last executing test programs:

2m21.781040875s ago: executing program 2 (id=10):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
io_submit(r3, 0x20000000000000d2, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000))
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x80}, 0x20)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000200)=@req3={0x9, 0x80000001, 0x5, 0x3, 0x2, 0x0, 0x7fffffff}, 0x1c)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x6, 0x8, 0x1, 0x2008, 0x1, 0x8000000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffff4, 0x10010, r5, 0x0)

2m21.397205719s ago: executing program 2 (id=12):
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m21.14110339s ago: executing program 2 (id=14):
openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x0)

2m21.004232941s ago: executing program 2 (id=16):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040004)

2m20.539378575s ago: executing program 2 (id=21):
pipe2(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000070000000100000080"], 0x50)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
gettid()
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)

2m19.617075642s ago: executing program 2 (id=35):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0], 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000300), 0x1, 0x511, &(0x7f0000000a80)="$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")
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r2, 0x1, 0xffffffff, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x810)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x161282, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00000007000000090000000000000005000000000000000500000000000000010000800000000000000000000000000000000000000000000000000000000001000080ffffff7f0f0000000000000033000000000000000400000000000000040000000000000000000000000000000000000000008572025e2f07edf70000"])
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twm'], 0xa)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000640)="d84f779a9017f4372dc36beabf656c5302944b1cdfe8d03f14ffb621b9ad953d64177788e5b75ce607000000000000008dd926d5c6b69f1a045a3271d884d086d227ee7bf811b6575c68e41690dcb14238ec68438a00"/101, 0x65)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
r11 = socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000000000, 0x0, &(0x7f0000006680))
bind$can_raw(r11, &(0x7f0000000000)={0x1d, r10}, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xd}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)
write$cgroup_int(r6, &(0x7f0000000000)=0x700, 0x12)

2m19.616191092s ago: executing program 32 (id=35):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0], 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000300), 0x1, 0x511, &(0x7f0000000a80)="$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")
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r2, 0x1, 0xffffffff, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x810)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x161282, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00000007000000090000000000000005000000000000000500000000000000010000800000000000000000000000000000000000000000000000000000000001000080ffffff7f0f0000000000000033000000000000000400000000000000040000000000000000000000000000000000000000008572025e2f07edf70000"])
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twm'], 0xa)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000640)="d84f779a9017f4372dc36beabf656c5302944b1cdfe8d03f14ffb621b9ad953d64177788e5b75ce607000000000000008dd926d5c6b69f1a045a3271d884d086d227ee7bf811b6575c68e41690dcb14238ec68438a00"/101, 0x65)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
r11 = socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000000000, 0x0, &(0x7f0000006680))
bind$can_raw(r11, &(0x7f0000000000)={0x1d, r10}, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xd}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)
write$cgroup_int(r6, &(0x7f0000000000)=0x700, 0x12)

1m51.414232804s ago: executing program 5 (id=379):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
umount2(&(0x7f0000000180)='./file0\x00', 0x8a8c23466581e86f)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033300fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044015}, 0x4084c10)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa81000000080045000028000400000032907800000000ffffffff110090780000000000000000000000000000000921c46cb56976bf08800544fc3d2c8729ba25b98bdd0f0000000000006f4b0cc2b9dc9b7cca4399654bc5b84dc111b64a6cbe71e11b043b59396837958880aa8afc935b2951459a0647cfdc17f47eeb3d573de7072226fb7788e8fdfa1014ef7e350c0bd5fdc6268f40343199cb904d4e0841bbbc6f90c5dad57702e5e8f38a5a3ddc5abfed7329eab07932c357756a389d4d4cbee9f98edea9a46f8a996eb5aa7e8dcb6fd8b75ce3cf"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x110008, &(0x7f0000000200), 0xff, 0x52d, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvnWSyyW62SdUHLbRWW8kW3ZmksW3woVYQfSqI9X2NySSETDIhM2k3oWj2LxBEVPBJX3wR/AMEWfDFRxEK+qxQUUS3CvqgvTIzd5I4uZPM1tlMdvL5wN17zrk/vufM5ty5Pw53Ariyno2I1yLi/TRNX4iImay8kE1x2J6a67334O2V5pREmr7x1ySSrKyzrySb38g2m4yIr3454hvJ6bj1/YPN5Wq1spvly42tnXJ9/+D2xtbyemW9sr24uPDy0itLLy3ND6SdNyPi1S/+8Xvf/smXXv3FZ976w50/3/pms1rT2fKT7XhI42ctbDe9eG2ya4PdDxjsMmq2p9jJTPW3zb1HWB8AAHprnuN/KCI+GREvxEyMnX06CwAAADyG0s9Px7+TiDTfRI9yAAAA4DFSaI2BTQqlbCzAdBQKpVJ7DO9H4nqhWqs3Pr1W29tebY+VnY1iYW2jWpnPxgrPRjFp5hda6eP8i135xYh4MiK+OzPVypdWatXVYd/8AAAAgCviRtf1/z9m2tf/AAAAwIiZHXYFAAAAgEfO9T8AAACMPtf/AAAAMNK+8vrrzSnt/P716pv7e5u1N2+vVuqbpa29ldJKbXentF6rrbfe2bd13v6qtdrOZ2N77265Uak3yvX9gztbtb3txp2NmLyQBgEAAACnPPnx+79LIuLwc1OtqWli2JUCLsT4USrJ5jm9//dPtOfvXlClgAsx1sc6717LL3eeAI+38e6CHn0dGD3FYVcAGLrknOU9B+/8Opt/YrD1AQAABm/uY/nP/wvnbnl4/irApaYTw9XV9fw/nRlWRYAL13r+3+9AHicLMFKKfY0ABEbZ//38/1xp+lAVAgAABm66NSWFUnZ7bzoKhVIp4mbrZwGKydpGtTIfEU9ExG9nitea+YXWlsm51wwAAAAAAAAAAAAAAAAAAAAAAAAAQFuaJpECAAAAIy2i8Kfkl+13+c/NPD/dfX9gIvlX6yeBJyLirR++8f27y43G7kKz/G9H5Y0fZOUvDuMOBgAAANCtc53emv9z2LUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNS89+Dtlc7Ux+pTg4r7ly9ExGxe/PGYbM0noxgR1/+exPiJ7ZKIGBtA/MN7EfHRvPhJs1pHIfPiD+JDOCd+zGafQl78GwOID1fZ/ebx57W8/leIZ1vz/P43HvE/+Q+q9/Evjo5/Yz36/80+Yzz1zs/KPePfi3hqPP/404mf9Ij/XJ/xv/61g4Ney9IfRcx1vn9aR7yTEY5T5cbWTrm+f3B7Y2t5vbJe2V5cXHh56ZWll5bmy2sb1Ur2b26M7zz98/fPav/13O+/JKtN7/Y/n7O/vO+k/7xz98GHO5nD0/FvPZcT/1c/ztY4Hb+QxflUlm4un+ukD9vpk5756W+eOav9q8ftLz7M//+tXjvtdqqjPN3vnw4A8AjU9w82l6vVyu7IJppX6ZegGhKXMPGtge4wTdO02adyFt2PiH72k8SAW1rIr89xoucRYNhHJgAAYNCOT/qHXRMAAAAAAAAAAAAAAAAAAAC4ui7iLWvdMY9fgZwM4hXaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8d8AAAD//42Q0/o=")
socket$key(0xf, 0x3, 0x2)

1m51.375748654s ago: executing program 5 (id=381):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m50.448270161s ago: executing program 5 (id=392):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_config_ext={0x2, 0xe23a}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000008000000300008902000018110000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200300)
mq_timedsend(0xffffffffffffffff, 0x0, 0xffffff19, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='ns=fd,rfdno=\x00\x00\x00', @ANYRESHEX, @ANYBLOB="2c77aa01fe89d6", @ANYRESHEX, @ANYRESHEX])
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r3=>0x0, 0x20, 0x8, 0x7, 0x57ef, {{0xa, 0x4, 0x3, 0xa, 0x28, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xd, [0x8]}, @lsrr={0x83, 0xb, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x6c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
clock_gettime(0x0, &(0x7f0000003540))
recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000480)=@caif=@util, 0x80, &(0x7f0000000600)=[{&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f0000000b00)=""/141, 0x8d}], 0x4, &(0x7f0000001c40)=""/4096, 0x1000}, 0xe}, {{&(0x7f00000009c0)=@phonet, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/14, 0xe}], 0x1, &(0x7f0000002c40)=""/211, 0xd3}, 0xe}, {{&(0x7f00000035c0)=@tipc=@id, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002dc0)=""/247, 0xf7}, {&(0x7f0000002ec0)=""/83, 0x53}, {&(0x7f0000002f40)=""/106, 0x6a}], 0x3}, 0x2}, {{&(0x7f0000003000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/72, 0x48}, {&(0x7f00000031c0)=""/230, 0xe6}], 0x3, &(0x7f0000003300)=""/25, 0x19}, 0x5}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003340)=""/118, 0x76}], 0x1}, 0x783}], 0x5, 0x2000, &(0x7f0000003580))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e)
r5 = gettid()
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x25, 0x4, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x3)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
syz_open_dev$sg(&(0x7f00000005c0), 0x7fffffff, 0x28800)

1m49.499971428s ago: executing program 5 (id=408):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10)
r5 = io_uring_setup(0x80003eae, &(0x7f0000000080)={0x0, 0x0, 0x1001, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x15, r6, 0x0, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x325)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000002010300000000000000000002000001180002801400018008000100ffffffff08000200ffffffffd75f59a99fe723922f9a7a62d2de0b22b4a6b0d1cc2d7276a987bee9b7d99dcfe4115705f45e8e2d8c2f4c3b0d1ce36669ed8a0555b0bd3904c9e6ee58dae76b1708a4d322a087677c2928978c558f9ec44b7b016c75afa1224b49d96985640c5f6319664dfed4507f8785a83854b68f1aa09a690b7074abd03e9ef51bf1918354424cda63be771c2f7770f18d8c610a3f7e7f2d33fb7c27ee40100c45fcaa3bf84949efc998ac4d4b4c8b767481202214147da9dc087b79701c7776146cc19b397bdc6b81cb"], 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x400c880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x20000000)
r9 = dup3(r8, r7, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1817000000000800000000000000002179b32c4d6963fc00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0x400}, 0x18)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x0, 0x4c6, &(0x7f0000000b00)="$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")
connect$unix(r9, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)

1m47.984018029s ago: executing program 5 (id=430):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m47.024345117s ago: executing program 5 (id=434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x8081)
ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000007c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x80)
io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r7, 0x0, 0x8)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x0, 0x2, 0x9, 0x5}, {0xa849, 0xc0, 0x3, 0x2}, {0xffff, 0x1a, 0x6, 0x3}, {0x8000, 0x5, 0x0, 0x2}, {0x10, 0x9, 0x6, 0x1}, {0x62b3, 0x40, 0x7, 0x7}, {0x7, 0x5, 0x0, 0x9}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
setrlimit(0x40000000000008, &(0x7f0000000000))

1m46.981168567s ago: executing program 33 (id=434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x8081)
ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000007c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x80)
io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r7, 0x0, 0x8)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x0, 0x2, 0x9, 0x5}, {0xa849, 0xc0, 0x3, 0x2}, {0xffff, 0x1a, 0x6, 0x3}, {0x8000, 0x5, 0x0, 0x2}, {0x10, 0x9, 0x6, 0x1}, {0x62b3, 0x40, 0x7, 0x7}, {0x7, 0x5, 0x0, 0x9}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
setrlimit(0x40000000000008, &(0x7f0000000000))

40.620131405s ago: executing program 6 (id=1459):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
writev(r0, 0x0, 0x0)

40.553382076s ago: executing program 6 (id=1460):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r2, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES32], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r4, 0x0, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5, @ANYBLOB="010000000000fb7464617673696d0200000f0002006e657464657673696d3000006e77412cdbde87cc1b0de2b866a8a437f39e81c999c3e694783106a66e157426e5dbaa1525565a670f8452770cdc0d01cb0ec714b19a2e9f304ea7c7f1581a89fef01a9ffeff293ab5c59c1b6650dd432d830a8f86e08aac0d927c2a2452ca660030065b11dc3be0ad5307c688224631f57a1ebcb27ace3d43b215077a9b72404bd6fc4faa812a68f859c4deabc0a907ba9ff2db30e0bf171f3d37cff74a9c522b7569a24ff1ea2225fcbe4e641d83b6b2d2dbbf96d8fca8d8e5ffcef9b59185b983bc7dc078c99916e7d066a31c"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

40.444883456s ago: executing program 6 (id=1463):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x4}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
close(r3)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='timer_start\x00', r7}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
close(r6)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646e6f3dd8b4dd43957a4bc1569718623dfeee6f66d372554498144c51b3e9aea59f886acfa000aeed4270bf01c192a769eab9d752beba02b88dd58b2a941dd3972e67e42903d780536f304e68357d56aaffdbd5537d58bd74bcbb36b50be664d3020d6be3020000e072eeb85e18e6dd885f343063", @ANYRESHEX=r5, @ANYBLOB=',\x00'])
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x1810420, &(0x7f0000000400)=ANY=[])
r8 = creat(&(0x7f0000000380)='./file0\x00', 0x80)
ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000040)=""/31)
write$qrtrtun(r8, &(0x7f0000000780)="fb", 0x1)

40.300729768s ago: executing program 6 (id=1464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000040), 0x1, 0x51c, &(0x7f0000000540)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

39.827539501s ago: executing program 6 (id=1471):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1ffffffffffffe65, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000600)="a5c65bb0904a40fb9de82f67e11ccb4df37434362277081edf747d0fd7c00574d8f1428ee1a297dee2dbf5306d26fe034a2e7f939437ab576e50808270310e6833a56af39174e4ad26042f51000000000000", 0x52}], 0x1, 0x7a00, 0x0, 0x20)

39.650754342s ago: executing program 6 (id=1476):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {<r3=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
r4 = getegid()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}], [], 0x6b}})
syz_emit_ethernet(0x31, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x1fe, 0xaa, "fd", "8dfb8d", 0xf9, "08b8d4db092fbf71a413fe8036164b1ff7e4fbaabfd9de80d58377"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x909, 0xc98, 0x467, 0x3f2]}) (async)
syz_emit_ethernet(0x31, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x1fe, 0xaa, "fd", "8dfb8d", 0xf9, "08b8d4db092fbf71a413fe8036164b1ff7e4fbaabfd9de80d58377"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x909, 0xc98, 0x467, 0x3f2]})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000280)=0x200, 0x4)
sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40000}, 0x41) (async)
sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40000}, 0x41)

24.630895755s ago: executing program 34 (id=1476):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {<r3=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
r4 = getegid()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}], [], 0x6b}})
syz_emit_ethernet(0x31, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x1fe, 0xaa, "fd", "8dfb8d", 0xf9, "08b8d4db092fbf71a413fe8036164b1ff7e4fbaabfd9de80d58377"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x909, 0xc98, 0x467, 0x3f2]}) (async)
syz_emit_ethernet(0x31, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x1fe, 0xaa, "fd", "8dfb8d", 0xf9, "08b8d4db092fbf71a413fe8036164b1ff7e4fbaabfd9de80d58377"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x909, 0xc98, 0x467, 0x3f2]})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000280)=0x200, 0x4)
sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40000}, 0x41) (async)
sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40000}, 0x41)

2.855097849s ago: executing program 4 (id=1940):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.190132693s ago: executing program 0 (id=1946):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES32], 0x28}}, 0x0)

2.101026524s ago: executing program 7 (id=1948):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x2003}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (fail_nth: 11)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', <r4=>0x0, 0x2f, 0xbd, 0x7f, 0x5, 0x43, @mcast1, @mcast1, 0x80, 0x1, 0x0, 0x10}})
r5 = syz_io_uring_setup(0x4178, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x2, 0x1ab}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5, 0x3, 0x0, 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="02002d41dc54d1ed0000004600b5562e1560a0970b5812572888ba7cf80f529849bdd92983ba81f1426c254aa027afd14a27c57a4bbeaa209b5e5cfd803aa017b172ab16c09e9396b82f010b002d1d3b6343487a17f1e51a2293053b46e9dbfb593c56d279d57c42e3861fcb1ca3d1ccd020271a0c85e9f9c0ec182a5a9a710ed5c258293a50639e8631ecc8bfdd220603a0f07478b933b60fd24efc40682c6dad65815383111fe263e1"], 0x50)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x0)

1.780201017s ago: executing program 0 (id=1950):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="040100000008010200000000000000000a000006060002400007000005000300880000000900010073797a31000000003c000480080006400000000008000440000000070800000240000000050800014000000007080001400000ffff4c000480080004408000000108000540fffffd1708000740000000010800064000000009080005400000000608000440000000000800034000000080080005400000000a08000640000006884400048008000140fffffff70800014000000000080001400000000908000140000000"], 0x104}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040004)

1.742068507s ago: executing program 1 (id=1951):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0xfffffffe)
r6 = eventfd2(0x0, 0x0)
io_setup(0x6, &(0x7f0000000140)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
shutdown(r5, 0x0)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0)
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc2c143b413b2eb39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00'}, 0x10)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)={0x948b, 0x16, [{0x2, 0x1}, {0x5, 0x1}, {0x8}, {0x0, 0x1}, {0x5, 0x1}, {0xa}, {0x3}, {0x8}, {0x7, 0x1}, {0xa}, {0x8}, {0x4}, {0x9, 0x1}, {0xc}, {0xa, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x7}, {0x9, 0x1}, {0x7}, {0x4, 0x1}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.741566357s ago: executing program 4 (id=1952):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000004c0)=0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000005c0)=""/73, 0x49, <r3=>0x0, &(0x7f0000000640)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r5, 0x2000}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x9, 0x1, 0x2, "403c1f950c00007e55d848600000ff726802de"})
r7 = syz_open_pts(r5, 0x0)
r8 = dup3(r7, r5, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r9}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000780)={0x0, <r10=>0x0})
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7, 0x4, 0xbb, 0x5, 0x0, 0x5, 0x184, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4e5c218a94e15e1, @perf_config_ext={0xffff, 0x5}, 0x114cd, 0x6, 0x7ff, 0x1, 0xd5c, 0x7, 0x7, 0x0, 0x101, 0x0, 0x80}, r10, 0x0, r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x0, 0x0, 0x0, 0x9af9, 0xa3, &(0x7f0000000400)=""/163, 0x41000, 0x6, '\x00', r1, @fallback=0x33, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x7, 0xf5a0, 0xbb31}, 0x10, r3, r0, 0x0, 0x0, &(0x7f00000007c0), 0x10, 0x7, @void, @value}, 0x94)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
sendto$inet6(r11, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x9}, 0x1c)
lstat(0x0, &(0x7f0000000040))

1.682162887s ago: executing program 7 (id=1953):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
write(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000)

1.571080578s ago: executing program 0 (id=1955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

1.535339909s ago: executing program 3 (id=1956):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000080000000b000000000000", @ANYBLOB="000000000000000000000000000000000000000047dcc54a694b6be338da8335ffc758e2d4cf5070e8247b9e8d0a3e0733f8ad92979b3e3f3b6d0fcd3c7787cc320e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa6, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
unshare(0x44040200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x100, 0x1403, 0x2, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x8a0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)

1.502632549s ago: executing program 7 (id=1957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.479635689s ago: executing program 1 (id=1958):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)

1.419642219s ago: executing program 1 (id=1959):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x200c045, &(0x7f00000003c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@orlov}, {@abort}, {@nombcache}, {@usrjquota}]}, 0x64, 0x50f, &(0x7f0000000f80)="$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")
msgget(0x3, 0x102)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './bus\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x4000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300))
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
stat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r4, 0x3409c000)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.419022299s ago: executing program 3 (id=1960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000040), 0x1, 0x51c, &(0x7f0000000540)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

1.34896477s ago: executing program 0 (id=1961):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r1, r1, 0x0, 0x40000f63c)
gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)
fstat(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}}, './file0\x00'})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0), 0x940051, &(0x7f00000006c0)={[{@gid={'gid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x44}}, {@gid={'gid', 0x3d, r8}}], [{@obj_user={'obj_user', 0x3d, '\xe2],'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r9}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r12}, 0x10)
rename(0x0, 0x0)

1.33769406s ago: executing program 3 (id=1962):
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

866.332134ms ago: executing program 4 (id=1963):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES32], 0x28}}, 0x0)

717.923375ms ago: executing program 4 (id=1964):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
close(r3)
write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:hald_acl_exec_t:s0\x00', 0x25)
socket$tipc(0x1e, 0x2, 0x0)

615.186026ms ago: executing program 7 (id=1965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x41010, r2, 0x4bef000)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000))
r3 = io_uring_setup(0x4b3f, &(0x7f0000000380)={0x0, 0xf278, 0x0, 0x3, 0x1f5})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}], 0x3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d0000000000f0ff001400000008", @ANYBLOB], 0x58}}, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r6, 0xa996f000)
r12 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="d5a9f23f38a5e06eebd4b39670563d2f8fd12de554696d508cc71d0690f94fa9e40f79e281b753e39c64379849f44cae079eb5a08c7bb3098a6446918d2fafc835dedfb25c01eb6a00a7f656e8cf03", 0x4f, r12)

533.979336ms ago: executing program 4 (id=1966):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000014c0), 0x101200, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f00000002c0)={[], [{@uid_eq}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}, 0x7, 0x4c2, &(0x7f0000001600)="$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")
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)
creat(0x0, 0xd4)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xa]}, 0x8)
name_to_handle_at(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x73, &(0x7f00000001c0)={0x0, 0x0, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0)

499.611696ms ago: executing program 0 (id=1967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$TCSETA(r3, 0x402c542d, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff5, 0x0, 0x0) (async, rerun: 32)
close(r0) (rerun: 32)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r4, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) (rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'}) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x52, 0x59}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4084041) (async)
syz_emit_ethernet(0x56, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x20, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffe, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}}, 0x0)

488.930576ms ago: executing program 7 (id=1968):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = memfd_secret(0x80000)
dup2(r0, r1)
setsockopt$packet_fanout_data(r1, 0x113, 0x16, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5)
sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (fail_nth: 9)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x50, 0x0, 0x1, 0x270bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000041}, 0x4040800)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

440.082327ms ago: executing program 0 (id=1969):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x7}, 0x400, 0xcc, 0x6, 0x4, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000000000000000000000886b4798ed49523fc935f5db1c030a0060ca2440e76972a9782c127f14bdd7326748cbd292cae73697b208e04eaa2e736f8183f1ffe36742f3ab6140bc2c202ac76b70ddccc2f504d1895cca57dd251d1f579db0ad9955a66a53f7303d7636087a524dafa5b300def8f8fb98f651d1f573119c147120b98c3828f8fadcd53c1d8df907c296c0ebf77bc7579d2220dc2c010b700e3d2db53221a9021260645410ec3a3e9241c3781cbcaca47767e5f02c4f39c87bdfd55326d470ae735dbeeda61c4762c027b720f53bf01b585c07ec6e6c2c6046ba156c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095a74aa2e0a44fa3cc19a555828f20527824f522a06c810c241cf4afde14f62f238ae43bbd3d", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
alarm(0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x30d, 0x2, 0x7})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001dc0)=@newlink={0x314, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x600}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0xdd1, 0x7e4, 0xfffff801}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0xe03f245}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0xf4, 0xa8a}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fffffff, 0x8}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0xbce2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x200, 0xfffffff7}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x403, 0xd31b}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0xe}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0x2f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0xfff}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0xa04f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffc00, 0x4}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfb4, 0x7ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x49}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x80000001}}]}]}, @IFLA_VFINFO_LIST={0x11c, 0x16, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x46a2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x4, 0x562}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x400}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6e, 0xe16, 0x80}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfff, 0x81}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0x9e5, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0xff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x8}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xb45, 0x7, 0x8100}}, {0x14, 0x1, {0x1, 0x397, 0x4, 0x8100}}]}]}]}]}, 0x314}, 0x1, 0x2, 0x0, 0x24040810}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x942, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f00000001c0))
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "910ea9243a66a796", "db83a198a2ca82abd2ed1a03efa4ed98c3ed6a636a7a71c91a53e7336d702fb4", "c648dc72", "258f525227295121"}, 0x38)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

439.205017ms ago: executing program 3 (id=1970):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)

369.132087ms ago: executing program 3 (id=1971):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

157.564599ms ago: executing program 1 (id=1972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000040), 0x1, 0x51c, &(0x7f0000000540)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)

136.441129ms ago: executing program 7 (id=1973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001e00)=[{0x2, 0x3, {0x2, 0x1, 0x2}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x2, 0x1, {0x1, 0xf0, 0x2}, {0x0, 0x1, 0x2}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0x0, 0x4}, {0x0, 0xff, 0x3}, 0x0, 0xfc}], 0x60)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffffffffffffffa}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18)
sync()

44.0108ms ago: executing program 1 (id=1974):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES32], 0x28}}, 0x0)

14.28529ms ago: executing program 4 (id=1975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

13.98261ms ago: executing program 3 (id=1976):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
write(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000)

0s ago: executing program 1 (id=1977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) (async, rerun: 64)
r3 = socket$inet(0x2b, 0x3, 0x0) (rerun: 64)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="c9d336528bfea7283e1a2b137df4de2dfed78785af77105f4f2d5bd82378e5a34119e585377a5047d5e82743be8ca2d99a20d57e965320de70ba9273a7f61f1a5742258fa42d89b5d34b46d1095c66eb5a099be8c99bb024cc58c7a2756b5de169cc5bd37460009e5e4248d0935b703a9e023088b308b0954316100f3bc17d452d7f9fa40a9d7ec941e11edb4ce39cd76a6942c70f59f0ae21391714c0ab8d21f6e0959f43915164614384c0b339da393937ff42d6aaa24c1ac7ef5f3fef"], 0x28}, 0x1, 0x0, 0x0, 0x404000c}, 0x2000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b707, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc010ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x2000c080) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
getpid()
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000280)={0x0, 0x0, 0x112, 0x7ffc, 0x4002, 0x2008})

kernel console output (not intermixed with test programs):

rror (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1481: corrupted xattr block 33: invalid header
[  135.177670][ T8232] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  135.199583][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.411522][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'.
[  135.462501][ T8250] loop0: detected capacity change from 0 to 2048
[  135.486598][   T30] audit: type=1326 audit(1742051718.800:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.527925][ T8250]  loop0: p1 < > p4
[  135.535649][ T8250] loop0: p4 size 8388608 extends beyond EOD, truncated
[  135.558243][   T30] audit: type=1326 audit(1742051718.800:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.581814][   T30] audit: type=1326 audit(1742051718.800:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.606033][   T30] audit: type=1326 audit(1742051718.800:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.629556][   T30] audit: type=1326 audit(1742051718.800:10372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.653209][   T30] audit: type=1326 audit(1742051718.800:10373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.676743][   T30] audit: type=1326 audit(1742051718.800:10374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.700399][   T30] audit: type=1326 audit(1742051718.800:10375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  135.740625][ T8258] netlink: 'syz.1.1488': attribute type 10 has an invalid length.
[  135.749841][ T8258] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  135.792398][ T8262] loop0: detected capacity change from 0 to 512
[  135.799396][ T8262] ext4: Unknown parameter 'uid'
[  136.510951][ T8292] loop4: detected capacity change from 0 to 2048
[  136.546614][ T8292]  loop4: p1 < > p4
[  136.551174][ T8292] loop4: p4 size 8388608 extends beyond EOD, truncated
[  136.654943][ T8301] loop0: detected capacity change from 0 to 1024
[  136.661977][ T8301] EXT4-fs: Ignoring removed nobh option
[  136.667645][ T8301] EXT4-fs: Ignoring removed bh option
[  136.692686][ T8301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.709562][ T8301] __nla_validate_parse: 2 callbacks suppressed
[  136.709577][ T8301] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1502'.
[  136.737492][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.773896][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'.
[  136.820793][ T8313] loop0: detected capacity change from 0 to 512
[  136.829359][ T8311] x_tables: duplicate underflow at hook 1
[  136.835775][ T8311] netlink: 'syz.1.1505': attribute type 4 has an invalid length.
[  136.847225][ T8313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.860743][ T8313] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.874264][ T8317] FAULT_INJECTION: forcing a failure.
[  136.874264][ T8317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.887382][ T8317] CPU: 0 UID: 0 PID: 8317 Comm: syz.1.1506 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  136.887411][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  136.887425][ T8317] Call Trace:
[  136.887433][ T8317]  <TASK>
[  136.887441][ T8317]  dump_stack_lvl+0xf2/0x150
[  136.887469][ T8317]  dump_stack+0x15/0x1a
[  136.887504][ T8317]  should_fail_ex+0x24a/0x260
[  136.887535][ T8317]  should_fail+0xb/0x10
[  136.887564][ T8317]  should_fail_usercopy+0x1a/0x20
[  136.887600][ T8317]  _copy_from_iter+0xd5/0xd00
[  136.887691][ T8317]  ? kmalloc_reserve+0x16e/0x190
[  136.887783][ T8317]  ? __build_skb_around+0x196/0x1f0
[  136.887806][ T8317]  ? __alloc_skb+0x21f/0x310
[  136.887834][ T8317]  ? __virt_addr_valid+0x1ed/0x250
[  136.887941][ T8317]  ? __check_object_size+0x364/0x520
[  136.887972][ T8317]  netlink_sendmsg+0x460/0x6e0
[  136.888010][ T8317]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.888044][ T8317]  __sock_sendmsg+0x140/0x180
[  136.888094][ T8317]  ____sys_sendmsg+0x326/0x4b0
[  136.888124][ T8317]  __sys_sendmsg+0x19d/0x230
[  136.888168][ T8317]  __x64_sys_sendmsg+0x46/0x50
[  136.888248][ T8317]  x64_sys_call+0x2734/0x2dc0
[  136.888351][ T8317]  do_syscall_64+0xc9/0x1c0
[  136.888454][ T8317]  ? clear_bhb_loop+0x55/0xb0
[  136.888491][ T8317]  ? clear_bhb_loop+0x55/0xb0
[  136.888608][ T8317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.888637][ T8317] RIP: 0033:0x7fd316e6d169
[  136.888652][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.888669][ T8317] RSP: 002b:00007fd3154d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.888687][ T8317] RAX: ffffffffffffffda RBX: 00007fd317085fa0 RCX: 00007fd316e6d169
[  136.888701][ T8317] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004
[  136.888714][ T8317] RBP: 00007fd3154d7090 R08: 0000000000000000 R09: 0000000000000000
[  136.888856][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.888868][ T8317] R13: 0000000000000000 R14: 00007fd317085fa0 R15: 00007ffee3fd04f8
[  136.888886][ T8317]  </TASK>
[  136.889923][ T8313] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1504: corrupted xattr block 33: invalid header
[  137.113291][ T8313] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  137.122669][ T8313] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1504: corrupted xattr block 33: invalid header
[  137.151264][ T8313] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  137.161057][ T8313] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1504: corrupted xattr block 33: invalid header
[  137.175277][ T8313] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  137.259225][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.188799][ T8334] loop0: detected capacity change from 0 to 512
[  138.201014][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1510'.
[  138.214220][ T8334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.231621][ T8334] EXT4-fs (loop0): 1 truncate cleaned up
[  138.243421][ T8334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.258386][ T8337] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1514'.
[  138.259447][ T8334] netlink: 'syz.0.1512': attribute type 10 has an invalid length.
[  138.275287][ T8334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1512'.
[  138.285343][ T8334] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  138.321017][ T8339] netlink: 'syz.1.1513': attribute type 3 has an invalid length.
[  138.321403][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.359371][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'.
[  138.411428][ T8353] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  138.421754][ T8353] SELinux: failed to load policy
[  138.427427][ T8353] hub 9-0:1.0: USB hub found
[  138.432831][ T8353] hub 9-0:1.0: 8 ports detected
[  139.299683][ T8372] loop0: detected capacity change from 0 to 1024
[  139.307376][ T8372] EXT4-fs: Ignoring removed nobh option
[  139.313090][ T8372] EXT4-fs: Ignoring removed bh option
[  139.328621][ T8372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.345181][ T8372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1526'.
[  139.369995][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.512446][ T8379] netlink: 'syz.1.1528': attribute type 10 has an invalid length.
[  139.520460][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1528'.
[  139.545562][ T8379] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  139.649174][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'.
[  139.690046][ T8387] loop0: detected capacity change from 0 to 512
[  139.723341][ T8389] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  139.734231][ T8389] SELinux: failed to load policy
[  139.740189][ T8387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.752853][ T8387] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.763847][ T8389] hub 9-0:1.0: USB hub found
[  139.768536][ T8389] hub 9-0:1.0: 8 ports detected
[  139.774642][ T8387] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1531: corrupted xattr block 33: invalid header
[  139.789359][ T8387] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  139.798651][ T8387] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1531: corrupted xattr block 33: invalid header
[  139.813341][ T8387] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  139.822760][ T8387] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1531: corrupted xattr block 33: invalid header
[  139.840716][ T8387] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  139.870381][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.911516][   T30] kauditd_printk_skb: 106 callbacks suppressed
[  139.911533][   T30] audit: type=1400 audit(1742051723.220:10482): avc:  denied  { create } for  pid=8392 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  139.919287][ T8396] loop0: detected capacity change from 0 to 128
[  139.951123][   T30] audit: type=1400 audit(1742051723.260:10483): avc:  denied  { read } for  pid=8393 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  139.994239][ T8398] x_tables: duplicate underflow at hook 1
[  140.000852][ T8398] netlink: 'syz.1.1535': attribute type 4 has an invalid length.
[  140.030723][   T30] audit: type=1326 audit(1742051723.340:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  140.054322][   T30] audit: type=1326 audit(1742051723.340:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.4.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  140.182516][ T8407] loop0: detected capacity change from 0 to 2048
[  140.211201][ T8407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.230346][ T8411] lo speed is unknown, defaulting to 1000
[  140.238434][   T30] audit: type=1400 audit(1742051723.550:10486): avc:  denied  { read write } for  pid=8406 comm="syz.0.1539" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  140.261581][   T30] audit: type=1400 audit(1742051723.550:10487): avc:  denied  { open } for  pid=8406 comm="syz.0.1539" path="/349/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  140.285924][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.298448][ T8412] siw: device registration error -23
[  140.327913][ T8414] loop0: detected capacity change from 0 to 512
[  140.342250][ T8414] ext4: Unknown parameter 'uid'
[  140.476179][ T8421] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  140.487187][ T8421] SELinux: failed to load policy
[  140.493292][ T8421] hub 9-0:1.0: USB hub found
[  140.499814][ T8421] hub 9-0:1.0: 8 ports detected
[  140.539158][   T30] audit: type=1400 audit(1742051723.850:10488): avc:  denied  { name_bind } for  pid=8422 comm="syz.4.1545" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  140.583238][ T8425] loop4: detected capacity change from 0 to 2048
[  140.616496][ T8425]  loop4: p1 < > p4
[  140.620867][ T8425] loop4: p4 size 8388608 extends beyond EOD, truncated
[  140.626313][ T8427] loop0: detected capacity change from 0 to 512
[  140.644318][ T8427] loop0: detected capacity change from 0 to 2048
[  140.666239][ T8427]  loop0: p3 p4 < >
[  140.673126][   T30] audit: type=1326 audit(1742051723.980:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  140.697590][   T30] audit: type=1326 audit(1742051724.010:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  140.721354][   T30] audit: type=1326 audit(1742051724.010:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  140.972704][ T8443] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  140.983930][ T8443] SELinux: failed to load policy
[  140.989933][ T8443] hub 9-0:1.0: USB hub found
[  140.994706][ T8443] hub 9-0:1.0: 8 ports detected
[  141.383964][ T8457] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  141.415776][ T8457] SELinux: failed to load policy
[  141.429029][ T8457] hub 9-0:1.0: USB hub found
[  141.440487][ T8457] hub 9-0:1.0: 8 ports detected
[  141.804282][ T8462] loop0: detected capacity change from 0 to 512
[  141.819413][ T8462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  141.857443][ T8462] EXT4-fs (loop0): 1 truncate cleaned up
[  141.865810][ T8462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.916351][ T8462] netlink: 'syz.0.1559': attribute type 10 has an invalid length.
[  141.924241][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1559'.
[  141.959501][ T8462] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  141.988170][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.997356][ T8466] loop4: detected capacity change from 0 to 1024
[  142.004304][ T8466] EXT4-fs: Ignoring removed nobh option
[  142.010098][ T8466] EXT4-fs: Ignoring removed bh option
[  142.027113][ T8466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.052337][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.077272][ T8472] loop4: detected capacity change from 0 to 512
[  142.084461][ T8472] ext4: Unknown parameter 'uid'
[  142.990777][ T8487] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  143.000781][ T8487] SELinux: failed to load policy
[  143.007090][ T8487] hub 9-0:1.0: USB hub found
[  143.012048][ T8487] hub 9-0:1.0: 8 ports detected
[  143.039275][ T8489] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.085872][ T8491] lo speed is unknown, defaulting to 1000
[  143.131942][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'.
[  143.221477][ T8504] loop0: detected capacity change from 0 to 512
[  143.229752][ T8504] EXT4-fs: Ignoring removed orlov option
[  143.236690][ T8507] loop4: detected capacity change from 0 to 512
[  143.237829][ T8504] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1575: corrupted in-inode xattr: invalid ea_ino
[  143.247405][ T8508] lo speed is unknown, defaulting to 1000
[  143.257769][ T8504] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1575: couldn't read orphan inode 15 (err -117)
[  143.274866][ T8504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.309767][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.334897][ T8507] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.372982][ T8504] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1575: bg 0: block 411: padding at end of block bitmap is not set
[  143.383266][ T8507] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1576: corrupted xattr block 33: invalid header
[  143.402184][ T8507] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  143.412429][ T8507] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1576: corrupted xattr block 33: invalid header
[  143.432599][ T8507] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  143.442121][ T8507] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1576: corrupted xattr block 33: invalid header
[  143.464371][ T8507] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  143.508967][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.518402][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.555142][ T8522] loop4: detected capacity change from 0 to 1024
[  143.558835][ T8520] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  143.562048][ T8522] EXT4-fs: Ignoring removed bh option
[  143.571702][ T8520] SELinux: failed to load policy
[  143.579116][ T8522] EXT4-fs: inline encryption not supported
[  143.583934][ T8520] hub 9-0:1.0: USB hub found
[  143.588226][ T8522] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  143.592343][ T8520] hub 9-0:1.0: 8 ports detected
[  143.605028][ T8522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  143.617628][ T8522] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.1580: lblock 2 mapped to illegal pblock 2 (length 1)
[  143.631801][ T8522] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.1580: lblock 0 mapped to illegal pblock 48 (length 1)
[  143.646115][ T8522] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1580: Failed to acquire dquot type 0
[  143.657682][ T8522] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  143.668157][ T8522] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.1580: mark_inode_dirty error
[  143.679754][ T8522] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  143.690208][ T8522] EXT4-fs (loop4): 1 orphan inode deleted
[  143.696850][ T8522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.709378][ T8113] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  143.725035][ T8113] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:13: Failed to release dquot type 0
[  143.737410][ T8522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.748275][ T8522] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.1580: Invalid inode table block 1 in block_group 0
[  143.761241][ T8522] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  143.773258][ T8522] EXT4-fs error (device loop4): ext4_quota_off:7194: inode #3: comm syz.4.1580: mark_inode_dirty error
[  143.802319][ T8522] loop4: detected capacity change from 0 to 512
[  143.809288][ T8522] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  143.822935][ T8522] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  144.363619][ T8535] FAULT_INJECTION: forcing a failure.
[  144.363619][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.376852][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.1.1585 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  144.376883][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.376899][ T8535] Call Trace:
[  144.376906][ T8535]  <TASK>
[  144.376914][ T8535]  dump_stack_lvl+0xf2/0x150
[  144.376949][ T8535]  dump_stack+0x15/0x1a
[  144.376976][ T8535]  should_fail_ex+0x24a/0x260
[  144.377067][ T8535]  should_fail+0xb/0x10
[  144.377137][ T8535]  should_fail_usercopy+0x1a/0x20
[  144.377176][ T8535]  _copy_from_user+0x1c/0xa0
[  144.377267][ T8535]  copy_msghdr_from_user+0x54/0x2a0
[  144.377307][ T8535]  ? __fget_files+0x17c/0x1c0
[  144.377352][ T8535]  __sys_sendmsg+0x13e/0x230
[  144.377437][ T8535]  __x64_sys_sendmsg+0x46/0x50
[  144.377469][ T8535]  x64_sys_call+0x2734/0x2dc0
[  144.377579][ T8535]  do_syscall_64+0xc9/0x1c0
[  144.377618][ T8535]  ? clear_bhb_loop+0x55/0xb0
[  144.377710][ T8535]  ? clear_bhb_loop+0x55/0xb0
[  144.377757][ T8535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.377786][ T8535] RIP: 0033:0x7fd316e6d169
[  144.377804][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.377825][ T8535] RSP: 002b:00007fd3154d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.377904][ T8535] RAX: ffffffffffffffda RBX: 00007fd317085fa0 RCX: 00007fd316e6d169
[  144.377918][ T8535] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003
[  144.377932][ T8535] RBP: 00007fd3154d7090 R08: 0000000000000000 R09: 0000000000000000
[  144.377946][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.377960][ T8535] R13: 0000000000000000 R14: 00007fd317085fa0 R15: 00007ffee3fd04f8
[  144.377982][ T8535]  </TASK>
[  144.605822][ T8540] FAULT_INJECTION: forcing a failure.
[  144.605822][ T8540] name failslab, interval 1, probability 0, space 0, times 0
[  144.618701][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.1.1587 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  144.618793][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.618810][ T8540] Call Trace:
[  144.618817][ T8540]  <TASK>
[  144.618826][ T8540]  dump_stack_lvl+0xf2/0x150
[  144.618862][ T8540]  dump_stack+0x15/0x1a
[  144.618888][ T8540]  should_fail_ex+0x24a/0x260
[  144.618925][ T8540]  should_failslab+0x8f/0xb0
[  144.619029][ T8540]  kmem_cache_alloc_noprof+0x52/0x320
[  144.619056][ T8540]  ? skb_clone+0x154/0x1f0
[  144.619149][ T8540]  skb_clone+0x154/0x1f0
[  144.619182][ T8540]  __netlink_deliver_tap+0x2bd/0x4f0
[  144.619227][ T8540]  netlink_unicast+0x64a/0x670
[  144.619298][ T8540]  netlink_sendmsg+0x5cc/0x6e0
[  144.619344][ T8540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.619421][ T8540]  __sock_sendmsg+0x140/0x180
[  144.619517][ T8540]  ____sys_sendmsg+0x326/0x4b0
[  144.619553][ T8540]  __sys_sendmsg+0x19d/0x230
[  144.619630][ T8540]  __x64_sys_sendmsg+0x46/0x50
[  144.619663][ T8540]  x64_sys_call+0x2734/0x2dc0
[  144.619697][ T8540]  do_syscall_64+0xc9/0x1c0
[  144.619762][ T8540]  ? clear_bhb_loop+0x55/0xb0
[  144.619797][ T8540]  ? clear_bhb_loop+0x55/0xb0
[  144.619923][ T8540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.619954][ T8540] RIP: 0033:0x7fd316e6d169
[  144.619972][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.619995][ T8540] RSP: 002b:00007fd3154d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.620015][ T8540] RAX: ffffffffffffffda RBX: 00007fd317085fa0 RCX: 00007fd316e6d169
[  144.620028][ T8540] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003
[  144.620106][ T8540] RBP: 00007fd3154d7090 R08: 0000000000000000 R09: 0000000000000000
[  144.620127][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.620142][ T8540] R13: 0000000000000000 R14: 00007fd317085fa0 R15: 00007ffee3fd04f8
[  144.620163][ T8540]  </TASK>
[  144.869806][ T8543] loop0: detected capacity change from 0 to 128
[  144.876629][ T8543] EXT4-fs: Ignoring removed nobh option
[  144.880994][ T8545] lo speed is unknown, defaulting to 1000
[  144.898648][ T8543] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.923291][ T8549] siw: device registration error -23
[  144.930973][ T8543] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.004791][ T8543] x_tables: duplicate underflow at hook 1
[  145.025288][ T8543] netlink: 'syz.0.1588': attribute type 4 has an invalid length.
[  145.091190][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.116965][ T8559] loop4: detected capacity change from 0 to 1024
[  145.123468][   T30] kauditd_printk_skb: 119 callbacks suppressed
[  145.123481][   T30] audit: type=1326 audit(1742051728.430:10608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  145.125333][ T8559] EXT4-fs: Ignoring removed nobh option
[  145.131497][   T30] audit: type=1326 audit(1742051728.440:10609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  145.153485][ T8559] EXT4-fs: Ignoring removed bh option
[  145.182732][ T8561] loop0: detected capacity change from 0 to 512
[  145.194560][ T8561] ext4: Unknown parameter 'uid'
[  145.212542][ T8559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.251597][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.278424][ T8566] loop4: detected capacity change from 0 to 512
[  145.285046][ T8566] ext4: Unknown parameter 'uid'
[  145.911846][ T8570] netlink: 'syz.1.1598': attribute type 10 has an invalid length.
[  145.920482][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1598'.
[  145.930152][ T8570] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  146.049267][ T8581] lo speed is unknown, defaulting to 1000
[  146.092628][ T8582] siw: device registration error -23
[  146.133682][ T8584] loop0: detected capacity change from 0 to 512
[  146.149675][ T8588] loop4: detected capacity change from 0 to 128
[  146.156905][ T8588] EXT4-fs: Ignoring removed nobh option
[  146.163605][ T8584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.164175][ T8588] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.177946][ T8584] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.189724][ T8588] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.203867][ T8584] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1603: corrupted xattr block 33: invalid header
[  146.224141][ T8584] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  146.233225][ T8584] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1603: corrupted xattr block 33: invalid header
[  146.249749][ T8588] x_tables: duplicate underflow at hook 1
[  146.257240][ T8584] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  146.266927][ T8584] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1603: corrupted xattr block 33: invalid header
[  146.268331][ T8588] netlink: 'syz.4.1604': attribute type 4 has an invalid length.
[  146.282161][ T8584] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  146.322029][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.322867][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.348923][ T8597] FAULT_INJECTION: forcing a failure.
[  146.348923][ T8597] name failslab, interval 1, probability 0, space 0, times 0
[  146.361620][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.4.1606 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  146.361647][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  146.361659][ T8597] Call Trace:
[  146.361666][ T8597]  <TASK>
[  146.361674][ T8597]  dump_stack_lvl+0xf2/0x150
[  146.361785][ T8597]  dump_stack+0x15/0x1a
[  146.361811][ T8597]  should_fail_ex+0x24a/0x260
[  146.361886][ T8597]  should_failslab+0x8f/0xb0
[  146.361961][ T8597]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  146.361983][ T8597]  ? kstrdup_const+0x3e/0x50
[  146.362076][ T8597]  kstrdup+0x3d/0xd0
[  146.362096][ T8597]  kstrdup_const+0x3e/0x50
[  146.362172][ T8597]  alloc_vfsmnt+0xe5/0x340
[  146.362191][ T8597]  clone_mnt+0x45/0x7a0
[  146.362244][ T8597]  copy_tree+0x2ff/0x850
[  146.362284][ T8597]  copy_mnt_ns+0x121/0x5d0
[  146.362307][ T8597]  ? kmem_cache_alloc_noprof+0x22c/0x320
[  146.362324][ T8597]  ? create_new_namespaces+0x3c/0x430
[  146.362363][ T8597]  create_new_namespaces+0x89/0x430
[  146.362410][ T8597]  ? security_capable+0x81/0x90
[  146.362515][ T8597]  unshare_nsproxy_namespaces+0xe6/0x120
[  146.362539][ T8597]  ksys_unshare+0x3c9/0x6e0
[  146.362710][ T8597]  __x64_sys_unshare+0x1f/0x30
[  146.362738][ T8597]  x64_sys_call+0x1a3e/0x2dc0
[  146.362762][ T8597]  do_syscall_64+0xc9/0x1c0
[  146.362796][ T8597]  ? clear_bhb_loop+0x55/0xb0
[  146.362837][ T8597]  ? clear_bhb_loop+0x55/0xb0
[  146.362907][ T8597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.362930][ T8597] RIP: 0033:0x7f9515d0d169
[  146.362943][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.362958][ T8597] RSP: 002b:00007f9514371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  146.363035][ T8597] RAX: ffffffffffffffda RBX: 00007f9515f25fa0 RCX: 00007f9515d0d169
[  146.363046][ T8597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000
[  146.363056][ T8597] RBP: 00007f9514371090 R08: 0000000000000000 R09: 0000000000000000
[  146.363066][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.363075][ T8597] R13: 0000000000000000 R14: 00007f9515f25fa0 R15: 00007ffea4252fa8
[  146.363091][ T8597]  </TASK>
[  146.595353][ T8599] loop0: detected capacity change from 0 to 1024
[  146.602221][ T8599] EXT4-fs: Ignoring removed nobh option
[  146.608629][ T8599] EXT4-fs: Ignoring removed bh option
[  146.630445][ T8599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.652057][   T30] audit: type=1326 audit(1742051729.960:10610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  146.675650][   T30] audit: type=1326 audit(1742051729.960:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  146.699300][   T30] audit: type=1326 audit(1742051729.960:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  146.723156][   T30] audit: type=1326 audit(1742051729.960:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fafa5fcd1a3 code=0x7ffc0000
[  146.746600][   T30] audit: type=1326 audit(1742051729.970:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafa5fcbc1f code=0x7ffc0000
[  146.770097][   T30] audit: type=1326 audit(1742051729.970:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fafa5fcd1f7 code=0x7ffc0000
[  146.794190][   T30] audit: type=1326 audit(1742051730.040:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafa5fcbad0 code=0x7ffc0000
[  146.794663][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.817793][   T30] audit: type=1326 audit(1742051730.040:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fafa5fcbdca code=0x7ffc0000
[  146.986926][ T8619] loop0: detected capacity change from 0 to 512
[  146.995113][ T8619] ext4: Unknown parameter 'uid'
[  147.006193][ T8610] pimreg: entered allmulticast mode
[  147.029038][ T8621] lo speed is unknown, defaulting to 1000
[  147.037975][ T8610] pimreg: left allmulticast mode
[  147.144649][ T8626] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  147.280238][ T8630] loop0: detected capacity change from 0 to 2048
[  147.336144][ T8630]  loop0: p1 < > p4
[  147.341016][ T8630] loop0: p4 size 8388608 extends beyond EOD, truncated
[  147.385568][ T8632] loop0: detected capacity change from 0 to 512
[  147.399655][ T8632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.413526][ T8632] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.426513][ T8632] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1619: corrupted xattr block 33: invalid header
[  147.440459][ T8632] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  147.450147][ T8632] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1619: corrupted xattr block 33: invalid header
[  147.464017][ T8632] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  147.473482][ T8632] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1619: corrupted xattr block 33: invalid header
[  147.526571][ T8632] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  147.558230][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.631616][ T8638] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  147.642594][ T8638] SELinux: failed to load policy
[  147.648536][ T8638] hub 9-0:1.0: USB hub found
[  147.653511][ T8638] hub 9-0:1.0: 8 ports detected
[  147.700235][ T8641] loop4: detected capacity change from 0 to 1024
[  147.707327][ T8641] EXT4-fs: Ignoring removed nobh option
[  147.712945][ T8641] EXT4-fs: Ignoring removed bh option
[  147.729003][ T8641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.757619][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.805379][ T8649] lo speed is unknown, defaulting to 1000
[  147.848500][ T8651] siw: device registration error -23
[  147.914084][ T8657] loop4: detected capacity change from 0 to 512
[  147.920690][ T8657] ext4: Unknown parameter 'uid'
[  147.950126][ T8659] loop4: detected capacity change from 0 to 512
[  147.958124][ T8659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.970843][ T8659] EXT4-fs (loop4): 1 truncate cleaned up
[  147.978018][ T8659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.044335][ T8659] netlink: 'syz.4.1628': attribute type 10 has an invalid length.
[  148.051127][ T8664] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  148.052312][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1628'.
[  148.062795][ T8664] SELinux: failed to load policy
[  148.080992][ T8664] hub 9-0:1.0: USB hub found
[  148.086420][ T8664] hub 9-0:1.0: 8 ports detected
[  148.093172][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.135777][ T8669] loop4: detected capacity change from 0 to 512
[  148.158488][ T8669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.171937][ T8669] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.184049][ T8669] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1632: corrupted xattr block 33: invalid header
[  148.198259][ T8669] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  148.208469][ T8669] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1632: corrupted xattr block 33: invalid header
[  148.210223][ T8673] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  148.223069][ T8669] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  148.231688][ T8673] SELinux: failed to load policy
[  148.242766][ T8669] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1632: corrupted xattr block 33: invalid header
[  148.249535][ T8673] hub 9-0:1.0: USB hub found
[  148.260324][ T8669] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  148.263357][ T8673] hub 9-0:1.0: 8 ports detected
[  148.288207][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.324516][ T8677] loop4: detected capacity change from 0 to 1024
[  148.331429][ T8677] EXT4-fs: Ignoring removed nobh option
[  148.337198][ T8677] EXT4-fs: Ignoring removed bh option
[  148.347298][ T8677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.365213][ T8681] x_tables: duplicate underflow at hook 1
[  148.372656][ T8681] netlink: 'syz.1.1636': attribute type 4 has an invalid length.
[  148.382123][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.416546][ T8686] lo speed is unknown, defaulting to 1000
[  148.449193][ T8691] loop0: detected capacity change from 0 to 512
[  148.459183][ T8691] ext4: Unknown parameter 'uid'
[  148.460301][ T8692] siw: device registration error -23
[  148.503992][ T8694] bond0: (slave batadv0): Releasing backup interface
[  148.518767][ T8694] bond0: (slave bond_slave_1): Releasing backup interface
[  148.531143][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.538776][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.549348][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.557046][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.577652][ T8694] bond0: (slave bond1): Releasing backup interface
[  148.589324][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'.
[  148.635297][ T8702] loop4: detected capacity change from 0 to 512
[  148.644065][ T8702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  148.666535][ T8702] EXT4-fs (loop4): 1 truncate cleaned up
[  148.679864][ T8702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.741891][ T8709] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  148.752994][ T8709] SELinux: failed to load policy
[  148.758768][ T8709] hub 9-0:1.0: USB hub found
[  148.763449][ T8709] hub 9-0:1.0: 8 ports detected
[  148.771169][ T8711] netlink: 'syz.4.1643': attribute type 10 has an invalid length.
[  148.779711][ T8711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1643'.
[  148.939849][ T8721] x_tables: duplicate underflow at hook 1
[  148.946210][ T8721] netlink: 'syz.3.1650': attribute type 4 has an invalid length.
[  148.990917][ T8725] FAULT_INJECTION: forcing a failure.
[  148.990917][ T8725] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  149.004299][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.3.1652 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  149.004329][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  149.004345][ T8725] Call Trace:
[  149.004353][ T8725]  <TASK>
[  149.004361][ T8725]  dump_stack_lvl+0xf2/0x150
[  149.004389][ T8725]  dump_stack+0x15/0x1a
[  149.004407][ T8725]  should_fail_ex+0x24a/0x260
[  149.004442][ T8725]  should_fail_alloc_page+0xfd/0x110
[  149.004470][ T8725]  __alloc_frozen_pages_noprof+0x109/0x340
[  149.004501][ T8725]  alloc_pages_mpol+0xb4/0x260
[  149.004522][ T8725]  alloc_pages_noprof+0xe8/0x130
[  149.004606][ T8725]  kimage_alloc_control_pages+0x14a/0x730
[  149.004639][ T8725]  do_kexec_load+0x2f5/0x510
[  149.004658][ T8725]  __se_sys_kexec_load+0x12b/0x160
[  149.004676][ T8725]  __x64_sys_kexec_load+0x55/0x70
[  149.004772][ T8725]  x64_sys_call+0x2cac/0x2dc0
[  149.004793][ T8725]  do_syscall_64+0xc9/0x1c0
[  149.004819][ T8725]  ? clear_bhb_loop+0x55/0xb0
[  149.004842][ T8725]  ? clear_bhb_loop+0x55/0xb0
[  149.004864][ T8725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.004915][ T8725] RIP: 0033:0x7fafa5fcd169
[  149.004927][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.004942][ T8725] RSP: 002b:00007fafa4637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  149.004958][ T8725] RAX: ffffffffffffffda RBX: 00007fafa61e5fa0 RCX: 00007fafa5fcd169
[  149.004968][ T8725] RDX: 0000400000000140 RSI: 0000000000000001 RDI: 0000000000000000
[  149.004982][ T8725] RBP: 00007fafa4637090 R08: 0000000000000000 R09: 0000000000000000
[  149.005036][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  149.005051][ T8725] R13: 0000000000000000 R14: 00007fafa61e5fa0 R15: 00007ffc2b3f06d8
[  149.005072][ T8725]  </TASK>
[  149.005080][ T8725] kexec: Could not allocate swap buffer
[  149.222830][ T8727] lo speed is unknown, defaulting to 1000
[  149.265994][ T8728] siw: device registration error -23
[  149.308926][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'.
[  149.351714][ T8736] lo speed is unknown, defaulting to 1000
[  149.394420][ T8738] siw: device registration error -23
[  149.474390][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.516157][ T8744] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  149.526444][ T8744] SELinux: failed to load policy
[  149.532284][ T8744] hub 9-0:1.0: USB hub found
[  149.536975][ T8744] hub 9-0:1.0: 8 ports detected
[  149.642180][ T8756] loop4: detected capacity change from 0 to 128
[  149.649270][ T8756] EXT4-fs: Ignoring removed nobh option
[  149.656502][ T8756] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.668812][ T8756] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.682362][ T8756] x_tables: duplicate underflow at hook 1
[  149.688727][ T8756] netlink: 'syz.4.1662': attribute type 4 has an invalid length.
[  149.707954][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.741383][ T8760] loop4: detected capacity change from 0 to 512
[  149.757085][ T8760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.771565][ T8760] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.783308][ T8760] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1664: corrupted xattr block 33: invalid header
[  149.797908][ T8760] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  149.806950][ T8760] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1664: corrupted xattr block 33: invalid header
[  149.821429][ T8760] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  149.830721][ T8760] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1664: corrupted xattr block 33: invalid header
[  149.845004][ T8760] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  149.851735][ T8763] lo speed is unknown, defaulting to 1000
[  149.867820][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.903219][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'.
[  149.950170][ T8763] chnl_net:caif_netlink_parms(): no params data found
[  150.005449][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.013337][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.022025][ T8763] bridge_slave_0: entered allmulticast mode
[  150.028869][ T8763] bridge_slave_0: entered promiscuous mode
[  150.038303][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.045444][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.052949][ T8763] bridge_slave_1: entered allmulticast mode
[  150.060764][ T8763] bridge_slave_1: entered promiscuous mode
[  150.088626][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.101829][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.126738][ T8763] team0: Port device team_slave_0 added
[  150.133952][ T8763] team0: Port device team_slave_1 added
[  150.155014][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.162807][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.189489][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.201175][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.208173][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.234788][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.270647][ T8763] hsr_slave_0: entered promiscuous mode
[  150.276862][ T8763] hsr_slave_1: entered promiscuous mode
[  150.282797][ T8763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.290496][ T8763] Cannot create hsr debugfs directory
[  150.298991][ T8785] lo speed is unknown, defaulting to 1000
[  150.354545][ T8790] loop0: detected capacity change from 0 to 512
[  150.361974][ T8790] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  150.373460][ T8788] siw: device registration error -23
[  150.381790][ T8790] EXT4-fs (loop0): 1 truncate cleaned up
[  150.460598][ T8793] netlink: 'syz.0.1670': attribute type 10 has an invalid length.
[  150.468566][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1670'.
[  150.553914][ T8763] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  150.563907][ T8797] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  150.574512][ T8797] SELinux: failed to load policy
[  150.583240][ T8793] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  150.602286][ T8763] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  150.619981][ T8763] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  150.632295][ T8797] hub 9-0:1.0: USB hub found
[  150.639153][ T8763] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  150.646000][ T8797] hub 9-0:1.0: 8 ports detected
[  150.668591][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.675710][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.682985][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.690091][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.731409][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.735309][   T30] kauditd_printk_skb: 265 callbacks suppressed
[  150.735326][   T30] audit: type=1400 audit(1742051734.040:10883): avc:  denied  { create } for  pid=8807 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.768196][   T30] audit: type=1400 audit(1742051734.080:10884): avc:  denied  { write } for  pid=8807 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.804414][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.817569][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.831136][   T30] audit: type=1400 audit(1742051734.140:10885): avc:  denied  { mount } for  pid=8814 comm="syz.1.1677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  150.854535][   T30] audit: type=1400 audit(1742051734.140:10886): avc:  denied  { search } for  pid=8814 comm="syz.1.1677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  150.877124][   T30] audit: type=1400 audit(1742051734.140:10887): avc:  denied  { write } for  pid=8814 comm="syz.1.1677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  150.899160][   T30] audit: type=1400 audit(1742051734.140:10888): avc:  denied  { unmount } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  150.912880][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'.
[  150.920125][   T30] audit: type=1326 audit(1742051734.140:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  150.952381][   T30] audit: type=1326 audit(1742051734.140:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  150.978734][ T8763] 8021q: adding VLAN 0 to HW filter on device team0
[  150.982393][   T30] audit: type=1326 audit(1742051734.290:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9515d04127 code=0x7ffc0000
[  151.043636][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.050747][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.062437][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.069673][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.130130][ T8828] lo speed is unknown, defaulting to 1000
[  151.164332][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.182871][ T8834] siw: device registration error -23
[  151.251560][   T30] audit: type=1400 audit(1742051734.560:10892): avc:  denied  { name_connect } for  pid=8842 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  151.275121][ T8847] loop4: detected capacity change from 0 to 128
[  151.305462][ T8847] EXT4-fs: Ignoring removed nobh option
[  151.313748][ T8848] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  151.324995][ T8848] SELinux: failed to load policy
[  151.334579][ T8847] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.346412][ T8848] hub 9-0:1.0: USB hub found
[  151.352069][ T8848] hub 9-0:1.0: 8 ports detected
[  151.363592][ T8847] x_tables: duplicate underflow at hook 1
[  151.370704][ T8847] netlink: 'syz.4.1684': attribute type 4 has an invalid length.
[  151.448778][ T8763] veth0_vlan: entered promiscuous mode
[  151.453723][ T8866] loop4: detected capacity change from 0 to 1024
[  151.461568][ T8763] veth1_vlan: entered promiscuous mode
[  151.464470][ T8866] EXT4-fs: Ignoring removed bh option
[  151.472701][ T8866] EXT4-fs: inline encryption not supported
[  151.480862][ T8866] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  151.492588][ T8866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  151.503542][ T8866] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.1690: lblock 2 mapped to illegal pblock 2 (length 1)
[  151.518997][ T8866] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.1690: lblock 0 mapped to illegal pblock 48 (length 1)
[  151.522286][ T8763] veth0_macvtap: entered promiscuous mode
[  151.540426][ T8763] veth1_macvtap: entered promiscuous mode
[  151.552973][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.563529][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.573623][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.584081][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.594033][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.597134][ T8866] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1690: Failed to acquire dquot type 0
[  151.604577][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.626492][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.635810][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.646376][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.656314][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.666790][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.677049][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.680389][ T8866] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  151.687502][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.688349][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.715319][ T8866] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.1690: mark_inode_dirty error
[  151.735371][ T8763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.744250][ T8763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.753047][ T8763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.762517][ T8763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.777498][ T8866] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  151.788703][ T8866] EXT4-fs (loop4): 1 orphan inode deleted
[  151.799393][ T8139] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.837360][ T8139] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:36: Failed to release dquot type 0
[  151.864115][ T8866] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.1690: Invalid inode table block 1 in block_group 0
[  151.887664][ T8866] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  151.907419][ T8866] EXT4-fs error (device loop4): ext4_quota_off:7194: inode #3: comm syz.4.1690: mark_inode_dirty error
[  151.920015][ T8873] lo speed is unknown, defaulting to 1000
[  151.930712][ T8877] netlink: 'syz.1.1693': attribute type 10 has an invalid length.
[  151.938611][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1693'.
[  151.955767][ T8879] loop7: detected capacity change from 0 to 512
[  151.972514][ T8879] ext4: Unknown parameter 'uid'
[  151.983506][ T8877] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  152.005584][ T8880] siw: device registration error -23
[  152.033252][ T8866] loop4: detected capacity change from 0 to 512
[  152.041113][ T8866] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  152.054610][ T8866] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  152.120035][ T8882] loop7: detected capacity change from 0 to 1024
[  152.133627][ T8882] EXT4-fs: Ignoring removed bh option
[  152.145013][ T8882] EXT4-fs: inline encryption not supported
[  152.158498][ T8882] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.176917][ T8882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  152.203071][ T8882] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.1695: lblock 2 mapped to illegal pblock 2 (length 1)
[  152.219687][ T8882] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 48: comm syz.7.1695: lblock 0 mapped to illegal pblock 48 (length 1)
[  152.245981][ T8882] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1695: Failed to acquire dquot type 0
[  152.301570][ T8891] loop4: detected capacity change from 0 to 2048
[  152.310283][ T8882] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  152.321642][ T8891] EXT4-fs: Ignoring removed bh option
[  152.329407][ T8882] EXT4-fs error (device loop7): ext4_evict_inode:256: inode #11: comm syz.7.1695: mark_inode_dirty error
[  152.343658][ T8882] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  152.354592][ T8882] EXT4-fs (loop7): 1 orphan inode deleted
[  152.361302][ T8139] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.361652][ T8893] x_tables: duplicate underflow at hook 1
[  152.376738][ T8139] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:36: Failed to release dquot type 0
[  152.406236][ T8893] netlink: 'syz.3.1699': attribute type 4 has an invalid length.
[  152.435478][ T8882] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.1695: Invalid inode table block 1 in block_group 0
[  152.461153][ T8882] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  152.497673][ T8882] EXT4-fs error (device loop7): ext4_quota_off:7194: inode #3: comm syz.7.1695: mark_inode_dirty error
[  152.510705][ T8899] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  152.522138][ T8899] SELinux: failed to load policy
[  152.530546][ T8899] hub 9-0:1.0: USB hub found
[  152.535407][ T8899] hub 9-0:1.0: 8 ports detected
[  152.540459][ T8882] loop7: detected capacity change from 0 to 512
[  152.547791][ T8882] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  152.561237][ T8882] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  152.638095][ T8905] loop0: detected capacity change from 0 to 512
[  152.647694][ T8905] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.659180][ T8905] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1702: corrupted xattr block 33: invalid header
[  152.673462][ T8905] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  152.683377][ T8905] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1702: corrupted xattr block 33: invalid header
[  152.696825][ T8905] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  152.706970][ T8905] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1702: corrupted xattr block 33: invalid header
[  152.720412][ T8905] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  152.754536][ T8913] loop0: detected capacity change from 0 to 512
[  152.761216][ T8913] ext4: Unknown parameter 'uid'
[  152.847045][ T8918] xt_hashlimit: max too large, truncated to 1048576
[  153.004388][ T8929] geneve0: entered allmulticast mode
[  153.431288][ T8932] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  153.448513][ T8932] SELinux: failed to load policy
[  153.747616][ T8589] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  154.020639][ T8139] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 2048 with error 28
[  154.033483][ T8139] EXT4-fs (loop4): This should not happen!! Data will be lost
[  154.033483][ T8139] 
[  154.043243][ T8139] EXT4-fs (loop4): Total free blocks count 0
[  154.049268][ T8139] EXT4-fs (loop4): Free/Dirty block details
[  154.055178][ T8139] EXT4-fs (loop4): free_blocks=2415919104
[  154.060935][ T8139] EXT4-fs (loop4): dirty_blocks=8208
[  154.066296][ T8139] EXT4-fs (loop4): Block reservation details
[  154.072284][ T8139] EXT4-fs (loop4): i_reserved_data_blocks=513
[  154.103593][ T8127] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2068 with max blocks 2048 with error 28
[  154.116395][ T8127] EXT4-fs (loop4): This should not happen!! Data will be lost
[  154.116395][ T8127] 
[  154.189926][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'.
[  154.351374][ T8943] netlink: 'syz.3.1715': attribute type 10 has an invalid length.
[  154.359284][ T8943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1715'.
[  154.370012][ T8943] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  154.752250][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'.
[  154.861150][ T8948] FAULT_INJECTION: forcing a failure.
[  154.861150][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.874302][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.4.1711 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  154.874347][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  154.874361][ T8948] Call Trace:
[  154.874367][ T8948]  <TASK>
[  154.874374][ T8948]  dump_stack_lvl+0xf2/0x150
[  154.874404][ T8948]  dump_stack+0x15/0x1a
[  154.874425][ T8948]  should_fail_ex+0x24a/0x260
[  154.874503][ T8948]  should_fail+0xb/0x10
[  154.874527][ T8948]  should_fail_usercopy+0x1a/0x20
[  154.874618][ T8948]  fpu__restore_sig+0x11d/0xb00
[  154.874641][ T8948]  ? copy_fpstate_to_sigframe+0x6e6/0x7e0
[  154.874745][ T8948]  restore_sigcontext+0x1b5/0x220
[  154.874853][ T8948]  __do_sys_rt_sigreturn+0xfd/0x160
[  154.874876][ T8948]  x64_sys_call+0x2982/0x2dc0
[  154.874900][ T8948]  do_syscall_64+0xc9/0x1c0
[  154.874962][ T8948]  ? clear_bhb_loop+0x55/0xb0
[  154.874994][ T8948]  ? clear_bhb_loop+0x55/0xb0
[  154.875080][ T8948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.875106][ T8948] RIP: 0033:0x7f9515d0d169
[  154.875123][ T8948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.875141][ T8948] RSP: 002b:00007f9514371038 EFLAGS: 00000246
[  154.875155][ T8948] RAX: 0000000000000000 RBX: 00007f9515f25fa0 RCX: 00007f9515d0d169
[  154.875290][ T8948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  154.875303][ T8948] RBP: 00007f9514371090 R08: 0000000000000000 R09: 0000000000000000
[  154.875317][ T8948] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  154.875330][ T8948] R13: 0000000000000000 R14: 00007f9515f25fa0 R15: 00007ffea4252fa8
[  154.875352][ T8948]  </TASK>
[  155.091991][ T8977] loop4: detected capacity change from 0 to 512
[  155.094762][ T8975] x_tables: duplicate underflow at hook 1
[  155.128451][ T8975] netlink: 'syz.1.1726': attribute type 4 has an invalid length.
[  155.137521][ T8977] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.146827][ T8972] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  155.151671][ T8977] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1727: corrupted xattr block 33: invalid header
[  155.171035][ T8972] SELinux: failed to load policy
[  155.171882][ T8972] hub 9-0:1.0: USB hub found
[  155.181325][ T8972] hub 9-0:1.0: 8 ports detected
[  155.195562][ T8977] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  155.204561][ T8977] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1727: corrupted xattr block 33: invalid header
[  155.212898][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'.
[  155.218080][ T8977] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  155.236042][ T8977] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1727: corrupted xattr block 33: invalid header
[  155.249690][ T8977] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  155.320955][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'.
[  155.390010][ T8998] xt_hashlimit: max too large, truncated to 1048576
[  155.433963][ T9007] loop7: detected capacity change from 0 to 512
[  155.456523][ T9007] ext4: Unknown parameter 'uid'
[  155.472654][ T9009] x_tables: duplicate underflow at hook 1
[  155.486802][ T9009] netlink: 'syz.1.1738': attribute type 4 has an invalid length.
[  155.813874][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'.
[  156.169700][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  156.169715][   T30] audit: type=1326 audit(1742051739.480:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  156.204519][   T30] audit: type=1326 audit(1742051739.510:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  156.633908][ T9025] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  156.643957][ T9025] SELinux: failed to load policy
[  156.649622][ T9025] hub 9-0:1.0: USB hub found
[  156.654380][ T9025] hub 9-0:1.0: 8 ports detected
[  156.809829][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1744'.
[  156.823372][ T9035] lo speed is unknown, defaulting to 1000
[  156.954202][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.961470][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.981875][ T9033] bridge0: entered allmulticast mode
[  157.087273][ T9049] bridge0: entered allmulticast mode
[  157.152902][ T9051] loop7: detected capacity change from 0 to 128
[  157.159922][ T9051] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  157.194874][ T9051] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  157.217656][   T30] audit: type=1326 audit(1742051740.460:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.241367][   T30] audit: type=1326 audit(1742051740.460:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.265166][   T30] audit: type=1326 audit(1742051740.460:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.288942][   T30] audit: type=1326 audit(1742051740.460:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.312544][   T30] audit: type=1326 audit(1742051740.460:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.336062][   T30] audit: type=1326 audit(1742051740.460:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f893209d169 code=0x7ffc0000
[  157.359689][   T30] audit: type=1326 audit(1742051740.460:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f893209d1a3 code=0x7ffc0000
[  157.383098][   T30] audit: type=1326 audit(1742051740.460:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.7.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f893209bc1f code=0x7ffc0000
[  157.496574][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'.
[  157.518340][ T8122] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  157.555325][ T9066] xt_hashlimit: max too large, truncated to 1048576
[  157.558539][ T9064] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  157.572357][ T9064] SELinux: failed to load policy
[  157.578356][ T9064] hub 9-0:1.0: USB hub found
[  157.583165][ T9064] hub 9-0:1.0: 8 ports detected
[  157.751263][ T9072] loop0: detected capacity change from 0 to 512
[  157.758352][ T9072] ext4: Unknown parameter 'uid'
[  157.793559][ T9076] lo speed is unknown, defaulting to 1000
[  157.835013][ T9077] siw: device registration error -23
[  158.690031][ T9083] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1764'.
[  158.785148][ T9087] loop7: detected capacity change from 0 to 2048
[  158.815970][ T9087]  loop7: p1 < > p4
[  158.821742][ T9087] loop7: p4 size 8388608 extends beyond EOD, truncated
[  158.855047][ T9092] bridge0: entered allmulticast mode
[  158.921122][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'.
[  158.951451][ T9097] loop7: detected capacity change from 0 to 512
[  159.034402][ T9108] loop4: detected capacity change from 0 to 128
[  159.050566][ T9108] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  159.064886][ T9097] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.089101][ T9108] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.106213][ T9095] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1779: corrupted xattr block 33: invalid header
[  159.143301][ T9095] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  159.164773][ T9095] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1779: corrupted xattr block 33: invalid header
[  159.220470][ T9095] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  159.237586][ T9095] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1779: corrupted xattr block 33: invalid header
[  159.294999][ T8127] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.305043][ T9095] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  159.361114][ T9122] loop4: detected capacity change from 0 to 512
[  159.372250][ T9122] ext4: Unknown parameter 'uid'
[  159.515991][ T9125] loop7: detected capacity change from 0 to 1024
[  159.522891][ T9125] EXT4-fs: Ignoring removed nobh option
[  159.529117][ T9125] EXT4-fs: Ignoring removed bh option
[  159.540565][ T9125] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1777'.
[  159.549998][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1777'.
[  159.581849][ T9129] xt_hashlimit: max too large, truncated to 1048576
[  161.054246][ T9144] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  161.076368][ T9144] SELinux: failed to load policy
[  161.088843][ T9144] hub 9-0:1.0: USB hub found
[  161.099158][ T9144] hub 9-0:1.0: 8 ports detected
[  161.201986][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'.
[  161.248238][   T30] kauditd_printk_skb: 114 callbacks suppressed
[  161.248255][   T30] audit: type=1400 audit(1742051744.560:11072): avc:  denied  { validate_trans } for  pid=9153 comm="syz.7.1787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  161.285992][ T9161] FAULT_INJECTION: forcing a failure.
[  161.285992][ T9161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.299376][ T9161] CPU: 1 UID: 0 PID: 9161 Comm: syz.4.1788 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  161.299403][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  161.299417][ T9161] Call Trace:
[  161.299424][ T9161]  <TASK>
[  161.299432][ T9161]  dump_stack_lvl+0xf2/0x150
[  161.299465][ T9161]  dump_stack+0x15/0x1a
[  161.299494][ T9161]  should_fail_ex+0x24a/0x260
[  161.299532][ T9161]  should_fail+0xb/0x10
[  161.299560][ T9161]  should_fail_usercopy+0x1a/0x20
[  161.299597][ T9161]  _copy_to_user+0x20/0xa0
[  161.299620][ T9161]  simple_read_from_buffer+0xa0/0x110
[  161.299690][ T9161]  proc_fail_nth_read+0xf9/0x140
[  161.299720][ T9161]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.299749][ T9161]  vfs_read+0x19b/0x6f0
[  161.299775][ T9161]  ? __rcu_read_unlock+0x4e/0x70
[  161.299875][ T9161]  ? __fget_files+0x17c/0x1c0
[  161.299913][ T9161]  ksys_read+0xe8/0x1b0
[  161.299939][ T9161]  __x64_sys_read+0x42/0x50
[  161.299966][ T9161]  x64_sys_call+0x2874/0x2dc0
[  161.299995][ T9161]  do_syscall_64+0xc9/0x1c0
[  161.300048][ T9161]  ? clear_bhb_loop+0x55/0xb0
[  161.300075][ T9161]  ? clear_bhb_loop+0x55/0xb0
[  161.300163][ T9161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.300234][ T9161] RIP: 0033:0x7f9515d0bb7c
[  161.300251][ T9161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  161.300268][ T9161] RSP: 002b:00007f9514350030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  161.300286][ T9161] RAX: ffffffffffffffda RBX: 00007f9515f26080 RCX: 00007f9515d0bb7c
[  161.300298][ T9161] RDX: 000000000000000f RSI: 00007f95143500a0 RDI: 0000000000000004
[  161.300311][ T9161] RBP: 00007f9514350090 R08: 0000000000000000 R09: 0000000000000000
[  161.300399][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.300412][ T9161] R13: 0000000000000000 R14: 00007f9515f26080 R15: 00007ffea4252fa8
[  161.300432][ T9161]  </TASK>
[  161.578106][ T9150] loop0: detected capacity change from 0 to 512
[  161.593219][ T9150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.604252][ T9168] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1792'.
[  161.623549][ T9172] xt_hashlimit: max too large, truncated to 1048576
[  161.633962][ T9150] EXT4-fs (loop0): 1 truncate cleaned up
[  161.642777][ T9150] netlink: 'syz.0.1785': attribute type 10 has an invalid length.
[  161.650711][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1785'.
[  161.666030][ T9150] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  161.694968][   T30] audit: type=1326 audit(1742051745.000:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.761559][   T30] audit: type=1326 audit(1742051745.030:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.785062][   T30] audit: type=1326 audit(1742051745.030:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.808589][   T30] audit: type=1326 audit(1742051745.040:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.832201][   T30] audit: type=1326 audit(1742051745.040:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.855780][   T30] audit: type=1326 audit(1742051745.040:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.879372][   T30] audit: type=1326 audit(1742051745.040:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.902839][   T30] audit: type=1326 audit(1742051745.040:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  161.926381][   T30] audit: type=1326 audit(1742051745.040:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9515d0d169 code=0x7ffc0000
[  162.470894][ T9185] lo speed is unknown, defaulting to 1000
[  162.571319][ T9186] siw: device registration error -23
[  162.670938][ T9190] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  162.682257][ T9190] SELinux: failed to load policy
[  162.687822][ T9190] hub 9-0:1.0: USB hub found
[  162.692569][ T9190] hub 9-0:1.0: 8 ports detected
[  162.783341][ T3304] EXT4-fs unmount: 19 callbacks suppressed
[  162.783357][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.829448][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.839285][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.193799][ T9208] loop4: detected capacity change from 0 to 2048
[  163.255916][ T9208]  loop4: p1 < > p4
[  163.260363][ T9208] loop4: p4 size 8388608 extends beyond EOD, truncated
[  163.406128][ T9212] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1810'.
[  163.415725][ T9216] xt_hashlimit: max too large, truncated to 1048576
[  163.434590][ T9217] netlink: 'syz.4.1809': attribute type 10 has an invalid length.
[  163.442701][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1809'.
[  163.523778][ T9219] netlink: 'syz.3.1812': attribute type 13 has an invalid length.
[  163.531687][ T9219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1812'.
[  163.559213][ T9219] syz_tun: refused to change device tx_queue_len
[  163.565832][ T9219] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  163.624842][ T9227] loop0: detected capacity change from 0 to 512
[  163.655947][ T9227] ext4: Unknown parameter 'uid'
[  165.007228][ T9251] FAULT_INJECTION: forcing a failure.
[  165.007228][ T9251] name failslab, interval 1, probability 0, space 0, times 0
[  165.020132][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.1.1821 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  165.020160][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  165.020174][ T9251] Call Trace:
[  165.020182][ T9251]  <TASK>
[  165.020190][ T9251]  dump_stack_lvl+0xf2/0x150
[  165.020276][ T9251]  dump_stack+0x15/0x1a
[  165.020319][ T9251]  should_fail_ex+0x24a/0x260
[  165.020356][ T9251]  should_failslab+0x8f/0xb0
[  165.020427][ T9251]  __kmalloc_noprof+0xab/0x3f0
[  165.020449][ T9251]  ? alloc_workqueue+0x17b/0x1300
[  165.020496][ T9251]  ? mod_objcg_state+0x3b1/0x4f0
[  165.020525][ T9251]  alloc_workqueue+0x17b/0x1300
[  165.020559][ T9251]  ? should_fail_ex+0x31/0x260
[  165.020675][ T9251]  ? __rcu_read_unlock+0x4e/0x70
[  165.020703][ T9251]  ? mutex_lock+0xd/0x40
[  165.020728][ T9251]  ? bd_prepare_to_claim+0x1be/0x230
[  165.020755][ T9251]  ? __pfx_loop_configure+0x10/0x10
[  165.020863][ T9251]  ? loop_set_status_from_info+0x10f/0x160
[  165.020961][ T9251]  loop_configure+0x5f7/0xa50
[  165.021013][ T9251]  lo_ioctl+0x613/0x14f0
[  165.021101][ T9251]  ? __rcu_read_unlock+0x4e/0x70
[  165.021123][ T9251]  ? avc_has_extended_perms+0x6e9/0x8e0
[  165.021159][ T9251]  ? blkdev_common_ioctl+0xabc/0x1940
[  165.021181][ T9251]  ? do_vfs_ioctl+0x98b/0x1590
[  165.021264][ T9251]  ? selinux_file_ioctl+0x2f7/0x380
[  165.021299][ T9251]  ? __pfx_lo_ioctl+0x10/0x10
[  165.021334][ T9251]  blkdev_ioctl+0x359/0x450
[  165.021412][ T9251]  ? __pfx_blkdev_ioctl+0x10/0x10
[  165.021435][ T9251]  __se_sys_ioctl+0xc9/0x140
[  165.021466][ T9251]  __x64_sys_ioctl+0x43/0x50
[  165.021493][ T9251]  x64_sys_call+0x1690/0x2dc0
[  165.021519][ T9251]  do_syscall_64+0xc9/0x1c0
[  165.021567][ T9251]  ? clear_bhb_loop+0x55/0xb0
[  165.021599][ T9251]  ? clear_bhb_loop+0x55/0xb0
[  165.021627][ T9251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.021658][ T9251] RIP: 0033:0x7fd316e6d169
[  165.021724][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.021742][ T9251] RSP: 002b:00007fd3154d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.021762][ T9251] RAX: ffffffffffffffda RBX: 00007fd317085fa0 RCX: 00007fd316e6d169
[  165.021774][ T9251] RDX: 00004000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003
[  165.021786][ T9251] RBP: 00007fd3154d7090 R08: 0000000000000000 R09: 0000000000000000
[  165.021797][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.021808][ T9251] R13: 0000000000000000 R14: 00007fd317085fa0 R15: 00007ffee3fd04f8
[  165.021860][ T9251]  </TASK>
[  165.350155][ T9254] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  165.360625][ T9254] SELinux: failed to load policy
[  165.366642][ T9254] hub 9-0:1.0: USB hub found
[  165.371414][ T9254] hub 9-0:1.0: 8 ports detected
[  165.392426][ T9255] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1822'.
[  165.484846][ T9262] netlink: 'syz.4.1827': attribute type 10 has an invalid length.
[  165.484863][ T9262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1827'.
[  165.571244][ T9273] loop0: detected capacity change from 0 to 512
[  165.583322][ T9275] loop7: detected capacity change from 0 to 1024
[  165.595020][ T9273] EXT4-fs: Ignoring removed nobh option
[  165.605137][ T9275] EXT4-fs: Ignoring removed bh option
[  165.611985][ T9273] EXT4-fs: inline encryption not supported
[  165.622386][ T9275] EXT4-fs: inline encryption not supported
[  165.630776][ T9275] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  165.649363][ T9273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.665251][ T9273] ext4 filesystem being mounted at /406/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.665403][ T9286] loop4: detected capacity change from 0 to 512
[  165.693449][ T9275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  165.712145][ T9275] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.1832: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.727156][ T9275] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 48: comm syz.7.1832: lblock 0 mapped to illegal pblock 48 (length 1)
[  165.741859][ T9275] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1832: Failed to acquire dquot type 0
[  165.742317][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.762200][ T9275] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  165.775608][ T9286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.789137][ T9286] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.792494][ T9275] EXT4-fs error (device loop7): ext4_evict_inode:256: inode #11: comm syz.7.1832: mark_inode_dirty error
[  165.818746][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1834: corrupted xattr block 33: invalid header
[  165.839098][ T9303] netlink: 'syz.1.1839': attribute type 10 has an invalid length.
[  165.847042][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1839'.
[  165.847216][ T9286] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  165.857057][ T9303] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  165.866859][ T9275] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  165.893189][ T9301] loop0: detected capacity change from 0 to 512
[  165.900889][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1834: corrupted xattr block 33: invalid header
[  165.914222][ T9275] EXT4-fs (loop7): 1 orphan inode deleted
[  165.916647][ T9286] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  165.921526][ T9275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.930956][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1834: corrupted xattr block 33: invalid header
[  165.954704][ T8119] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  165.972980][ T9301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.977520][ T8119] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:19: Failed to release dquot type 0
[  165.985683][ T9301] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.014635][ T9286] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  166.028993][ T9301] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1837: corrupted xattr block 33: invalid header
[  166.044689][ T9301] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  166.057398][ T9301] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1837: corrupted xattr block 33: invalid header
[  166.073451][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.084545][ T9301] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  166.097458][ T8763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.116172][ T8763] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0
[  166.130767][ T9301] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1837: corrupted xattr block 33: invalid header
[  166.134075][ T9310] loop4: detected capacity change from 0 to 512
[  166.151782][ T9301] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  166.152339][ T8763] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  166.161633][ T9310] ext4: Unknown parameter 'uid'
[  166.181242][ T8763] EXT4-fs error (device loop7): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error
[  166.197527][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.359103][ T9322] lo speed is unknown, defaulting to 1000
[  166.370720][ T9325] loop0: detected capacity change from 0 to 2048
[  166.401830][ T9327] siw: device registration error -23
[  166.436099][ T9325]  loop0: p1 < > p4
[  166.440650][ T9325] loop0: p4 size 8388608 extends beyond EOD, truncated
[  166.542085][ T9330] loop0: detected capacity change from 0 to 1024
[  166.560700][ T9330] EXT4-fs: Ignoring removed bh option
[  166.569061][ T9330] EXT4-fs: inline encryption not supported
[  166.579486][ T9338] netlink: 'syz.4.1850': attribute type 10 has an invalid length.
[  166.587469][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1850'.
[  166.601671][ T9330] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.634188][ T9330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  166.667898][ T9336] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  166.691921][ T9330] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.1849: lblock 2 mapped to illegal pblock 2 (length 1)
[  166.709005][ T9336] SELinux: failed to load policy
[  166.715388][ T9336] hub 9-0:1.0: USB hub found
[  166.720361][ T9330] __quota_error: 57 callbacks suppressed
[  166.720403][ T9330] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  166.734574][ T9336] hub 9-0:1.0: 8 ports detected
[  166.741843][ T9330] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.1849: lblock 0 mapped to illegal pblock 48 (length 1)
[  166.758928][ T9330] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  166.767915][ T9330] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1849: Failed to acquire dquot type 0
[  166.781194][ T9330] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  166.788334][ T9348] loop4: detected capacity change from 0 to 512
[  166.801537][ T9330] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.1849: mark_inode_dirty error
[  166.810638][ T9348] ext4: Unknown parameter 'uid'
[  166.813076][ T9330] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  166.828599][ T9330] EXT4-fs (loop0): 1 orphan inode deleted
[  166.834857][ T9330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.848148][ T8139] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.880233][ T8139] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  166.888808][ T8139] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:36: Failed to release dquot type 0
[  166.901685][ T9330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.904205][ T9354] loop7: detected capacity change from 0 to 2048
[  166.911862][ T9330] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.1849: Invalid inode table block 1 in block_group 0
[  166.930315][ T9356] loop4: detected capacity change from 0 to 512
[  166.937303][ T9330] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  166.948497][ T9354]  loop7: p1 < > p4
[  166.952634][ T9356] ext4: Unknown parameter 'uid'
[  166.958401][ T9354] loop7: p4 size 8388608 extends beyond EOD, truncated
[  166.965027][ T9358] lo speed is unknown, defaulting to 1000
[  166.965379][ T9330] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz.0.1849: mark_inode_dirty error
[  167.019960][ T9359] siw: device registration error -23
[  167.038421][ T9361] loop7: detected capacity change from 0 to 1024
[  167.045826][ T9361] EXT4-fs: Ignoring removed bh option
[  167.051319][ T9361] EXT4-fs: inline encryption not supported
[  167.071947][ T9361] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  167.094876][ T9361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  167.118445][ T9361] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.1863: lblock 2 mapped to illegal pblock 2 (length 1)
[  167.147416][ T9361] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  167.152963][ T9367] netlink: 'syz.3.1865': attribute type 10 has an invalid length.
[  167.155874][ T9361] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 48: comm syz.7.1863: lblock 0 mapped to illegal pblock 48 (length 1)
[  167.163427][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1865'.
[  167.169796][ T9367] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  167.181649][ T9369] FAULT_INJECTION: forcing a failure.
[  167.181649][ T9369] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  167.216479][ T9369] CPU: 1 UID: 0 PID: 9369 Comm: syz.1.1866 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  167.216504][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  167.216524][ T9369] Call Trace:
[  167.216531][ T9369]  <TASK>
[  167.216540][ T9369]  dump_stack_lvl+0xf2/0x150
[  167.216571][ T9369]  dump_stack+0x15/0x1a
[  167.216598][ T9369]  should_fail_ex+0x24a/0x260
[  167.216632][ T9369]  should_fail_alloc_page+0xfd/0x110
[  167.216667][ T9369]  alloc_pages_bulk_noprof+0xfd/0x570
[  167.216810][ T9369]  copy_splice_read+0xe5/0x5b0
[  167.216844][ T9369]  ? __pfx_copy_splice_read+0x10/0x10
[  167.216871][ T9369]  splice_direct_to_actor+0x269/0x670
[  167.216899][ T9369]  ? __pfx_direct_splice_actor+0x10/0x10
[  167.216932][ T9369]  do_splice_direct+0xd7/0x150
[  167.216971][ T9369]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  167.217016][ T9369]  do_sendfile+0x398/0x660
[  167.217039][ T9369]  __x64_sys_sendfile64+0x110/0x150
[  167.217072][ T9369]  x64_sys_call+0xfbd/0x2dc0
[  167.217097][ T9369]  do_syscall_64+0xc9/0x1c0
[  167.217156][ T9369]  ? clear_bhb_loop+0x55/0xb0
[  167.217187][ T9369]  ? clear_bhb_loop+0x55/0xb0
[  167.217216][ T9369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.217243][ T9369] RIP: 0033:0x7fd316e6d169
[  167.217260][ T9369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.217286][ T9369] RSP: 002b:00007fd3154d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  167.217374][ T9369] RAX: ffffffffffffffda RBX: 00007fd317085fa0 RCX: 00007fd316e6d169
[  167.217388][ T9369] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[  167.217401][ T9369] RBP: 00007fd3154d7090 R08: 0000000000000000 R09: 0000000000000000
[  167.217413][ T9369] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001
[  167.217426][ T9369] R13: 0000000000000000 R14: 00007fd317085fa0 R15: 00007ffee3fd04f8
[  167.217494][ T9369]  </TASK>
[  167.409988][ T9361] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  167.419595][ T9361] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1863: Failed to acquire dquot type 0
[  167.431213][ T9361] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  167.472237][   T30] audit: type=1326 audit(1742051750.780:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  167.500848][ T9361] EXT4-fs error (device loop7): ext4_evict_inode:256: inode #11: comm syz.7.1863: mark_inode_dirty error
[  167.516134][   T30] audit: type=1326 audit(1742051750.810:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  167.540604][   T30] audit: type=1326 audit(1742051750.810:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  167.564368][   T30] audit: type=1326 audit(1742051750.810:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  167.588877][   T30] audit: type=1326 audit(1742051750.810:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafa5fcd169 code=0x7ffc0000
[  167.623643][ T9361] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  167.635168][ T9361] EXT4-fs (loop7): 1 orphan inode deleted
[  167.641297][ T9361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.655600][ T8119] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.694103][ T9379] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  167.697569][ T8119] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:19: Failed to release dquot type 0
[  167.717424][ T9379] SELinux: failed to load policy
[  167.723536][ T9361] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.740669][ T9361] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.1863: Invalid inode table block 1 in block_group 0
[  167.754664][ T9361] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  167.765277][ T9379] hub 9-0:1.0: USB hub found
[  167.770148][ T9379] hub 9-0:1.0: 8 ports detected
[  167.780249][ T9361] EXT4-fs error (device loop7): ext4_quota_off:7194: inode #3: comm syz.7.1863: mark_inode_dirty error
[  167.801554][ T9361] loop7: detected capacity change from 0 to 512
[  167.810107][ T9361] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  167.823555][ T9361] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  167.895197][ T9390] loop0: detected capacity change from 0 to 128
[  167.910677][ T9390] EXT4-fs: Ignoring removed nobh option
[  167.933476][ T9390] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  167.960405][ T9390] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  167.982142][ T9390] x_tables: duplicate underflow at hook 1
[  168.015066][ T9390] netlink: 'syz.0.1874': attribute type 4 has an invalid length.
[  168.038825][ T9395] loop7: detected capacity change from 0 to 512
[  168.049433][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.072769][ T9395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.086990][ T9395] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.104137][ T9395] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1876: corrupted xattr block 33: invalid header
[  168.125366][ T9399] loop0: detected capacity change from 0 to 1024
[  168.132533][ T9399] EXT4-fs: Ignoring removed nobh option
[  168.138168][ T9399] EXT4-fs: Ignoring removed bh option
[  168.145116][ T9395] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  168.154214][ T9395] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1876: corrupted xattr block 33: invalid header
[  168.169530][ T9395] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  168.178830][ T9395] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1876: corrupted xattr block 33: invalid header
[  168.194250][ T9395] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  168.218311][ T9399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.233397][ T8763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.246602][ T9399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1877'.
[  168.278089][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.326642][ T9407] FAULT_INJECTION: forcing a failure.
[  168.326642][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.339953][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.0.1879 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  168.339983][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  168.340000][ T9407] Call Trace:
[  168.340007][ T9407]  <TASK>
[  168.340076][ T9407]  dump_stack_lvl+0xf2/0x150
[  168.340119][ T9407]  dump_stack+0x15/0x1a
[  168.340141][ T9407]  should_fail_ex+0x24a/0x260
[  168.340171][ T9407]  should_fail+0xb/0x10
[  168.340202][ T9407]  should_fail_usercopy+0x1a/0x20
[  168.340296][ T9407]  _copy_from_user+0x1c/0xa0
[  168.340317][ T9407]  copy_msghdr_from_user+0x54/0x2a0
[  168.340358][ T9407]  ? __fget_files+0x17c/0x1c0
[  168.340404][ T9407]  __sys_sendmsg+0x13e/0x230
[  168.340454][ T9407]  __x64_sys_sendmsg+0x46/0x50
[  168.340538][ T9407]  x64_sys_call+0x2734/0x2dc0
[  168.340570][ T9407]  do_syscall_64+0xc9/0x1c0
[  168.340602][ T9407]  ? clear_bhb_loop+0x55/0xb0
[  168.340642][ T9407]  ? clear_bhb_loop+0x55/0xb0
[  168.340756][ T9407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.340789][ T9407] RIP: 0033:0x7f993bf9d169
[  168.340807][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.340826][ T9407] RSP: 002b:00007f993a607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.340858][ T9407] RAX: ffffffffffffffda RBX: 00007f993c1b5fa0 RCX: 00007f993bf9d169
[  168.340872][ T9407] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003
[  168.340885][ T9407] RBP: 00007f993a607090 R08: 0000000000000000 R09: 0000000000000000
[  168.340899][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.340911][ T9407] R13: 0000000000000000 R14: 00007f993c1b5fa0 R15: 00007ffee3fe4fc8
[  168.340929][ T9407]  </TASK>
[  168.522972][ T9409] loop7: detected capacity change from 0 to 512
[  168.550410][ T9409] EXT4-fs (loop7): 1 orphan inode deleted
[  168.556611][ T9409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.570572][ T8127] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:27: Failed to release dquot type 1
[  168.593849][ T9409] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.616229][ T9409] bridge0: port 3(macsec1) entered blocking state
[  168.622776][ T9409] bridge0: port 3(macsec1) entered disabled state
[  168.630056][ T9409] macsec1: entered allmulticast mode
[  168.639001][ T9409] macsec1: left allmulticast mode
[  168.662362][ T9424] loop4: detected capacity change from 0 to 128
[  168.668973][ T9422] loop0: detected capacity change from 0 to 1024
[  168.669294][ T9422] EXT4-fs: Ignoring removed bh option
[  168.669417][ T9422] EXT4-fs: inline encryption not supported
[  168.676094][ T9424] EXT4-fs: Ignoring removed nobh option
[  168.683281][ T9422] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  168.699545][ T9424] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  168.715092][ T9422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  168.721052][ T9422] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.1886: lblock 2 mapped to illegal pblock 2 (length 1)
[  168.721644][ T9422] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.1886: lblock 0 mapped to illegal pblock 48 (length 1)
[  168.722150][ T9422] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1886: Failed to acquire dquot type 0
[  168.722731][ T9422] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  168.723201][ T9422] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.1886: mark_inode_dirty error
[  168.724165][ T9422] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  168.724195][ T9422] EXT4-fs (loop0): 1 orphan inode deleted
[  168.746751][ T8122] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.761484][ T9422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.829579][ T9424] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  168.846430][ T8122] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:22: Failed to release dquot type 0
[  168.847732][ T9422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.869361][ T9424] x_tables: duplicate underflow at hook 1
[  168.870513][ T9422] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.1886: Invalid inode table block 1 in block_group 0
[  168.888477][ T9424] netlink: 'syz.4.1887': attribute type 4 has an invalid length.
[  168.890704][ T9422] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  168.909807][ T9422] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz.0.1886: mark_inode_dirty error
[  168.921836][ T8763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.922340][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.944700][ T9422] loop0: detected capacity change from 0 to 512
[  168.952247][ T9422] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  168.965767][ T9422] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  168.988541][ T9430] loop4: detected capacity change from 0 to 1024
[  168.995384][ T9430] EXT4-fs: Ignoring removed nobh option
[  169.001014][ T9430] EXT4-fs: Ignoring removed bh option
[  169.008240][ T9434] loop7: detected capacity change from 0 to 512
[  169.014804][ T9434] ext4: Unknown parameter 'uid'
[  169.028475][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.044797][ T9430] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1890'.
[  169.066258][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.090578][ T9439] loop4: detected capacity change from 0 to 512
[  169.097719][ T9439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  169.109926][ T9439] EXT4-fs (loop4): 1 truncate cleaned up
[  169.116830][ T9439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.151103][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.155191][ T9442] netlink: 'syz.1.1893': attribute type 10 has an invalid length.
[  169.168013][ T9442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1893'.
[  169.177861][ T9442] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  169.229943][ T9444] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  169.241832][ T9444] SELinux: failed to load policy
[  169.249564][ T9444] hub 9-0:1.0: USB hub found
[  169.254426][ T9444] hub 9-0:1.0: 8 ports detected
[  169.327566][ T9450] lo speed is unknown, defaulting to 1000
[  169.461675][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'.
[  169.534295][ T9463] loop0: detected capacity change from 0 to 512
[  169.543578][ T9463] ext4: Unknown parameter 'uid'
[  169.576637][ T9469] loop4: detected capacity change from 0 to 1024
[  169.583438][ T9469] EXT4-fs: Ignoring removed nobh option
[  169.589233][ T9469] EXT4-fs: Ignoring removed bh option
[  169.600030][ T9467] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  169.600318][ T9473] netlink: 'syz.3.1906': attribute type 10 has an invalid length.
[  169.611057][ T9467] SELinux: failed to load policy
[  169.617828][ T9473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'.
[  169.619706][ T9473] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  169.624970][ T9467] hub 9-0:1.0: USB hub found
[  169.653387][ T9467] hub 9-0:1.0: 8 ports detected
[  169.674780][ T9471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9471 comm=syz.0.1905
[  169.681765][ T9469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.714926][ T9471] lo speed is unknown, defaulting to 1000
[  169.741614][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.834304][ T9491] lo speed is unknown, defaulting to 1000
[  169.854403][ T9487] lo speed is unknown, defaulting to 1000
[  169.969415][ T9504] loop0: detected capacity change from 0 to 512
[  169.988995][ T9504] ext4: Unknown parameter 'uid'
[  170.120307][ T9516] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  170.131660][ T9516] SELinux: failed to load policy
[  170.141887][ T9516] hub 9-0:1.0: USB hub found
[  170.153443][ T9516] hub 9-0:1.0: 8 ports detected
[  170.200789][ T9525] loop0: detected capacity change from 0 to 512
[  170.207638][ T9525] ext4: Unknown parameter 'uid'
[  171.060307][ T9540] lo speed is unknown, defaulting to 1000
[  171.111386][ T9541] siw: device registration error -23
[  171.201318][ T9554] 9pnet_fd: p9_fd_create_tcp (9554): problem connecting socket to 127.0.0.1
[  171.212825][ T9554] __nla_validate_parse: 4 callbacks suppressed
[  171.212842][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  171.228808][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  171.311189][ T9565] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  171.321367][ T9565] SELinux: failed to load policy
[  171.327165][ T9565] hub 9-0:1.0: USB hub found
[  171.331952][ T9565] hub 9-0:1.0: 8 ports detected
[  171.423579][ T9605] loop4: detected capacity change from 0 to 1024
[  171.431686][ T9605] EXT4-fs: Ignoring removed nobh option
[  171.437349][ T9605] EXT4-fs: Ignoring removed bh option
[  171.452346][ T9605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.470598][ T9605] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1939'.
[  171.492864][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.754613][ T9623] loop7: detected capacity change from 0 to 512
[  171.777807][ T9623] ext4: Unknown parameter 'uid'
[  171.933678][ T9628] lo speed is unknown, defaulting to 1000
[  172.069045][ T9629] siw: device registration error -23
[  172.171971][ T9634] loop0: detected capacity change from 0 to 512
[  172.190922][ T9634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  172.203096][   T30] kauditd_printk_skb: 145 callbacks suppressed
[  172.203189][   T30] audit: type=1400 audit(1742051755.510:11281): avc:  denied  { setopt } for  pid=9635 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  172.239639][ T9634] EXT4-fs (loop0): 1 truncate cleaned up
[  172.245771][ T9634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.248886][ T9640] netlink: 'syz.3.1949': attribute type 4 has an invalid length.
[  172.276198][ T9641] tipc: Can't bind to reserved service type 0
[  172.277762][   T30] audit: type=1400 audit(1742051755.590:11282): avc:  denied  { bind } for  pid=9638 comm="syz.7.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  172.286785][ T9641] FAULT_INJECTION: forcing a failure.
[  172.286785][ T9641] name failslab, interval 1, probability 0, space 0, times 0
[  172.314367][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.7.1948 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  172.314438][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  172.314450][ T9641] Call Trace:
[  172.314457][ T9641]  <TASK>
[  172.314464][ T9641]  dump_stack_lvl+0xf2/0x150
[  172.314492][ T9641]  dump_stack+0x15/0x1a
[  172.314514][ T9641]  should_fail_ex+0x24a/0x260
[  172.314550][ T9641]  ? nf_tables_newchain+0xafe/0x1870
[  172.314604][ T9641]  should_failslab+0x8f/0xb0
[  172.314707][ T9641]  __kmalloc_cache_noprof+0x4e/0x320
[  172.314732][ T9641]  nf_tables_newchain+0xafe/0x1870
[  172.314767][ T9641]  ? get_random_u32+0x1a4/0x240
[  172.314802][ T9641]  ? should_failslab+0x8f/0xb0
[  172.314913][ T9641]  ? nft_trans_table_add+0x38/0x1a0
[  172.314965][ T9641]  ? __nla_parse+0x40/0x60
[  172.315005][ T9641]  nfnetlink_rcv+0xb3e/0x15d0
[  172.315093][ T9641]  netlink_unicast+0x599/0x670
[  172.315127][ T9641]  netlink_sendmsg+0x5cc/0x6e0
[  172.315170][ T9641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.315216][ T9641]  __sock_sendmsg+0x140/0x180
[  172.315252][ T9641]  ____sys_sendmsg+0x326/0x4b0
[  172.315293][ T9641]  __sys_sendmsg+0x19d/0x230
[  172.315346][ T9641]  __x64_sys_sendmsg+0x46/0x50
[  172.315439][ T9641]  x64_sys_call+0x2734/0x2dc0
[  172.315542][ T9641]  do_syscall_64+0xc9/0x1c0
[  172.315575][ T9641]  ? clear_bhb_loop+0x55/0xb0
[  172.315602][ T9641]  ? clear_bhb_loop+0x55/0xb0
[  172.315635][ T9641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.315706][ T9641] RIP: 0033:0x7f893209d169
[  172.315721][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.315746][ T9641] RSP: 002b:00007f8930707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.315767][ T9641] RAX: ffffffffffffffda RBX: 00007f89322b5fa0 RCX: 00007f893209d169
[  172.315782][ T9641] RDX: 0000000000000000 RSI: 000040000000c2c0 RDI: 0000000000000007
[  172.315796][ T9641] RBP: 00007f8930707090 R08: 0000000000000000 R09: 0000000000000000
[  172.315857][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.315868][ T9641] R13: 0000000000000000 R14: 00007f89322b5fa0 R15: 00007fff549df9a8
[  172.315888][ T9641]  </TASK>
[  172.525835][ T9643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9643 comm=syz.3.1949
[  172.567618][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.578386][ T9645] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1948'.
[  172.619646][ T9649] veth0_to_bond: entered promiscuous mode
[  172.625894][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1953'.
[  172.651529][ T9653] loop0: detected capacity change from 0 to 1024
[  172.652643][ T9649] veth0_to_bond (unregistering): left promiscuous mode
[  172.660157][ T9653] EXT4-fs: Ignoring removed nobh option
[  172.671182][ T9653] EXT4-fs: Ignoring removed bh option
[  172.683323][ T9649] bond0: (slave bond_slave_0): Releasing backup interface
[  172.683772][ T9647] SELinux:  policydb magic number 0x1802 does not match expected magic number 0xf97cff8c
[  172.701299][ T9647] SELinux: failed to load policy
[  172.703343][ T9653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.710883][ T9647] hub 9-0:1.0: USB hub found
[  172.723516][ T9647] hub 9-0:1.0: 8 ports detected
[  172.733398][ T9653] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1950'.
[  172.749257][   T30] audit: type=1400 audit(1742051756.060:11283): avc:  denied  { create } for  pid=9650 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  172.781286][   T30] audit: type=1400 audit(1742051756.070:11284): avc:  denied  { write } for  pid=9650 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  172.781806][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.832750][ T9661] lo speed is unknown, defaulting to 1000
[  172.878426][ T9666] siw: device registration error -23
[  173.507472][ T9685] loop4: detected capacity change from 0 to 512
[  173.522781][ T9685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  173.552926][ T9685] EXT4-fs (loop4): 1 truncate cleaned up
[  173.568101][ T9685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.630468][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.671024][   T30] audit: type=1400 audit(1742051756.980:11285): avc:  denied  { create } for  pid=9687 comm="syz.4.1964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1
[  173.691399][   T30] audit: type=1400 audit(1742051756.980:11286): avc:  denied  { bind } for  pid=9687 comm="syz.4.1964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1
[  173.763941][   T30] audit: type=1400 audit(1742051756.980:11287): avc:  denied  { create } for  pid=9687 comm="syz.4.1964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1
[  173.803248][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1965'.
[  173.826206][ T9692] loop4: detected capacity change from 0 to 512
[  173.832852][ T9692] ext4: Unknown parameter 'uid'
[  173.892371][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1968'.
[  173.907454][ T9700] FAULT_INJECTION: forcing a failure.
[  173.907454][ T9700] name failslab, interval 1, probability 0, space 0, times 0
[  173.920215][ T9700] CPU: 0 UID: 0 PID: 9700 Comm: syz.7.1968 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  173.920245][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  173.920258][ T9700] Call Trace:
[  173.920263][ T9700]  <TASK>
[  173.920270][ T9700]  dump_stack_lvl+0xf2/0x150
[  173.920304][ T9700]  dump_stack+0x15/0x1a
[  173.920403][ T9700]  should_fail_ex+0x24a/0x260
[  173.920588][ T9700]  should_failslab+0x8f/0xb0
[  173.920623][ T9700]  __kmalloc_noprof+0xab/0x3f0
[  173.920644][ T9700]  ? nfc_llcp_build_tlv+0xae/0x130
[  173.920672][ T9700]  nfc_llcp_build_tlv+0xae/0x130
[  173.920728][ T9700]  nfc_llcp_build_gb+0x15a/0x2e0
[  173.920755][ T9700]  nfc_llcp_general_bytes+0xe0/0x1e0
[  173.920778][ T9700]  nfc_dep_link_up+0xf3/0x270
[  173.920861][ T9700]  nfc_genl_dep_link_up+0xe3/0x120
[  173.920895][ T9700]  genl_rcv_msg+0x620/0x6d0
[  173.920953][ T9700]  ? __pfx_nfc_genl_dep_link_up+0x10/0x10
[  173.921027][ T9700]  ? should_fail_ex+0x31/0x260
[  173.921066][ T9700]  netlink_rcv_skb+0x12c/0x230
[  173.921103][ T9700]  ? __pfx_genl_rcv_msg+0x10/0x10
[  173.921144][ T9700]  genl_rcv+0x28/0x40
[  173.921195][ T9700]  netlink_unicast+0x599/0x670
[  173.921297][ T9700]  netlink_sendmsg+0x5cc/0x6e0
[  173.921341][ T9700]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.921386][ T9700]  __sock_sendmsg+0x140/0x180
[  173.921425][ T9700]  ____sys_sendmsg+0x326/0x4b0
[  173.921460][ T9700]  __sys_sendmsg+0x19d/0x230
[  173.921508][ T9700]  __x64_sys_sendmsg+0x46/0x50
[  173.921640][ T9700]  x64_sys_call+0x2734/0x2dc0
[  173.921673][ T9700]  do_syscall_64+0xc9/0x1c0
[  173.921712][ T9700]  ? clear_bhb_loop+0x55/0xb0
[  173.921743][ T9700]  ? clear_bhb_loop+0x55/0xb0
[  173.921832][ T9700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.921864][ T9700] RIP: 0033:0x7f893209d169
[  173.921883][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.921905][ T9700] RSP: 002b:00007f8930707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.921995][ T9700] RAX: ffffffffffffffda RBX: 00007f89322b5fa0 RCX: 00007f893209d169
[  173.922010][ T9700] RDX: 0000000000000040 RSI: 0000400000000600 RDI: 000000000000000b
[  173.922025][ T9700] RBP: 00007f8930707090 R08: 0000000000000000 R09: 0000000000000000
[  173.922039][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.922053][ T9700] R13: 0000000000000000 R14: 00007f89322b5fa0 R15: 00007fff549df9a8
[  173.922075][ T9700]  </TASK>
[  174.183183][   T30] audit: type=1326 audit(1742051757.490:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  174.215069][   T30] audit: type=1326 audit(1742051757.520:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  174.238728][   T30] audit: type=1326 audit(1742051757.520:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993bf9d169 code=0x7ffc0000
[  174.257632][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1973'.
[  174.363195][ T9720] ==================================================================
[  174.371311][ T9720] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk
[  174.378875][ T9720] 
[  174.381200][ T9720] write to 0xffff8881044d7400 of 8 bytes by task 9724 on cpu 1:
[  174.388832][ T9720]  mas_replace_node+0x1b8/0x430
[  174.393689][ T9720]  mas_wr_store_entry+0x1e12/0x23f0
[  174.398906][ T9720]  mas_store_prealloc+0x6bf/0x960
[  174.403944][ T9720]  vma_complete+0x3a7/0x760
[  174.408465][ T9720]  __split_vma+0x620/0x6a0
[  174.412885][ T9720]  vms_gather_munmap_vmas+0x2a5/0x7a0
[  174.418286][ T9720]  mmap_region+0x464/0x1620
[  174.422793][ T9720]  do_mmap+0x98a/0xc30
[  174.426874][ T9720]  vm_mmap_pgoff+0x16d/0x2d0
[  174.431479][ T9720]  ksys_mmap_pgoff+0x286/0x330
[  174.436253][ T9720]  x64_sys_call+0x1940/0x2dc0
[  174.440943][ T9720]  do_syscall_64+0xc9/0x1c0
[  174.445462][ T9720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.451370][ T9720] 
[  174.453700][ T9720] read to 0xffff8881044d7400 of 8 bytes by task 9720 on cpu 0:
[  174.461246][ T9720]  mtree_range_walk+0x33d/0x460
[  174.466115][ T9720]  mas_walk+0x16e/0x320
[  174.470286][ T9720]  lock_vma_under_rcu+0x95/0x270
[  174.475226][ T9720]  exc_page_fault+0x150/0x650
[  174.479912][ T9720]  asm_exc_page_fault+0x26/0x30
[  174.484772][ T9720] 
[  174.487095][ T9720] value changed: 0xffff888104402006 -> 0xffff8881044d7400
[  174.494198][ T9720] 
[  174.496520][ T9720] Reported by Kernel Concurrency Sanitizer on:
[  174.502665][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.1.1977 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0
[  174.513343][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  174.523399][ T9720] ==================================================================
[  174.538731][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'.