last executing test programs:

1m31.443727533s ago: executing program 0 (id=576):
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c0000e75b0000907800000000000000001102907800000003"], 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="02ef359626a200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1m30.710427511s ago: executing program 0 (id=590):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'vlan1\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1m30.603207581s ago: executing program 0 (id=593):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket(0x11, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000180)=@vsock={0x28, 0x8, 0x2, @local}, 0x80, &(0x7f0000002280)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="01002cbd74000000000017000000740006806c0003"], 0x88}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")

1m30.602704451s ago: executing program 0 (id=594):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlockall(0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x3, 0x1, 0xec})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0)

1m29.511049268s ago: executing program 0 (id=608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b705021c182f99e2a9563b6f04000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r3 = epoll_create1(0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050003"], 0x48}}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x101000)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x401c2103, 0x0)
r8 = epoll_create1(0x0)
close(r3)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r3, &(0x7f0000f2cff4)={0x77540947ed9a168d})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}]}, 0x40}}, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080))
symlink(0x0, 0x0)

1m29.383295038s ago: executing program 0 (id=609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

1m14.234106753s ago: executing program 32 (id=609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

1m3.919277629s ago: executing program 1 (id=957):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
close(r1)

1m3.876743238s ago: executing program 1 (id=960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
bind$packet(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
close(0x3)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

1m3.722997238s ago: executing program 1 (id=961):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')

1m3.140388237s ago: executing program 1 (id=964):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
syz_clone(0x8c100100, &(0x7f0000000280)="7fdb720236f163b7c6a57d59beb627dceb221949bd71859cdee7ce8ddb1181097cd1e93d7504e10d66202e2a611fe404a55f6a0f025203cd41e596bd8c6e58b09ae75524cbc06e9bab29a7a318324e76c73dda3186f638bc321a4a24ccd2bfde729e38f85e1aedef6b0ff916e8428cc868d2ab5087e7c7dd3d6b70c0c5ab4d481d749dafec7a369fc582ab691c6d255018bc6517bb368263de780b3cfa3e32cf9025c042cbb3fa92f65e5b862cd85887c4b430b52dd859bc6f3e113c7b889206bb700f24", 0xc4, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="fe1409302c88c0364f08f78d1e2b1fb3cd9e00bcab55707814e38a46ce28522d1ffa0e8e52d8325a033bb5b30a011f0bfffb18c146c3479dde102499138809bb73a75c5cca1c8c6ce5208685b491d5f0c69c16d0e8e7ea2443ef6cdf50d1e70e0ee5d21cc5b0629052093ab3911810a7f510226e28b86b041657f92c16")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x9, 0x3a, '[-', 0x3a, ']$', 0x3a, './file0', 0x3a, [0x9]}, 0x2c)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x7d7, 0xffff, 0xc8, 0x6, 0x7, 0xfffffffffffffffc, 0x10001, 0x4})

1m3.049858857s ago: executing program 1 (id=967):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlockall(0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x3, 0x1, 0xec})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0)

1m2.282922975s ago: executing program 1 (id=984):
r0 = inotify_init1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m2.276444875s ago: executing program 33 (id=984):
r0 = inotify_init1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

56.397743561s ago: executing program 6 (id=1065):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd132})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8943, &(0x7f0000000080))

56.300825271s ago: executing program 6 (id=1069):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x8000000000}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x9d)

56.066990241s ago: executing program 6 (id=1072):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x3fc, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200), 0x30, 0x30}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000600)}, 0xffffff7f}, {{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1, &(0x7f0000003bc0)=""/15, 0xf}, 0x9}, {{&(0x7f0000003c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000029c0)=""/248, 0xf8}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/229, 0xe5}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)=""/37, 0x25}], 0x6, &(0x7f0000004fc0)=""/4096, 0x1000}, 0xfffffbff}], 0x3, 0x103, &(0x7f0000000240)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='}wH\x00\x006\xf4\x01\x93\xc6\xb9\xdc\f$\x1d\xdcAe\xfd\x84\"\xfb\xc5\xa4\xff\xe9\x84\xe26\xd6\xc9j\xa8`N^\xc7\xb9\xbf\x91|\xbf\xab\xc1\\\xa2\xf4\x8c1\xcb\xcc\xe8\xe1Sd{,\x8d\t\xbc]r(,_d\x8f\xfb\xe8O\xd4\x9cva9|\xd9\xc2\x9e\xf0\xda\xd1\v\x18W\xf0\xe5+\\\t\x88\xcc\xf0\x93i\xf4\xc8\xba\xf4x\xf7\x19\x90U\x13\x9as\x1a\xf1\x12\xa4\xba\xbb\xf8\x04\xce\xa0\a\xf5\xfcV3\xd4[R\xb8~\xc7\x03R\xb1\xb7:I*\\5@\b\xdf7\xf1\xb1\xa2\x87*\x0fF\x95\x9e\x7f\n\xbeI\xa9g\xe0l \xb2<\x8e\xc9]\xf8\x16N_\xb7\xf7,s}h\xcb\xccF\x90\x02\x0e\x10z\xea\x1e\a\xdd\x84\xd3\x05`\x10$\x82\x962\xde\x1b\xe27\xc7h\x8br\xe4}\xed<Yfo%\x03\x80\xd7\xf6\x7f')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x68040200)

55.93243759s ago: executing program 6 (id=1073):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
syz_clone(0x8c100100, &(0x7f0000000280)="7fdb720236f163b7c6a57d59beb627dceb221949bd71859cdee7ce8ddb1181097cd1e93d7504e10d66202e2a611fe404a55f6a0f025203cd41e596bd8c6e58b09ae75524cbc06e9bab29a7a318324e76c73dda3186f638bc321a4a24ccd2bfde729e38f85e1aedef6b0ff916e8428cc868d2ab5087e7c7dd3d6b70c0c5ab4d481d749dafec7a369fc582ab691c6d255018bc6517bb368263de780b3cfa3e32cf9025c042cbb3fa92f65e5b862cd85887c4b430b52dd859bc6f3e113c7b889206bb700f24", 0xc4, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="fe1409302c88c0364f08f78d1e2b1fb3cd9e00bcab55707814e38a46ce28522d1ffa0e8e52d8325a033bb5b30a011f0bfffb18c146c3479dde102499138809bb73a75c5cca1c8c6ce5208685b491d5f0c69c16d0e8e7ea2443ef6cdf50d1e70e0ee5d21cc5b0629052093ab3911810a7f510226e28b86b041657f92c16")
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x7d7, 0xffff, 0xc8, 0x6, 0x7, 0xfffffffffffffffc, 0x10001, 0x4})

55.77207039s ago: executing program 6 (id=1074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})

52.715133433s ago: executing program 6 (id=1104):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd132})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000080))

52.714542063s ago: executing program 34 (id=1104):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd132})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000080))

40.130770383s ago: executing program 3 (id=1279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x9}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x5a56}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3, 0x0, 0xffffffffffff7962}, 0x18)
r4 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q\x9e@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r4, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a9381c1c740f7b7200f4b15419", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4004)
move_pages(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10)

40.041784173s ago: executing program 3 (id=1281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400000010000100000000000000000000000090653a8a6587a366707b49c581bda9fef25f52552c0a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000308000a40001000000900020073797a30000000000900010073797a30000000000800054010623f4e5bfeae4e030001800e000100636f6e6e6c696d6974000000080003400000011014000000100001000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20050800)
socket(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000022000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000495e3ef9f6f646fa14c8cdc9160000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7000100000085000000030000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x4000, 0x0)
getrusage(0x1, &(0x7f0000000c80))
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r4, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x100000000000000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000120000000000b7080000005345007b8a020000d2c2d28abb72e0ef00000000b70400000000000085000000c30000009500"/65], 0x0, 0xaa, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x42040200)
recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f0000000580)=""/10, 0xa}], 0x5, &(0x7f0000000880)=""/13, 0xd}, 0x3}], 0x1, 0x12100, &(0x7f0000000900)={0x77359400})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000a00)='sched_kthread_stop\x00'}, 0x18)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)

38.77329833s ago: executing program 3 (id=1304):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000009200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r3}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00')
preadv2(r4, &(0x7f0000000380)=[{&(0x7f0000000180)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0)
mremap(&(0x7f00005d9000/0x3000)=nil, 0x3000, 0xb000, 0x3, &(0x7f0000ea7000/0xb000)=nil)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pread64(r5, &(0x7f00000001c0)=""/37, 0x25, 0x78) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x18)
mq_notify(0xffffffffffffffff, 0x0) (async)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r11)
quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000902, r11, &(0x7f0000000340))
r12 = openat$cgroup_ro(r8, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12)

38.603321789s ago: executing program 3 (id=1309):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001b4310ba7a4b946cec48a881d1918c1fb33c2da949226a1a05a96bf1137552a67a8ccadc705eee08b0402296762dab9a191c89ffef85ef625771452dab1b87", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xb}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x82d00, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r3, 0x40107446, 0x20000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @random, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @private1, @mcast2, {[@routing={0x87, 0x0, 0x2, 0x6}]}}}}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/36, 0x24, <r6=>0x0, &(0x7f00000005c0)=""/17, 0x11}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f0000000740)="3b05b535a759c1b53cceaf05b1d5157b1eb085f8b5b29a6fd8c8f968820329ce25bd83883a566a2af17ed04d61e0da94e538d9b3789d8eb2182b4869ae15b126e6a0833aaa3bc2e7cd7fac3964e01f9d9bbe485f57490573b1b4572353546d80af90d44afdda92490023350ff1e5b6e3dd42f74b87c50eb94a729694b1a86f07de", &(0x7f0000000800)=""/51, &(0x7f0000000840)="57efd730e3ff43fdccbf8ad461b37753fb103db00811ec8dd87ab8072cab900fe3f25411f66440de5eeab4209ce26d787bfedc9167e19225f477037015682a5042de5f8cfec4eb5a5a1ba48267b964eb8cbfe41c8809c1477a5e86de55ec50412ecc780593c87be4648cfdd73197a7c897c440d06ba3375cbb61535bae4c8b0c03f7a306752adb6e11a91ba9ad8390fabf2d99d6e0e48b0e200e8c926efa2011d8b23cddf4853ec239945cb4a73c9d05a1eb6ac71f14d950", &(0x7f0000000900)="1fd3e9c31cbce1187da32a5be959f19b56d63a7128d1c3f203d3e084beba3fcfb17ebd53c0edf9326f8abacd1c4e77202ce2e39cc0404939711d6f0856a5d87bbb35ee7145683bfec467dd2a4871b83053dad3b7ef9897a441ae1c8c1611c754fd26ecdfc948b002eec8eb2527a1578c3dbe891c3bb2cbdfb7b6bbe8cf5f7cc0161eb0999c1f5a233dae24f4f0efb9240772a7fd993b05d2f84f85b3aefcfc11c3bdb4eead3de3a6ff4878", 0xf98, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xced}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x56, &(0x7f00000003c0)=""/86, 0xe808be6a2ff88162, 0x61, '\x00', 0x0, @fallback=0xc, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xd, 0xb6, 0x5}, 0x10, r6, r8, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000800)=ANY=[], 0xd, 0x2b3, &(0x7f0000001680)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x60200, 0x20)

38.417903279s ago: executing program 3 (id=1312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000f5ffffff000000000000001681c02f11a36d6d42bbb96c0c26dc40c2c3968e6f99d1f75a88da3d9cb2bee69611ec2c322abe3c335c0a3248fc16c484216310f31474bde871691d5ef1b0daccb62f15e301af7d2947510ee0b9353fea418a3cd34c54e9040942a0bbc4360701edaee74ee84aac48f4151c9acc5977c2c3f269870acb805e85234144d1d02e03b732132177d7d79d78b1dc635060be9a63eb09418f08bc314f2c9b32dcacc6c9386294d0e1502b5637a484bde0a73bd817872b7e2c612d6f835890e9a45dfc58b04aafbc423edc54f26aa38fe41138fd28f45544b739", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000089a2c42cd0b4fa34bb4049da30103b29d62c2666c73b7c2ebc340940bea1dc48ad84322847e28cc6ba8725021fea4f913146a223bcf401c4fb3cb6e7009d40c37ce8f6377a6d50d30d19897ef829c357f403084ca8a96aa93baeb233004c2bb7275ebc4f61fad7142f165315f1c350b021c97eaf9679a69630f043cebba1382e48f5b1b6f80fc03dcb8fbe60960f5a230f691522b6865c0d5df115b148a9cc30ad07bbcd1a0868507574ddf8af47246284fc85f95588272a3", @ANYRES16=r4, @ANYBLOB="020029bd7000ffdbdf250d0000000800310001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20073b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x101}, 0x18)
r7 = memfd_secret(0x0)
fcntl$setlease(r7, 0x400, 0x0)
close(r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/138, 0x20}], 0x1)

37.693898737s ago: executing program 3 (id=1322):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18)

37.693615167s ago: executing program 35 (id=1322):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18)

3.720835118s ago: executing program 4 (id=1954):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000f5ffffff000000000000001681c02f11a36d6d42bbb96c0c26dc40c2c3968e6f99d1f75a88da3d9cb2bee69611ec2c322abe3c335c0a3248fc16c484216310f31474bde871691d5ef1b0daccb62f15e301af7d2947510ee0b9353fea418a3cd34c54e9040942a0bbc4360701edaee74ee84aac48f4151c9acc5977c2c3f269870acb805e85234144d1d02e03b732132177d7d79d78b1dc635060be9a63eb09418f08bc314f2c9b32dcacc6c9386294d0e1502b5637a484bde0a73bd817872b7e2c612d6f835890e9a45dfc58b04aafbc423edc54f26aa38fe41138fd28f45544b739", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000089a2c42cd0b4fa34bb4049da30103b29d62c2666c73b7c2ebc340940bea1dc48ad84322847e28cc6ba8725021fea4f913146a223bcf401c4fb3cb6e7009d40c37ce8f6377a6d50d30d19897ef829c357f403084ca8a96aa93baeb233004c2bb7275ebc4f61fad7142f165315f1c350b021c97eaf9679a69630f043cebba1382e48f5b1b6f80fc03dcb8fbe60960f5a230f691522b6865c0d5df115b148a9cc30ad07bbcd1a0868507574ddf8af47246284fc85f95588272a368", @ANYRES16=r4, @ANYBLOB="020029bd7000ffdbdf250d0000000800310001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20073b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x101}, 0x18)
r7 = memfd_secret(0x0)
fcntl$setlease(r7, 0x400, 0x0)
close(r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/138, 0x20}], 0x1)

2.838325296s ago: executing program 4 (id=1974):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "7d1b6c6f282470060b743a23bf8abcbd"})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x9)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000880), 0xc, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000040000000000000a00000a14"], 0x28}}, 0x40000c6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400)
write$cgroup_int(r5, &(0x7f0000000040), 0x12)

2.695027156s ago: executing program 4 (id=1976):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
io_uring_setup(0x4f29, &(0x7f0000001240)={0x0, 0x5f87})
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)

2.636644436s ago: executing program 4 (id=1978):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f0000000b00)=""/255, 0xff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r4)

2.581049626s ago: executing program 4 (id=1981):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="c21e182129d229eac3afd25ee65757721c76e4d1a401b914bea089b279eb0bb5334c6e3cd756bc3d2b1496023cc0b57cc141370726d95146ccf30f783617ac2c8cda3ca888c4249e03dae2f63c7105156764946a7f727165ecd80c43e5d9a3e18585722ea67339dedad92126038507e3cfdd5693", 0x74}, {&(0x7f0000000180)="29b88298f300b0ab13947d4f5bcf262775bed604157080c0ae683cbb52fc2b7bea9c25f4a446b80ad24f23eaccff43778b495c1d48b700bee699ab45502527d7962f1a0f6fe08293ae1907c93bfcd71f8156fc4364ce095768e00d06aa4d09c5758d4161f0ade051f987eaf27804f2b773328f10b420fec1ee5d1a4c8e88fc255b5b13b85f3796c7aead450e6f4ceb135a1709f71745e6c7f4844e794115e425f1f2046dc82b8edf2d16a346419f4426d394a8ed18b41e7e5532ecc2d8e3fa98be4071be81fbc0a4a15bbfd961f1cd72f743eba74f1be6030595c0dc7282b7717e0c719ced80e9eebbcb503b220d3becfc66c097e5caeeb7480ccc4c0f", 0xfd}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2e}, @local}}}], 0x68}}], 0x2, 0x4000084)

2.541800145s ago: executing program 4 (id=1983):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x200000000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])

1.318809083s ago: executing program 7 (id=2007):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f0000000b00)=""/255, 0xff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3)

1.271326602s ago: executing program 7 (id=2009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000f5ffffff000000000000001681c02f11a36d6d42bbb96c0c26dc40c2c3968e6f99d1f75a88da3d9cb2bee69611ec2c322abe3c335c0a3248fc16c484216310f31474bde871691d5ef1b0daccb62f15e301af7d2947510ee0b9353fea418a3cd34c54e9040942a0bbc4360701edaee74ee84aac48f4151c9acc5977c2c3f269870acb805e85234144d1d02e03b732132177d7d79d78b1dc635060be9a63eb09418f08bc314f2c9b32dcacc6c9386294d0e1502b5637a484bde0a73bd817872b7e2c612d6f835890e9a45dfc58b04aafbc423edc54f26aa38fe41138fd28f45544b739", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000089a2c42cd0b4fa34bb4049da30103b29d62c2666c73b7c2ebc340940bea1dc48ad84322847e28cc6ba8725021fea4f913146a223bcf401c4fb3cb6e7009d40c37ce8f6377a6d50d30d19897ef829c357f403084ca8a96aa93baeb233004c2bb7275ebc4f61fad7142f165315f1c350b021c97eaf9679a69630f043cebba1382e48f5b1b6f80fc03dcb8fbe60960f5a230f691522b6865c0d5df115b148a9cc30ad07bbcd1a0868507574ddf8af47246284fc85f95588272a368", @ANYRES16=r4, @ANYBLOB="020029bd7000ffdbdf250d0000000800310001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20073b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x101}, 0x18)
r7 = memfd_secret(0x0)
fcntl$setlease(r7, 0x400, 0x0)
close(r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/138, 0x20}], 0x1)

596.319321ms ago: executing program 2 (id=2035):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
io_uring_setup(0x4f29, &(0x7f0000001240)={0x0, 0x5f87})
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)

544.072571ms ago: executing program 2 (id=2038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0xeea9, 0x400, 0x3, 0xfffffffd})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1)

492.63824ms ago: executing program 2 (id=2039):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x10)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

492.412271ms ago: executing program 8 (id=2040):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

480.659691ms ago: executing program 8 (id=2042):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5})

447.432481ms ago: executing program 8 (id=2043):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f0000000b00)=""/255, 0xff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3)

447.102631ms ago: executing program 5 (id=2044):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

419.69546ms ago: executing program 8 (id=2045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r4, 0x0, 0x8000000000}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3}}, 0x9d)

398.774251ms ago: executing program 7 (id=2046):
socket$inet_udp(0x2, 0x2, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10)
setgid(0x0)
recvmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/79, 0x4f}], 0x4, &(0x7f00000004c0)}, 0x40)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t')

386.533381ms ago: executing program 5 (id=2047):
io_uring_setup(0x2e32, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000280), 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={<r2=>0x0, @in6={{0xa, 0x4e21, 0xffffff65, @local, 0x4}}, 0x2, 0x8000}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x3965be11}, &(0x7f0000000400)=0x8)

352.04096ms ago: executing program 8 (id=2048):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000069d4ede82a0a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='svcrdma_encode_wseg\x00', r4, 0x0, 0x8000000005}, 0xfffffff1)
modify_ldt$read_default(0x2, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x2)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r0}, 0x10)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0xf16734296bc34295, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)=':,\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x42)

288.32272ms ago: executing program 5 (id=2049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='selinux_audited\x00', r1, 0x0, 0xffffffdfffffffff}, 0x18)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ffc000/0x1000)=nil, 0xd)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4)

287.90146ms ago: executing program 2 (id=2050):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
io_uring_setup(0x4f29, &(0x7f0000001240)={0x0, 0x5f87})
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)

246.34349ms ago: executing program 5 (id=2051):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x7}, 0xb00, 0x3, 0xffff, 0x5, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x32a000, 0x800, 0xffffffff}, 0x20)

245.95329ms ago: executing program 7 (id=2052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000069d4ede82a0a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9)
r2 = socket(0x2000000000000021, 0x2, 0x2)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x42)
r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000006c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@nomblk_io_submit}, {@grpjquota}, {@grpid}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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")
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000740)={<r6=>0x0, ""/256, 0x0, <r7=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0, 0x0, <r9=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f0000002f00)=ANY=[@ANYRES16=r9, @ANYRES64=r1, @ANYRESOCT=r6, @ANYRES16=r4, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES16=r3], 0x0, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)=r8)

245.22728ms ago: executing program 8 (id=2053):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000140)={[{@abort}, {@grpid}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
openat$ptp0(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsmount(r0, 0x0, 0x6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, 0x0, 0x0}, 0x20)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x7)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x400000, 0x100000000000000)
r12 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x7, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f00000000c0)=0x36a, r8, &(0x7f0000000180)=0x10000, 0x40, 0xe)

214.13552ms ago: executing program 2 (id=2054):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_trie\x00')
read$msr(r2, &(0x7f0000000380)=""/153, 0x99)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xfe, 0x453, &(0x7f0000000d80)="$eJzs3MtvG0UYAPDPdpw2bUNCKY+GFgIFEfFImvRBD1yKQOIAEhIcijiFJK1C3QY1QaJVBIFDOKJKcEaIExJ/ARfKBQEnJK5wR0gRyoXCyWjt3dRN7CROnLjg30/adsYzzsy3u2OPZ70OoGMNJv/kIg5ExK8R0VfN3l5hsPrfzeX5ib+X5ydyUS6/9meuUu+v5fmJrGr2vP3VTLm8TruLb0aMl0pTV9L8yNyld0Zmr157ZvrS+IWpC1OXx86cOXniaPfpsVMtibM36evA+zNHDr/0xvVXJs5df+vHr5P+HkjLa+NolcHq3q3r8VY31ma9NelcVxs7QlMKEZEcrmJl/PdFIXpWyvrixY/a2jlgR5XL+fKexsULZeB/LJmoA50oe6NPPv9m2y5NPe4IS2djZR3jZrpVS7oin9Yppp+RdsJgRJxb+OfzZIsdWocAAKh142xEPF1v/peP+2rq3ZVeG+qPiLsj4mBE3BMRhyLi3ohK3fsj4oEm2199hWTt/Kfct6XANimZ/z2XXtu6ff6Xzf6iv5DmeivxF3Pnp0tTx9N9MhTFPUl+dJ02vnvhl08aldXO/5ItaT+bC6b9+KNr1QLd5Pjc+HZirrX0YcRAV734cytz3mR+fDgiBrbYxvSTXx1pVLZx/OtowaS8/EXEE9XjvxCr4s/kGl6fHH329Nipkb1Rmjo+kp0Va/308+KrjdrfVvwtsHSjHPvqnv8r8ffn9kbMXr12sXK9drb5NhZ/+7jhZ5qtnv/dudcr6e70sffG5+aujEZ0515e+/jYredm+ax+cv4PHas//g/GrT3xYEQkJ/HRiHgoIh5O+/5IRDwaEcfWif+H5x97u/n411mVb6Ek/smNjn/UHv/mE4WL33/TfPyZ5PifrKSG0kc28/q32Q5uZ98BAADAf0W+8h34XH54JZ3PDw9Xv8N/KPblSzOzc0+dn3n38mT1u/L9UcxnK119Neuho+nacJYfW5U/ka4bf1roqeSHJ2ZKk+0OHjrc/gbjP/F7od29A3ac+7Wgcxn/0LmMf+hcxj90LuMfOle98f9BG/oB7L4N3v97dqsfwO4z/4fOZfxD5zL+oSM1vDc+v61b/iXalPi2e3u/1bD5ROTvkJDbnvjys9b8nWLULera9I9ZbDGxp25Ru1+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuPfAAAA//8l9eNn")
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x43, @mcast1}, 0x1c)
recvmmsg(r5, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0)
bind$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e1d}, 0x6e)

122.56647ms ago: executing program 7 (id=2055):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe78190a0015c00200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900d1001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x41014)

61.27355ms ago: executing program 7 (id=2056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000f5ffffff000000000000001681c02f11a36d6d42bbb96c0c26dc40c2c3968e6f99d1f75a88da3d9cb2bee69611ec2c322abe3c335c0a3248fc16c484216310f31474bde871691d5ef1b0daccb62f15e301af7d2947510ee0b9353fea418a3cd34c54e9040942a0bbc4360701edaee74ee84aac48f4151c9acc5977c2c3f269870acb805e85234144d1d02e03b732132177d7d79d78b1dc635060be9a63eb09418f08bc314f2c9b32dcacc6c9386294d0e1502b5637a484bde0a73bd817872b7e2c612d6f835890e9a45dfc58b04aafbc423edc54f26aa38fe41138fd28f45544b739", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000089a2c42cd0b4fa34bb4049da30103b29d62c2666c73b7c2ebc340940bea1dc48ad84322847e28cc6ba8725021fea4f913146a223bcf401c4fb3cb6e7009d40c37ce8f6377a6d50d30d19897ef829c357f403084ca8a96aa93baeb233004c2bb7275ebc4f61fad7142f165315f1c350b021c97eaf9679a69630f043cebba1382e48f5b1b6f80fc03dcb8fbe60960f5a230f691522b6865c0d5df115b148a9cc30ad07bbcd1a0868507574ddf8af47246284fc85f95588272a368", @ANYRES16=r4, @ANYBLOB="020029bd7000ffdbdf250d0000000800310001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20073b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x101}, 0x18)
r7 = memfd_secret(0x0)
fcntl$setlease(r7, 0x400, 0x0)
close(r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/138, 0x20}], 0x1)

430.83µs ago: executing program 5 (id=2057):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001466000000000000000018110000", @ANYRES32=r0], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0)

194.34µs ago: executing program 2 (id=2058):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r4, 0x0, 0x8000000000}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3}}, 0x9d)

0s ago: executing program 5 (id=2059):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x20000}, [@IFLA_TXQLEN={0x8, 0xd, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)

kernel console output (not intermixed with test programs):

] audit: type=1400 audit(1736567017.197:25835): avc:  denied  { create } for  pid=9157 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  123.286433][   T29] audit: type=1326 audit(1736567017.197:25836): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98d845d29 code=0x7ffc0000
[  123.310598][   T29] audit: type=1326 audit(1736567017.197:25837): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe98d845d29 code=0x7ffc0000
[  123.310707][   T29] audit: type=1400 audit(1736567017.197:25838): avc:  denied  { create } for  pid=9157 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  123.310732][   T29] audit: type=1400 audit(1736567017.197:25839): avc:  denied  { sys_admin } for  pid=9157 comm="syz.2.1469" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  123.399841][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.481976][ T9170] loop8: detected capacity change from 0 to 2048
[  123.501000][ T9170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.559437][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.657355][ T9191] sch_tbf: burst 25 is lower than device lo mtu (65550) !
[  123.667571][ T9185] FAULT_INJECTION: forcing a failure.
[  123.667571][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.680782][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.2.1479 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  123.691499][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  123.701578][ T9185] Call Trace:
[  123.704943][ T9185]  <TASK>
[  123.707891][ T9185]  dump_stack_lvl+0xf2/0x150
[  123.712584][ T9185]  dump_stack+0x15/0x1a
[  123.716785][ T9185]  should_fail_ex+0x223/0x230
[  123.721536][ T9185]  should_fail+0xb/0x10
[  123.725731][ T9185]  should_fail_usercopy+0x1a/0x20
[  123.730795][ T9185]  _copy_to_user+0x20/0xa0
[  123.735265][ T9185]  sg_read+0xb18/0xc70
[  123.739371][ T9185]  ? __pfx_autoremove_wake_function+0x10/0x10
[  123.745491][ T9185]  vfs_readv+0x3e2/0x660
[  123.749818][ T9185]  ? __pfx_sg_read+0x10/0x10
[  123.754484][ T9185]  do_readv+0xf4/0x220
[  123.758604][ T9185]  __x64_sys_readv+0x45/0x50
[  123.763313][ T9185]  x64_sys_call+0x2c34/0x2dc0
[  123.768019][ T9185]  do_syscall_64+0xc9/0x1c0
[  123.772616][ T9185]  ? clear_bhb_loop+0x55/0xb0
[  123.777384][ T9185]  ? clear_bhb_loop+0x55/0xb0
[  123.782162][ T9185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.788132][ T9185] RIP: 0033:0x7fe98d845d29
[  123.792572][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.812385][ T9185] RSP: 002b:00007fe98beb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  123.820925][ T9185] RAX: ffffffffffffffda RBX: 00007fe98da35fa0 RCX: 00007fe98d845d29
[  123.828994][ T9185] RDX: 0000000000000001 RSI: 0000000020000580 RDI: 0000000000000003
[  123.836993][ T9185] RBP: 00007fe98beb7090 R08: 0000000000000000 R09: 0000000000000000
[  123.844972][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.852949][ T9185] R13: 0000000000000000 R14: 00007fe98da35fa0 R15: 00007fff6755f828
[  123.861001][ T9185]  </TASK>
[  124.022444][ T9215] vhci_hcd: invalid port number 13
[  124.065972][ T9213] loop4: detected capacity change from 0 to 2048
[  124.078572][ T9213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.145543][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.289434][ T9246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9246 comm=syz.2.1503
[  124.301965][ T9246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9246 comm=syz.2.1503
[  124.330548][ T9248] vhci_hcd: invalid port number 13
[  124.338301][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'.
[  124.348670][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'.
[  124.389022][ T9251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9251 comm=syz.2.1505
[  124.413456][ T9254] loop5: detected capacity change from 0 to 128
[  124.435822][ T9254] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.473456][ T9254] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.581809][ T9270] syz.4.1511: attempt to access beyond end of device
[  124.581809][ T9270] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  124.605305][ T9265] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1511'.
[  124.623822][ T9271] FAULT_INJECTION: forcing a failure.
[  124.623822][ T9271] name failslab, interval 1, probability 0, space 0, times 0
[  124.636520][ T9271] CPU: 0 UID: 0 PID: 9271 Comm: syz.7.1512 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  124.647246][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  124.657564][ T9271] Call Trace:
[  124.660866][ T9271]  <TASK>
[  124.663812][ T9271]  dump_stack_lvl+0xf2/0x150
[  124.668572][ T9271]  dump_stack+0x15/0x1a
[  124.672750][ T9271]  should_fail_ex+0x223/0x230
[  124.677536][ T9271]  should_failslab+0x8f/0xb0
[  124.682157][ T9271]  __kmalloc_noprof+0xab/0x3f0
[  124.686974][ T9271]  ? ___neigh_create+0x4cf/0x12a0
[  124.692027][ T9271]  ___neigh_create+0x4cf/0x12a0
[  124.696894][ T9271]  ? __napi_schedule_irqoff+0x12b/0x160
[  124.702459][ T9271]  ? ipt_do_table+0x9f7/0xab0
[  124.707183][ T9271]  ? ipt_do_table+0x16f/0xab0
[  124.711872][ T9271]  ? netlbl_enabled+0x25/0x40
[  124.716658][ T9271]  __neigh_create+0x54/0x70
[  124.721282][ T9271]  ip_neigh_gw4+0x135/0x170
[  124.725809][ T9271]  ip_finish_output2+0x82e/0x890
[  124.730839][ T9271]  ? __pfx_iptable_mangle_hook+0x10/0x10
[  124.736646][ T9271]  ? iptable_mangle_hook+0x111/0x250
[  124.742006][ T9271]  ? nf_nat_ipv4_out+0x244/0x2f0
[  124.747066][ T9271]  ip_finish_output+0x11a/0x2a0
[  124.752004][ T9271]  ip_mc_output+0x26b/0x350
[  124.756565][ T9271]  ? __pfx_ip_finish_output+0x10/0x10
[  124.761967][ T9271]  ? __pfx_ip_mc_output+0x10/0x10
[  124.767015][ T9271]  ip_send_skb+0x12f/0x140
[  124.771479][ T9271]  udp_send_skb+0x6a6/0x9f0
[  124.775996][ T9271]  udp_sendmsg+0x1257/0x12f0
[  124.780612][ T9271]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  124.786241][ T9271]  ? __pfx_udp_sendmsg+0x10/0x10
[  124.791209][ T9271]  inet_sendmsg+0xaf/0xd0
[  124.795632][ T9271]  __sock_sendmsg+0x102/0x180
[  124.800404][ T9271]  ____sys_sendmsg+0x312/0x410
[  124.805185][ T9271]  __sys_sendmmsg+0x227/0x4b0
[  124.809997][ T9271]  __x64_sys_sendmmsg+0x57/0x70
[  124.814888][ T9271]  x64_sys_call+0x29aa/0x2dc0
[  124.819707][ T9271]  do_syscall_64+0xc9/0x1c0
[  124.824226][ T9271]  ? clear_bhb_loop+0x55/0xb0
[  124.828911][ T9271]  ? clear_bhb_loop+0x55/0xb0
[  124.833683][ T9271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.839608][ T9271] RIP: 0033:0x7f6291a45d29
[  124.844033][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.863683][ T9271] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  124.872110][ T9271] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  124.880088][ T9271] RDX: 0000000000000003 RSI: 0000000020004540 RDI: 0000000000000003
[  124.888146][ T9271] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  124.896158][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.904145][ T9271] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  124.912608][ T9271]  </TASK>
[  124.920575][ T6274] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.991121][ T9282] netlink: 'syz.2.1515': attribute type 10 has an invalid length.
[  125.014380][ T9286] FAULT_INJECTION: forcing a failure.
[  125.014380][ T9286] name failslab, interval 1, probability 0, space 0, times 0
[  125.014410][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.5.1517 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  125.014465][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  125.014482][ T9286] Call Trace:
[  125.014490][ T9286]  <TASK>
[  125.014499][ T9286]  dump_stack_lvl+0xf2/0x150
[  125.014548][ T9286]  dump_stack+0x15/0x1a
[  125.014580][ T9286]  should_fail_ex+0x223/0x230
[  125.014612][ T9286]  should_failslab+0x8f/0xb0
[  125.014677][ T9286]  __kmalloc_noprof+0xab/0x3f0
[  125.014699][ T9286]  ? ethnl_default_start+0xb1/0x330
[  125.014727][ T9286]  ethnl_default_start+0xb1/0x330
[  125.014758][ T9286]  ? __pfx_ethnl_default_start+0x10/0x10
[  125.014794][ T9286]  genl_start+0x2e8/0x3a0
[  125.014828][ T9286]  __netlink_dump_start+0x32a/0x520
[  125.014858][ T9286]  genl_rcv_msg+0x4e5/0x6c0
[  125.014967][ T9286]  ? __pfx_ethnl_default_start+0x10/0x10
[  125.014999][ T9286]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  125.015033][ T9286]  ? __pfx_ethnl_default_done+0x10/0x10
[  125.015132][ T9286]  ? __pfx_genl_start+0x10/0x10
[  125.015172][ T9286]  ? __pfx_genl_dumpit+0x10/0x10
[  125.015211][ T9286]  ? __pfx_genl_done+0x10/0x10
[  125.015351][ T9286]  netlink_rcv_skb+0x12c/0x230
[  125.015382][ T9286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.015446][ T9286]  genl_rcv+0x28/0x40
[  125.015482][ T9286]  netlink_unicast+0x599/0x670
[  125.015507][ T9286]  netlink_sendmsg+0x5cc/0x6e0
[  125.015538][ T9286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.015596][ T9286]  __sock_sendmsg+0x140/0x180
[  125.015631][ T9286]  ____sys_sendmsg+0x312/0x410
[  125.015677][ T9286]  __sys_sendmsg+0x19d/0x230
[  125.015735][ T9286]  __x64_sys_sendmsg+0x46/0x50
[  125.015770][ T9286]  x64_sys_call+0x2734/0x2dc0
[  125.015797][ T9286]  do_syscall_64+0xc9/0x1c0
[  125.015823][ T9286]  ? clear_bhb_loop+0x55/0xb0
[  125.015847][ T9286]  ? clear_bhb_loop+0x55/0xb0
[  125.015894][ T9286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.015935][ T9286] RIP: 0033:0x7f80ae0d5d29
[  125.015969][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.015993][ T9286] RSP: 002b:00007f80ac747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.016019][ T9286] RAX: ffffffffffffffda RBX: 00007f80ae2c5fa0 RCX: 00007f80ae0d5d29
[  125.016035][ T9286] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006
[  125.016052][ T9286] RBP: 00007f80ac747090 R08: 0000000000000000 R09: 0000000000000000
[  125.016106][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.016123][ T9286] R13: 0000000000000000 R14: 00007f80ae2c5fa0 R15: 00007ffd1040c268
[  125.016146][ T9286]  </TASK>
[  125.034606][ T9288] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.034646][ T9288] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.034738][ T9288] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.034875][ T9288] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.035003][ T9288] vxlan0: entered promiscuous mode
[  125.035031][ T9288] vxlan0: entered allmulticast mode
[  125.037230][ T9288] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.037283][ T9288] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.037318][ T9288] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.037352][ T9288] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.042351][ T9289] vhci_hcd: invalid port number 13
[  125.126003][ T9296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9296 comm=syz.8.1522
[  125.331371][ T9304] FAULT_INJECTION: forcing a failure.
[  125.331371][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.467590][ T9304] CPU: 0 UID: 0 PID: 9304 Comm: syz.7.1525 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  125.467623][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  125.467640][ T9304] Call Trace:
[  125.467647][ T9304]  <TASK>
[  125.467655][ T9304]  dump_stack_lvl+0xf2/0x150
[  125.467701][ T9304]  dump_stack+0x15/0x1a
[  125.467759][ T9304]  should_fail_ex+0x223/0x230
[  125.467846][ T9304]  should_fail+0xb/0x10
[  125.467875][ T9304]  should_fail_usercopy+0x1a/0x20
[  125.467907][ T9304]  _copy_from_iter+0xd5/0xd00
[  125.467964][ T9304]  ? kmalloc_reserve+0x16e/0x190
[  125.467984][ T9304]  ? __build_skb_around+0x196/0x1f0
[  125.468004][ T9304]  ? __alloc_skb+0x21f/0x310
[  125.468027][ T9304]  ? __virt_addr_valid+0x1ed/0x250
[  125.468071][ T9304]  ? __check_object_size+0x364/0x520
[  125.468175][ T9304]  netlink_sendmsg+0x460/0x6e0
[  125.468272][ T9304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.468298][ T9304]  __sock_sendmsg+0x140/0x180
[  125.468330][ T9304]  ____sys_sendmsg+0x312/0x410
[  125.468365][ T9304]  __sys_sendmsg+0x19d/0x230
[  125.468460][ T9304]  __x64_sys_sendmsg+0x46/0x50
[  125.468492][ T9304]  x64_sys_call+0x2734/0x2dc0
[  125.468518][ T9304]  do_syscall_64+0xc9/0x1c0
[  125.468596][ T9304]  ? clear_bhb_loop+0x55/0xb0
[  125.468682][ T9304]  ? clear_bhb_loop+0x55/0xb0
[  125.468703][ T9304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.468779][ T9304] RIP: 0033:0x7f6291a45d29
[  125.468797][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.468821][ T9304] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.468846][ T9304] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  125.468863][ T9304] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003
[  125.468902][ T9304] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  125.468915][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.468927][ T9304] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  125.468945][ T9304]  </TASK>
[  125.509991][ T9302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9302 comm=syz.5.1524
[  125.581321][ T9306] loop8: detected capacity change from 0 to 2048
[  125.583919][ T9302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9302 comm=syz.5.1524
[  125.610889][ T9311] FAULT_INJECTION: forcing a failure.
[  125.610889][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.724474][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.2.1528 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  125.735184][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  125.745373][ T9311] Call Trace:
[  125.748708][ T9311]  <TASK>
[  125.751639][ T9311]  dump_stack_lvl+0xf2/0x150
[  125.756271][ T9311]  dump_stack+0x15/0x1a
[  125.760638][ T9311]  should_fail_ex+0x223/0x230
[  125.765345][ T9311]  should_fail+0xb/0x10
[  125.769518][ T9311]  should_fail_usercopy+0x1a/0x20
[  125.774615][ T9311]  _copy_from_user+0x1e/0xb0
[  125.779313][ T9311]  __sys_bpf+0x14e/0x7a0
[  125.783590][ T9311]  __x64_sys_bpf+0x43/0x50
[  125.788045][ T9311]  x64_sys_call+0x2914/0x2dc0
[  125.792842][ T9311]  do_syscall_64+0xc9/0x1c0
[  125.797351][ T9311]  ? clear_bhb_loop+0x55/0xb0
[  125.802043][ T9311]  ? clear_bhb_loop+0x55/0xb0
[  125.806722][ T9311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.812643][ T9311] RIP: 0033:0x7fe98d845d29
[  125.817056][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.836671][ T9311] RSP: 002b:00007fe98beb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  125.845095][ T9311] RAX: ffffffffffffffda RBX: 00007fe98da35fa0 RCX: 00007fe98d845d29
[  125.853076][ T9311] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005
[  125.861068][ T9311] RBP: 00007fe98beb7090 R08: 0000000000000000 R09: 0000000000000000
[  125.869125][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.877130][ T9311] R13: 0000000000000000 R14: 00007fe98da35fa0 R15: 00007fff6755f828
[  125.885160][ T9311]  </TASK>
[  125.978772][ T9314]  loop8: p1 < > p4
[  125.983363][ T9323] vhci_hcd: invalid port number 13
[  125.991165][ T9314] loop8: p4 size 8388608 extends beyond EOD, truncated
[  126.004510][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1530'.
[  126.020978][ T9306]  loop8: p1 < > p4
[  126.025369][ T9306] loop8: p4 size 8388608 extends beyond EOD, truncated
[  126.073183][ T3002]  loop8: p1 < > p4
[  126.083008][ T3002] loop8: p4 size 8388608 extends beyond EOD, truncated
[  126.093632][ T9329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9329 comm=syz.7.1536
[  126.108712][ T9306] msdos: Unknown parameter '����������01777777777777777777777�0xffffffffffffffff18446744073709551615�������������������3���Pq{�P
[  126.108712][ T9306] n'�|$@OO����-��+�el'
[  126.181247][ T9336] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.190062][ T9336] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.196830][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  126.199220][ T9336] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.215349][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  126.218275][ T9336] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.247727][ T9336] vxlan0: entered promiscuous mode
[  126.252900][ T9336] vxlan0: entered allmulticast mode
[  126.265237][ T9340] bpf_get_probe_write_proto: 5 callbacks suppressed
[  126.265256][ T9340] syz.2.1540[9340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.274807][ T9343] FAULT_INJECTION: forcing a failure.
[  126.274807][ T9343] name failslab, interval 1, probability 0, space 0, times 0
[  126.298917][ T9343] CPU: 1 UID: 0 PID: 9343 Comm: syz.4.1541 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  126.307769][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.309690][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  126.309709][ T9343] Call Trace:
[  126.309718][ T9343]  <TASK>
[  126.327597][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.328080][ T9343]  dump_stack_lvl+0xf2/0x150
[  126.328138][ T9343]  dump_stack+0x15/0x1a
[  126.350864][ T9343]  should_fail_ex+0x223/0x230
[  126.355607][ T9343]  should_failslab+0x8f/0xb0
[  126.360224][ T9343]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  126.366710][ T9343]  ? audit_log_vformat+0x23a/0x490
[  126.371901][ T9343]  ? sidtab_sid2str_get+0xb8/0x140
[  126.377037][ T9343]  kmemdup_noprof+0x2a/0x60
[  126.381707][ T9343]  sidtab_sid2str_get+0xb8/0x140
[  126.386775][ T9343]  security_sid_to_context_core+0x1eb/0x2f0
[  126.392688][ T9343]  security_sid_to_context+0x27/0x30
[  126.398001][ T9343]  avc_audit_post_callback+0x10d/0x530
[  126.403492][ T9343]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  126.409534][ T9343]  common_lsm_audit+0x90f/0x1010
[  126.414485][ T9343]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  126.420563][ T9343]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  126.426481][ T9343]  slow_avc_audit+0xf9/0x140
[  126.431092][ T9343]  audit_inode_permission+0x111/0x150
[  126.436504][ T9343]  selinux_inode_permission+0x3d9/0x410
[  126.442112][ T9343]  security_inode_permission+0x76/0xc0
[  126.447582][ T9343]  inode_permission+0xbf/0x300
[  126.452361][ T9343]  ? may_open+0x240/0x350
[  126.456707][ T9343]  may_open+0x252/0x350
[  126.460876][ T9343]  path_openat+0x19ac/0x1fa0
[  126.465499][ T9343]  do_filp_open+0x107/0x230
[  126.470025][ T9343]  do_open_execat+0xd0/0x280
[  126.474669][ T9343]  alloc_bprm+0x28/0x5d0
[  126.479053][ T9343]  do_execveat_common+0x134/0x800
[  126.484101][ T9343]  __x64_sys_execve+0x5a/0x70
[  126.488799][ T9343]  x64_sys_call+0x1333/0x2dc0
[  126.493534][ T9343]  do_syscall_64+0xc9/0x1c0
[  126.498088][ T9343]  ? clear_bhb_loop+0x55/0xb0
[  126.502797][ T9343]  ? clear_bhb_loop+0x55/0xb0
[  126.507485][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.513533][ T9343] RIP: 0033:0x7f5d6a935d29
[  126.517954][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.537726][ T9343] RSP: 002b:00007f5d68fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  126.546172][ T9343] RAX: ffffffffffffffda RBX: 00007f5d6ab25fa0 RCX: 00007f5d6a935d29
[  126.554145][ T9343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
[  126.562118][ T9343] RBP: 00007f5d68fa7090 R08: 0000000000000000 R09: 0000000000000000
[  126.570193][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.578527][ T9343] R13: 0000000000000000 R14: 00007f5d6ab25fa0 R15: 00007ffda56c6738
[  126.586533][ T9343]  </TASK>
[  126.589949][ T9340] syz.2.1540[9340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.590097][ T9340] syz.2.1540[9340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.604492][ T9336] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.606086][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  126.616124][ T9336] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.643672][ T9336] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.652591][ T9336] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.664370][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  126.811907][ T9351] netlink: zone id is out of range
[  126.817127][ T9351] netlink: zone id is out of range
[  126.836246][ T9357] vhci_hcd: invalid port number 13
[  126.841545][ T9351] netlink: set zone limit has 4 unknown bytes
[  126.856028][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1546'.
[  126.881585][ T9351] loop5: detected capacity change from 0 to 512
[  126.915972][ T9351] EXT4-fs (loop5): orphan cleanup on readonly fs
[  126.925241][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9366 comm=syz.2.1549
[  126.926612][ T9351] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1544: bg 0: block 248: padding at end of block bitmap is not set
[  126.961549][ T9351] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1544: Failed to acquire dquot type 1
[  126.993606][ T9351] EXT4-fs (loop5): 1 truncate cleaned up
[  127.108842][ T9351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.135932][ T9351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.292269][ T9351] loop5: detected capacity change from 0 to 8192
[  127.351898][ T9389] vhci_hcd: invalid port number 13
[  127.358292][ T9376] loop4: detected capacity change from 0 to 512
[  127.368837][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1558'.
[  127.457879][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9393 comm=syz.7.1560
[  127.515576][ T9398] FAULT_INJECTION: forcing a failure.
[  127.515576][ T9398] name failslab, interval 1, probability 0, space 0, times 0
[  127.516044][ T9396] syz.4.1562[9396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.528343][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.7.1563 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  127.536374][ T9396] syz.4.1562[9396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.539645][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  127.539666][ T9398] Call Trace:
[  127.539674][ T9398]  <TASK>
[  127.539682][ T9398]  dump_stack_lvl+0xf2/0x150
[  127.550671][ T9396] syz.4.1562[9396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.561717][ T9398]  dump_stack+0x15/0x1a
[  127.598161][ T9398]  should_fail_ex+0x223/0x230
[  127.602862][ T9398]  should_failslab+0x8f/0xb0
[  127.607485][ T9398]  __kmalloc_cache_node_noprof+0x56/0x320
[  127.613284][ T9398]  ? __get_vm_area_node+0xfb/0x1c0
[  127.618435][ T9398]  __get_vm_area_node+0xfb/0x1c0
[  127.623403][ T9398]  __vmalloc_node_range_noprof+0x280/0xe80
[  127.629286][ T9398]  ? do_replace+0x19c/0x2d0
[  127.633887][ T9398]  ? avc_has_perm+0xd4/0x160
[  127.638540][ T9398]  ? avc_has_perm_noaudit+0x1cc/0x210
[  127.643998][ T9398]  ? do_replace+0x19c/0x2d0
[  127.648754][ T9398]  __vmalloc_noprof+0x5e/0x70
[  127.653542][ T9398]  ? do_replace+0x19c/0x2d0
[  127.658155][ T9398]  do_replace+0x19c/0x2d0
[  127.662517][ T9398]  do_ebt_set_ctl+0x1bd/0xb80
[  127.667210][ T9398]  ? _parse_integer+0x27/0x30
[  127.671894][ T9398]  ? kstrtoull+0x110/0x140
[  127.676339][ T9398]  ? tcp_release_cb+0xfe/0x380
[  127.681147][ T9398]  ? _raw_spin_unlock_bh+0x36/0x40
[  127.686342][ T9398]  ? release_sock+0x117/0x150
[  127.691047][ T9398]  ? sockopt_release_sock+0x42/0x50
[  127.696303][ T9398]  ? do_ip_setsockopt+0x1fcf/0x2340
[  127.701521][ T9398]  nf_setsockopt+0x195/0x1b0
[  127.706149][ T9398]  ip_setsockopt+0xea/0x100
[  127.710703][ T9398]  tcp_setsockopt+0x93/0xb0
[  127.715227][ T9398]  sock_common_setsockopt+0x64/0x80
[  127.720515][ T9398]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  127.726502][ T9398]  __sys_setsockopt+0x187/0x200
[  127.731535][ T9398]  __x64_sys_setsockopt+0x66/0x80
[  127.736584][ T9398]  x64_sys_call+0x282e/0x2dc0
[  127.741284][ T9398]  do_syscall_64+0xc9/0x1c0
[  127.745804][ T9398]  ? clear_bhb_loop+0x55/0xb0
[  127.750541][ T9398]  ? clear_bhb_loop+0x55/0xb0
[  127.755237][ T9398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.761166][ T9398] RIP: 0033:0x7f6291a45d29
[  127.765630][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.785336][ T9398] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  127.793808][ T9398] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  127.801789][ T9398] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006
[  127.809767][ T9398] RBP: 00007f62900b1090 R08: 0000000000000298 R09: 0000000000000000
[  127.817832][ T9398] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[  127.825881][ T9398] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  127.833866][ T9398]  </TASK>
[  127.836978][ T9398] syz.7.1563: vmalloc error: size 256, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  127.851855][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.7.1563 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  127.862604][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  127.869004][ T9396] loop4: detected capacity change from 0 to 2048
[  127.872669][ T9398] Call Trace:
[  127.872680][ T9398]  <TASK>
[  127.872691][ T9398]  dump_stack_lvl+0xf2/0x150
[  127.889888][ T9398]  dump_stack+0x15/0x1a
[  127.894080][ T9398]  warn_alloc+0x145/0x1b0
[  127.898537][ T9398]  __vmalloc_node_range_noprof+0x2a5/0xe80
[  127.904464][ T9398]  ? avc_has_perm+0xd4/0x160
[  127.909119][ T9398]  ? avc_has_perm_noaudit+0x1cc/0x210
[  127.914594][ T9398]  ? do_replace+0x19c/0x2d0
[  127.919219][ T9398]  __vmalloc_noprof+0x5e/0x70
[  127.923988][ T9398]  ? do_replace+0x19c/0x2d0
[  127.928504][ T9398]  do_replace+0x19c/0x2d0
[  127.932875][ T9398]  do_ebt_set_ctl+0x1bd/0xb80
[  127.937599][ T9398]  ? _parse_integer+0x27/0x30
[  127.938353][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1561'.
[  127.942370][ T9398]  ? kstrtoull+0x110/0x140
[  127.955805][ T9398]  ? tcp_release_cb+0xfe/0x380
[  127.960671][ T9398]  ? _raw_spin_unlock_bh+0x36/0x40
[  127.965963][ T9398]  ? release_sock+0x117/0x150
[  127.970656][ T9398]  ? sockopt_release_sock+0x42/0x50
[  127.975864][ T9398]  ? do_ip_setsockopt+0x1fcf/0x2340
[  127.981180][ T9398]  nf_setsockopt+0x195/0x1b0
[  127.985825][ T9398]  ip_setsockopt+0xea/0x100
[  127.990449][ T9398]  tcp_setsockopt+0x93/0xb0
[  127.991014][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1561'.
[  127.995018][ T9398]  sock_common_setsockopt+0x64/0x80
[  127.995061][ T9398]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  127.995095][ T9398]  __sys_setsockopt+0x187/0x200
[  128.020034][ T9398]  __x64_sys_setsockopt+0x66/0x80
[  128.025114][ T9398]  x64_sys_call+0x282e/0x2dc0
[  128.029850][ T9398]  do_syscall_64+0xc9/0x1c0
[  128.034518][ T9398]  ? clear_bhb_loop+0x55/0xb0
[  128.039238][ T9398]  ? clear_bhb_loop+0x55/0xb0
[  128.044025][ T9398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.050119][ T9398] RIP: 0033:0x7f6291a45d29
[  128.054545][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.074250][ T9398] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  128.082697][ T9398] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  128.090710][ T9398] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006
[  128.098696][ T9398] RBP: 00007f62900b1090 R08: 0000000000000298 R09: 0000000000000000
[  128.106709][ T9398] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[  128.114691][ T9398] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  128.122679][ T9398]  </TASK>
[  128.125886][ T9398] Mem-Info:
[  128.129367][ T9398] active_anon:11624 inactive_anon:3 isolated_anon:0
[  128.129367][ T9398]  active_file:4444 inactive_file:22039 isolated_file:0
[  128.129367][ T9398]  unevictable:0 dirty:340 writeback:0
[  128.129367][ T9398]  slab_reclaimable:3197 slab_unreclaimable:17134
[  128.129367][ T9398]  mapped:30052 shmem:678 pagetables:1096
[  128.129367][ T9398]  sec_pagetables:0 bounce:0
[  128.129367][ T9398]  kernel_misc_reclaimable:0
[  128.129367][ T9398]  free:1877587 free_pcp:5100 free_cma:0
[  128.174601][ T9398] Node 0 active_anon:46496kB inactive_anon:12kB active_file:17776kB inactive_file:88156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120208kB dirty:1360kB writeback:0kB shmem:2712kB writeback_tmp:0kB kernel_stack:3424kB pagetables:4384kB sec_pagetables:0kB all_unreclaimable? no
[  128.202954][ T9398] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  128.212630][   T29] kauditd_printk_skb: 386 callbacks suppressed
[  128.212649][   T29] audit: type=1400 audit(1736567022.257:26224): avc:  denied  { create } for  pid=9402 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  128.230012][ T9398] lowmem_reserve[]: 0 2866 7844 0
[  128.260989][ T9398] Node 0 DMA32 free:2950280kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  128.289707][ T9398] lowmem_reserve[]: 0 0 4978 0
[  128.294521][ T9398] Node 0 Normal free:4544708kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:46612kB inactive_anon:12kB active_file:17776kB inactive_file:88156kB unevictable:0kB writepending:1360kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:16804kB local_pcp:15280kB free_cma:0kB
[  128.325160][ T9398] lowmem_reserve[]: 0 0 0 0
[  128.330001][ T9398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  128.343030][ T9398] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950280kB
[  128.359392][ T9398] Node 0 Normal: 232*4kB (UME) 388*8kB (UME) 354*16kB (ME) 289*32kB (UME) 156*64kB (UME) 55*128kB (UME) 54*256kB (UM) 41*512kB (UME) 49*1024kB (UM) 56*2048kB (UME) 1052*4096kB (UM) = 4544640kB
[  128.378825][ T9398] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  128.388249][ T9398] 27134 total pagecache pages
[  128.392957][ T9398] 3 pages in swap cache
[  128.397149][ T9398] Free swap  = 124552kB
[  128.401320][ T9398] Total swap = 124996kB
[  128.405472][ T9398] 2097051 pages RAM
[  128.409372][ T9398] 0 pages HighMem/MovableOnly
[  128.414110][ T9398] 80181 pages reserved
[  128.422601][   T29] audit: type=1400 audit(1736567022.467:26225): avc:  denied  { name_bind } for  pid=9405 comm="syz.2.1565" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  128.444518][   T29] audit: type=1400 audit(1736567022.467:26226): avc:  denied  { node_bind } for  pid=9405 comm="syz.2.1565" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  128.482207][   T29] audit: type=1400 audit(1736567022.517:26227): avc:  denied  { create } for  pid=9409 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  128.502149][   T29] audit: type=1400 audit(1736567022.527:26228): avc:  denied  { sys_admin } for  pid=9409 comm="syz.5.1567" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  128.523432][   T29] audit: type=1400 audit(1736567022.527:26229): avc:  denied  { checkpoint_restore } for  pid=9409 comm="syz.5.1567" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  128.550944][   T29] audit: type=1400 audit(1736567022.597:26230): avc:  denied  { create } for  pid=9411 comm="syz.7.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  128.570943][   T29] audit: type=1400 audit(1736567022.597:26231): avc:  denied  { setopt } for  pid=9411 comm="syz.7.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  128.620305][ T3002] Alternate GPT is invalid, using primary GPT.
[  128.626828][ T3002]  loop4: p2 p3 p7
[  128.634614][   T29] audit: type=1400 audit(1736567022.677:26232): avc:  denied  { write } for  pid=9415 comm="syz.8.1570" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  128.666839][ T9416] vhci_hcd: invalid port number 13
[  128.688388][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1570'.
[  128.695218][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  128.712568][   T29] audit: type=1400 audit(1736567022.727:26233): avc:  denied  { module_request } for  pid=9413 comm="syz.2.1569" kmod="tcp_cubio" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  128.714414][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  128.747953][ T6730] udevd[6730]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  128.799260][ T9437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=9437 comm=syz.5.1577
[  128.880380][ T9445] loop8: detected capacity change from 0 to 128
[  128.881897][ T9423] Dead loop on virtual device ip6_vti0, fix it urgently!
[  128.977813][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1581'.
[  129.007369][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1581'.
[  129.289472][ T9472] netlink: 165 bytes leftover after parsing attributes in process `syz.8.1593'.
[  129.334782][ T9474] program syz.7.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.352548][ T9475] syz.7.1594[9475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.352614][ T9475] syz.7.1594[9475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.539183][ T9492] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.559580][ T9492] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.568613][ T9492] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.577387][ T9492] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.588533][ T9492] vxlan0: entered promiscuous mode
[  129.593719][ T9492] vxlan0: entered allmulticast mode
[  129.601313][ T9492] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.610332][ T9492] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.619327][ T9492] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.628247][ T9492] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.656952][ T9498] xt_hashlimit: size too large, truncated to 1048576
[  130.253007][ T9532] netlink: zone id is out of range
[  130.258269][ T9532] netlink: zone id is out of range
[  130.263829][ T9532] netlink: set zone limit has 4 unknown bytes
[  130.280353][ T9532] loop4: detected capacity change from 0 to 512
[  130.289074][ T9532] EXT4-fs (loop4): orphan cleanup on readonly fs
[  130.298316][ T9532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1617: bg 0: block 248: padding at end of block bitmap is not set
[  130.313486][ T9532] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1617: Failed to acquire dquot type 1
[  130.327301][ T9532] EXT4-fs (loop4): 1 truncate cleaned up
[  130.333611][ T9532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.347515][ T9532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.396541][ T9532] loop4: detected capacity change from 0 to 8192
[  130.605607][ T9548] xt_hashlimit: size too large, truncated to 1048576
[  130.877860][ T9563] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.886682][ T9563] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.895480][ T9563] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.904237][ T9563] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.913340][ T9563] vxlan0: entered promiscuous mode
[  130.918556][ T9563] vxlan0: entered allmulticast mode
[  130.927294][ T9563] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.936378][ T9563] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.945412][ T9563] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.954528][ T9563] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.244256][ T9580] FAULT_INJECTION: forcing a failure.
[  131.244256][ T9580] name failslab, interval 1, probability 0, space 0, times 0
[  131.256958][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.4.1635 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  131.267710][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  131.277839][ T9580] Call Trace:
[  131.281122][ T9580]  <TASK>
[  131.284055][ T9580]  dump_stack_lvl+0xf2/0x150
[  131.288731][ T9580]  dump_stack+0x15/0x1a
[  131.292918][ T9580]  should_fail_ex+0x223/0x230
[  131.297731][ T9580]  should_failslab+0x8f/0xb0
[  131.302338][ T9580]  kmem_cache_alloc_noprof+0x52/0x320
[  131.307782][ T9580]  ? skb_clone+0x154/0x1f0
[  131.312292][ T9580]  skb_clone+0x154/0x1f0
[  131.316550][ T9580]  __netlink_deliver_tap+0x2bd/0x4f0
[  131.321854][ T9580]  netlink_dump+0x78a/0x7e0
[  131.326417][ T9580]  netlink_recvmsg+0x427/0x780
[  131.331204][ T9580]  ? __pfx_netlink_recvmsg+0x10/0x10
[  131.336529][ T9580]  sock_recvmsg_nosec+0x107/0x140
[  131.341631][ T9580]  ____sys_recvmsg+0x271/0x280
[  131.346417][ T9580]  do_recvmmsg+0x2aa/0x6d0
[  131.350902][ T9580]  __x64_sys_recvmmsg+0xe2/0x170
[  131.355856][ T9580]  x64_sys_call+0x2a9a/0x2dc0
[  131.360616][ T9580]  do_syscall_64+0xc9/0x1c0
[  131.365224][ T9580]  ? clear_bhb_loop+0x55/0xb0
[  131.369911][ T9580]  ? clear_bhb_loop+0x55/0xb0
[  131.374664][ T9580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.380584][ T9580] RIP: 0033:0x7f5d6a935d29
[  131.385004][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.404692][ T9580] RSP: 002b:00007f5d68fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  131.413283][ T9580] RAX: ffffffffffffffda RBX: 00007f5d6ab25fa0 RCX: 00007f5d6a935d29
[  131.421666][ T9580] RDX: 000000000000005b RSI: 00000000200021c0 RDI: 0000000000000003
[  131.429688][ T9580] RBP: 00007f5d68fa7090 R08: 0000000000000000 R09: 0000000000000000
[  131.437687][ T9580] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002
[  131.445658][ T9580] R13: 0000000000000000 R14: 00007f5d6ab25fa0 R15: 00007ffda56c6738
[  131.453642][ T9580]  </TASK>
[  131.482938][ T9583] loop8: detected capacity change from 0 to 256
[  131.497437][ T9583] FAT-fs (loop8): bogus number of FAT sectors
[  131.503761][ T9583] FAT-fs (loop8): Can't find a valid FAT filesystem
[  131.794182][ T9604] FAULT_INJECTION: forcing a failure.
[  131.794182][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.807337][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.7.1644 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  131.818031][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  131.828196][ T9604] Call Trace:
[  131.831479][ T9604]  <TASK>
[  131.834426][ T9604]  dump_stack_lvl+0xf2/0x150
[  131.839085][ T9604]  dump_stack+0x15/0x1a
[  131.843312][ T9604]  should_fail_ex+0x223/0x230
[  131.848026][ T9604]  should_fail+0xb/0x10
[  131.852273][ T9604]  should_fail_usercopy+0x1a/0x20
[  131.857389][ T9604]  _copy_from_user+0x1e/0xb0
[  131.861996][ T9604]  move_addr_to_kernel+0x82/0x120
[  131.867084][ T9604]  copy_msghdr_from_user+0x271/0x2a0
[  131.872444][ T9604]  __sys_sendmmsg+0x1e8/0x4b0
[  131.877183][ T9604]  __x64_sys_sendmmsg+0x57/0x70
[  131.882045][ T9604]  x64_sys_call+0x29aa/0x2dc0
[  131.886774][ T9604]  do_syscall_64+0xc9/0x1c0
[  131.891301][ T9604]  ? clear_bhb_loop+0x55/0xb0
[  131.896036][ T9604]  ? clear_bhb_loop+0x55/0xb0
[  131.900825][ T9604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.906831][ T9604] RIP: 0033:0x7f6291a45d29
[  131.911251][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.930904][ T9604] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  131.939369][ T9604] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  131.947476][ T9604] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000003
[  131.955461][ T9604] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  131.963493][ T9604] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001
[  131.971470][ T9604] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  131.979455][ T9604]  </TASK>
[  132.014436][ T9608] loop4: detected capacity change from 0 to 256
[  132.219836][ T9620] netlink: zone id is out of range
[  132.224998][ T9620] netlink: zone id is out of range
[  132.230222][ T9620] netlink: set zone limit has 4 unknown bytes
[  132.246780][ T9620] loop7: detected capacity change from 0 to 512
[  132.254466][ T9620] EXT4-fs (loop7): orphan cleanup on readonly fs
[  132.261666][ T9620] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1651: bg 0: block 248: padding at end of block bitmap is not set
[  132.276327][ T9620] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1651: Failed to acquire dquot type 1
[  132.288267][ T9620] EXT4-fs (loop7): 1 truncate cleaned up
[  132.294723][ T9620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.308486][ T9620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.358414][ T9620] loop7: detected capacity change from 0 to 8192
[  132.484240][ T9628] FAULT_INJECTION: forcing a failure.
[  132.484240][ T9628] name failslab, interval 1, probability 0, space 0, times 0
[  132.496975][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.5.1654 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  132.507726][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  132.509024][ T9630] program syz.7.1655 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.517795][ T9628] Call Trace:
[  132.517805][ T9628]  <TASK>
[  132.517813][ T9628]  dump_stack_lvl+0xf2/0x150
[  132.517857][ T9628]  dump_stack+0x15/0x1a
[  132.542179][ T9628]  should_fail_ex+0x223/0x230
[  132.546871][ T9628]  should_failslab+0x8f/0xb0
[  132.551477][ T9628]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  132.557816][ T9628]  ? audit_log_vformat+0x23a/0x490
[  132.562970][ T9628]  ? sidtab_sid2str_get+0xb8/0x140
[  132.568113][ T9628]  kmemdup_noprof+0x2a/0x60
[  132.572655][ T9628]  sidtab_sid2str_get+0xb8/0x140
[  132.577625][ T9628]  security_sid_to_context_core+0x1eb/0x2f0
[  132.583960][ T9628]  security_sid_to_context+0x27/0x30
[  132.589360][ T9628]  avc_audit_post_callback+0x10d/0x530
[  132.594888][ T9628]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  132.600917][ T9628]  common_lsm_audit+0x90f/0x1010
[  132.605898][ T9628]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  132.612054][ T9628]  slow_avc_audit+0xf9/0x140
[  132.616666][ T9628]  avc_has_perm+0x129/0x160
[  132.621262][ T9628]  selinux_socket_sendmsg+0x185/0x1c0
[  132.626672][ T9628]  security_socket_sendmsg+0x47/0x80
[  132.632004][ T9628]  __sock_sendmsg+0x2d/0x180
[  132.636648][ T9628]  ____sys_sendmsg+0x312/0x410
[  132.641497][ T9628]  __sys_sendmsg+0x19d/0x230
[  132.646110][ T9628]  __x64_sys_sendmsg+0x46/0x50
[  132.650887][ T9628]  x64_sys_call+0x2734/0x2dc0
[  132.655576][ T9628]  do_syscall_64+0xc9/0x1c0
[  132.660140][ T9628]  ? clear_bhb_loop+0x55/0xb0
[  132.664899][ T9628]  ? clear_bhb_loop+0x55/0xb0
[  132.669655][ T9628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.675641][ T9628] RIP: 0033:0x7f80ae0d5d29
[  132.680152][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.699770][ T9628] RSP: 002b:00007f80ac747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.708270][ T9628] RAX: ffffffffffffffda RBX: 00007f80ae2c5fa0 RCX: 00007f80ae0d5d29
[  132.716271][ T9628] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  132.724256][ T9628] RBP: 00007f80ac747090 R08: 0000000000000000 R09: 0000000000000000
[  132.732270][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.740322][ T9628] R13: 0000000000000000 R14: 00007f80ae2c5fa0 R15: 00007ffd1040c268
[  132.748318][ T9628]  </TASK>
[  132.800721][ T9635] loop5: detected capacity change from 0 to 7
[  132.807123][ T6274] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.815085][ T6274] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.823091][ T6274]  loop5: unable to read partition table
[  132.830153][ T9635] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.841723][ T9635] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.849627][ T9635]  loop5: unable to read partition table
[  132.855349][ T9635] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dƤ����ݡ�����
[  132.855349][ T9635] 
) failed (rc=-5)
[  132.855548][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.902517][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.910631][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.918628][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.926527][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  132.934445][ T3289] Buffer I/O error on dev loop5, logical block 0, async page read
[  133.081919][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1662'.
[  133.093255][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1662'.
[  133.198756][ T9664] selinux_netlink_send: 1 callbacks suppressed
[  133.198830][ T9664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38545 sclass=netlink_route_socket pid=9664 comm=syz.7.1669
[  133.219045][ T9666] netlink: 'syz.2.1672': attribute type 4 has an invalid length.
[  133.253303][ T9666] netlink: 'syz.2.1672': attribute type 4 has an invalid length.
[  133.301783][ T9679] netlink: zone id is out of range
[  133.307068][ T9679] netlink: zone id is out of range
[  133.322479][ T9679] netlink: set zone limit has 4 unknown bytes
[  133.334442][   T29] kauditd_printk_skb: 464 callbacks suppressed
[  133.334462][   T29] audit: type=1400 audit(1736567027.377:26694): avc:  denied  { create } for  pid=9682 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  133.377817][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1675'.
[  133.396899][   T29] audit: type=1400 audit(1736567027.387:26695): avc:  denied  { sys_admin } for  pid=9682 comm="syz.4.1680" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  133.418135][   T29] audit: type=1400 audit(1736567027.387:26696): avc:  denied  { checkpoint_restore } for  pid=9682 comm="syz.4.1680" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  133.421100][ T9679] loop5: detected capacity change from 0 to 512
[  133.440230][   T29] audit: type=1400 audit(1736567027.437:26697): avc:  denied  { create } for  pid=9687 comm="syz.2.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  133.499553][ T9679] EXT4-fs (loop5): orphan cleanup on readonly fs
[  133.525956][   T29] audit: type=1400 audit(1736567027.557:26698): avc:  denied  { write } for  pid=9687 comm="syz.2.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  133.546720][   T29] audit: type=1400 audit(1736567027.567:26699): avc:  denied  { create } for  pid=9692 comm="syz.8.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  133.566814][   T29] audit: type=1400 audit(1736567027.567:26700): avc:  denied  { setopt } for  pid=9692 comm="syz.8.1683" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  133.568442][ T9697] FAULT_INJECTION: forcing a failure.
[  133.568442][ T9697] name failslab, interval 1, probability 0, space 0, times 0
[  133.587311][   T29] audit: type=1400 audit(1736567027.567:26701): avc:  denied  { ioctl } for  pid=9692 comm="syz.8.1683" path="socket:[23705]" dev="sockfs" ino=23705 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  133.587432][   T29] audit: type=1326 audit(1736567027.597:26702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6a935d29 code=0x7ffc0000
[  133.599934][ T9697] CPU: 0 UID: 0 PID: 9697 Comm: syz.4.1685 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  133.625132][   T29] audit: type=1326 audit(1736567027.597:26703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5d6a935d29 code=0x7ffc0000
[  133.648510][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  133.648532][ T9697] Call Trace:
[  133.648541][ T9697]  <TASK>
[  133.648551][ T9697]  dump_stack_lvl+0xf2/0x150
[  133.648597][ T9697]  dump_stack+0x15/0x1a
[  133.690530][ T9679] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1676: bg 0: block 248: padding at end of block bitmap is not set
[  133.692795][ T9697]  should_fail_ex+0x223/0x230
[  133.711119][ T9679] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1676: Failed to acquire dquot type 1
[  133.722009][ T9697]  should_failslab+0x8f/0xb0
[  133.729918][ T9679] EXT4-fs (loop5): 1 truncate cleaned up
[  133.737956][ T9697]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[  133.754804][ T9697]  ? sidtab_sid2str_get+0xb8/0x140
[  133.760038][ T9697]  kmemdup_noprof+0x2a/0x60
[  133.764627][ T9697]  sidtab_sid2str_get+0xb8/0x140
[  133.769665][ T9697]  security_sid_to_context_core+0x1eb/0x2f0
[  133.775608][ T9697]  security_sid_to_context+0x27/0x30
[  133.781072][ T9697]  selinux_lsmprop_to_secctx+0x2c/0x40
[  133.786665][ T9697]  security_lsmprop_to_secctx+0x4a/0x90
[  133.792270][ T9697]  audit_log_task_context+0x93/0x1c0
[  133.797604][ T9697]  audit_log_task+0xf9/0x1c0
[  133.802302][ T9697]  audit_seccomp+0x68/0x130
[  133.806853][ T9697]  __seccomp_filter+0x6fa/0x1180
[  133.806955][ T9697]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  133.806995][ T9697]  ? vfs_write+0x596/0x920
[  133.807039][ T9697]  __secure_computing+0x9f/0x1c0
[  133.807077][ T9697]  syscall_trace_enter+0xd1/0x1f0
[  133.807118][ T9697]  ? fpregs_assert_state_consistent+0x83/0xa0
[  133.807160][ T9697]  do_syscall_64+0xaa/0x1c0
[  133.807197][ T9697]  ? clear_bhb_loop+0x55/0xb0
[  133.807218][ T9697]  ? clear_bhb_loop+0x55/0xb0
[  133.807240][ T9697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.807323][ T9697] RIP: 0033:0x7f5d6a935d29
[  133.807342][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.807365][ T9697] RSP: 002b:00007f5d68fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  133.807434][ T9697] RAX: ffffffffffffffda RBX: 00007f5d6ab25fa0 RCX: 00007f5d6a935d29
[  133.807447][ T9697] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c
[  133.807464][ T9697] RBP: 00007f5d68fa7090 R08: 0000000000000000 R09: 0000000000000000
[  133.807479][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.807494][ T9697] R13: 0000000000000000 R14: 00007f5d6ab25fa0 R15: 00007ffda56c6738
[  133.807540][ T9697]  </TASK>
[  133.814482][ T9679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.814902][ T9679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.899259][ T9709] x_tables: duplicate underflow at hook 2
[  133.904028][ T9698] 9pnet: Could not find request transport: fdfdno=0x0000000000000004
[  133.959558][ T9708] loop5: detected capacity change from 0 to 8192
[  134.182211][ T9721] loop2: detected capacity change from 0 to 2048
[  134.208914][ T9724] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  134.209208][ T9721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.313187][ T9733] syzkaller0: entered allmulticast mode
[  134.333672][ T9737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9737 comm=syz.7.1698
[  134.349205][ T9737] ip6gre1: entered allmulticast mode
[  134.387756][ T9733] syzkaller0 (unregistering): left allmulticast mode
[  134.406794][ T9742] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.1693: Abort forced by user
[  134.418613][ T9742] EXT4-fs (loop2): Remounting filesystem read-only
[  134.418732][ T9741] netlink: zone id is out of range
[  134.425144][ T9742] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  134.430358][ T9741] netlink: zone id is out of range
[  134.446127][ T9741] netlink: set zone limit has 4 unknown bytes
[  134.463850][ T9741] loop4: detected capacity change from 0 to 512
[  134.473774][ T9741] EXT4-fs (loop4): orphan cleanup on readonly fs
[  134.482967][ T9741] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1700: bg 0: block 248: padding at end of block bitmap is not set
[  134.501892][ T9741] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1700: Failed to acquire dquot type 1
[  134.514323][ T9741] EXT4-fs (loop4): 1 truncate cleaned up
[  134.533516][ T9741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.558416][ T9741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.625419][ T9741] loop4: detected capacity change from 0 to 8192
[  134.641069][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1703'.
[  134.782525][ T9773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9773 comm=syz.8.1709
[  134.828924][ T9776] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1713'.
[  134.840046][ T9776] 1�X���: renamed from 
60�X���
[  134.847062][ T9776] A link change request failed with some changes committed already. Interface 
61�X��� may have been left with an inconsistent configuration, please check.
[  134.869361][ T9776] loop5: detected capacity change from 0 to 164
[  134.881331][ T9776] Unable to read rock-ridge attributes
[  134.900971][ T9776] IPVS: stopping master sync thread 9781 ...
[  134.901069][ T9781] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  134.929219][ T9780] ip6gre2: entered allmulticast mode
[  135.017581][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.067288][ T9787] netlink: zone id is out of range
[  135.072566][ T9787] netlink: zone id is out of range
[  135.084759][ T9787] netlink: set zone limit has 4 unknown bytes
[  135.106931][ T9787] loop4: detected capacity change from 0 to 512
[  135.120726][ T9787] EXT4-fs (loop4): orphan cleanup on readonly fs
[  135.129257][ T9792] FAULT_INJECTION: forcing a failure.
[  135.129257][ T9792] name failslab, interval 1, probability 0, space 0, times 0
[  135.129285][ T9787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1718: bg 0: block 248: padding at end of block bitmap is not set
[  135.129320][ T9792] CPU: 0 UID: 0 PID: 9792 Comm: syz.7.1719 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  135.129347][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  135.142410][ T9787] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1718: Failed to acquire dquot type 1
[  135.156235][ T9792] Call Trace:
[  135.156248][ T9792]  <TASK>
[  135.156258][ T9792]  dump_stack_lvl+0xf2/0x150
[  135.156340][ T9792]  dump_stack+0x15/0x1a
[  135.172565][ T9787] EXT4-fs (loop4): 1 truncate cleaned up
[  135.177067][ T9792]  should_fail_ex+0x223/0x230
[  135.177107][ T9792]  ? rtnl_newlink+0x5d/0x1250
[  135.177131][ T9792]  should_failslab+0x8f/0xb0
[  135.192305][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'.
[  135.194593][ T9792]  __kmalloc_cache_noprof+0x4e/0x320
[  135.237119][ T9792]  ? __pfx_rtnl_newlink+0x10/0x10
[  135.242208][ T9792]  rtnl_newlink+0x5d/0x1250
[  135.246797][ T9792]  ? __rcu_read_unlock+0x34/0x70
[  135.251898][ T9792]  ? bpf_trace_run3+0x12b/0x1d0
[  135.256787][ T9792]  ? xas_load+0x3ae/0x3d0
[  135.261141][ T9792]  ? _raw_spin_lock_irqsave+0x3c/0xb0
[  135.266573][ T9792]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  135.272414][ T9792]  ? queue_stack_map_push_elem+0x285/0x300
[  135.278292][ T9792]  ? __rcu_read_unlock+0x34/0x70
[  135.283268][ T9792]  ? bpf_trace_run3+0x12b/0x1d0
[  135.288129][ T9792]  ? __kfree_skb+0x102/0x150
[  135.292719][ T9792]  ? __rcu_read_unlock+0x4e/0x70
[  135.297700][ T9792]  ? avc_has_perm_noaudit+0x1cc/0x210
[  135.303142][ T9792]  ? selinux_capable+0x1f2/0x260
[  135.308117][ T9792]  ? security_capable+0x81/0x90
[  135.312977][ T9792]  ? ns_capable+0x7d/0xb0
[  135.317318][ T9792]  ? __pfx_rtnl_newlink+0x10/0x10
[  135.322408][ T9792]  rtnetlink_rcv_msg+0x651/0x710
[  135.327348][ T9792]  ? ref_tracker_free+0x3a5/0x410
[  135.332456][ T9792]  ? __dev_queue_xmit+0x186/0x2090
[  135.337580][ T9792]  netlink_rcv_skb+0x12c/0x230
[  135.342467][ T9792]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  135.348037][ T9792]  rtnetlink_rcv+0x1c/0x30
[  135.352594][ T9792]  netlink_unicast+0x599/0x670
[  135.357376][ T9792]  netlink_sendmsg+0x5cc/0x6e0
[  135.362173][ T9792]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.367463][ T9792]  __sock_sendmsg+0x140/0x180
[  135.372320][ T9792]  ____sys_sendmsg+0x312/0x410
[  135.377108][ T9792]  __sys_sendmsg+0x19d/0x230
[  135.381803][ T9792]  __x64_sys_sendmsg+0x46/0x50
[  135.386582][ T9792]  x64_sys_call+0x2734/0x2dc0
[  135.391346][ T9792]  do_syscall_64+0xc9/0x1c0
[  135.395847][ T9792]  ? clear_bhb_loop+0x55/0xb0
[  135.400545][ T9792]  ? clear_bhb_loop+0x55/0xb0
[  135.405226][ T9792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.411234][ T9792] RIP: 0033:0x7f6291a45d29
[  135.415709][ T9792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.435339][ T9792] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.443855][ T9792] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  135.451845][ T9792] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
[  135.459821][ T9792] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  135.467845][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.475911][ T9792] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  135.483889][ T9792]  </TASK>
[  135.490607][ T9787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  135.504971][ T9787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.618056][ T9787] loop4: detected capacity change from 0 to 8192
[  135.657382][ T9807] FAULT_INJECTION: forcing a failure.
[  135.657382][ T9807] name failslab, interval 1, probability 0, space 0, times 0
[  135.670143][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.2.1726 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  135.680892][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  135.690983][ T9807] Call Trace:
[  135.694262][ T9807]  <TASK>
[  135.697601][ T9807]  dump_stack_lvl+0xf2/0x150
[  135.702207][ T9807]  dump_stack+0x15/0x1a
[  135.706383][ T9807]  should_fail_ex+0x223/0x230
[  135.711167][ T9807]  should_failslab+0x8f/0xb0
[  135.715866][ T9807]  __kmalloc_node_noprof+0xad/0x410
[  135.721138][ T9807]  ? __kvmalloc_node_noprof+0x72/0x170
[  135.726649][ T9807]  __kvmalloc_node_noprof+0x72/0x170
[  135.731998][ T9807]  xt_alloc_entry_offsets+0x47/0x50
[  135.737249][ T9807]  translate_table+0xa3/0x1040
[  135.742108][ T9807]  ? __memcg_slab_post_alloc_hook+0x510/0x660
[  135.748210][ T9807]  ? _copy_from_user+0x8d/0xb0
[  135.752989][ T9807]  do_ip6t_set_ctl+0x7cc/0x8c0
[  135.757824][ T9807]  ? kstrtouint+0x77/0xc0
[  135.762182][ T9807]  ? __rcu_read_unlock+0x4e/0x70
[  135.767152][ T9807]  nf_setsockopt+0x195/0x1b0
[  135.771869][ T9807]  ipv6_setsockopt+0x10f/0x130
[  135.776721][ T9807]  udpv6_setsockopt+0x95/0xb0
[  135.781504][ T9807]  sock_common_setsockopt+0x64/0x80
[  135.786774][ T9807]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  135.792696][ T9807]  __sys_setsockopt+0x187/0x200
[  135.797654][ T9807]  __x64_sys_setsockopt+0x66/0x80
[  135.802691][ T9807]  x64_sys_call+0x282e/0x2dc0
[  135.807384][ T9807]  do_syscall_64+0xc9/0x1c0
[  135.811897][ T9807]  ? clear_bhb_loop+0x55/0xb0
[  135.816601][ T9807]  ? clear_bhb_loop+0x55/0xb0
[  135.821307][ T9807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.827298][ T9807] RIP: 0033:0x7fe98d845d29
[  135.831810][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.851461][ T9807] RSP: 002b:00007fe98beb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.859888][ T9807] RAX: ffffffffffffffda RBX: 00007fe98da35fa0 RCX: 00007fe98d845d29
[  135.867926][ T9807] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  135.876337][ T9807] RBP: 00007fe98beb7090 R08: 0000000000000590 R09: 0000000000000000
[  135.884316][ T9807] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  135.892308][ T9807] R13: 0000000000000000 R14: 00007fe98da35fa0 R15: 00007fff6755f828
[  135.900319][ T9807]  </TASK>
[  136.021810][ T9822] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1723'.
[  136.082310][ T9828] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1733'.
[  136.138948][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1736'.
[  136.155068][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'.
[  136.188464][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.208381][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.275028][ T9846] loop8: detected capacity change from 0 to 512
[  136.294487][ T9846] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities
[  136.454446][ T9862] loop5: detected capacity change from 0 to 512
[  136.464666][ T9862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.481750][ T9866] FAULT_INJECTION: forcing a failure.
[  136.481750][ T9866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.494940][ T9866] CPU: 1 UID: 0 PID: 9866 Comm: syz.8.1751 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  136.505636][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  136.515804][ T9866] Call Trace:
[  136.519092][ T9866]  <TASK>
[  136.522031][ T9866]  dump_stack_lvl+0xf2/0x150
[  136.526661][ T9866]  dump_stack+0x15/0x1a
[  136.530885][ T9866]  should_fail_ex+0x223/0x230
[  136.535596][ T9866]  should_fail+0xb/0x10
[  136.539761][ T9866]  should_fail_usercopy+0x1a/0x20
[  136.544809][ T9866]  _copy_from_user+0x1e/0xb0
[  136.549419][ T9866]  sctp_getsockopt_peeloff+0x6a/0x200
[  136.554921][ T9866]  sctp_getsockopt+0x151/0xab0
[  136.559701][ T9866]  sock_common_getsockopt+0x5b/0x70
[  136.564925][ T9866]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  136.570934][ T9866]  do_sock_getsockopt+0x1ca/0x260
[  136.575973][ T9866]  __x64_sys_getsockopt+0x18c/0x200
[  136.581194][ T9866]  x64_sys_call+0x1288/0x2dc0
[  136.585880][ T9866]  do_syscall_64+0xc9/0x1c0
[  136.590395][ T9866]  ? clear_bhb_loop+0x55/0xb0
[  136.595088][ T9866]  ? clear_bhb_loop+0x55/0xb0
[  136.599833][ T9866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.605758][ T9866] RIP: 0033:0x7fa784415d29
[  136.610179][ T9866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.629805][ T9866] RSP: 002b:00007fa782a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  136.638250][ T9866] RAX: ffffffffffffffda RBX: 00007fa784605fa0 RCX: 00007fa784415d29
[  136.646268][ T9866] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003
[  136.654247][ T9866] RBP: 00007fa782a81090 R08: 000000002009de80 R09: 0000000000000000
[  136.662246][ T9866] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[  136.670268][ T9866] R13: 0000000000000000 R14: 00007fa784605fa0 R15: 00007ffeb9da0608
[  136.678318][ T9866]  </TASK>
[  136.732049][ T9862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.753151][ T9862] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.776276][ T9874] FAULT_INJECTION: forcing a failure.
[  136.776276][ T9874] name failslab, interval 1, probability 0, space 0, times 0
[  136.788998][ T9874] CPU: 1 UID: 0 PID: 9874 Comm: syz.7.1753 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  136.799713][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  136.809774][ T9874] Call Trace:
[  136.813073][ T9874]  <TASK>
[  136.816010][ T9874]  dump_stack_lvl+0xf2/0x150
[  136.820762][ T9874]  dump_stack+0x15/0x1a
[  136.824978][ T9874]  should_fail_ex+0x223/0x230
[  136.829686][ T9874]  should_failslab+0x8f/0xb0
[  136.834342][ T9874]  kmem_cache_alloc_noprof+0x52/0x320
[  136.839783][ T9874]  ? security_file_alloc+0x32/0x100
[  136.845099][ T9874]  security_file_alloc+0x32/0x100
[  136.850166][ T9874]  init_file+0x5b/0x1b0
[  136.854357][ T9874]  alloc_empty_file+0xea/0x200
[  136.859205][ T9874]  path_openat+0x6a/0x1fa0
[  136.863662][ T9874]  ? _parse_integer_limit+0x167/0x180
[  136.869079][ T9874]  ? _parse_integer+0x27/0x30
[  136.869108][ T9874]  ? kstrtoull+0x110/0x140
[  136.878216][ T9874]  ? kstrtouint+0x77/0xc0
[  136.882621][ T9874]  ? kstrtouint_from_user+0xb0/0xe0
[  136.887830][ T9874]  do_filp_open+0x107/0x230
[  136.892354][ T9874]  do_sys_openat2+0xab/0x120
[  136.896954][ T9874]  __x64_sys_openat+0xf3/0x120
[  136.901750][ T9874]  x64_sys_call+0x2b30/0x2dc0
[  136.906514][ T9874]  do_syscall_64+0xc9/0x1c0
[  136.911035][ T9874]  ? clear_bhb_loop+0x55/0xb0
[  136.915737][ T9874]  ? clear_bhb_loop+0x55/0xb0
[  136.920475][ T9874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.926464][ T9874] RIP: 0033:0x7f6291a45d29
[  136.931033][ T9874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.950677][ T9874] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  136.959136][ T9874] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  136.967119][ T9874] RDX: 0000000000005400 RSI: 0000000020000080 RDI: ffffffffffffff9c
[  136.975108][ T9874] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  136.983201][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.991183][ T9874] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  136.999182][ T9874]  </TASK>
[  137.012673][ T6274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.113230][ T9889] loop4: detected capacity change from 0 to 2048
[  137.167633][ T9889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.221006][ T9889] netlink: 'syz.4.1758': attribute type 6 has an invalid length.
[  137.254696][ T9897] 9pnet_fd: Insufficient options for proto=fd
[  137.279559][ T9904] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  137.332402][ T9909] loop2: detected capacity change from 0 to 164
[  137.349104][ T9909] Unable to read rock-ridge attributes
[  137.379669][ T9912] loop5: detected capacity change from 0 to 1024
[  137.387540][ T9912] EXT4-fs: Ignoring removed nobh option
[  137.395450][ T9912] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  137.409149][ T9912] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  137.419660][ T9912] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.1767: iget: special inode unallocated
[  137.432770][ T9912] EXT4-fs (loop5): no journal found
[  137.438121][ T9912] EXT4-fs (loop5): can't get journal size
[  137.446083][ T9912] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #32: comm syz.5.1767: iget: special inode unallocated
[  137.461214][ T9912] EXT4-fs (loop5): failed to initialize system zone (-117)
[  137.469019][ T9912] EXT4-fs (loop5): mount failed
[  137.483371][ T9915] vhci_hcd: invalid port number 13
[  137.675469][ T9930] geneve3: entered promiscuous mode
[  137.680827][ T9930] geneve3: entered allmulticast mode
[  137.775493][ T9940] vhci_hcd: invalid port number 13
[  137.927118][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.034109][ T9958] FAULT_INJECTION: forcing a failure.
[  138.034109][ T9958] name failslab, interval 1, probability 0, space 0, times 0
[  138.046963][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.4.1790 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  138.057736][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  138.067869][ T9958] Call Trace:
[  138.071162][ T9958]  <TASK>
[  138.074119][ T9958]  dump_stack_lvl+0xf2/0x150
[  138.078745][ T9958]  dump_stack+0x15/0x1a
[  138.082923][ T9958]  should_fail_ex+0x223/0x230
[  138.087727][ T9958]  should_failslab+0x8f/0xb0
[  138.092352][ T9958]  kmem_cache_alloc_noprof+0x52/0x320
[  138.097736][ T9958]  ? skb_clone+0x154/0x1f0
[  138.102253][ T9958]  skb_clone+0x154/0x1f0
[  138.106515][ T9958]  __netlink_deliver_tap+0x2bd/0x4f0
[  138.111960][ T9958]  netlink_unicast+0x64a/0x670
[  138.116737][ T9958]  netlink_sendmsg+0x5cc/0x6e0
[  138.121523][ T9958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.126899][ T9958]  __sock_sendmsg+0x140/0x180
[  138.131597][ T9958]  ____sys_sendmsg+0x312/0x410
[  138.136430][ T9958]  __sys_sendmsg+0x19d/0x230
[  138.141047][ T9958]  __x64_sys_sendmsg+0x46/0x50
[  138.145823][ T9958]  x64_sys_call+0x2734/0x2dc0
[  138.150569][ T9958]  do_syscall_64+0xc9/0x1c0
[  138.155084][ T9958]  ? clear_bhb_loop+0x55/0xb0
[  138.159770][ T9958]  ? clear_bhb_loop+0x55/0xb0
[  138.164453][ T9958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.170446][ T9958] RIP: 0033:0x7f5d6a935d29
[  138.174871][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.194486][ T9958] RSP: 002b:00007f5d68fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.202916][ T9958] RAX: ffffffffffffffda RBX: 00007f5d6ab25fa0 RCX: 00007f5d6a935d29
[  138.210892][ T9958] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003
[  138.218870][ T9958] RBP: 00007f5d68fa7090 R08: 0000000000000000 R09: 0000000000000000
[  138.226850][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.234871][ T9958] R13: 0000000000000000 R14: 00007f5d6ab25fa0 R15: 00007ffda56c6738
[  138.242858][ T9958]  </TASK>
[  138.287299][ T9968] vhci_hcd: invalid port number 13
[  138.337943][ T9965] loop5: detected capacity change from 0 to 128
[  138.344798][ T9965] vfat: Unknown parameter '�����\`W"g��6���V���b��YX������M�+)�F�9��I����0c$?��g-�y�y�`_���������2��������臛�N�Ŭz�h_
�Hj8^91��~�>���:4�3��x��7�
[  138.344798][ T9965] 0���օX�PY��>[�.�2	�%�Vo�ij�OL�����y��N���&R�Q�I���g���Cbkl��P��|6k��70x00000000'
[  138.346096][   T29] kauditd_printk_skb: 297 callbacks suppressed
[  138.346112][   T29] audit: type=1400 audit(1736567032.387:26992): avc:  denied  { mounton } for  pid=9964 comm="syz.5.1791" path="/183/file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  138.385636][ T9965] loop5: detected capacity change from 0 to 512
[  138.414993][ T9965] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  138.415374][   T29] audit: type=1400 audit(1736567032.427:26993): avc:  denied  { read write } for  pid=9974 comm="syz.4.1795" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  138.435509][ T9965] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  138.448213][   T29] audit: type=1400 audit(1736567032.427:26994): avc:  denied  { open } for  pid=9974 comm="syz.4.1795" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  138.468982][ T9976] Cannot find del_set index 0 as target
[  138.490929][ T9965] EXT4-fs (loop5): failed to initialize system zone (-117)
[  138.490971][ T9965] EXT4-fs (loop5): mount failed
[  138.491993][   T29] audit: type=1400 audit(1736567032.507:26995): avc:  denied  { create } for  pid=9971 comm="syz.8.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  138.492042][   T29] audit: type=1400 audit(1736567032.517:26996): avc:  denied  { setopt } for  pid=9971 comm="syz.8.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  138.500430][   T29] audit: type=1400 audit(1736567032.537:26997): avc:  denied  { read write } for  pid=9964 comm="syz.5.1791" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  138.500483][   T29] audit: type=1400 audit(1736567032.537:26998): avc:  denied  { open } for  pid=9964 comm="syz.5.1791" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  138.500513][   T29] audit: type=1400 audit(1736567032.537:26999): avc:  denied  { ioctl } for  pid=9964 comm="syz.5.1791" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  138.500602][   T29] audit: type=1400 audit(1736567032.547:27000): avc:  denied  { append } for  pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  138.507961][   T29] audit: type=1400 audit(1736567032.557:27001): avc:  denied  { map_create } for  pid=9974 comm="syz.4.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  138.516621][ T9976] serio: Serial port ptm0
[  138.554246][ T9981] loop5: detected capacity change from 0 to 512
[  138.622773][ T9984] loop7: detected capacity change from 0 to 512
[  138.714525][ T9981] FAULT_INJECTION: forcing a failure.
[  138.714525][ T9981] name failslab, interval 1, probability 0, space 0, times 0
[  138.727260][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: +}[@ Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  138.737525][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  138.747692][ T9981] Call Trace:
[  138.751017][ T9981]  <TASK>
[  138.754001][ T9981]  dump_stack_lvl+0xf2/0x150
[  138.758639][ T9981]  dump_stack+0x15/0x1a
[  138.762992][ T9981]  should_fail_ex+0x223/0x230
[  138.767712][ T9981]  should_failslab+0x8f/0xb0
[  138.772409][ T9981]  kmem_cache_alloc_noprof+0x52/0x320
[  138.777849][ T9981]  ? getname_flags+0x81/0x3b0
[  138.782547][ T9981]  getname_flags+0x81/0x3b0
[  138.787131][ T9981]  getname+0x17/0x20
[  138.791035][ T9981]  do_sys_openat2+0x67/0x120
[  138.795724][ T9981]  __x64_sys_openat+0xf3/0x120
[  138.800584][ T9981]  x64_sys_call+0x2b30/0x2dc0
[  138.805285][ T9981]  do_syscall_64+0xc9/0x1c0
[  138.809989][ T9981]  ? clear_bhb_loop+0x55/0xb0
[  138.814698][ T9981]  ? clear_bhb_loop+0x55/0xb0
[  138.819549][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.825519][ T9981] RIP: 0033:0x7f80ae0d4690
[  138.829940][ T9981] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  138.849633][ T9981] RSP: 002b:00007f80ac746b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  138.858058][ T9981] RAX: ffffffffffffffda RBX: 0000000000127081 RCX: 00007f80ae0d4690
[  138.866037][ T9981] RDX: 0000000000127081 RSI: 00007f80ac746c10 RDI: 00000000ffffff9c
[  138.874192][ T9981] RBP: 00007f80ac746c10 R08: 0000000000000000 R09: 002367732f766564
[  138.882306][ T9981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  138.890366][ T9981] R13: 0000000000000000 R14: 00007f80ae2c5fa0 R15: 00007ffd1040c268
[  138.898353][ T9981]  </TASK>
[  138.917397][ T9986] loop2: detected capacity change from 0 to 2048
[  138.959648][ T9986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.039550][ T9993] __nla_validate_parse: 3 callbacks suppressed
[  139.039564][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1800'.
[  139.064279][ T9995] vhci_hcd: invalid port number 13
[  139.389712][T10015] loop4: detected capacity change from 0 to 512
[  139.432365][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'.
[  139.507166][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1810'.
[  139.579937][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1813'.
[  139.777936][T10043] netlink: zone id is out of range
[  139.783184][T10043] netlink: zone id is out of range
[  139.788812][T10043] netlink: set zone limit has 4 unknown bytes
[  139.798323][T10040] loop4: detected capacity change from 0 to 512
[  139.805258][T10040] ext2: Unknown parameter 'fowner'
[  139.852790][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1822'.
[  139.885664][T10043] loop7: detected capacity change from 0 to 512
[  139.903852][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1822'.
[  139.945663][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1822'.
[  139.971807][T10043] EXT4-fs (loop7): orphan cleanup on readonly fs
[  139.979534][T10043] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1820: bg 0: block 248: padding at end of block bitmap is not set
[  140.008232][T10044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10044 comm=syz.4.1822
[  140.044552][T10043] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1820: Failed to acquire dquot type 1
[  140.070369][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1822'.
[  140.081258][T10043] EXT4-fs (loop7): 1 truncate cleaned up
[  140.088058][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1822'.
[  140.099344][T10043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  140.123100][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.168958][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1822'.
[  140.260748][T10043] loop7: detected capacity change from 0 to 8192
[  140.360176][ T9986] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  140.374888][ T9986] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  140.387338][ T9986] EXT4-fs (loop2): This should not happen!! Data will be lost
[  140.387338][ T9986] 
[  140.397131][ T9986] EXT4-fs (loop2): Total free blocks count 0
[  140.403161][ T9986] EXT4-fs (loop2): Free/Dirty block details
[  140.409208][ T9986] EXT4-fs (loop2): free_blocks=66060288
[  140.414773][ T9986] EXT4-fs (loop2): dirty_blocks=32672
[  140.420195][ T9986] EXT4-fs (loop2): Block reservation details
[  140.426227][ T9986] EXT4-fs (loop2): i_reserved_data_blocks=2042
[  140.567592][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1
[  140.575364][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.582833][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.590535][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.598124][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.605554][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.620885][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2
[  140.628411][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.635866][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.643321][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.650839][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.658271][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.665905][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.673434][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.680886][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.688320][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.695743][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.703257][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.710689][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.718235][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.725758][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.733172][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.740618][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.748137][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.755549][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.763126][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.770581][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.778035][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.785585][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.793049][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.800545][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.807999][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.815410][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.822860][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.830316][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.837776][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.845285][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.852902][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  140.861520][ T3374] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  140.880124][T10075] FAULT_INJECTION: forcing a failure.
[  140.880124][T10075] name failslab, interval 1, probability 0, space 0, times 0
[  140.892863][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.5.1833 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  140.903809][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  140.913884][T10075] Call Trace:
[  140.917171][T10075]  <TASK>
[  140.920229][T10075]  dump_stack_lvl+0xf2/0x150
[  140.924864][T10075]  dump_stack+0x15/0x1a
[  140.929042][T10075]  should_fail_ex+0x223/0x230
[  140.933801][T10075]  ? kobject_uevent_env+0x1a4/0x550
[  140.939051][T10075]  should_failslab+0x8f/0xb0
[  140.943678][T10075]  __kmalloc_cache_noprof+0x4e/0x320
[  140.949034][T10075]  ? __pfx_dev_uevent_name+0x10/0x10
[  140.954424][T10075]  kobject_uevent_env+0x1a4/0x550
[  140.959465][T10075]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  140.965368][T10075]  ? device_pm_check_callbacks+0x632/0x650
[  140.971411][T10075]  kobject_uevent+0x1c/0x30
[  140.975966][T10075]  device_del+0x6fa/0x780
[  140.980352][T10075]  device_destroy+0x67/0xa0
[  140.984863][T10075]  drop_ref+0xbf/0x1a0
[  140.988951][T10075]  hidraw_disconnect+0x39/0x50
[  140.993792][T10075]  hid_device_remove+0x159/0x210
[  140.998844][T10075]  ? __pfx_hid_device_remove+0x10/0x10
[  141.004316][T10075]  device_release_driver_internal+0x2e5/0x4f0
[  141.010431][T10075]  device_release_driver+0x19/0x20
[  141.015560][T10075]  bus_remove_device+0x26f/0x290
[  141.020616][T10075]  device_del+0x370/0x780
[  141.025048][T10075]  ? enable_work+0x116/0x1b0
[  141.029728][T10075]  hid_destroy_device+0x52/0x110
[  141.034739][T10075]  uhid_dev_destroy+0x6a/0xb0
[  141.039524][T10075]  uhid_char_write+0x512/0x5b0
[  141.044401][T10075]  ? __pfx_uhid_char_write+0x10/0x10
[  141.049706][T10075]  vfs_write+0x281/0x920
[  141.053962][T10075]  ? putname+0xcf/0xf0
[  141.058057][T10075]  ? __fget_files+0x17c/0x1c0
[  141.062790][T10075]  ksys_write+0xe8/0x1b0
[  141.067054][T10075]  __x64_sys_write+0x42/0x50
[  141.071659][T10075]  x64_sys_call+0x287e/0x2dc0
[  141.076393][T10075]  do_syscall_64+0xc9/0x1c0
[  141.081004][T10075]  ? clear_bhb_loop+0x55/0xb0
[  141.085691][T10075]  ? clear_bhb_loop+0x55/0xb0
[  141.090417][T10075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.096451][T10075] RIP: 0033:0x7f80ae0d5d29
[  141.100877][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.120590][T10075] RSP: 002b:00007f80ac747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.129093][T10075] RAX: ffffffffffffffda RBX: 00007f80ae2c5fa0 RCX: 00007f80ae0d5d29
[  141.137072][T10075] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000004
[  141.145123][T10075] RBP: 00007f80ac747090 R08: 0000000000000000 R09: 0000000000000000
[  141.153108][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.161155][T10075] R13: 0000000000000000 R14: 00007f80ae2c5fa0 R15: 00007ffd1040c268
[  141.169157][T10075]  </TASK>
[  141.206355][T10086] netlink: zone id is out of range
[  141.211520][T10086] netlink: zone id is out of range
[  141.233506][T10086] netlink: set zone limit has 4 unknown bytes
[  141.248181][T10086] loop4: detected capacity change from 0 to 512
[  141.337408][T10086] EXT4-fs (loop4): orphan cleanup on readonly fs
[  141.344230][T10086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1837: bg 0: block 248: padding at end of block bitmap is not set
[  141.366883][T10086] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1837: Failed to acquire dquot type 1
[  141.380629][T10086] EXT4-fs (loop4): 1 truncate cleaned up
[  141.386198][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.390798][T10086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.408584][T10086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.505066][T10086] loop4: detected capacity change from 0 to 8192
[  141.533956][T10105] loop2: detected capacity change from 0 to 512
[  141.541548][T10105] EXT4-fs: Ignoring removed orlov option
[  141.549787][T10105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  141.573641][T10105] EXT4-fs (loop2): orphan cleanup on readonly fs
[  141.581073][T10105] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1844: bg 0: block 248: padding at end of block bitmap is not set
[  141.597808][T10105] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1844: Failed to acquire dquot type 1
[  141.618835][T10108] vhci_hcd: invalid port number 13
[  141.627237][T10105] EXT4-fs (loop2): 1 truncate cleaned up
[  141.652492][T10105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.723470][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.824478][T10127] netlink: zone id is out of range
[  141.829698][T10127] netlink: zone id is out of range
[  141.843554][T10127] netlink: set zone limit has 4 unknown bytes
[  141.871885][T10132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10132 comm=syz.7.1857
[  141.878398][T10127] loop4: detected capacity change from 0 to 512
[  141.884524][T10132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10132 comm=syz.7.1857
[  141.905885][T10130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10130 comm=syz.2.1856
[  141.919786][T10127] EXT4-fs (loop4): orphan cleanup on readonly fs
[  141.932943][T10127] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1855: bg 0: block 248: padding at end of block bitmap is not set
[  141.951445][T10127] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1855: Failed to acquire dquot type 1
[  141.964326][T10127] EXT4-fs (loop4): 1 truncate cleaned up
[  141.973330][T10127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.987768][T10127] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.069648][T10127] loop4: detected capacity change from 0 to 8192
[  142.132466][T10143] syz.7.1862[10143] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.132531][T10143] syz.7.1862[10143] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.145920][T10143] syz.7.1862[10143] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.169514][T10143] FAULT_INJECTION: forcing a failure.
[  142.169514][T10143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.194170][T10143] CPU: 0 UID: 0 PID: 10143 Comm: syz.7.1862 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  142.205059][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  142.215275][T10143] Call Trace:
[  142.218577][T10143]  <TASK>
[  142.221570][T10143]  dump_stack_lvl+0xf2/0x150
[  142.226192][T10143]  dump_stack+0x15/0x1a
[  142.230423][T10143]  should_fail_ex+0x223/0x230
[  142.235233][T10143]  should_fail+0xb/0x10
[  142.239410][T10143]  should_fail_usercopy+0x1a/0x20
[  142.244528][T10143]  _copy_from_user+0x1e/0xb0
[  142.249254][T10143]  copy_msghdr_from_user+0x54/0x2a0
[  142.254483][T10143]  ? __fget_files+0x17c/0x1c0
[  142.259194][T10143]  __sys_sendmsg+0x13e/0x230
[  142.263823][T10143]  __x64_sys_sendmsg+0x46/0x50
[  142.268603][T10143]  x64_sys_call+0x2734/0x2dc0
[  142.273377][T10143]  do_syscall_64+0xc9/0x1c0
[  142.278026][T10143]  ? clear_bhb_loop+0x55/0xb0
[  142.282730][T10143]  ? clear_bhb_loop+0x55/0xb0
[  142.287430][T10143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.293386][T10143] RIP: 0033:0x7f6291a45d29
[  142.297812][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.317584][T10143] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.326069][T10143] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  142.334203][T10143] RDX: 0000000000040004 RSI: 0000000020000280 RDI: 0000000000000005
[  142.342275][T10143] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  142.350250][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.358233][T10143] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  142.366229][T10143]  </TASK>
[  142.428744][T10154] FAULT_INJECTION: forcing a failure.
[  142.428744][T10154] name failslab, interval 1, probability 0, space 0, times 0
[  142.441524][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.7.1866 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  142.452306][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  142.462392][T10154] Call Trace:
[  142.465685][T10154]  <TASK>
[  142.468629][T10154]  dump_stack_lvl+0xf2/0x150
[  142.473346][T10154]  dump_stack+0x15/0x1a
[  142.477588][T10154]  should_fail_ex+0x223/0x230
[  142.482295][T10154]  should_failslab+0x8f/0xb0
[  142.487038][T10154]  kmem_cache_alloc_node_noprof+0x59/0x320
[  142.492886][T10154]  ? __alloc_skb+0x10b/0x310
[  142.497584][T10154]  ? __rtnl_unlock+0x99/0xb0
[  142.502272][T10154]  __alloc_skb+0x10b/0x310
[  142.506708][T10154]  netlink_ack+0xef/0x4f0
[  142.511064][T10154]  ? __dev_queue_xmit+0x186/0x2090
[  142.516193][T10154]  netlink_rcv_skb+0x19c/0x230
[  142.520975][T10154]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  142.526451][T10154]  rtnetlink_rcv+0x1c/0x30
[  142.530892][T10154]  netlink_unicast+0x599/0x670
[  142.535669][T10154]  netlink_sendmsg+0x5cc/0x6e0
[  142.540495][T10154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.545810][T10154]  __sock_sendmsg+0x140/0x180
[  142.550510][T10154]  ____sys_sendmsg+0x312/0x410
[  142.555367][T10154]  __sys_sendmsg+0x19d/0x230
[  142.559987][T10154]  __x64_sys_sendmsg+0x46/0x50
[  142.564888][T10154]  x64_sys_call+0x2734/0x2dc0
[  142.569582][T10154]  do_syscall_64+0xc9/0x1c0
[  142.574153][T10154]  ? clear_bhb_loop+0x55/0xb0
[  142.578840][T10154]  ? clear_bhb_loop+0x55/0xb0
[  142.583544][T10154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.589464][T10154] RIP: 0033:0x7f6291a45d29
[  142.593971][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.613722][T10154] RSP: 002b:00007f62900b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.622213][T10154] RAX: ffffffffffffffda RBX: 00007f6291c35fa0 RCX: 00007f6291a45d29
[  142.630197][T10154] RDX: 0000000000040000 RSI: 00000000200002c0 RDI: 0000000000000003
[  142.638189][T10154] RBP: 00007f62900b1090 R08: 0000000000000000 R09: 0000000000000000
[  142.646167][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.654143][T10154] R13: 0000000000000000 R14: 00007f6291c35fa0 R15: 00007ffeaf765c68
[  142.662154][T10154]  </TASK>
[  142.666562][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.675091][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.719684][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1
[  142.727259][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.734855][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.742323][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.749830][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.757435][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.765060][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[  142.772616][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.780296][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.787734][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.795218][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.802671][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.810102][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.817542][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.825032][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.832569][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.840001][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.847510][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.854889][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.862344][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.869824][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.877308][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.884797][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.892319][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.899735][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.907156][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.914558][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.922077][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.929759][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.937281][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.944751][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.952187][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.959706][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.967139][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.974539][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.981988][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.989514][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  142.997043][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  143.006499][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  143.247966][T10176] SELinux:  Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped).
[  143.382630][   T29] kauditd_printk_skb: 343 callbacks suppressed
[  143.382645][   T29] audit: type=1400 audit(1736567037.427:27337): avc:  denied  { ioctl } for  pid=10181 comm="syz.4.1880" path="socket:[24843]" dev="sockfs" ino=24843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.498759][T10190] xt_hashlimit: max too large, truncated to 1048576
[  143.509354][T10190] Cannot find set identified by id 0 to match
[  143.521185][   T29] audit: type=1400 audit(1736567037.567:27338): avc:  denied  { create } for  pid=10189 comm="syz.4.1884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  143.545702][   T29] audit: type=1400 audit(1736567037.587:27339): avc:  denied  { execmem } for  pid=10189 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  143.687852][T10199] loop2: detected capacity change from 0 to 512
[  143.694844][T10199] EXT4-fs: Ignoring removed oldalloc option
[  143.700880][T10199] EXT4-fs: inline encryption not supported
[  143.752819][   T29] audit: type=1400 audit(1736567037.737:27340): avc:  denied  { mounton } for  pid=10198 comm="syz.2.1888" path="/397/file0" dev="tmpfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  143.775811][   T29] audit: type=1400 audit(1736567037.797:27341): avc:  denied  { read write } for  pid=10189 comm="syz.4.1884" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.799702][   T29] audit: type=1400 audit(1736567037.797:27342): avc:  denied  { open } for  pid=10189 comm="syz.4.1884" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.857193][T10199] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  143.943410][T10207] netlink: zone id is out of range
[  144.011469][T10199] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1888: bg 0: block 64: padding at end of block bitmap is not set
[  144.031073][T10207] loop7: detected capacity change from 0 to 512
[  144.053043][   T29] audit: type=1400 audit(1736567037.987:27343): avc:  denied  { write } for  pid=10206 comm="syz.7.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  144.073834][   T29] audit: type=1400 audit(1736567038.007:27344): avc:  denied  { read } for  pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  144.096138][   T29] audit: type=1400 audit(1736567038.007:27345): avc:  denied  { search } for  pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  144.096401][T10199] Quota error (device loop2): write_blk: dquota write failed
[  144.122883][T10207] EXT4-fs (loop7): orphan cleanup on readonly fs
[  144.125329][T10199] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1888: Failed to acquire dquot type 0
[  144.132717][T10207] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1889: bg 0: block 248: padding at end of block bitmap is not set
[  144.144071][T10199] EXT4-fs (loop2): 1 truncate cleaned up
[  144.161554][T10207] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1889: Failed to acquire dquot type 1
[  144.170708][T10199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.186218][T10207] EXT4-fs (loop7): 1 truncate cleaned up
[  144.194053][T10207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.208357][T10207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.231926][T10214] __nla_validate_parse: 8 callbacks suppressed
[  144.231944][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1891'.
[  144.251430][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  144.294603][T10216] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1892'.
[  144.313528][T10207] loop7: detected capacity change from 0 to 8192
[  144.338310][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.498811][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.513192][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.611716][T10230] loop4: detected capacity change from 0 to 2048
[  144.653065][T10230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.667217][T10246] loop7: detected capacity change from 0 to 512
[  144.675552][T10246] EXT4-fs: Ignoring removed oldalloc option
[  144.681547][T10246] EXT4-fs: inline encryption not supported
[  144.693972][T10246] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  144.696946][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  144.707217][T10246] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1905: bg 0: block 64: padding at end of block bitmap is not set
[  144.712068][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  144.729870][T10246] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1905: Failed to acquire dquot type 0
[  144.737237][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  144.749148][T10246] EXT4-fs (loop7): 1 truncate cleaned up
[  144.762172][T10246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.769409][T10253] loop8: detected capacity change from 0 to 512
[  144.793339][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1905'.
[  144.795978][T10253] ext4: Unknown parameter 'subj_user'
[  144.809918][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.828345][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  144.828636][ T7619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.837366][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  144.837492][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'.
[  145.001630][T10269] loop8: detected capacity change from 0 to 512
[  145.032533][T10269] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  145.049991][T10269] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.084577][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  145.254934][T10289] vhci_hcd: invalid port number 13
[  145.279924][T10286] loop7: detected capacity change from 0 to 512
[  145.309901][T10286] EXT4-fs: inline encryption not supported
[  145.393996][T10286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.410200][T10286] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.492769][T10286] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1918: corrupted inode contents
[  145.508075][ T1036] net_ratelimit: 3 callbacks suppressed
[  145.508089][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.511580][T10286] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.1918: mark_inode_dirty error
[  145.540800][T10286] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1918: corrupted inode contents
[  145.555218][T10297] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1918: corrupted inode contents
[  145.568835][T10297] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.1918: mark_inode_dirty error
[  145.593734][T10297] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1918: corrupted inode contents
[  145.625386][T10297] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1918: mark_inode_dirty error
[  145.650058][T10297] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1918: corrupted inode contents
[  145.663406][T10297] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.1918: mark_inode_dirty error
[  145.668244][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.721288][ T7619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.770888][T10318] batadv1: entered promiscuous mode
[  145.773809][T10308] loop4: detected capacity change from 0 to 512
[  145.776239][T10318] batadv1: entered allmulticast mode
[  145.786302][T10308] ext4: Unknown parameter 'subj_user'
[  146.109624][T10334] loop7: detected capacity change from 0 to 2048
[  146.129019][T10334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.146459][T10334] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  146.166934][ T7619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.191550][T10338] syz.7.1939[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.191599][T10338] syz.7.1939[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.203378][T10338] syz.7.1939[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.219875][T10338] batadv1: entered promiscuous mode
[  146.236741][T10338] batadv1: entered allmulticast mode
[  146.548352][ T7922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.635518][T10354] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.679764][T10354] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.690720][T10358] syz.4.1946[10358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.690783][T10358] syz.4.1946[10358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.702492][T10358] syz.4.1946[10358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  146.729032][T10354] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.788508][T10354] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.852667][T10354] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.864812][T10354] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.886849][T10354] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.898828][T10354] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.028070][T10380] syz.2.1957[10380] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.038623][T10378] loop8: detected capacity change from 0 to 2048
[  147.081528][T10378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.100251][T10378] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  147.122883][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.278229][T10403] loop7: detected capacity change from 0 to 512
[  147.514648][T10413] bpf_get_probe_write_proto: 2 callbacks suppressed
[  147.514666][T10413] syz.8.1968[10413] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.522326][T10413] syz.8.1968[10413] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.535194][T10413] syz.8.1968[10413] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.598173][ T7922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.813688][T10425] syz.5.1973[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.813784][T10425] syz.5.1973[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.830392][T10422] loop8: detected capacity change from 0 to 2048
[  147.839505][T10425] syz.5.1973[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.848317][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.872035][T10427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10427 comm=syz.4.1974
[  147.884821][T10427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10427 comm=syz.4.1974
[  147.922625][T10422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.948864][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.064274][T10441] syz.2.1979[10441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.064407][T10441] syz.2.1979[10441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.090811][T10441] syz.2.1979[10441] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.179814][T10452] FAULT_INJECTION: forcing a failure.
[  148.179814][T10452] name failslab, interval 1, probability 0, space 0, times 0
[  148.194977][T10448] loop8: detected capacity change from 0 to 2048
[  148.204013][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.2.1984 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  148.221182][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  148.231258][T10452] Call Trace:
[  148.234562][T10452]  <TASK>
[  148.237561][T10452]  dump_stack_lvl+0xf2/0x150
[  148.242236][T10452]  dump_stack+0x15/0x1a
[  148.246451][T10452]  should_fail_ex+0x223/0x230
[  148.251157][T10452]  should_failslab+0x8f/0xb0
[  148.255778][T10452]  __kmalloc_node_noprof+0xad/0x410
[  148.261014][T10452]  ? __kvmalloc_node_noprof+0x72/0x170
[  148.266580][T10452]  ? dev_addr_init+0xb2/0x120
[  148.271396][T10452]  __kvmalloc_node_noprof+0x72/0x170
[  148.276744][T10452]  alloc_netdev_mqs+0x5c1/0x9c0
[  148.281613][T10452]  rtnl_create_link+0x233/0x680
[  148.286507][T10452]  rtnl_newlink_create+0x133/0x5d0
[  148.291669][T10452]  ? ns_capable+0x7d/0xb0
[  148.296107][T10452]  ? netlink_ns_capable+0x88/0xa0
[  148.301143][T10452]  rtnl_newlink+0xe9f/0x1250
[  148.305755][T10452]  ? page_counter_charge+0x1ff/0x240
[  148.311065][T10452]  ? page_counter_charge+0x21a/0x240
[  148.316402][T10452]  ? mod_objcg_state+0x2ea/0x4f0
[  148.321484][T10452]  ? __rcu_read_unlock+0x4e/0x70
[  148.326441][T10452]  ? avc_has_perm_noaudit+0x1cc/0x210
[  148.331956][T10452]  ? selinux_capable+0x1f2/0x260
[  148.336907][T10452]  ? security_capable+0x81/0x90
[  148.341846][T10452]  ? ns_capable+0x7d/0xb0
[  148.346202][T10452]  ? __pfx_rtnl_newlink+0x10/0x10
[  148.351248][T10452]  rtnetlink_rcv_msg+0x651/0x710
[  148.356310][T10452]  ? ref_tracker_free+0x3a5/0x410
[  148.361392][T10452]  ? __dev_queue_xmit+0x186/0x2090
[  148.366568][T10452]  netlink_rcv_skb+0x12c/0x230
[  148.371412][T10452]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  148.376892][T10452]  rtnetlink_rcv+0x1c/0x30
[  148.381340][T10452]  netlink_unicast+0x599/0x670
[  148.386220][T10452]  netlink_sendmsg+0x5cc/0x6e0
[  148.391019][T10452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.396363][T10452]  __sock_sendmsg+0x140/0x180
[  148.401089][T10452]  ____sys_sendmsg+0x312/0x410
[  148.405872][T10452]  __sys_sendmsg+0x19d/0x230
[  148.410618][T10452]  __x64_sys_sendmsg+0x46/0x50
[  148.415467][T10452]  x64_sys_call+0x2734/0x2dc0
[  148.420186][T10452]  do_syscall_64+0xc9/0x1c0
[  148.424756][T10452]  ? clear_bhb_loop+0x55/0xb0
[  148.429474][T10452]  ? clear_bhb_loop+0x55/0xb0
[  148.434172][T10452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.440121][T10452] RIP: 0033:0x7fe98d845d29
[  148.444550][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.464234][T10452] RSP: 002b:00007fe98beb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.472659][T10452] RAX: ffffffffffffffda RBX: 00007fe98da35fa0 RCX: 00007fe98d845d29
[  148.480697][T10452] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005
[  148.488743][T10452] RBP: 00007fe98beb7090 R08: 0000000000000000 R09: 0000000000000000
[  148.496723][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.504701][T10452] R13: 0000000000000000 R14: 00007fe98da35fa0 R15: 00007fff6755f828
[  148.512771][T10452]  </TASK>
[  148.519829][   T29] kauditd_printk_skb: 573 callbacks suppressed
[  148.519843][   T29] audit: type=1400 audit(1736567042.567:27914): avc:  denied  { open } for  pid=10453 comm="syz.7.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  148.545548][   T29] audit: type=1400 audit(1736567042.567:27915): avc:  denied  { kernel } for  pid=10453 comm="syz.7.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  148.565498][   T29] audit: type=1400 audit(1736567042.577:27916): avc:  denied  { prog_load } for  pid=10451 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  148.584774][   T29] audit: type=1400 audit(1736567042.577:27917): avc:  denied  { bpf } for  pid=10451 comm="syz.2.1984" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  148.605505][   T29] audit: type=1400 audit(1736567042.597:27918): avc:  denied  { perfmon } for  pid=10451 comm="syz.2.1984" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  148.626715][   T29] audit: type=1400 audit(1736567042.597:27919): avc:  denied  { map_create } for  pid=10451 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  148.646094][   T29] audit: type=1400 audit(1736567042.597:27920): avc:  denied  { map_read map_write } for  pid=10451 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  148.666174][   T29] audit: type=1400 audit(1736567042.597:27921): avc:  denied  { create } for  pid=10451 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  148.687171][   T29] audit: type=1400 audit(1736567042.657:27922): avc:  denied  { append } for  pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  148.710083][   T29] audit: type=1400 audit(1736567042.657:27923): avc:  denied  { create } for  pid=10453 comm="syz.7.1985" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  148.734126][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.918061][T10469] syz.2.1992[10469] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.012294][T10478] loop2: detected capacity change from 0 to 512
[  149.031233][T10478] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  149.133591][T10488] netlink: zone id is out of range
[  149.138827][T10488] netlink: zone id is out of range
[  149.153071][T10490] netlink: 'syz.7.2002': attribute type 4 has an invalid length.
[  149.177334][T10488] loop5: detected capacity change from 0 to 512
[  149.185948][T10490] netlink: 'syz.7.2002': attribute type 4 has an invalid length.
[  149.204735][T10488] EXT4-fs (loop5): orphan cleanup on readonly fs
[  149.217544][T10488] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2001: bg 0: block 248: padding at end of block bitmap is not set
[  149.242289][T10488] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2001: Failed to acquire dquot type 1
[  149.305183][T10488] EXT4-fs (loop5): 1 truncate cleaned up
[  149.322007][T10488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.336259][T10488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.352543][T10497] loop2: detected capacity change from 0 to 2048
[  149.379567][T10497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.407409][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.468388][T10488] loop5: detected capacity change from 0 to 8192
[  149.493106][T10514] loop2: detected capacity change from 0 to 256
[  149.504390][T10513] loop8: detected capacity change from 0 to 512
[  149.516456][T10513] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  149.649852][T10524] netlink: 'syz.8.2016': attribute type 4 has an invalid length.
[  149.662644][T10524] netlink: 'syz.8.2016': attribute type 4 has an invalid length.
[  149.811200][T10529] __nla_validate_parse: 19 callbacks suppressed
[  149.811264][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2018'.
[  150.028782][T10556] loop5: detected capacity change from 0 to 256
[  150.107799][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2036'.
[  150.127564][T10564] serio: Serial port ptm0
[  150.336058][T10586] loop8: detected capacity change from 0 to 256
[  150.428610][T10592] loop7: detected capacity change from 0 to 1024
[  150.435229][T10592] EXT4-fs: Ignoring removed nobh option
[  150.440923][T10592] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.456111][T10592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  150.465821][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2051'.
[  150.467357][T10598] loop2: detected capacity change from 0 to 512
[  150.477987][T10592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.493818][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2051'.
[  150.494779][T10595] loop8: detected capacity change from 0 to 2048
[  150.509493][T10598] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.518123][T10592] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  150.540686][T10595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.541947][T10598] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  150.561834][ T7619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.569213][T10598] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  150.580982][T10598] EXT4-fs (loop2): 1 truncate cleaned up
[  150.591125][T10598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.653775][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.670429][ T3002] ==================================================================
[  150.678653][ T3002] BUG: KCSAN: data-race in set_nlink / set_nlink
[  150.685118][ T3002] 
[  150.687462][ T3002] read to 0xffff8881068075f0 of 4 bytes by task 3292 on cpu 1:
[  150.695054][ T3002]  set_nlink+0x2b/0xb0
[  150.699139][ T3002]  kernfs_iop_permission+0x1c8/0x210
[  150.704461][ T3002]  inode_permission+0x18c/0x300
[  150.709330][ T3002]  link_path_walk+0x14b/0x820
[  150.714022][ T3002]  path_openat+0x1af/0x1fa0
[  150.718555][ T3002]  do_filp_open+0x107/0x230
[  150.723062][ T3002]  do_sys_openat2+0xab/0x120
[  150.727695][ T3002]  __x64_sys_openat+0xf3/0x120
[  150.732463][ T3002]  x64_sys_call+0x2b30/0x2dc0
[  150.737151][ T3002]  do_syscall_64+0xc9/0x1c0
[  150.741672][ T3002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.747593][ T3002] 
[  150.749910][ T3002] write to 0xffff8881068075f0 of 4 bytes by task 3002 on cpu 0:
[  150.757552][ T3002]  set_nlink+0x98/0xb0
[  150.761634][ T3002]  kernfs_iop_permission+0x1c8/0x210
[  150.766933][ T3002]  inode_permission+0x18c/0x300
[  150.771785][ T3002]  link_path_walk+0x14b/0x820
[  150.776467][ T3002]  path_lookupat+0x72/0x2b0
[  150.780982][ T3002]  filename_lookup+0x150/0x340
[  150.785754][ T3002]  vfs_statx+0x9a/0x170
[  150.789925][ T3002]  __se_sys_newfstatat+0xdc/0x300
[  150.794952][ T3002]  __x64_sys_newfstatat+0x55/0x70
[  150.799978][ T3002]  x64_sys_call+0x236d/0x2dc0
[  150.804659][ T3002]  do_syscall_64+0xc9/0x1c0
[  150.809166][ T3002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.815079][ T3002] 
[  150.817402][ T3002] value changed: 0x00000009 -> 0x00000008
[  150.823125][ T3002] 
[  150.825448][ T3002] Reported by Kernel Concurrency Sanitizer on:
[  150.831604][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  150.841930][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  150.851988][ T3002] ==================================================================
[  150.861642][T10595] EXT4-fs error (device loop8): __ext4_remount:6749: comm syz.8.2053: Abort forced by user
[  150.866659][ T3375] net_ratelimit: 2 callbacks suppressed
[  150.866676][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.873245][T10595] EXT4-fs (loop8): Remounting filesystem read-only
[  150.892092][T10595] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  150.903396][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.908068][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.946164][ T7922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.458247][ T8547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.915826][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.985919][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.026121][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.065825][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.945857][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.107755][ T7922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.155894][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.026086][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.185933][ T7922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.226052][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog