812485][T32747] batadv1: entered promiscuous mode
[  552.817970][T32747] batadv1: entered allmulticast mode
[  553.241122][  T324] ==================================================================
[  553.249275][  T324] BUG: KCSAN: data-race in call_rcu / mas_state_walk
[  553.255983][  T324] 
[  553.258315][  T324] write to 0xffff88813a9dc110 of 8 bytes by task 321 on cpu 0:
[  553.265872][  T324]  call_rcu+0x44/0x3f0
[  553.269959][  T324]  mas_wmb_replace+0xf7a/0x14a0
[  553.274824][  T324]  mas_wr_store_entry+0x1773/0x2b50
[  553.280053][  T324]  mas_store_prealloc+0x74d/0x9e0
[  553.285187][  T324]  vma_iter_store_new+0x1c5/0x200
[  553.290260][  T324]  mmap_region+0x1100/0x1630
[  553.294951][  T324]  do_mmap+0x9b3/0xbe0
[  553.299045][  T324]  vm_mmap_pgoff+0x17a/0x2e0
[  553.303743][  T324]  ksys_mmap_pgoff+0xc2/0x310
[  553.308444][  T324]  x64_sys_call+0x14a3/0x2ff0
[  553.313135][  T324]  do_syscall_64+0xd2/0x200
[  553.317660][  T324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.323568][  T324] 
[  553.325895][  T324] read to 0xffff88813a9dc110 of 8 bytes by task 324 on cpu 1:
[  553.333360][  T324]  mas_state_walk+0x2f5/0x650
[  553.338232][  T324]  mas_walk+0x60/0x150
[  553.342440][  T324]  lock_vma_under_rcu+0x8d/0x160
[  553.347484][  T324]  do_user_addr_fault+0x233/0x1090
[  553.352709][  T324]  exc_page_fault+0x62/0xa0
[  553.357226][  T324]  asm_exc_page_fault+0x26/0x30
[  553.362085][  T324] 
[  553.364505][  T324] value changed: 0x000000110e22ffff -> 0xffffffff85649c50
[  553.371616][  T324] 
[  553.373944][  T324] Reported by Kernel Concurrency Sanitizer on:
[  553.380107][  T324] CPU: 1 UID: 0 PID: 324 Comm: syz.3.9669 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  553.389745][  T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  553.399828][  T324] ==================================================================
[  553.414640][  T324] loop3: detected capacity change from 0 to 764
[  553.421651][  T324] iso9660: Unknown parameter 'ext4'
[  553.432292][  T324] loop3: detected capacity change from 0 to 764
[  553.439005][  T324] iso9660: Unknown parameter 'ext4'
[  553.449366][  T324] loop3: detected capacity change from 0 to 764
[  553.456018][  T324] iso9660: Unknown parameter 'ext4'
[  553.461579][  T330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  553.495099][  T324] loop3: detected capacity change from 0 to 764
[  553.501859][  T324] iso9660: Unknown parameter 'ext4'
[  553.512525][  T324] loop3: detected capacity change from 0 to 764
[  553.532932][  T324] iso9660: Unknown parameter 'ext4'
[  553.544338][  T324] loop3: detected capacity change from 0 to 764
[  553.551103][  T324] iso9660: Unknown parameter 'ext4'
[  553.562724][  T324] loop3: detected capacity change from 0 to 764
[  553.569326][  T324] iso9660: Unknown parameter 'ext4'
[  553.582868][  T324] loop3: detected capacity change from 0 to 764
[  553.590113][  T324] iso9660: Unknown parameter 'ext4'
[  553.601906][  T324] loop3: detected capacity change from 0 to 764
[  553.608604][  T324] iso9660: Unknown parameter 'ext4'
[  553.621093][  T324] loop3: detected capacity change from 0 to 764
[  553.627824][  T324] iso9660: Unknown parameter 'ext4'
[  553.638570][  T324] loop3: detected capacity change from 0 to 764
[  553.645148][  T324] iso9660: Unknown parameter 'ext4'
[  553.655464][  T324] loop3: detected capacity change from 0 to 764
[  553.662190][  T324] iso9660: Unknown parameter 'ext4'
[  553.673654][  T324] loop3: detected capacity change from 0 to 764
[  553.680327][  T324] iso9660: Unknown parameter 'ext4'
[  553.690910][  T324] loop3: detected capacity change from 0 to 764
[  553.697513][  T324] iso9660: Unknown parameter 'ext4'
[  553.708187][  T324] loop3: detected capacity change from 0 to 764
[  553.714843][  T324] iso9660: Unknown parameter 'ext4'
[  553.725942][  T324] loop3: detected capacity change from 0 to 764
[  553.732594][  T324] iso9660: Unknown parameter 'ext4'
[  553.743635][  T324] loop3: detected capacity change from 0 to 764
[  553.750572][  T324] iso9660: Unknown parameter 'ext4'
[  553.761427][  T324] loop3: detected capacity change from 0 to 764
[  553.768281][  T324] iso9660: Unknown parameter 'ext4'
[  553.787643][T31788] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  553.798603][T31788] CPU: 1 UID: 0 PID: 31788 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  553.798634][T31788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  553.798648][T31788] Call Trace:
[  553.798656][T31788]  <TASK>
[  553.798666][T31788]  __dump_stack+0x1d/0x30
[  553.798739][T31788]  dump_stack_lvl+0xe8/0x140
[  553.798764][T31788]  dump_stack+0x15/0x1b
[  553.798785][T31788]  dump_header+0x81/0x220
[  553.798825][T31788]  oom_kill_process+0x342/0x400
[  553.798862][T31788]  out_of_memory+0x979/0xb80
[  553.798895][T31788]  try_charge_memcg+0x5e6/0x9e0
[  553.798933][T31788]  charge_memcg+0x51/0xc0
[  553.798956][T31788]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  553.798995][T31788]  __read_swap_cache_async+0x1df/0x350
[  553.799040][T31788]  swap_cluster_readahead+0x277/0x3e0
[  553.799105][T31788]  swapin_readahead+0xde/0x6f0
[  553.799259][T31788]  ? __filemap_get_folio+0x4f7/0x6b0
[  553.799374][T31788]  ? ktime_get+0x1eb/0x210
[  553.799407][T31788]  ? swap_cache_get_folio+0x77/0x200
[  553.799440][T31788]  do_swap_page+0x301/0x2430
[  553.799509][T31788]  ? finish_task_switch+0xad/0x2b0
[  553.799537][T31788]  ? __pfx_default_wake_function+0x10/0x10
[  553.799564][T31788]  handle_mm_fault+0x9a5/0x2c20
[  553.799604][T31788]  do_user_addr_fault+0x636/0x1090
[  553.799646][T31788]  ? fpregs_restore_userregs+0xe2/0x1d0
[  553.799742][T31788]  ? switch_fpu_return+0xe/0x20
[  553.799771][T31788]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  553.799805][T31788]  exc_page_fault+0x62/0xa0
[  553.799843][T31788]  asm_exc_page_fault+0x26/0x30
[  553.799864][T31788] RIP: 0033:0x7f360c3a1465
[  553.799924][T31788] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  553.799944][T31788] RSP: 002b:00007ffd6bad1e88 EFLAGS: 00010246
[  553.799964][T31788] RAX: 0000000000000000 RBX: 0000000000000081 RCX: 00007f360c3a1463
[  553.799981][T31788] RDX: 00007ffd6bad1ea0 RSI: 0000000000000000 RDI: 0000000000000000
[  553.799997][T31788] RBP: 00007ffd6bad1f0c R08: 000000002c2a99ee R09: 0000000000000000
[  553.800013][T31788] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  553.800029][T31788] R13: 00000000000927c0 R14: 00000000000871f3 R15: 00007ffd6bad1f60
[  553.800053][T31788]  </TASK>
[  553.800159][T31788] memory: usage 303300kB, limit 307200kB, failcnt 1378
[  553.964990][  T324] loop3: detected capacity change from 0 to 764
[  553.976377][T31788] memory+swap: usage 836kB, limit 9007199254740988kB, failcnt 0
[  553.984303][  T324] iso9660: Unknown parameter 'ext4'
[  553.990485][T31788] kmem: usage 584kB, limit 9007199254740988kB, failcnt 0
[  553.990504][T31788] Memory cgroup stats for /syz9:
[  553.990961][T31788] cache 0
[  554.006394][  T324] loop3: detected capacity change from 0 to 764
[  554.006550][T31788] rss 49152
[  554.014936][  T324] iso9660: Unknown parameter 'ext4'
[  554.022719][T31788] shmem 0
[  554.022730][T31788] mapped_file 0
[  554.022739][T31788] dirty 0
[  554.033507][  T324] loop3: detected capacity change from 0 to 764
[  554.039051][T31788] writeback 0
[  554.048738][  T324] iso9660: Unknown parameter 'ext4'
[  554.051930][T31788] workingset_refault_anon 1650
[  554.064621][  T324] loop3: detected capacity change from 0 to 764
[  554.067063][T31788] workingset_refault_file 69
[  554.067075][T31788] swap 180224
[  554.067084][T31788] swapcached 28672
[  554.067100][T31788] pgpgin 456005
[  554.067108][T31788] pgpgout 455989
[  554.067116][T31788] pgfault 478890
[  554.067124][T31788] pgmajfault 270
[  554.067132][T31788] inactive_anon 0
[  554.067140][T31788] active_anon 49152
[  554.067148][T31788] inactive_file 0
[  554.067156][T31788] active_file 16384
[  554.067210][T31788] unevictable 0
[  554.067278][T31788] hierarchical_memory_limit 314572800
[  554.067289][T31788] hierarchical_memsw_limit 9223372036854771712
[  554.067300][T31788] total_cache 0
[  554.067309][T31788] total_rss 49152
[  554.067317][T31788] total_shmem 0
[  554.067334][T31788] total_mapped_file 0
[  554.067373][T31788] total_dirty 0
[  554.067381][T31788] total_writeback 0
[  554.067390][T31788] total_workingset_refault_anon 1650
[  554.067401][T31788] total_workingset_refault_file 69
[  554.206616][T31788] total_swap 180224
[  554.210471][T31788] total_swapcached 28672
[  554.214782][T31788] total_pgpgin 456005
[  554.218843][T31788] total_pgpgout 455989
[  554.222910][T31788] total_pgfault 478890
[  554.227018][T31788] total_pgmajfault 270
[  554.231101][T31788] total_inactive_anon 0
[  554.235438][T31788] total_active_anon 49152
[  554.239810][T31788] total_inactive_file 0
[  554.244009][T31788] total_active_file 16384
[  554.248543][T31788] total_unevictable 0
[  554.252546][T31788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9668,pid=319,uid=0
[  554.267167][T31788] Memory cgroup out of memory: Killed process 319 (syz.9.9668) total-vm:96008kB, anon-rss:1008kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000