last executing test programs:

12m43.392247566s ago: executing program 32 (id=174):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1208886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=")
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x83, &(0x7f0000000300), &(0x7f0000000380)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r5 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x400, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40040)
sendfile(r5, r5, 0x0, 0x80000000)

12m37.519299806s ago: executing program 33 (id=204):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}], [], 0x6b}})
dup(0xffffffffffffffff)

12m20.503014428s ago: executing program 34 (id=379):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
wait4(0x0, &(0x7f0000000340), 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000a80)='kfree\x00'}, 0x18)
creat(&(0x7f0000000300)='./file0\x00', 0xe4)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

11m50.334558165s ago: executing program 35 (id=621):
times(&(0x7f00000004c0))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2521"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

10m6.017679601s ago: executing program 36 (id=3048):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

10m5.377448098s ago: executing program 37 (id=3052):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x100, 0x0, 0x800, 0x400, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x5, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000007000000040000000400000004000000", @ANYRES32, @ANYBLOB="0000e0cf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8569000000000000050000000100"/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x20000005, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth1_to_hsr\x00', @multicast})
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='1-0'], 0x31)
socketpair(0x2, 0x3, 0x1, &(0x7f0000000300))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c393275594"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

10m5.358516528s ago: executing program 38 (id=3053):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x40009e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)

7m32.191055488s ago: executing program 39 (id=5436):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(r0, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x700000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create1(0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x6, 0x0, 0xa87, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000a00))

7m25.388877045s ago: executing program 40 (id=5538):
r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffcc7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3], 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4, 0x0, 0x8000000}, 0x27)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)

7m3.755042671s ago: executing program 41 (id=5899):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10)
r2 = fsopen(0x0, 0x0)
fsmount(r2, 0x0, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mremap(&(0x7f0000792000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0"])

6m40.971637603s ago: executing program 42 (id=5989):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe77}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_RELEASE_PORT(r4, 0x4004550d, 0x0)

5m36.595136914s ago: executing program 43 (id=7347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
unlink(0x0)

5m36.162032523s ago: executing program 44 (id=7356):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)='\x00!', 0x2}], 0x1, 0x1, 0x0)
wait4(r0, 0x0, 0x4000000a, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001400210100000000000000000220", @ANYBLOB="138a35e023b99873bd963a4772c78d84b29f48afa0cd3ba6db0bcf73f366e62941a32f09b2a8da93b0a954c0a533ee6886126fc2f59268518e240059e04b2174ba66ec7575936d114a1c4bc9c1935e33f8390acdff9a2f306572910b3e58911406a532d6c945df46e472af04efe97ce9f6f5b602a6156ff7f44d574a3076e3feccbcbec18450e246fbd10187c988d7ec504b4ea51397a9d6a578287f550c96ea619e32020ef4003b0329207655fd965f7f324cde818bb807b1631384499ac3ee52f4b34aa9a71225c9f115e80e53f5defb57dc1926fc7da3ee27be9a2d288acbfeb05cb2ec0c0767eb7f5798d12b1d6d8150aa3a65eb56"], 0x28}}, 0x0)
iopl(0x3)
rt_sigprocmask(0x1000000, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000012c0)={0x8, 0x5bb0, 0x0, 'queue1\x00', 0x6})
syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_route(0x10, 0x3, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
open(0x0, 0x142, 0x0)

3m49.074311609s ago: executing program 45 (id=9179):
creat(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000"], 0x50)

3m48.888384338s ago: executing program 46 (id=9183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = memfd_secret(0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x2284, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, 0x0, 0x0}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x1000414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

2m22.000663306s ago: executing program 47 (id=11129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff)

1m53.928170872s ago: executing program 0 (id=11479):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m53.899903762s ago: executing program 0 (id=11480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pidfd_getfd(r1, r1, 0x0)

1m53.835280602s ago: executing program 0 (id=11481):
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

1m53.749314432s ago: executing program 0 (id=11487):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$watch_queue(r2, &(0x7f0000001e00)=""/4096, 0x1000)

1m53.573431361s ago: executing program 0 (id=11492):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xec}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40080a0}, 0x4c040)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x20000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f00000014c0)='kvm_set_spte_hva\x00', r0, 0x0, 0x9b0a}, 0x18)
r5 = accept(r3, &(0x7f0000000340)=@vsock, &(0x7f00000003c0)=0x80)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000440)={@local, @multicast1, 0x0, 0x5, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1]}, 0x24)
listen(r4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea29800850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x4, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1m53.554303381s ago: executing program 48 (id=11492):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xec}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40080a0}, 0x4c040)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x20000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f00000014c0)='kvm_set_spte_hva\x00', r0, 0x0, 0x9b0a}, 0x18)
r5 = accept(r3, &(0x7f0000000340)=@vsock, &(0x7f00000003c0)=0x80)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000440)={@local, @multicast1, 0x0, 0x5, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1]}, 0x24)
listen(r4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea29800850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x4, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1m45.98327062s ago: executing program 8 (id=11669):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x50)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x4)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12d37588e0b90a7082c7470000000c00000004aafadc5b640000001e4d5362c84ea700", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x99}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)

1m45.841087629s ago: executing program 8 (id=11673):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
statx(r0, 0x0, 0x1000, 0x6000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000001140)={'gretap0\x00', <r1=>0x0, 0x1, 0x80, 0x10001, 0x3, {{0x10, 0x4, 0x2, 0xb, 0x40, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0x93d1, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x28, 0x37, 0x0, 0x8, [0x67f, 0xb6, 0xffffffff, 0x7, 0x8, 0xb3f, 0x51f, 0x1, 0x6]}]}}}}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x4, 0x4, 0x7, 0x1], 0x0, 0x2}, {0x1, [0x1, 0x8, 0x0, 0x2, 0x3, 0x5], 0x0, 0x2}}}}, {{@ip={@remote, @multicast2, 0xff, 0xffffff00, 'rose0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x0, 0x3}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001d40)={'ip6_vti0\x00', &(0x7f0000001cc0)={'syztnl0\x00', r1, 0x2f, 0xf, 0xe2, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x80, 0x9, 0xfffffffd}})
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000056bce569f51c0d580c1eb9dc9209589ae2838a3a6e4289e4c7d272812c983f5debd312c3758f86d8fad7f3ff26f77cbd3b5f0c8c223b5035c270a6bc48b83c32296eab9cb74ef2fc155542df3e3df7030d46819d496848c75862c0a6e92617", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
r9 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet_int(r9, 0x0, 0x5, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00')
preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0xfffffffc, 0x0)
getdents64(r8, &(0x7f0000003f80)=""/4098, 0x1002)
getdents(r8, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="180200000100000000000000ffffff7f035301000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009ab9bfd474412dcf0d42ace01cfefefe3fe91c829ff4a69542c535e942245a79fd19a0c5d230ba9346890fe4926f2a5698be73362302f930800e502dc8106aac8ce1ab5fb44fb6a93ae817492671b2a5f075b1863a1369352ee6a60d8b0b87833104f72773f759d0deae31bcf4dd04f90a5db9c89bb9be68092db5"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r12, &(0x7f0000001b40)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000001c40)=""/51, 0x33}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000980)=""/31, 0x1f}, {&(0x7f0000001f00)=""/4097, 0x1001}], 0x6, &(0x7f0000001b00)=""/40, 0x28}, 0x40002002)

1m45.535677028s ago: executing program 8 (id=11674):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000180)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)

1m45.081923746s ago: executing program 7 (id=11695):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00005a12b7dbbb8bea73605e1bef288c781600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000, @void, @value}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
shmdt(r3)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00 '], 0x50}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)

1m45.019461326s ago: executing program 7 (id=11697):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500), 0x0)

1m45.018786026s ago: executing program 7 (id=11698):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000400)={[{@dax_never}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '+[\\*%!\''}}]}, 0xfe, 0x262, &(0x7f0000000480)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4d5083a8086a47c6, 0x8031, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(0x0, 0x0, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x410}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x50881000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7208c4ff00f6000069102700000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x940, &(0x7f0000000100)='\\+*\'()\x00')

1m44.556475044s ago: executing program 8 (id=11708):
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100)
preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

1m44.523815024s ago: executing program 7 (id=11710):
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100)
preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

1m44.070298092s ago: executing program 8 (id=11713):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300000003000001"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mlockall(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x5d886559155512ea)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000980))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x106f)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

1m43.921212242s ago: executing program 7 (id=11717):
r0 = gettid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000020605000000000000c3000000000000000d000300686173683a6d6163000000000500010006000000050004000000000005000500000000000900020073797a32000000"], 0x48}, 0x1, 0x0, 0x0, 0xcf35857222dd3737}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=<r2=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_gettime(r2, 0x0)

1m43.68813224s ago: executing program 2 (id=11724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000800))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

1m43.61137237s ago: executing program 2 (id=11727):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff)

1m43.61101611s ago: executing program 8 (id=11728):
r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7994}, 0x8, 0x0, 0xfffffffd, 0x48000000, 0x0, 0x0, 0x0})

1m43.596832771s ago: executing program 49 (id=11728):
r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7994}, 0x8, 0x0, 0xfffffffd, 0x48000000, 0x0, 0x0, 0x0})

1m43.59374608s ago: executing program 2 (id=11730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) (fail_nth: 2)

1m43.58314339s ago: executing program 7 (id=11732):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500), 0x0)

1m43.54455124s ago: executing program 50 (id=11732):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500), 0x0)

1m43.303544429s ago: executing program 2 (id=11736):
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100)
preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

1m43.174855999s ago: executing program 2 (id=11739):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
set_tid_address(0x0) (fail_nth: 1)

1m42.932543348s ago: executing program 2 (id=11743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1)

1m42.899698287s ago: executing program 51 (id=11743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1)

1m29.269797262s ago: executing program 9 (id=11976):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_usbip_server_init(0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback}, &(0x7f0000000180)=0xc)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)

1m28.644146669s ago: executing program 9 (id=11983):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r3, 0x0, 0x400000000000000, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$eJzs3c9LVFEUAOCjM/5qMxJBEEEDEbQaVGhvRIEkFckQRkhjjiGOCAlCLdRWQas2LVu6M4JatKv/IWjTJtpEy9y1CF/ok3HMMTVyJpzv27zDu+fcd++V956zmDt3T89MT8zOTa6ufo3u7rbIDt5fS5K26I32yERqKQCAo+RHksT3JNXssQAAjeH9DwCtZ6/3f0d6uNHgYQEAh+jvP/8/H333uVQevLCP1KSrGn4aO/gYAYB/a2T09tW19+d6huLNs4iZJ/PF+WJ6TNsvTsZUVKIcfZGLnxFJVRpfGRq+3Jdf1xNRnFncrF+cL2a21/dHLnojbl3bWd+fT22v74hjtfUDkYsT9a8/ULe+M86frakvRC4+3IvZqMTE+r8kNfUL/fn8pevDv9V3beTFcqapfx8AAAAAAAAAAAAAAAAAAAAAAI6mQr6qt97+PYXCbu1p/f73B9ran+fpRn02TmXjcXNnDwAAAAAAAAAAAAAAAAAAAP+HuYePpkuVSvlBNRi/OXV8+5m9grY6TZnN/g/ST8sE6wtziJc4ExGHPYvXK+WPy2N3Rpq/mA0M6q/qq6YPbPwPOe0RsRGcfDFYervw5dvOnFiquZez6X1bqqTHztqHRb7BDycAAAAAAAAAAAAAAAAAAGgxW18D3i0jaeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJtn7//8BBZ/XMSk/a2S7JaePLps4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDW9isAAP//e+Wozg==")
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r4, &(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m28.416057239s ago: executing program 9 (id=11989):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x4)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000280)=0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12d37588e0b90a7082c7470000000c00000004aafadc5b640000001e4d5362c84ea700", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
finit_module(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r5 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)

1m28.225553808s ago: executing program 9 (id=11992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x100)
preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

1m28.083096278s ago: executing program 9 (id=11995):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m27.673526646s ago: executing program 9 (id=12003):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000006000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000100000000002000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
stat(0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x2}], 0x1c)
sendto$inet6(r8, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
syz_clone3(&(0x7f0000000300)={0x4005000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m27.673134106s ago: executing program 52 (id=12003):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000006000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000100000000002000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
stat(0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x2}], 0x1c)
sendto$inet6(r8, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
syz_clone3(&(0x7f0000000300)={0x4005000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5.629448323s ago: executing program 6 (id=14265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x50)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x4)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12d37588e0b90a7082c7470000000c00000004aafadc5b640000001e4d5362c84ea700", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x99}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)

5.286292431s ago: executing program 6 (id=14268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0xfff3}, {0xc, 0x8}, {0x10, 0xfff3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004084)
listen(r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6}, 0x10)
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

4.335419398s ago: executing program 6 (id=14288):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
lseek(r3, 0x7fffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
truncate(&(0x7f0000000180)='./file0\x00', 0xcb20)

4.088381497s ago: executing program 6 (id=14292):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nobarrier}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=<r1=>0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000000000004bd5080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
unshare(0x2040400)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100004000000000000ec000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fsmount(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket(0x2a, 0x800000003, 0xffffff82)
bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYRES8=r3, @ANYRES8=0x0, @ANYRESHEX=r1], 0x48)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cpuhp_exit\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
brk(0x3)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x5, 0xb3, 0xa})

3.364414464s ago: executing program 6 (id=14301):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x95f2, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.108236693s ago: executing program 6 (id=14306):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x95f2, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.059968772s ago: executing program 53 (id=14306):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x95f2, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

1.575842076s ago: executing program 4 (id=14349):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ppoll(&(0x7f0000000180)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)

1.319429145s ago: executing program 5 (id=14354):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]})

1.319084485s ago: executing program 3 (id=14355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma'])

1.294639785s ago: executing program 3 (id=14356):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

989.962394ms ago: executing program 5 (id=14357):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_config_ext={0xa14, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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")
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

989.107464ms ago: executing program 3 (id=14358):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
lseek(r3, 0x7fffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0xcb20)

840.611593ms ago: executing program 3 (id=14359):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
listen(0xffffffffffffffff, 0xb5b4)
accept(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
preadv2(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x9e2, 0x107fff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa81814, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32=r0], 0x1, 0x2c3, &(0x7f00000002c0)="$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")

805.174033ms ago: executing program 5 (id=14360):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x50)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x4)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12d37588e0b90a7082c7470000000c00000004aafadc5b640000001e4d5362c84ea700", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x99}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)

692.945853ms ago: executing program 4 (id=14361):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000300)={0x80, 0xa3, 0x10}, 0x18)
r1 = openat2(r0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x341400, 0x15a, 0x21}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x82, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x13, 0x0, @fd, 0x0, 0x0, 0x0, {0x10}, 0x1, {0x0, r6}})
socket$key(0xf, 0x3, 0x2)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x56, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$inet6(0xa, 0x805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0xa)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in6=@empty}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
getpid()

692.186773ms ago: executing program 3 (id=14362):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000ac0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001880)={{r0}, r1, 0x10, @inherit={0x58, &(0x7f00000002c0)={0x0, 0x2, 0x10000, 0xb, {0x10, 0x0, 0x1, 0x4, 0xd8}, [0x5, 0x7]}}, @devid})
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x14)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x143042, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x10fff9)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@journal_async_commit}, {@nobarrier}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
readahead(0xffffffffffffffff, 0xfff, 0xadde)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0x7e})

584.939753ms ago: executing program 5 (id=14364):
socket$nl_generic(0x10, 0x3, 0x10)
migrate_pages(0x0, 0x7, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x0)

578.573553ms ago: executing program 4 (id=14365):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)

551.452782ms ago: executing program 1 (id=14366):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)

467.699382ms ago: executing program 4 (id=14367):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]})

443.443622ms ago: executing program 4 (id=14368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
lseek(r3, 0x7fffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0xcb20)

294.760821ms ago: executing program 1 (id=14369):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x3, 0x1, 0x0, 0x70, @mcast2, @loopback, 0x80, 0x7, 0x7, 0xfffffbfd}})
sendmmsg$inet(r0, &(0x7f0000004c40)=[{{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="667bb4ff43f3bdf4152965c36e9c315082104ddc09b69a8f3d6b9dc5a3fc4a880e1d4d7b23185bda6c8e4024af1db2aefdb7f9531b8f08280ad7936a5094", 0x3e}, {&(0x7f0000000800)="a1d523c1a6cae68fc4824241323c8f88bbf28bfe5e99206c41ae156c38f9026971a7401d99a154297e9c3851406d5520e25579fc906e9bee698c6878aea96df2fa6460af258018faa8be6a48b1581d719e1544f7d48273b41f988ef7a06361aa609239f2fa82c212cac21c26a0a0b715346ce31c8ab0656cf7bd593966da111465418e4b6871575d09947f7f307694884a034835d67b5a3cad04398e72bd555d5acd1d321687a83efd40cc5e526203024717ec285ea7bdac1f1de1ae4839ecae38ec025493f6cce7d51c4e8833651b92755b27b9a707953241846a1e17001f2ee60924ad169eb49a", 0xe8}, {&(0x7f00000014c0)="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", 0xa13}], 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="7f000001e00000020000000010000000000000000000000007000000140000000000000000000000010000000900000000000000340000000000000000000000070000000002891fddac1e0001ac1414bb64010102ac14141eac14143e64010100ac1414aa010000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac04000000000000000000004933"], 0xa0}}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1]}]}}}], 0x20}}], 0x1, 0x240080e4)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x640000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r4, {0x2}}, './file0\x00'})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x0, 0x2, 0x4, 0xffd6, 0x1}, &(0x7f0000000100)=0x20)

271.177501ms ago: executing program 3 (id=14370):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
ppoll(&(0x7f0000000180)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)

141.313021ms ago: executing program 5 (id=14371):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
listen(0xffffffffffffffff, 0xb5b4)
accept(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
preadv2(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x9e2, 0x107fff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa81814, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32=r0], 0x1, 0x2c3, &(0x7f00000002c0)="$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")

137.817311ms ago: executing program 1 (id=14372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4)

106.104531ms ago: executing program 1 (id=14373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)

79.46858ms ago: executing program 4 (id=14374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
truncate(&(0x7f0000000180)='./file0\x00', 0xcb20)

23.73171ms ago: executing program 1 (id=14375):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

23.15645ms ago: executing program 1 (id=14376):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
unshare(0x22020600)
syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000004000000080000000b00000001000000", @ANYRES32, @ANYBLOB="7372c4a36a760d0000fc000800000000c3869a49", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x48010)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11.48881ms ago: executing program 5 (id=14377):
open(&(0x7f0000000340)='./file0\x00', 0x2a4c0, 0x100) (async)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='ext4\x00', 0x5, 0x1) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==")

0s ago: executing program 0 (id=14308):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)

kernel console output (not intermixed with test programs):

 T8098] bond1: entered promiscuous mode
[  792.282395][ T8098] bond1: entered allmulticast mode
[  792.292263][ T8098] 8021q: adding VLAN 0 to HW filter on device bond1
[  792.303954][ T8098] bond1 (unregistering): Released all slaves
[  792.313250][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  792.351316][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  792.371788][ T8111] bond1: entered promiscuous mode
[  792.376920][ T8111] bond1: entered allmulticast mode
[  792.382326][ T8111] 8021q: adding VLAN 0 to HW filter on device bond1
[  792.390823][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  792.404917][ T8111] bond1 (unregistering): Released all slaves
[  792.420575][ T8104] hub 6-0:1.0: USB hub found
[  792.431062][ T8104] hub 6-0:1.0: 8 ports detected
[  792.512497][ T8123] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  792.522949][ T8123] IPVS: Error joining to the multicast group
[  792.551885][ T8129] netlink: 'syz.1.13321': attribute type 1 has an invalid length.
[  792.783073][ T8143] 9pnet_fd: Insufficient options for proto=fd
[  792.824413][ T8143] lo speed is unknown, defaulting to 1000
[  792.967184][ T8145] bond1: entered promiscuous mode
[  792.972338][ T8145] bond1: entered allmulticast mode
[  792.977673][ T8145] 8021q: adding VLAN 0 to HW filter on device bond1
[  792.987780][ T8145] bond1 (unregistering): Released all slaves
[  793.077693][ T8148] loop5: detected capacity change from 0 to 512
[  793.099165][ T8148] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  793.117877][ T8148] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #15: comm syz.5.13328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  793.140076][ T8148] SELinux:  policydb version 35096 does not match my version range 15-33
[  793.150543][ T8148] SELinux: failed to load policy
[  793.233350][ T8159] netlink: 108 bytes leftover after parsing attributes in process `syz.6.13332'.
[  793.243040][ T8159] netlink: 108 bytes leftover after parsing attributes in process `syz.6.13332'.
[  793.252213][ T8159] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13332'.
[  793.262892][ T8159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  793.274168][ T8166] 9pnet_fd: Insufficient options for proto=fd
[  793.299713][ T8119] 9pnet_fd: p9_fd_create_tcp (8119): problem connecting socket to 127.0.0.1
[  793.336208][ T8159] syzkaller0: entered promiscuous mode
[  793.341734][ T8159] syzkaller0: entered allmulticast mode
[  793.390265][ T8166] lo speed is unknown, defaulting to 1000
[  793.460530][ T8176] netlink: 'syz.1.13338': attribute type 1 has an invalid length.
[  793.541451][ T8185] loop6: detected capacity change from 0 to 128
[  793.626229][ T8192] loop6: detected capacity change from 0 to 1024
[  793.633526][ T8192] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  793.644634][ T8192] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  793.652945][ T8192] EXT4-fs (loop6): orphan cleanup on readonly fs
[  793.661196][ T8192] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.13343: Invalid inode table block 0 in block_group 0
[  793.674626][ T8192] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  793.684533][ T8192] EXT4-fs error (device loop6): ext4_quota_write:7310: inode #3: comm syz.6.13343: mark_inode_dirty error
[  793.684623][ T8192] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.13343: Failed to acquire dquot type 0
[  793.684736][ T8192] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.13343: Invalid inode table block 0 in block_group 0
[  793.684910][ T8192] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  793.685005][ T8192] EXT4-fs error (device loop6): ext4_ext_truncate:4457: inode #15: comm syz.6.13343: mark_inode_dirty error
[  793.685086][ T8192] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.13343: Invalid inode table block 0 in block_group 0
[  793.685165][ T8192] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  793.685290][ T8192] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  793.772499][ T8198] wireguard0: entered promiscuous mode
[  793.772519][ T8198] wireguard0: entered allmulticast mode
[  793.772516][ T8192] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.13343: Invalid inode table block 0 in block_group 0
[  793.772770][ T8192] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  793.772860][ T8192] EXT4-fs error (device loop6): ext4_truncate:4240: inode #15: comm syz.6.13343: mark_inode_dirty error
[  793.772933][ T8192] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  793.773046][ T8192] EXT4-fs (loop6): 1 truncate cleaned up
[  793.806904][ T8200] tmpfs: Unknown parameter 'fsmagic'
[  793.923542][ T8202] loop3: detected capacity change from 0 to 512
[  793.949549][ T8202] EXT4-fs (loop3): too many log groups per flexible block group
[  793.957357][ T8202] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  793.964421][ T8202] EXT4-fs (loop3): mount failed
[  793.997838][   T29] kauditd_printk_skb: 1051 callbacks suppressed
[  793.997854][   T29] audit: type=1326 audit(1734743816.790:76664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.007863][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  794.028107][   T29] audit: type=1326 audit(1734743816.790:76665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.061512][   T29] audit: type=1326 audit(1734743816.790:76666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.085214][   T29] audit: type=1326 audit(1734743816.790:76667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.108905][   T29] audit: type=1326 audit(1734743816.790:76668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.132516][   T29] audit: type=1326 audit(1734743816.790:76669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.156195][   T29] audit: type=1326 audit(1734743816.790:76670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.179945][   T29] audit: type=1326 audit(1734743816.790:76671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.203548][   T29] audit: type=1326 audit(1734743816.790:76672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.227155][   T29] audit: type=1326 audit(1734743816.790:76673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.5.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  794.241036][ T8217] netlink: 'syz.3.13350': attribute type 1 has an invalid length.
[  794.264819][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  794.301737][ T8221] FAULT_INJECTION: forcing a failure.
[  794.301737][ T8221] name failslab, interval 1, probability 0, space 0, times 0
[  794.314558][ T8221] CPU: 0 UID: 0 PID: 8221 Comm: syz.5.13352 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  794.325354][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  794.335428][ T8221] Call Trace:
[  794.338726][ T8221]  <TASK>
[  794.341692][ T8221]  dump_stack_lvl+0xf2/0x150
[  794.346495][ T8221]  dump_stack+0x15/0x1a
[  794.350699][ T8221]  should_fail_ex+0x223/0x230
[  794.355419][ T8221]  should_failslab+0x8f/0xb0
[  794.360048][ T8221]  __kmalloc_cache_node_noprof+0x56/0x320
[  794.365842][ T8221]  ? __get_vm_area_node+0xfb/0x1c0
[  794.370995][ T8221]  __get_vm_area_node+0xfb/0x1c0
[  794.375953][ T8221]  __vmalloc_node_range_noprof+0x280/0xe80
[  794.381790][ T8221]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  794.387352][ T8221]  ? mntput_no_expire+0x70/0x3c0
[  794.392311][ T8221]  ? avc_has_perm_noaudit+0x1cc/0x210
[  794.397722][ T8221]  ? selinux_capable+0x1f2/0x260
[  794.402679][ T8221]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  794.408231][ T8221]  __vmalloc_noprof+0x5e/0x70
[  794.412928][ T8221]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  794.418501][ T8221]  bpf_prog_alloc_no_stats+0x49/0x380
[  794.423970][ T8221]  ? bpf_prog_alloc+0x28/0x150
[  794.428796][ T8221]  bpf_prog_alloc+0x3a/0x150
[  794.433463][ T8221]  bpf_prog_load+0x4d1/0x1070
[  794.438145][ T8221]  ? __rcu_read_unlock+0x4e/0x70
[  794.443177][ T8221]  __sys_bpf+0x463/0x7a0
[  794.447432][ T8221]  __x64_sys_bpf+0x43/0x50
[  794.451876][ T8221]  x64_sys_call+0x2914/0x2dc0
[  794.456594][ T8221]  do_syscall_64+0xc9/0x1c0
[  794.461105][ T8221]  ? clear_bhb_loop+0x55/0xb0
[  794.465956][ T8221]  ? clear_bhb_loop+0x55/0xb0
[  794.470645][ T8221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.476592][ T8221] RIP: 0033:0x7efdf66d5d29
[  794.481016][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  794.500894][ T8221] RSP: 002b:00007efdf4d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  794.509327][ T8221] RAX: ffffffffffffffda RBX: 00007efdf68c5fa0 RCX: 00007efdf66d5d29
[  794.517362][ T8221] RDX: 0000000000000094 RSI: 00000000200007c0 RDI: 0000000000000005
[  794.525458][ T8221] RBP: 00007efdf4d47090 R08: 0000000000000000 R09: 0000000000000000
[  794.533449][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.541427][ T8221] R13: 0000000000000000 R14: 00007efdf68c5fa0 R15: 00007ffe66ff7228
[  794.549408][ T8221]  </TASK>
[  794.552621][ T8221] warn_alloc: 1 callbacks suppressed
[  794.552636][ T8221] syz.5.13352: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  794.574446][ T8221] CPU: 0 UID: 0 PID: 8221 Comm: syz.5.13352 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  794.585322][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  794.595403][ T8221] Call Trace:
[  794.598684][ T8221]  <TASK>
[  794.601622][ T8221]  dump_stack_lvl+0xf2/0x150
[  794.606298][ T8221]  dump_stack+0x15/0x1a
[  794.610471][ T8221]  warn_alloc+0x145/0x1b0
[  794.614833][ T8221]  __vmalloc_node_range_noprof+0x2a5/0xe80
[  794.620670][ T8221]  ? mntput_no_expire+0x70/0x3c0
[  794.625709][ T8221]  ? avc_has_perm_noaudit+0x1cc/0x210
[  794.631103][ T8221]  ? selinux_capable+0x1f2/0x260
[  794.636080][ T8221]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  794.641742][ T8221]  __vmalloc_noprof+0x5e/0x70
[  794.646562][ T8221]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  794.652114][ T8221]  bpf_prog_alloc_no_stats+0x49/0x380
[  794.657542][ T8221]  ? bpf_prog_alloc+0x28/0x150
[  794.662414][ T8221]  bpf_prog_alloc+0x3a/0x150
[  794.667009][ T8221]  bpf_prog_load+0x4d1/0x1070
[  794.671692][ T8221]  ? __rcu_read_unlock+0x4e/0x70
[  794.676701][ T8221]  __sys_bpf+0x463/0x7a0
[  794.680967][ T8221]  __x64_sys_bpf+0x43/0x50
[  794.685447][ T8221]  x64_sys_call+0x2914/0x2dc0
[  794.690139][ T8221]  do_syscall_64+0xc9/0x1c0
[  794.694653][ T8221]  ? clear_bhb_loop+0x55/0xb0
[  794.699338][ T8221]  ? clear_bhb_loop+0x55/0xb0
[  794.704025][ T8221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.710014][ T8221] RIP: 0033:0x7efdf66d5d29
[  794.714434][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  794.734149][ T8221] RSP: 002b:00007efdf4d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  794.742587][ T8221] RAX: ffffffffffffffda RBX: 00007efdf68c5fa0 RCX: 00007efdf66d5d29
[  794.750583][ T8221] RDX: 0000000000000094 RSI: 00000000200007c0 RDI: 0000000000000005
[  794.758568][ T8221] RBP: 00007efdf4d47090 R08: 0000000000000000 R09: 0000000000000000
[  794.766567][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.774639][ T8221] R13: 0000000000000000 R14: 00007efdf68c5fa0 R15: 00007ffe66ff7228
[  794.782681][ T8221]  </TASK>
[  794.785937][ T8221] Mem-Info:
[  794.789332][ T8221] active_anon:6112 inactive_anon:102 isolated_anon:0
[  794.789332][ T8221]  active_file:21176 inactive_file:6580 isolated_file:0
[  794.789332][ T8221]  unevictable:1 dirty:106 writeback:0
[  794.789332][ T8221]  slab_reclaimable:3508 slab_unreclaimable:27007
[  794.789332][ T8221]  mapped:29031 shmem:1649 pagetables:647
[  794.789332][ T8221]  sec_pagetables:0 bounce:0
[  794.789332][ T8221]  kernel_misc_reclaimable:0
[  794.789332][ T8221]  free:1867562 free_pcp:2081 free_cma:0
[  794.835231][ T8221] Node 0 active_anon:24332kB inactive_anon:408kB active_file:84704kB inactive_file:26320kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:116068kB dirty:424kB writeback:0kB shmem:6596kB writeback_tmp:0kB kernel_stack:3424kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no
[  794.863327][ T8221] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  794.890316][ T8221] lowmem_reserve[]: 0 2866 7844 0
[  794.895441][ T8221] Node 0 DMA32 free:2950284kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  794.924153][ T8221] lowmem_reserve[]: 0 0 4978 0
[  794.928960][ T8221] Node 0 Normal free:4502556kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:24332kB inactive_anon:408kB active_file:84704kB inactive_file:26320kB unevictable:4kB writepending:424kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:4604kB local_pcp:1792kB free_cma:0kB
[  794.959245][ T8221] lowmem_reserve[]: 0 0 0 0
[  794.963778][ T8221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  794.976539][ T8221] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950284kB
[  794.992762][ T8221] Node 0 Normal: 923*4kB (UM) 1292*8kB (UME) 953*16kB (UME) 888*32kB (UM) 615*64kB (UME) 210*128kB (UM) 160*256kB (UME) 92*512kB (UME) 34*1024kB (UME) 60*2048kB (UM) 1009*4096kB (UM) = 4502556kB
[  795.012230][ T8221] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  795.021585][ T8221] 29471 total pagecache pages
[  795.026282][ T8221] 105 pages in swap cache
[  795.030691][ T8221] Free swap  = 124064kB
[  795.034916][ T8221] Total swap = 124996kB
[  795.039100][ T8221] 2097051 pages RAM
[  795.042921][ T8221] 0 pages HighMem/MovableOnly
[  795.047676][ T8221] 80180 pages reserved
[  795.083288][ T8245] 9pnet_fd: Insufficient options for proto=fd
[  795.088693][ T8246] bond1: entered promiscuous mode
[  795.094643][ T8246] bond1: entered allmulticast mode
[  795.100174][ T8246] 8021q: adding VLAN 0 to HW filter on device bond1
[  795.113711][ T8246] bond1 (unregistering): Released all slaves
[  795.155388][ T8245] lo speed is unknown, defaulting to 1000
[  795.236395][ T8257] smc: net device bond0 applied user defined pnetid SYZ0
[  795.254059][ T8257] smc: net device bond0 erased user defined pnetid SYZ0
[  795.275476][ T8262] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  795.284593][ T8262] IPVS: Error joining to the multicast group
[  795.481628][ T8288] smc: net device bond0 applied user defined pnetid SYZ0
[  795.489348][ T8288] smc: net device bond0 erased user defined pnetid SYZ0
[  795.516286][ T8294] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  795.523878][ T8294] vhci_hcd: invalid port number 23
[  795.565205][ T8297] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  795.572584][ T8297] vhci_hcd: invalid port number 23
[  795.627582][ T8305] loop5: detected capacity change from 0 to 512
[  795.629299][ T8306] loop6: detected capacity change from 0 to 512
[  795.634650][ T8305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  795.641091][ T8306] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  795.660373][ T8306] EXT4-fs (loop6): 1 truncate cleaned up
[  795.661395][ T8305] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  795.782187][ T8319] loop5: detected capacity change from 0 to 128
[  795.891878][ T8325] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  795.917523][ T8325] vhci_hcd: invalid port number 23
[  795.930484][ T8329] loop5: detected capacity change from 0 to 512
[  795.967031][ T8331] loop6: detected capacity change from 0 to 512
[  795.990462][ T8331] EXT4-fs (loop6): too many log groups per flexible block group
[  795.998183][ T8331] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  796.006261][ T8331] EXT4-fs (loop6): mount failed
[  796.103056][ T8354] 9pnet_fd: Insufficient options for proto=fd
[  796.127272][ T8356] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13400'.
[  796.149309][ T8354] lo speed is unknown, defaulting to 1000
[  796.180212][ T8360] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  796.187621][ T8360] vhci_hcd: invalid port number 23
[  796.265486][ T8363] x_tables: duplicate underflow at hook 2
[  796.415402][ T8374] netlink: 'syz.1.13407': attribute type 13 has an invalid length.
[  796.423564][ T8374] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13407'.
[  796.435267][ T8374] syz_tun: refused to change device tx_queue_len
[  796.441767][ T8374] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  796.666026][ T8391] x_tables: duplicate underflow at hook 2
[  796.731011][ T8393] smc: net device bond0 applied user defined pnetid SYZ0
[  796.739019][ T8393] smc: net device bond0 erased user defined pnetid SYZ0
[  796.818069][ T8405] bond1: entered promiscuous mode
[  796.823260][ T8405] bond1: entered allmulticast mode
[  796.833960][ T8405] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.861255][ T8405] bond1 (unregistering): Released all slaves
[  796.878776][ T8411] FAULT_INJECTION: forcing a failure.
[  796.878776][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  796.891915][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.3.13423 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  796.902715][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  796.912790][ T8411] Call Trace:
[  796.916083][ T8411]  <TASK>
[  796.919098][ T8411]  dump_stack_lvl+0xf2/0x150
[  796.920874][ T8416] x_tables: duplicate underflow at hook 2
[  796.923810][ T8411]  dump_stack+0x15/0x1a
[  796.933832][ T8411]  should_fail_ex+0x223/0x230
[  796.938531][ T8411]  should_fail+0xb/0x10
[  796.942713][ T8411]  should_fail_usercopy+0x1a/0x20
[  796.947780][ T8411]  _copy_from_user+0x1e/0xb0
[  796.952422][ T8411]  kstrtouint_from_user+0x76/0xe0
[  796.957474][ T8411]  ? 0xffffffff81000000
[  796.961636][ T8411]  ? selinux_file_permission+0x22a/0x360
[  796.967318][ T8411]  proc_fail_nth_write+0x4f/0x150
[  796.972394][ T8411]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  796.978061][ T8411]  vfs_write+0x281/0x920
[  796.982305][ T8411]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  796.987860][ T8411]  ? __fget_files+0x17c/0x1c0
[  796.992572][ T8411]  ksys_write+0xe8/0x1b0
[  796.996837][ T8411]  __x64_sys_write+0x42/0x50
[  797.001450][ T8411]  x64_sys_call+0x287e/0x2dc0
[  797.006143][ T8411]  do_syscall_64+0xc9/0x1c0
[  797.010676][ T8411]  ? clear_bhb_loop+0x55/0xb0
[  797.015375][ T8411]  ? clear_bhb_loop+0x55/0xb0
[  797.020118][ T8411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.026024][ T8411] RIP: 0033:0x7fa948fd47df
[  797.030505][ T8411] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  797.050143][ T8411] RSP: 002b:00007fa947647030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  797.058580][ T8411] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa948fd47df
[  797.066552][ T8411] RDX: 0000000000000001 RSI: 00007fa9476470a0 RDI: 0000000000000004
[  797.074532][ T8411] RBP: 00007fa947647090 R08: 0000000000000000 R09: 0000000000000000
[  797.082595][ T8411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  797.090567][ T8411] R13: 0000000000000000 R14: 00007fa9491c5fa0 R15: 00007ffd3f129748
[  797.098554][ T8411]  </TASK>
[  797.282306][ T8450] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  797.289783][ T8450] vhci_hcd: invalid port number 23
[  797.308904][ T8452] x_tables: duplicate underflow at hook 2
[  797.315306][ T8452] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  797.323560][ T8452] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  797.353014][ T8460] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  797.353091][ T8459] IPVS: stopping master sync thread 8460 ...
[  797.372532][ T8459] pimreg: entered allmulticast mode
[  797.482468][ T8469] tmpfs: Unknown parameter 'fsmagic'
[  797.511301][ T8474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13448'.
[  797.525168][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13448'.
[  797.557543][ T8483] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  797.565012][ T8483] vhci_hcd: invalid port number 23
[  797.640497][ T8491] hub 6-0:1.0: USB hub found
[  797.645885][ T8491] hub 6-0:1.0: 8 ports detected
[  797.702410][ T8499] tmpfs: Unknown parameter 'fsmagic'
[  797.716768][ T8501] x_tables: duplicate underflow at hook 2
[  797.731355][ T8501] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  797.739652][ T8501] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  797.769277][ T8505] hub 6-0:1.0: USB hub found
[  797.774119][ T8505] hub 6-0:1.0: 8 ports detected
[  797.902274][ T8516] loop5: detected capacity change from 0 to 512
[  797.919982][ T8516] EXT4-fs (loop5): too many log groups per flexible block group
[  797.927715][ T8516] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  797.934743][ T8516] EXT4-fs (loop5): mount failed
[  797.966845][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13464'.
[  797.977177][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13464'.
[  797.992725][ T8520] team0 (unregistering): Port device team_slave_0 removed
[  798.002739][ T8520] team0 (unregistering): Port device team_slave_1 removed
[  798.031706][ T8521] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  798.052166][ T8521] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  798.154894][ T8532] hub 6-0:1.0: USB hub found
[  798.159714][ T8532] hub 6-0:1.0: 8 ports detected
[  798.293130][ T8548] loop3: detected capacity change from 0 to 512
[  798.304658][ T8550] x_tables: duplicate underflow at hook 2
[  798.311234][ T8550] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  798.319535][ T8550] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  798.491968][ T8571] netlink: 'syz.4.13481': attribute type 1 has an invalid length.
[  798.583165][ T8584] bond1: entered promiscuous mode
[  798.588628][ T8584] bond1: entered allmulticast mode
[  798.594336][ T8584] 8021q: adding VLAN 0 to HW filter on device bond1
[  798.602315][ T8587] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  798.610760][ T8587] vhci_hcd: invalid port number 23
[  798.613216][ T8584] bond1 (unregistering): Released all slaves
[  798.718400][ T8596] tmpfs: Unknown parameter 'fsmagic'
[  798.834638][ T8614] netlink: 'syz.1.13498': attribute type 1 has an invalid length.
[  798.891122][ T8618] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  798.899760][ T8618] IPVS: Error joining to the multicast group
[  798.964143][ T8626] bond1: entered promiscuous mode
[  798.969333][ T8626] bond1: entered allmulticast mode
[  798.976757][ T8626] 8021q: adding VLAN 0 to HW filter on device bond1
[  798.988593][ T8626] bond1 (unregistering): Released all slaves
[  799.007573][   T29] kauditd_printk_skb: 941 callbacks suppressed
[  799.007590][   T29] audit: type=1326 audit(1734743821.800:77615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a925d29 code=0x7ffc0000
[  799.037793][   T29] audit: type=1326 audit(1734743821.800:77616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a925d29 code=0x7ffc0000
[  799.061790][   T29] audit: type=1326 audit(1734743821.800:77617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e1a924690 code=0x7ffc0000
[  799.085496][   T29] audit: type=1326 audit(1734743821.800:77618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e1a927557 code=0x7ffc0000
[  799.109434][   T29] audit: type=1326 audit(1734743821.800:77619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e1a925d29 code=0x7ffc0000
[  799.133197][   T29] audit: type=1326 audit(1734743821.810:77620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e1a927557 code=0x7ffc0000
[  799.148356][ T8645] netlink: 'syz.5.13510': attribute type 1 has an invalid length.
[  799.157087][   T29] audit: type=1326 audit(1734743821.810:77621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e1a92498a code=0x7ffc0000
[  799.188846][   T29] audit: type=1326 audit(1734743821.810:77622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a925d29 code=0x7ffc0000
[  799.212782][   T29] audit: type=1326 audit(1734743821.810:77623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.4.13507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a925d29 code=0x7ffc0000
[  799.238651][   T29] audit: type=1326 audit(1734743821.880:77624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.5.13501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  799.342882][ T8661] loop6: detected capacity change from 0 to 512
[  799.350005][ T8657] hub 6-0:1.0: USB hub found
[  799.355205][ T8657] hub 6-0:1.0: 8 ports detected
[  799.380448][ T8661] EXT4-fs (loop6): too many log groups per flexible block group
[  799.388167][ T8661] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  799.409088][ T8661] EXT4-fs (loop6): mount failed
[  799.466952][ T8674] Process accounting resumed
[  799.485912][ T8674] loop5: detected capacity change from 0 to 256
[  799.492811][ T8674] vfat: Unknown parameter '��$��FZ�+w�N�*ƿ%آB�`��#'
[  799.499702][ T8674] serio: Serial port ptm0
[  799.505688][ T8653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13515'.
[  799.507075][ T8677] smc: net device bond0 applied user defined pnetid SYZ0
[  799.515037][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13515'.
[  799.535987][ T8677] smc: net device bond0 erased user defined pnetid SYZ0
[  799.629564][ T8693] netlink: 'syz.1.13527': attribute type 1 has an invalid length.
[  799.662542][ T8697] tmpfs: Unknown parameter 'fsmagic'
[  799.672638][ T8691] hub 6-0:1.0: USB hub found
[  799.680726][ T8691] hub 6-0:1.0: 8 ports detected
[  799.716819][ T8706] netlink: 'syz.3.13534': attribute type 1 has an invalid length.
[  799.743142][ T8709] x_tables: duplicate underflow at hook 2
[  799.772504][ T8709] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  799.780810][ T8709] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  799.903671][ T8725] loop5: detected capacity change from 0 to 128
[  799.967339][ T8729] smc: net device bond0 applied user defined pnetid SYZ0
[  799.974890][ T8729] smc: net device bond0 erased user defined pnetid SYZ0
[  799.985659][ T8735] netlink: 'syz.4.13547': attribute type 1 has an invalid length.
[  800.037718][ T8739] hub 6-0:1.0: USB hub found
[  800.044708][ T8739] hub 6-0:1.0: 8 ports detected
[  800.124075][ T8753] loop5: detected capacity change from 0 to 512
[  800.144390][ T8753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  800.162657][ T8760] loop3: detected capacity change from 0 to 512
[  800.169767][ T8760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  800.189239][ T8753] EXT4-fs (loop5): 1 truncate cleaned up
[  800.196043][ T8769] x_tables: duplicate underflow at hook 2
[  800.211641][ T8760] EXT4-fs (loop3): 1 truncate cleaned up
[  800.213990][ T8769] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  800.225660][ T8769] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  800.377129][ T8790] __nla_validate_parse: 1 callbacks suppressed
[  800.377145][ T8790] netlink: 32 bytes leftover after parsing attributes in process `4��s'.
[  800.431837][ T8798] smc: net device bond0 applied user defined pnetid SYZ0
[  800.449142][ T8798] smc: net device bond0 erased user defined pnetid SYZ0
[  800.503209][ T8803] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  800.518304][ T8803] vhci_hcd: invalid port number 23
[  800.627141][ T8811] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  800.648933][ T8811] IPVS: Error joining to the multicast group
[  800.705384][ T8815] loop3: detected capacity change from 0 to 128
[  800.876044][ T8827] loop3: detected capacity change from 0 to 512
[  800.912953][ T8827] EXT4-fs (loop3): too many log groups per flexible block group
[  800.920771][ T8827] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  800.942042][ T8827] EXT4-fs (loop3): mount failed
[  801.010278][ T8838] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  801.018883][ T8838] IPVS: Error joining to the multicast group
[  801.053383][ T8842] x_tables: duplicate underflow at hook 2
[  801.065898][ T8842] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  801.072260][ T8841] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  801.074429][ T8842] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  801.092970][ T8841] IPVS: Error joining to the multicast group
[  801.121784][ T8847] 9pnet_fd: Insufficient options for proto=fd
[  801.166172][ T8847] lo speed is unknown, defaulting to 1000
[  801.283715][ T8853] tmpfs: Unknown parameter 'fsmagic'
[  801.317925][ T8860] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  801.335552][ T8860] vhci_hcd: invalid port number 23
[  801.575997][ T8870] loop6: detected capacity change from 0 to 128
[  801.583178][ T8870] vfat: Unknown parameter 'θ?|�V�SZf- S
[  801.583178][ T8870] N�&ל�1��CI��.��eT�%�Yԧӿ�1a�Y�7*4E�e��`c9��Eϭ��{��8�Vf�S+cEt�~��U�3�un��J���(�(a�o�kmXOƛ	Cj�<ثz�D�~��}n`�(�[%՘�>�@����~u�
*��_��nk��k��+�Pe�}%�C	�S�e3�>A&'
[  801.674767][ T8870] lo speed is unknown, defaulting to 1000
[  801.917162][ T8875] loop3: detected capacity change from 0 to 128
[  801.995400][ T8877] 9pnet_fd: Insufficient options for proto=fd
[  802.042073][ T8877] lo speed is unknown, defaulting to 1000
[  802.082333][ T8879] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  802.093041][ T8879] vhci_hcd: invalid port number 23
[  802.136763][ T8882] tmpfs: Unknown parameter 'fsmagic'
[  802.264189][ T8888] tmpfs: Unknown parameter 'fsmagic'
[  802.264383][ T8891] tmpfs: Unknown parameter 'fsmagic'
[  802.280858][ T8885] netlink: 32 bytes leftover after parsing attributes in process `4��s'.
[  802.434907][ T8912] smc: net device bond0 applied user defined pnetid SYZ0
[  802.442778][ T8912] smc: net device bond0 erased user defined pnetid SYZ0
[  802.536099][ T8920] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  802.543697][ T8920] vhci_hcd: invalid port number 23
[  802.650758][ T8929] loop6: detected capacity change from 0 to 512
[  802.800863][ T8927] lo speed is unknown, defaulting to 1000
[  802.874691][ T8935] smc: net device bond0 applied user defined pnetid SYZ0
[  802.885166][ T8939] smc: net device bond0 erased user defined pnetid SYZ0
[  802.982314][ T3802] EXT4-fs unmount: 21 callbacks suppressed
[  802.982335][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.021051][ T8946] loop3: detected capacity change from 0 to 512
[  803.035499][ T8946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.047937][ T8949] loop5: detected capacity change from 0 to 512
[  803.057039][ T8949] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  803.067241][ T8949] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.13627: iget: bad i_size value: -67835469387268086
[  803.083802][ T8949] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.13627: couldn't read orphan inode 15 (err -117)
[  803.096644][ T8949] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.114691][ T8949] ext2 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  803.205753][ T8958] x_tables: duplicate underflow at hook 2
[  803.212415][ T8958] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  803.220734][ T8958] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  803.239007][ T8949] xt_hashlimit: max too large, truncated to 1048576
[  803.320453][ T4641] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  803.359947][ T8963] loop6: detected capacity change from 0 to 512
[  803.366695][ T8963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  803.378530][ T8963] EXT4-fs (loop6): 1 truncate cleaned up
[  803.384928][ T8963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.462175][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.480161][ T3932] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0
[  803.488115][ T3932] hid-generic 0000:0000:0000.0065: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  803.589756][ T8978] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  803.806071][ T8981] loop6: detected capacity change from 0 to 512
[  803.812873][ T8981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  803.825393][ T8981] EXT4-fs (loop6): 1 truncate cleaned up
[  803.831627][ T8981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.863206][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.882113][ T8984] hub 6-0:1.0: USB hub found
[  803.886811][ T8984] hub 6-0:1.0: 8 ports detected
[  803.944478][ T8991] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  803.953022][ T8991] IPVS: Error joining to the multicast group
[  803.953722][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.994816][ T8996] tmpfs: Unknown parameter 'fsmagic'
[  804.056883][   T29] kauditd_printk_skb: 851 callbacks suppressed
[  804.056897][   T29] audit: type=1326 audit(1734743826.850:78476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.087151][   T29] audit: type=1326 audit(1734743826.850:78477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.110912][   T29] audit: type=1326 audit(1734743826.850:78478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.134590][   T29] audit: type=1326 audit(1734743826.850:78479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.159061][   T29] audit: type=1326 audit(1734743826.850:78480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.182704][   T29] audit: type=1326 audit(1734743826.850:78481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.206574][   T29] audit: type=1326 audit(1734743826.850:78482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.230245][   T29] audit: type=1326 audit(1734743826.850:78483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.254117][   T29] audit: type=1326 audit(1734743826.850:78484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.277995][   T29] audit: type=1326 audit(1734743826.850:78485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.3.13638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  804.308312][ T9024] loop6: detected capacity change from 0 to 512
[  804.323622][ T9024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.341149][ T9022] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  804.358151][ T9029] tmpfs: Unknown parameter 'fsmagic'
[  804.358617][ T9027] smc: net device bond0 applied user defined pnetid SYZ0
[  804.370826][ T9022] vhci_hcd: invalid port number 23
[  804.386384][ T9027] smc: net device bond0 erased user defined pnetid SYZ0
[  804.409955][ T9033] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  804.418595][ T9033] IPVS: Error joining to the multicast group
[  804.446176][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.461521][ T9039] smc: net device bond0 applied user defined pnetid SYZ0
[  804.469323][ T9039] smc: net device bond0 erased user defined pnetid SYZ0
[  804.498721][ T9043] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  804.510455][ T9043] vhci_hcd: invalid port number 23
[  804.703885][ T9066] loop3: detected capacity change from 0 to 512
[  804.727439][ T9066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.742629][ T9071] smc: net device bond0 applied user defined pnetid SYZ0
[  804.753061][ T9071] smc: net device bond0 erased user defined pnetid SYZ0
[  804.811541][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.848147][ T9083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13676'.
[  804.883409][ T9088] loop6: detected capacity change from 0 to 512
[  804.893545][ T9088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.963078][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.967761][ T9096] x_tables: duplicate underflow at hook 2
[  804.981171][ T9096] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  804.989426][ T9096] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  805.005329][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13681'.
[  805.015699][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13681'.
[  805.040797][ T9098] team0 (unregistering): Port device team_slave_0 removed
[  805.053181][ T9098] team0 (unregistering): Port device team_slave_1 removed
[  805.079466][ T9099] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  805.091865][ T9099] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  805.132724][ T9103] smc: net device bond0 applied user defined pnetid SYZ0
[  805.140285][ T9103] smc: net device bond0 erased user defined pnetid SYZ0
[  805.171599][ T9105] hub 6-0:1.0: USB hub found
[  805.176328][ T9105] hub 6-0:1.0: 8 ports detected
[  805.205980][ T9109] loop3: detected capacity change from 0 to 512
[  805.225532][ T9109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  805.234287][ T6258] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0
[  805.249420][ T6258] hid-generic 0000:0000:0000.0066: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  805.289167][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.289946][ T9117] tmpfs: Unknown parameter 'fsmagic'
[  805.336365][ T9122] loop6: detected capacity change from 0 to 128
[  805.416311][ T9136] smc: net device bond0 applied user defined pnetid SYZ0
[  805.419693][ T9137] x_tables: duplicate underflow at hook 2
[  805.425324][ T9136] smc: net device bond0 erased user defined pnetid SYZ0
[  805.436850][ T9134] hub 6-0:1.0: USB hub found
[  805.442515][ T9134] hub 6-0:1.0: 8 ports detected
[  805.451552][ T9137] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  805.459842][ T9137] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  805.524067][ T9141] hub 6-0:1.0: USB hub found
[  805.531639][ T9141] hub 6-0:1.0: 8 ports detected
[  805.547715][ T9146] tmpfs: Unknown parameter 'fsmagic'
[  805.592038][ T9153] netlink: 'syz.4.13704': attribute type 21 has an invalid length.
[  805.600282][ T9153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13704'.
[  805.609606][ T9153] netlink: 'syz.4.13704': attribute type 4 has an invalid length.
[  805.617440][ T9153] netlink: 'syz.4.13704': attribute type 5 has an invalid length.
[  805.625774][ T9153] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13704'.
[  805.740142][ T9162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13707'.
[  805.859901][ T9167] hub 6-0:1.0: USB hub found
[  805.875490][ T9167] hub 6-0:1.0: 8 ports detected
[  805.909270][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  805.921934][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13713'.
[  805.950751][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13713'.
[  805.961958][ T9176] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  805.973363][ T9181] 9pnet_fd: Insufficient options for proto=fd
[  805.974087][ T9176] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  806.023199][ T9181] lo speed is unknown, defaulting to 1000
[  806.078452][ T9188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13716'.
[  806.117410][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13717'.
[  806.159664][T28618] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0
[  806.167654][T28618] hid-generic 0000:0000:0000.0067: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  806.308443][ T9215] smc: net device bond0 applied user defined pnetid SYZ0
[  806.316021][ T9215] smc: net device bond0 erased user defined pnetid SYZ0
[  806.374271][ T9220] 9pnet_fd: Insufficient options for proto=fd
[  806.414422][ T9220] lo speed is unknown, defaulting to 1000
[  806.580676][T28618] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0
[  806.585983][ T9233] loop5: detected capacity change from 0 to 512
[  806.601853][T28618] hid-generic 0000:0000:0000.0068: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  806.612366][ T9239] netlink: 'syz.1.13734': attribute type 21 has an invalid length.
[  806.612434][ T9233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.620317][ T9239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13734'.
[  806.655981][ T9239] netlink: 'syz.1.13734': attribute type 4 has an invalid length.
[  806.663919][ T9239] netlink: 'syz.1.13734': attribute type 5 has an invalid length.
[  806.672095][ T9239] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13734'.
[  806.687648][ T4641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.766690][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  806.841689][ T9263] 9pnet_fd: Insufficient options for proto=fd
[  806.883916][ T9263] lo speed is unknown, defaulting to 1000
[  806.909188][ T9266] loop6: detected capacity change from 0 to 512
[  806.915987][ T9266] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  806.927511][ T9266] EXT4-fs (loop6): 1 truncate cleaned up
[  806.934293][ T9266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.983274][ T9270] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  806.991415][ T9270] vhci_hcd: invalid port number 23
[  807.018800][ T6258] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0
[  807.026662][ T6258] hid-generic 0000:0000:0000.0069: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  807.059875][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.081803][ T9276] netlink: 'syz.6.13748': attribute type 21 has an invalid length.
[  807.089802][ T9276] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13748'.
[  807.099024][ T9276] netlink: 'syz.6.13748': attribute type 4 has an invalid length.
[  807.106862][ T9276] netlink: 'syz.6.13748': attribute type 5 has an invalid length.
[  807.117577][ T9276] loop6: detected capacity change from 0 to 128
[  807.172926][ T9281] IPVS: Error joining to the multicast group
[  807.201759][ T9285] 9pnet_fd: Insufficient options for proto=fd
[  807.246911][ T9285] lo speed is unknown, defaulting to 1000
[  807.336630][ T9295] IPVS: Error joining to the multicast group
[  807.507604][ T9309] tmpfs: Unknown parameter 'fsmagic'
[  807.551706][ T3932] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[  807.559803][ T3932] hid-generic 0000:0000:0000.006A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  807.649556][ T9324] 9pnet_fd: Insufficient options for proto=fd
[  807.693526][ T9324] lo speed is unknown, defaulting to 1000
[  807.740230][ T9336] tmpfs: Unknown parameter 'fsmagic'
[  807.746941][ T9339] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  807.755377][ T9339] vhci_hcd: invalid port number 23
[  807.790845][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  807.839263][ T9349] loop3: detected capacity change from 0 to 512
[  807.848427][ T9346] IPVS: Error joining to the multicast group
[  807.854978][ T9349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  807.872850][ T9349] EXT4-fs (loop3): 1 truncate cleaned up
[  807.899625][ T9349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  807.915938][ T9351] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  807.941271][ T9351] vhci_hcd: invalid port number 23
[  807.996005][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.094167][ T9368] hub 6-0:1.0: USB hub found
[  808.102857][ T9368] hub 6-0:1.0: 8 ports detected
[  808.300870][ T9400] loop6: detected capacity change from 0 to 512
[  808.313114][ T9400] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  808.343303][ T9400] EXT4-fs (loop6): 1 truncate cleaned up
[  808.356163][ T9400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  808.457828][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.530861][ T9412] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  808.555270][ T9412] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  808.626924][ T9421] tmpfs: Unknown parameter 'fsmagic'
[  808.701562][ T9426] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  808.701946][ T9431] FAULT_INJECTION: forcing a failure.
[  808.701946][ T9431] name failslab, interval 1, probability 0, space 0, times 0
[  808.725639][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.1.13806 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  808.736453][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  808.746521][ T9431] Call Trace:
[  808.749946][ T9431]  <TASK>
[  808.752884][ T9431]  dump_stack_lvl+0xf2/0x150
[  808.757574][ T9431]  dump_stack+0x15/0x1a
[  808.761776][ T9431]  should_fail_ex+0x223/0x230
[  808.766554][ T9431]  should_failslab+0x8f/0xb0
[  808.771174][ T9431]  kmem_cache_alloc_noprof+0x52/0x320
[  808.776587][ T9431]  ? fcntl_dirnotify+0x1bd/0x590
[  808.781677][ T9431]  fcntl_dirnotify+0x1bd/0x590
[  808.786503][ T9431]  ? vfs_write+0x596/0x920
[  808.790938][ T9431]  do_fcntl+0x650/0xe10
[  808.795153][ T9431]  __se_sys_fcntl+0xbd/0x1b0
[  808.799804][ T9431]  __x64_sys_fcntl+0x43/0x50
[  808.804460][ T9431]  x64_sys_call+0x2129/0x2dc0
[  808.809202][ T9431]  do_syscall_64+0xc9/0x1c0
[  808.813791][ T9431]  ? clear_bhb_loop+0x55/0xb0
[  808.818502][ T9431]  ? clear_bhb_loop+0x55/0xb0
[  808.823189][ T9431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.829124][ T9431] RIP: 0033:0x7f8527c75d29
[  808.833544][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  808.853221][ T9431] RSP: 002b:00007f852629f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  808.861649][ T9431] RAX: ffffffffffffffda RBX: 00007f8527e66160 RCX: 00007f8527c75d29
[  808.869638][ T9431] RDX: 000000008000003d RSI: 0000000000000402 RDI: 0000000000000006
[  808.877612][ T9431] RBP: 00007f852629f090 R08: 0000000000000000 R09: 0000000000000000
[  808.885619][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.893595][ T9431] R13: 0000000000000000 R14: 00007f8527e66160 R15: 00007ffd02beae68
[  808.901577][ T9431]  </TASK>
[  808.919183][ T9433] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  808.961813][ T9436] loop3: detected capacity change from 0 to 512
[  808.997025][ T9439] smc: net device bond0 applied user defined pnetid SYZ0
[  809.007132][ T9436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  809.028423][ T9439] smc: net device bond0 erased user defined pnetid SYZ0
[  809.047011][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.119928][   T29] kauditd_printk_skb: 945 callbacks suppressed
[  809.119957][   T29] audit: type=1326 audit(1734743831.920:79431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.149910][   T29] audit: type=1326 audit(1734743831.920:79432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.155736][ T9450] x_tables: duplicate underflow at hook 2
[  809.208635][   T29] audit: type=1326 audit(1734743832.010:79433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.250710][ T9450] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  809.258274][   T29] audit: type=1326 audit(1734743832.010:79434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.258966][ T9450] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  809.282635][   T29] audit: type=1326 audit(1734743832.010:79435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.282697][   T29] audit: type=1326 audit(1734743832.010:79436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.300401][ T9453] IPVS: Error joining to the multicast group
[  809.314879][   T29] audit: type=1326 audit(1734743832.040:79437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.314916][   T29] audit: type=1326 audit(1734743832.040:79438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.391748][   T29] audit: type=1326 audit(1734743832.040:79439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.415343][   T29] audit: type=1326 audit(1734743832.040:79440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.3.13817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  809.486484][ T9461] tmpfs: Unknown parameter 'fsmagic'
[  809.537470][ T9468] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  809.562278][ T9468] vhci_hcd: invalid port number 23
[  809.685427][ T9484] hub 6-0:1.0: USB hub found
[  809.690291][ T9484] hub 6-0:1.0: 8 ports detected
[  809.735885][ T9490] tmpfs: Unknown parameter 'fsmagic'
[  809.746624][ T9493] x_tables: duplicate underflow at hook 2
[  809.764552][ T9493] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  809.772907][ T9493] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  809.792982][ T9498] bond1: entered promiscuous mode
[  809.798087][ T9498] bond1: entered allmulticast mode
[  809.804003][ T9498] 8021q: adding VLAN 0 to HW filter on device bond1
[  809.859127][ T9501] team0 (unregistering): Port device team_slave_0 removed
[  809.868845][ T9501] team0 (unregistering): Port device team_slave_1 removed
[  809.880940][ T9505] netlink: 'syz.6.13842': attribute type 21 has an invalid length.
[  809.892765][ T9506] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  809.906631][ T9506] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  809.906708][ T9505] loop6: detected capacity change from 0 to 128
[  809.983958][ T9517] smc: net device bond0 applied user defined pnetid SYZ0
[  809.991289][ T9517] smc: net device bond0 erased user defined pnetid SYZ0
[  810.017335][ T9522] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  810.024928][ T9522] vhci_hcd: invalid port number 23
[  810.085136][ T9531] smc: net device bond0 applied user defined pnetid SYZ0
[  810.092689][ T9531] smc: net device bond0 erased user defined pnetid SYZ0
[  810.107730][ T9533] IPVS: Error joining to the multicast group
[  810.229143][ T9547] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  810.334115][ T9551] smc: net device bond0 applied user defined pnetid SYZ0
[  810.341535][ T9551] smc: net device bond0 erased user defined pnetid SYZ0
[  810.440096][ T7610] tipc: Subscription rejected, illegal request
[  810.471952][ T9557] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  810.479410][ T9557] vhci_hcd: invalid port number 23
[  810.552779][ T9568] tmpfs: Unknown parameter 'fsmagic'
[  810.646096][ T9577] __nla_validate_parse: 21 callbacks suppressed
[  810.646109][ T9577] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  810.661073][ T9577] IPVS: Error joining to the multicast group
[  810.865764][ T9598] loop6: detected capacity change from 0 to 512
[  810.879541][ T9600] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  810.888446][ T9600] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  810.890158][ T9598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  810.897347][ T9600] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  810.918657][ T9600] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  810.929236][ T9600] geneve2: entered promiscuous mode
[  810.934514][ T9600] geneve2: entered allmulticast mode
[  810.941856][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.966045][ T9605] loop6: detected capacity change from 0 to 512
[  810.975397][ T9605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  811.019974][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.043658][ T9611] tmpfs: Unknown parameter 'fsmagic'
[  811.091161][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13886'.
[  811.112593][ T9615] bond2: entered promiscuous mode
[  811.117676][ T9615] bond2: entered allmulticast mode
[  811.123062][ T9615] 8021q: adding VLAN 0 to HW filter on device bond2
[  811.146848][ T9608] xt_hashlimit: max too large, truncated to 1048576
[  811.368084][ T9625] lo speed is unknown, defaulting to 1000
[  811.409199][ T9637] loop5: detected capacity change from 0 to 512
[  811.416056][ T9637] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  811.435878][ T9637] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.13892: iget: bad i_size value: -67835469387268086
[  811.449742][ T9637] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.13892: couldn't read orphan inode 15 (err -117)
[  811.459752][ T9625] chnl_net:caif_netlink_parms(): no params data found
[  811.467782][ T9639] hub 6-0:1.0: USB hub found
[  811.471592][ T9637] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  811.473236][ T9639] hub 6-0:1.0: 8 ports detected
[  811.491599][ T9637] ext2 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  811.572620][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.579969][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.601681][ T9625] bridge_slave_0: entered allmulticast mode
[  811.613950][ T9625] bridge_slave_0: entered promiscuous mode
[  811.620763][ T9637] xt_hashlimit: max too large, truncated to 1048576
[  811.621316][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.634612][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.644057][ T9625] bridge_slave_1: entered allmulticast mode
[  811.651004][ T9625] bridge_slave_1: entered promiscuous mode
[  811.676053][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  811.687002][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.696787][ T4641] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  811.713372][ T9625] team0: Port device team_slave_0 added
[  811.720258][ T9625] team0: Port device team_slave_1 added
[  811.734925][ T9654] loop5: detected capacity change from 0 to 512
[  811.741863][ T9654] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  811.742723][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  811.758792][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.774489][ T9654] EXT4-fs (loop5): 1 truncate cleaned up
[  811.784823][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  811.793471][ T9654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  811.818366][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  811.825393][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.851760][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.886296][ T9625] hsr_slave_0: entered promiscuous mode
[  811.903593][ T9625] hsr_slave_1: entered promiscuous mode
[  811.919665][ T9625] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  811.931044][ T9625] Cannot create hsr debugfs directory
[  811.984986][ T4641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.002562][ T9669] tmpfs: Unknown parameter 'fsmagic'
[  812.017434][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13901'.
[  812.043507][ T9625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.053903][ T9625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  812.063017][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13901'.
[  812.077074][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13904'.
[  812.095995][ T9671] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  812.097980][ T9677] bond2: entered promiscuous mode
[  812.107907][ T9677] bond2: entered allmulticast mode
[  812.115761][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13905'.
[  812.115862][ T9677] 8021q: adding VLAN 0 to HW filter on device bond2
[  812.137594][ T9625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.148018][ T9625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  812.187723][ T9680] bond3: entered promiscuous mode
[  812.193184][ T9680] bond3: entered allmulticast mode
[  812.199423][ T9680] 8021q: adding VLAN 0 to HW filter on device bond3
[  812.209722][ T9625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.220094][ T9625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  812.281094][ T9625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.291528][ T9625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  812.305494][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13910'.
[  812.332239][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13910'.
[  812.343667][ T9693] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  812.375050][ T9625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  812.387482][ T9625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  812.404973][ T9625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  812.424187][ T9625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  812.429848][ T9703] loop6: detected capacity change from 0 to 512
[  812.437971][ T9703] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  812.451861][ T9703] EXT4-fs (loop6): 1 truncate cleaned up
[  812.457929][ T9703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  812.552602][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.563637][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.580081][ T9625] 8021q: adding VLAN 0 to HW filter on device team0
[  812.595319][ T9707] loop6: detected capacity change from 0 to 512
[  812.604089][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.611250][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.625523][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.632642][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  812.641764][ T9707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  812.662864][ T9710] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  812.674450][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.694450][ T9710] IPVS: Error joining to the multicast group
[  812.744924][ T9718] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13918'.
[  812.797774][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  812.953989][ T9625] veth0_vlan: entered promiscuous mode
[  812.966283][ T9625] veth1_vlan: entered promiscuous mode
[  812.993078][ T9625] veth0_macvtap: entered promiscuous mode
[  813.001737][ T9625] veth1_macvtap: entered promiscuous mode
[  813.020021][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.030659][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.040972][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.051460][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.061337][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.072096][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.082217][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.092771][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.102640][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.113279][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.123262][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.133724][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.144106][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.154586][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.164638][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.175311][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.188479][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  813.197795][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.208382][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.218325][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.228814][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.238816][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.249317][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.259163][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.269713][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.279559][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.290057][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.299894][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.310361][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.320193][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.330678][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.340634][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  813.351202][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.362530][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  813.369962][ T9750] smc: net device bond0 applied user defined pnetid SYZ0
[  813.372186][ T9625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  813.377413][ T9754] smc: net device bond0 erased user defined pnetid SYZ0
[  813.386091][ T9625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  813.401935][ T9625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  813.410795][ T9625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  813.473979][ T9765] tmpfs: Unknown parameter 'fsmagic'
[  813.574016][ T9776] validate_nla: 2 callbacks suppressed
[  813.574036][ T9776] netlink: 'syz.4.13890': attribute type 21 has an invalid length.
[  813.580695][ T9778] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  813.591485][ T9776] netlink: 'syz.4.13890': attribute type 4 has an invalid length.
[  813.597156][ T9778] vhci_hcd: invalid port number 23
[  813.602773][ T9776] netlink: 'syz.4.13890': attribute type 5 has an invalid length.
[  813.619234][ T9780] x_tables: duplicate underflow at hook 2
[  813.648653][ T9784] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  813.683033][ T9787] smc: net device bond0 applied user defined pnetid SYZ0
[  813.690721][ T9787] smc: net device bond0 erased user defined pnetid SYZ0
[  813.701925][ T9789] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  813.722388][ T9789] vhci_hcd: invalid port number 23
[  813.823777][ T9808] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  813.824288][ T9806] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  813.841852][ T9806] vhci_hcd: invalid port number 23
[  814.036990][ T9840] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  814.054362][ T9836] loop6: detected capacity change from 0 to 2048
[  814.080936][ T9845] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  814.088572][ T9845] vhci_hcd: invalid port number 23
[  814.095264][ T9836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.131829][   T29] kauditd_printk_skb: 627 callbacks suppressed
[  814.131847][   T29] audit: type=1400 audit(1734743836.930:80068): avc:  denied  { setattr } for  pid=9835 comm="syz.6.13960" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  814.167733][   T29] audit: type=1326 audit(1734743836.970:80069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.191487][   T29] audit: type=1326 audit(1734743836.970:80070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.215407][   T29] audit: type=1326 audit(1734743836.970:80071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.240147][   T29] audit: type=1326 audit(1734743836.970:80072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.250184][ T9861] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  814.263865][   T29] audit: type=1326 audit(1734743836.970:80073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.294111][   T29] audit: type=1326 audit(1734743836.970:80074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.305641][ T9864] loop3: detected capacity change from 0 to 512
[  814.317747][   T29] audit: type=1326 audit(1734743836.970:80075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.347768][   T29] audit: type=1326 audit(1734743836.970:80076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.370437][ T9864] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  814.371393][   T29] audit: type=1326 audit(1734743836.970:80077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.3.13967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  814.383391][ T9868] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  814.416716][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.432943][ T9864] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.13972: iget: bad i_size value: -67835469387268086
[  814.440162][ T9871] tmpfs: Unknown parameter 'fsmagic'
[  814.451612][ T9864] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.13972: couldn't read orphan inode 15 (err -117)
[  814.468101][ T9864] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.482937][ T9864] ext2 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  814.500716][ T9875] hub 6-0:1.0: USB hub found
[  814.505616][ T9875] hub 6-0:1.0: 8 ports detected
[  814.522905][ T4504] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  814.553909][ T9878] loop3: detected capacity change from 0 to 1024
[  814.563045][ T9878] EXT4-fs: Ignoring removed orlov option
[  814.570157][ T9878] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  814.580264][ T9880] loop6: detected capacity change from 0 to 1024
[  814.587325][ T9880] EXT4-fs: Ignoring removed orlov option
[  814.594075][ T9880] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  814.605979][ T9878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.619637][ T9880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.650919][ T9888] tmpfs: Unknown parameter 'fsmagic'
[  814.671830][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.682871][ T9890] loop5: detected capacity change from 0 to 164
[  814.696523][ T9890] ISOFS: unable to read i-node block
[  814.719588][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.739599][ T9896] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  814.768119][ T9901] rock: directory entry would overflow storage
[  814.774472][ T9901] rock: sig=0x4f50, size=4, remaining=3
[  814.780194][ T9901] iso9660: Corrupted directory entry in block 4 of inode 1792
[  814.853374][ T9903] loop6: detected capacity change from 0 to 512
[  814.872703][ T9903] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  814.892713][ T9903] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.13987: iget: bad i_size value: -67835469387268086
[  814.918638][ T9903] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.13987: couldn't read orphan inode 15 (err -117)
[  814.960374][ T9903] EXT4-fs (loop6): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.978438][ T9903] ext2 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  815.005919][ T3802] EXT4-fs (loop6): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  815.027320][ T9909] loop6: detected capacity change from 0 to 512
[  815.048099][ T9909] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  815.082168][ T9909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.098839][ T9909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9909 comm=syz.6.13989
[  815.114950][ T9915] x_tables: duplicate underflow at hook 2
[  815.268011][ T9921] tmpfs: Unknown parameter 'fsmagic'
[  815.474788][ T9889] syz.5.13981 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  815.485892][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.5.13981 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  815.496682][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  815.506815][ T9889] Call Trace:
[  815.510181][ T9889]  <TASK>
[  815.513164][ T9889]  dump_stack_lvl+0xf2/0x150
[  815.517922][ T9889]  dump_stack+0x15/0x1a
[  815.522121][ T9889]  dump_header+0x83/0x2d0
[  815.526464][ T9889]  oom_kill_process+0x341/0x4c0
[  815.531340][ T9889]  out_of_memory+0x9af/0xbe0
[  815.535959][ T9889]  ? css_next_descendant_pre+0x11c/0x140
[  815.541619][ T9889]  mem_cgroup_out_of_memory+0x13e/0x190
[  815.547283][ T9889]  try_charge_memcg+0x508/0x7f0
[  815.552358][ T9889]  charge_memcg+0x50/0xc0
[  815.556692][ T9889]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  815.562775][ T9889]  __read_swap_cache_async+0x236/0x480
[  815.568308][ T9889]  swap_cluster_readahead+0x279/0x3f0
[  815.573747][ T9889]  swapin_readahead+0xe4/0x6f0
[  815.578588][ T9889]  ? __rcu_read_unlock+0x34/0x70
[  815.583581][ T9889]  ? swap_cache_get_folio+0x77/0x210
[  815.588890][ T9889]  do_swap_page+0x31b/0x2550
[  815.602447][ T9889]  ? __rcu_read_lock+0x36/0x50
[  815.607361][ T9889]  ? __pfx_default_wake_function+0x10/0x10
[  815.613194][ T9889]  handle_mm_fault+0x8e4/0x2ac0
[  815.618075][ T9889]  exc_page_fault+0x3b9/0x650
[  815.622848][ T9889]  asm_exc_page_fault+0x26/0x30
[  815.627838][ T9889] RIP: 0033:0x7efdf65acb1c
[  815.632264][ T9889] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00
[  815.651905][ T9889] RSP: 002b:00007ffe66ff7390 EFLAGS: 00010283
[  815.657978][ T9889] RAX: 0000000000000000 RBX: 00007efdf68c6080 RCX: 0000000000000000
[  815.666062][ T9889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558b1ad808
[  815.674101][ T9889] RBP: 00007efdf68c7ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  815.682102][ T9889] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000c7187
[  815.690078][ T9889] R13: 00007efdf68c6080 R14: 0000000000000032 R15: ffffffffffffffff
[  815.698057][ T9889]  </TASK>
[  815.701895][ T9889] memory: usage 307200kB, limit 307200kB, failcnt 607
[  815.708758][ T9889] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0
[  815.716674][ T9889] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0
[  815.724013][ T9889] Memory cgroup stats for /syz5:
[  815.724494][ T9889] cache 0
[  815.732470][ T9889] rss 0
[  815.735351][ T9889] shmem 0
[  815.738424][ T9889] mapped_file 0
[  815.741889][ T9889] dirty 0
[  815.744816][ T9889] writeback 8192
[  815.748426][ T9889] workingset_refault_anon 70
[  815.753021][ T9889] workingset_refault_file 32
[  815.757775][ T9889] swap 344064
[  815.761090][ T9889] swapcached 12288
[  815.764820][ T9889] pgpgin 565099
[  815.768317][ T9889] pgpgout 565085
[  815.771898][ T9889] pgfault 494328
[  815.775512][ T9889] pgmajfault 32
[  815.779092][ T9889] inactive_anon 12288
[  815.783090][ T9889] active_anon 0
[  815.786547][ T9889] inactive_file 0
[  815.790213][ T9889] active_file 45056
[  815.794160][ T9889] unevictable 0
[  815.797656][ T9889] hierarchical_memory_limit 314572800
[  815.803370][ T9889] hierarchical_memsw_limit 9223372036854771712
[  815.809558][ T9889] total_cache 0
[  815.813076][ T9889] total_rss 0
[  815.816444][ T9889] total_shmem 0
[  815.819966][ T9889] total_mapped_file 0
[  815.823999][ T9889] total_dirty 0
[  815.827556][ T9889] total_writeback 8192
[  815.831706][ T9889] total_workingset_refault_anon 70
[  815.836933][ T9889] total_workingset_refault_file 32
[  815.842094][ T9889] total_swap 344064
[  815.845907][ T9889] total_swapcached 12288
[  815.850222][ T9889] total_pgpgin 565099
[  815.854205][ T9889] total_pgpgout 565085
[  815.858305][ T9889] total_pgfault 494328
[  815.862484][ T9889] total_pgmajfault 32
[  815.863346][ T9932] loop3: detected capacity change from 0 to 512
[  815.866453][ T9889] total_inactive_anon 12288
[  815.866465][ T9889] total_active_anon 0
[  815.866476][ T9889] total_inactive_file 0
[  815.875891][ T9932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  815.877220][ T9889] total_active_file 45056
[  815.877232][ T9889] total_unevictable 0
[  815.877242][ T9889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[  815.882694][ T9932] EXT4-fs (loop3): 1 truncate cleaned up
[  815.885365][ T9889] ,cpuset=/,mems_allowed=0,oom_memcg=/syz5
[  815.895891][ T9932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.899610][ T9889] ,task_memcg=/syz5,task=syz.5.13981,pid=9889,uid=0
[  815.899655][ T9889] Memory cgroup out of memory: Killed process 9889 (syz.5.13981) total-vm:95564kB, anon-rss:788kB, file-rss:22484kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  816.021299][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.041177][ T9935] tmpfs: Unknown parameter 'fsmagic'
[  816.068823][ T9937] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  816.076282][ T9937] vhci_hcd: invalid port number 23
[  816.106460][ T9939] loop3: detected capacity change from 0 to 512
[  816.115040][ T9939] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  816.124974][ T9939] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.14000: iget: bad i_size value: -67835469387268086
[  816.140793][ T9939] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.14000: couldn't read orphan inode 15 (err -117)
[  816.153430][ T9939] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  816.167901][ T9939] ext2 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.183942][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.194575][ T4504] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  816.245404][ T9946] loop6: detected capacity change from 0 to 2048
[  816.249679][ T9948] tmpfs: Unknown parameter 'fsmagic'
[  816.297522][ T9946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  816.337246][ T3802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.355669][ T9962] __nla_validate_parse: 5 callbacks suppressed
[  816.355694][ T9962] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  816.371139][ T9962] IPVS: Error joining to the multicast group
[  816.457421][ T9977] hub 6-0:1.0: USB hub found
[  816.465772][ T9977] hub 6-0:1.0: 8 ports detected
[  816.503112][ T9982] tmpfs: Unknown parameter 'fsmagic'
[  816.528610][ T9984] tmpfs: Unknown parameter 'fsmagic'
[  816.550904][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14021'.
[  816.600885][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14021'.
[  816.616415][ T9986] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  816.655312][ T9986] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  816.663250][ T9998] netlink: 'syz.6.14026': attribute type 21 has an invalid length.
[  816.671306][ T9998] netlink: 128 bytes leftover after parsing attributes in process `syz.6.14026'.
[  816.683901][ T9998] netlink: 'syz.6.14026': attribute type 4 has an invalid length.
[  816.691806][ T9998] netlink: 'syz.6.14026': attribute type 5 has an invalid length.
[  816.699737][ T9998] netlink: 3 bytes leftover after parsing attributes in process `syz.6.14026'.
[  816.717453][T10004] loop5: detected capacity change from 0 to 512
[  816.725310][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14029'.
[  816.743256][T10004] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  816.752195][T10010] loop3: detected capacity change from 0 to 512
[  816.757072][ T9998] loop6: detected capacity change from 0 to 128
[  816.781267][T10004] EXT4-fs (loop5): 1 truncate cleaned up
[  816.788149][T10010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  816.807457][T10004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  816.837870][ T4504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.860139][ T4641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.882521][T10020] hub 6-0:1.0: USB hub found
[  816.888377][T10020] hub 6-0:1.0: 8 ports detected
[  816.913822][T10018] hub 6-0:1.0: USB hub found
[  816.926620][T10018] hub 6-0:1.0: 8 ports detected
[  816.960434][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14042'.
[  816.979124][T10038] x_tables: duplicate underflow at hook 2
[  817.037896][T10046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10046 comm=syz.1.14048
[  817.057540][T10046] tipc: Started in network mode
[  817.062564][T10046] tipc: Node identity ce06e57884c7, cluster identity 4711
[  817.069964][T10046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  817.080499][T10046] tipc: Disabling bearer <eth:syzkaller0>
[  817.108874][T10052] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  817.117402][T10052] IPVS: Error joining to the multicast group
[  817.214924][T10068] tmpfs: Unknown parameter 'fsmagic'
[  817.283442][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14060'.
[  817.311530][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14060'.
[  817.351476][T10079] team0 (unregistering): Port device team_slave_0 removed
[  817.368086][T10084] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  817.377333][T10079] team0 (unregistering): Port device team_slave_1 removed
[  817.395586][T10081] IPVS: Error joining to the multicast group
[  817.448361][T10092] x_tables: duplicate underflow at hook 2
[  817.503876][T10098] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  817.521970][T10098] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  817.745413][T10124] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  817.798503][T10130] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  817.805863][T10130] vhci_hcd: invalid port number 23
[  817.855079][T10132] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  817.869217][T10132] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  817.896104][T10136] tmpfs: Unknown parameter 'fsmagic'
[  817.922234][T10138] loop5: detected capacity change from 0 to 512
[  817.930353][T10138] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  817.939943][T10138] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.14082: iget: bad i_size value: -67835469387268086
[  817.953509][T10138] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.14082: couldn't read orphan inode 15 (err -117)
[  817.966771][T10138] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  817.979546][T10138] ext2 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  818.002520][ T4641] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  818.122075][T10148] hub 6-0:1.0: USB hub found
[  818.126812][T10148] hub 6-0:1.0: 8 ports detected
[  818.216991][T10153] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  818.222994][T10162] tmpfs: Unknown parameter 'fsmagic'
[  818.274238][T10164] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  818.288289][T10164] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  818.323243][T10172] tmpfs: Unknown parameter 'fsmagic'
[  818.362876][T10178] smc: net device bond0 applied user defined pnetid SYZ0
[  818.373728][T10178] smc: net device bond0 erased user defined pnetid SYZ0
[  818.418877][T10188] tmpfs: Unknown parameter 'fsmagic'
[  818.435495][T10186] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  818.451902][T10186] vhci_hcd: invalid port number 23
[  818.458220][T10190] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  818.465835][T10190] vhci_hcd: invalid port number 23
[  818.476368][T10193] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  818.492834][T10193] vhci_hcd: invalid port number 23
[  818.505065][T10196] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  818.513045][T10196] vhci_hcd: invalid port number 23
[  818.593317][T10213] FAULT_INJECTION: forcing a failure.
[  818.593317][T10213] name failslab, interval 1, probability 0, space 0, times 0
[  818.606068][T10213] CPU: 1 UID: 0 PID: 10213 Comm: syz.3.14113 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  818.616948][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  818.627174][T10213] Call Trace:
[  818.630552][T10213]  <TASK>
[  818.633498][T10213]  dump_stack_lvl+0xf2/0x150
[  818.638214][T10213]  dump_stack+0x15/0x1a
[  818.642400][T10213]  should_fail_ex+0x223/0x230
[  818.647228][T10213]  should_failslab+0x8f/0xb0
[  818.651925][T10213]  kmem_cache_alloc_node_noprof+0x59/0x320
[  818.657749][T10213]  ? __alloc_skb+0x10b/0x310
[  818.662482][T10213]  __alloc_skb+0x10b/0x310
[  818.666908][T10213]  ? audit_log_start+0x34c/0x6b0
[  818.671951][T10213]  audit_log_start+0x368/0x6b0
[  818.676786][T10213]  audit_seccomp+0x4b/0x130
[  818.681399][T10213]  __seccomp_filter+0x6fa/0x1180
[  818.686402][T10213]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  818.692068][T10213]  ? vfs_write+0x596/0x920
[  818.696500][T10213]  ? __schedule+0x6fa/0x930
[  818.701074][T10213]  __secure_computing+0x9f/0x1c0
[  818.706078][T10213]  syscall_trace_enter+0xd1/0x1f0
[  818.711132][T10213]  do_syscall_64+0xaa/0x1c0
[  818.715666][T10213]  ? clear_bhb_loop+0x55/0xb0
[  818.720697][T10213]  ? clear_bhb_loop+0x55/0xb0
[  818.725426][T10213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.731343][T10213] RIP: 0033:0x7fa948fd5d29
[  818.735818][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  818.755477][T10213] RSP: 002b:00007fa947647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  818.763957][T10213] RAX: ffffffffffffffda RBX: 00007fa9491c5fa0 RCX: 00007fa948fd5d29
[  818.771999][T10213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  818.780130][T10213] RBP: 00007fa947647090 R08: 0000000000001000 R09: 0000000000000000
[  818.788115][T10213] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  818.796123][T10213] R13: 0000000000000000 R14: 00007fa9491c5fa0 R15: 00007ffd3f129748
[  818.804213][T10213]  </TASK>
[  818.832238][T10218] sd 0:0:1:0: device reset
[  819.126682][T10237] loop5: detected capacity change from 0 to 128
[  819.133651][T10237] vfat: Unknown parameter 'θ?|�V�SZf- S
[  819.133651][T10237] N�&ל�1��CI��.��eT�%�Yԧӿ�1a�Y�7*4E�e��`c9��Eϭ��{��8�Vf�S+cEt�~��U�3�un��J���(�(a�o�kmXOƛ	Cj�<ثz�D�~��}n`�(�[%՘�>�@����~u�
*��_��nk��k��+�Pe�}%�C	�S�e3�>A&'
[  819.223445][T10237] lo speed is unknown, defaulting to 1000
[  819.434535][T10242] hub 6-0:1.0: USB hub found
[  819.439429][T10242] hub 6-0:1.0: 8 ports detected
[  819.467081][   T29] kauditd_printk_skb: 517 callbacks suppressed
[  819.467100][   T29] audit: type=1326 audit(1734743842.260:80593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.497077][   T29] audit: type=1326 audit(1734743842.260:80594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.520952][   T29] audit: type=1326 audit(1734743842.260:80595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.544743][   T29] audit: type=1326 audit(1734743842.260:80596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.568495][   T29] audit: type=1326 audit(1734743842.260:80597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.592339][   T29] audit: type=1326 audit(1734743842.260:80598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.616102][   T29] audit: type=1326 audit(1734743842.260:80599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.640080][   T29] audit: type=1326 audit(1734743842.260:80600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.664226][   T29] audit: type=1326 audit(1734743842.260:80601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.687927][   T29] audit: type=1326 audit(1734743842.260:80602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.3.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa948fd5d29 code=0x7ffc0000
[  819.809025][T10260] loop3: detected capacity change from 0 to 2048
[  819.840380][T10260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  819.867903][T10272] netlink: 'syz.4.14137': attribute type 21 has an invalid length.
[  819.888330][T10272] netlink: 'syz.4.14137': attribute type 4 has an invalid length.
[  819.896288][T10272] netlink: 'syz.4.14137': attribute type 5 has an invalid length.
[  819.966672][T10284] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  819.976262][T10284] vhci_hcd: invalid port number 23
[  820.102862][T10300] loop3: detected capacity change from 0 to 8192
[  820.183025][T10315] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  820.190639][T10315] vhci_hcd: invalid port number 23
[  820.272466][T10334] netlink: 'syz.3.14167': attribute type 21 has an invalid length.
[  820.281293][T10334] netlink: 'syz.3.14167': attribute type 4 has an invalid length.
[  820.289201][T10334] netlink: 'syz.3.14167': attribute type 5 has an invalid length.
[  820.301469][T10334] loop3: detected capacity change from 0 to 128
[  820.415058][T10355] loop3: detected capacity change from 0 to 1024
[  820.432123][T10357] x_tables: duplicate underflow at hook 2
[  820.450922][T10355] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.3.14174: corrupted in-inode xattr: bad magic number in in-inode xattr
[  820.467505][T10355] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.14174: attempt to clear invalid blocks 1886221359 len 1
[  820.526018][T10368] tmpfs: Unknown parameter 'fsmagic'
[  820.553104][T10372] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  820.562644][T10372] vhci_hcd: invalid port number 23
[  820.722889][T10391] netlink: 'syz.1.14190': attribute type 21 has an invalid length.
[  820.731766][T10391] netlink: 'syz.1.14190': attribute type 4 has an invalid length.
[  820.739671][T10391] netlink: 'syz.1.14190': attribute type 5 has an invalid length.
[  820.783762][T10397] tmpfs: Unknown parameter 'fsmagic'
[  820.806050][T10399] hub 6-0:1.0: USB hub found
[  820.811093][T10399] hub 6-0:1.0: 8 ports detected
[  820.912873][T10415] sch_tbf: burst 6269 is lower than device lo mtu (65550) !
[  820.963581][T10414] lo speed is unknown, defaulting to 1000
[  820.970130][T10412] hub 6-0:1.0: USB hub found
[  820.974932][T10412] hub 6-0:1.0: 8 ports detected
[  821.012452][T10423] netlink: 'syz.6.14202': attribute type 21 has an invalid length.
[  821.030864][T10423] loop6: detected capacity change from 0 to 128
[  821.240732][T10441] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  821.248178][T10441] vhci_hcd: invalid port number 23
[  821.302044][T10443] hub 6-0:1.0: USB hub found
[  821.306763][T10443] hub 6-0:1.0: 8 ports detected
[  821.522721][T10450] __nla_validate_parse: 30 callbacks suppressed
[  821.522744][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14211'.
[  821.807900][T10480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14223'.
[  821.855867][T10485] loop5: detected capacity change from 0 to 2048
[  821.903736][T10491] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  821.912702][T10491] IPVS: Error joining to the multicast group
[  822.149076][T10509] loop6: detected capacity change from 0 to 512
[  822.155944][T10509] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  822.177672][T10509] EXT4-fs (loop6): 1 truncate cleaned up
[  822.253399][T10518] x_tables: duplicate underflow at hook 2
[  822.331951][T10532] hub 6-0:1.0: USB hub found
[  822.336770][T10532] hub 6-0:1.0: 8 ports detected
[  822.365685][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14242'.
[  822.410849][T10536] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  822.423711][T10536] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  822.791648][T10556] x_tables: duplicate underflow at hook 2
[  822.909542][T10565] hub 6-0:1.0: USB hub found
[  822.914941][T10565] hub 6-0:1.0: 8 ports detected
[  823.142149][T10574] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14256'.
[  823.151685][T10574] netlink: 3 bytes leftover after parsing attributes in process `syz.5.14256'.
[  823.163370][T10574] loop5: detected capacity change from 0 to 128
[  823.190672][T10576] loop5: detected capacity change from 0 to 512
[  823.197569][T10576] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  823.206764][T10576] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.14257: iget: bad i_size value: -67835469387268086
[  823.220311][T10576] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.14257: couldn't read orphan inode 15 (err -117)
[  823.232951][T10576] ext2 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  823.252696][T10582] hsr0: entered allmulticast mode
[  823.257977][T10582] hsr_slave_0: entered allmulticast mode
[  823.263985][T10582] hsr_slave_1: entered allmulticast mode
[  823.287065][T10584] loop5: detected capacity change from 0 to 512
[  823.295254][T10584] EXT4-fs (loop5): can't mount with commit=4, fs mounted w/o journal
[  823.354940][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14262'.
[  823.409787][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14262'.
[  823.420098][T10595] smc: net device bond0 applied user defined pnetid SYZ0
[  823.427627][T10588] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  823.572194][T10601] lo speed is unknown, defaulting to 1000
[  823.876693][T10611] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  823.884197][T10611] vhci_hcd: invalid port number 23
[  823.900594][T10613] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  823.907939][T10613] vhci_hcd: invalid port number 23
[  823.929529][T10618] 9pnet_virtio: no channels available for device 127.0.0.1
[  823.970816][T10622] x_tables: duplicate underflow at hook 2
[  824.204836][T10633] loop5: detected capacity change from 0 to 512
[  824.218360][T10633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  824.254687][T10633] EXT4-fs (loop5): 1 truncate cleaned up
[  824.349529][T10637] lo speed is unknown, defaulting to 1000
[  824.394126][T10642] sd 0:0:1:0: device reset
[  824.486569][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14283'.
[  824.516682][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14283'.
[  824.531400][T10646] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  824.581768][T10654] loop5: detected capacity change from 0 to 512
[  824.601169][T10656] sd 0:0:1:0: device reset
[  824.616145][T10654] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  824.664907][   T29] kauditd_printk_skb: 853 callbacks suppressed
[  824.664923][   T29] audit: type=1326 audit(1734743847.460:81456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  824.704047][   T29] audit: type=1326 audit(1734743847.460:81457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  824.728248][   T29] audit: type=1326 audit(1734743847.460:81458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  824.752067][   T29] audit: type=1326 audit(1734743847.460:81459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efdf66d5d63 code=0x7ffc0000
[  824.776131][   T29] audit: type=1326 audit(1734743847.460:81460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdf66d47df code=0x7ffc0000
[  824.804872][   T29] audit: type=1326 audit(1734743847.470:81461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efdf66d5db7 code=0x7ffc0000
[  824.828664][   T29] audit: type=1326 audit(1734743847.470:81462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdf66d4690 code=0x7ffc0000
[  824.852353][   T29] audit: type=1326 audit(1734743847.470:81463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efdf66d498a code=0x7ffc0000
[  824.876235][   T29] audit: type=1326 audit(1734743847.470:81464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  824.899991][   T29] audit: type=1326 audit(1734743847.470:81465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10653 comm="syz.5.14286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf66d5d29 code=0x7ffc0000
[  825.069012][T10673] loop6: detected capacity change from 0 to 512
[  825.081715][T10673] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.102038][T10673] bpf_get_probe_write_proto: 11 callbacks suppressed
[  825.102053][T10673] syz.6.14292[10673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  825.111405][T10673] syz.6.14292[10673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  825.160720][T10682] loop5: detected capacity change from 0 to 128
[  825.160990][T10682] vfat: Unknown parameter 'θ?|�V�SZf- S
[  825.160990][T10682] N�&ל�1��CI��.��eT�%�Yԧӿ�1a�Y�7*4E�e��`c9��Eϭ��{��8�Vf�S+cEt�~��U�3�un��J���(�(a�o�kmXOƛ	Cj�<ثz�D�~��}n`�(�[%՘�>�@����~u�
*��_��nk��k��+�Pe�}%�C	�S�e3�>A&'
[  825.222552][T10682] lo speed is unknown, defaulting to 1000
[  825.337249][T10673] syz.6.14292[10673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  825.618465][T10690] 9pnet_virtio: no channels available for device 127.0.0.1
[  825.625995][T10673] EXT4-fs: Ignoring removed bh option
[  825.626116][T10673] EXT4-fs: Cannot change journaled quota options when quota turned on
[  825.721195][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.736748][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.742287][T10698] loop3: detected capacity change from 0 to 128
[  825.757268][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.770549][T10698] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  825.776374][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.803131][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.816937][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.831566][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.847602][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.873431][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.889815][T10704] pim6reg: entered allmulticast mode
[  825.891498][ T3802] EXT4-fs error (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  825.976238][T10698] syz.3.14303: attempt to access beyond end of device
[  825.976238][T10698] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128
[  825.991685][T10698] syz.3.14303: attempt to access beyond end of device
[  825.991685][T10698] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128
[  826.020470][T10711] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  826.028005][T10711] vhci_hcd: invalid port number 23
[  826.133636][T10718] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  826.174298][T10732] validate_nla: 8 callbacks suppressed
[  826.174377][T10732] netlink: 'syz.3.14313': attribute type 21 has an invalid length.
[  826.189680][T10734] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  826.190461][T10732] netlink: 'syz.3.14313': attribute type 4 has an invalid length.
[  826.197343][T10734] vhci_hcd: invalid port number 23
[  826.204921][T10732] netlink: 'syz.3.14313': attribute type 5 has an invalid length.
[  826.249438][T10732] loop3: detected capacity change from 0 to 128
[  826.262885][T10738] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  826.278507][T10713] lo speed is unknown, defaulting to 1000
[  826.285600][T10738] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  826.373206][T10713] chnl_net:caif_netlink_parms(): no params data found
[  826.384351][T10744] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  826.415914][T10713] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.423260][T10713] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.430696][T10713] bridge_slave_0: entered allmulticast mode
[  826.437347][T10713] bridge_slave_0: entered promiscuous mode
[  826.437996][T10757] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  826.444737][T10713] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.455717][T10757] vhci_hcd: invalid port number 23
[  826.458408][T10713] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.471030][T10713] bridge_slave_1: entered allmulticast mode
[  826.477944][T10713] bridge_slave_1: entered promiscuous mode
[  826.499467][T10713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  826.548217][T10713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  826.578330][T10713] team0: Port device team_slave_0 added
[  826.590665][T10713] team0: Port device team_slave_1 added
[  826.593574][T10766] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  826.614134][T10766] vhci_hcd: invalid port number 23
[  826.627763][T10713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.634910][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  826.661013][T10713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.675111][T10713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.675128][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  826.675162][T10713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.700947][T10775] 9pnet: Could not find request transport: rd
[  826.706679][T10776] __nla_validate_parse: 11 callbacks suppressed
[  826.706698][T10776] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  826.710626][T10778] x_tables: duplicate underflow at hook 2
[  826.715959][T10776] IPVS: Error joining to the multicast group
[  826.769731][T10713] hsr_slave_0: entered promiscuous mode
[  826.770681][T10713] hsr_slave_1: entered promiscuous mode
[  826.771332][T10713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  826.771351][T10713] Cannot create hsr debugfs directory
[  826.801298][T10782] loop5: detected capacity change from 0 to 128
[  826.833787][T10789] 9pnet_virtio: no channels available for device 127.0.0.1
[  826.908413][T10793] 9pnet: Could not find request transport: rdm
[  826.930564][T10798] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  826.938465][T10798] vhci_hcd: invalid port number 23
[  826.973897][T10713] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 46115 - 0
[  826.984203][T10713] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  826.994701][T10808] FAULT_INJECTION: forcing a failure.
[  826.994701][T10808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  827.007932][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.5.14340 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  827.018962][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  827.029045][T10808] Call Trace:
[  827.032339][T10808]  <TASK>
[  827.035308][T10808]  dump_stack_lvl+0xf2/0x150
[  827.039970][T10808]  dump_stack+0x15/0x1a
[  827.044298][T10808]  should_fail_ex+0x223/0x230
[  827.048992][T10808]  should_fail+0xb/0x10
[  827.053165][T10808]  should_fail_usercopy+0x1a/0x20
[  827.058443][T10808]  _copy_from_user+0x1e/0xb0
[  827.063069][T10808]  copy_msghdr_from_user+0x54/0x2a0
[  827.068371][T10808]  ? __fget_files+0x17c/0x1c0
[  827.073133][T10808]  __sys_sendmsg+0x13e/0x230
[  827.077760][T10808]  __x64_sys_sendmsg+0x46/0x50
[  827.082625][T10808]  x64_sys_call+0x2734/0x2dc0
[  827.087337][T10808]  do_syscall_64+0xc9/0x1c0
[  827.091848][T10808]  ? clear_bhb_loop+0x55/0xb0
[  827.096533][T10808]  ? clear_bhb_loop+0x55/0xb0
[  827.101230][T10808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.107225][T10808] RIP: 0033:0x7efdf66d5d29
[  827.111651][T10808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  827.131371][T10808] RSP: 002b:00007efdf4d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  827.139878][T10808] RAX: ffffffffffffffda RBX: 00007efdf68c5fa0 RCX: 00007efdf66d5d29
[  827.147883][T10808] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005
[  827.155939][T10808] RBP: 00007efdf4d47090 R08: 0000000000000000 R09: 0000000000000000
[  827.163931][T10808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  827.171957][T10808] R13: 0000000000000000 R14: 00007efdf68c5fa0 R15: 00007ffe66ff7228
[  827.179959][T10808]  </TASK>
[  827.219827][T10713] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 46115 - 0
[  827.229936][T10713] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  827.234067][T10814] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  827.254176][T10814] IPVS: Error joining to the multicast group
[  827.262667][T10808] lo speed is unknown, defaulting to 1000
[  827.318556][T10713] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 46115 - 0
[  827.328565][T10713] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  827.392016][T10821] netlink: 'syz.3.14344': attribute type 21 has an invalid length.
[  827.400139][T10821] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14344'.
[  827.431545][T10821] netlink: 'syz.3.14344': attribute type 4 has an invalid length.
[  827.439547][T10821] netlink: 'syz.3.14344': attribute type 5 has an invalid length.
[  827.447486][T10821] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14344'.
[  827.459730][T10713] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 46115 - 0
[  827.469686][T10713] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  827.484210][T10825] 9pnet_virtio: no channels available for device 127.0.0.1
[  827.498384][T10821] loop3: detected capacity change from 0 to 128
[  827.515585][T10808] loop5: detected capacity change from 0 to 512
[  827.549744][T10713] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  827.575717][T10808] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  827.591285][T10713] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  827.605141][T10840] sd 0:0:1:0: device reset
[  827.616462][T10713] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  827.625855][T10713] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  827.874593][T10846] lo speed is unknown, defaulting to 1000
[  828.044941][T10851] tmpfs: Unknown parameter 'fsmagic'
[  828.056849][T10713] 8021q: adding VLAN 0 to HW filter on device bond0
[  828.083438][T10713] 8021q: adding VLAN 0 to HW filter on device team0
[  828.097763][T26787] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.104933][T26787] bridge0: port 1(bridge_slave_0) entered forwarding state
[  828.119725][T26787] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.119849][T10853] loop5: detected capacity change from 0 to 512
[  828.126844][T26787] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.145092][T10853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  828.162968][T10853] EXT4-fs (loop5): 1 truncate cleaned up
[  828.231462][T10713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.299621][T10871] netlink: 'syz.3.14359': attribute type 21 has an invalid length.
[  828.307592][T10871] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14359'.
[  828.316902][T10871] netlink: 'syz.3.14359': attribute type 4 has an invalid length.
[  828.324871][T10871] netlink: 'syz.3.14359': attribute type 5 has an invalid length.
[  828.332785][T10871] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14359'.
[  828.344910][T10871] loop3: detected capacity change from 0 to 128
[  828.358506][T10713] veth0_vlan: entered promiscuous mode
[  828.366215][T10713] veth1_vlan: entered promiscuous mode
[  828.400194][T10875] loop3: detected capacity change from 0 to 512
[  828.424595][T10713] veth0_macvtap: entered promiscuous mode
[  828.433685][T10875] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  828.437271][T10881] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  828.451902][T10881] vhci_hcd: invalid port number 23
[  828.471046][T10713] veth1_macvtap: entered promiscuous mode
[  828.503042][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.513613][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.523488][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.533999][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.543935][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.554521][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.564451][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.574978][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.584865][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.595465][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.605357][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.610385][T10890] tmpfs: Unknown parameter 'fsmagic'
[  828.615794][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.615872][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.615939][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.615961][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.662094][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.672029][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.682537][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.693832][T10713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.702135][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.713130][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.723129][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.733617][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.743502][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.753965][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.763906][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.774393][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.784260][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.798459][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.809326][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.819807][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.829678][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.840269][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.850104][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.860643][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.870583][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.881036][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.891890][T10713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.909345][T10713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.918127][T10713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.926931][T10713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.935861][T10713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.970842][T10903] netlink: 'syz.5.14371': attribute type 21 has an invalid length.
[  828.978850][T10903] netlink: 128 bytes leftover after parsing attributes in process `syz.5.14371'.
[  828.989472][T10906] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  828.996907][T10906] vhci_hcd: invalid port number 23
[  829.000115][T10903] netlink: 3 bytes leftover after parsing attributes in process `syz.5.14371'.
[  829.032713][T10908] loop5: detected capacity change from 0 to 128
[  829.084536][T10915] ==================================================================
[  829.092667][T10915] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk
[  829.100228][T10915] 
[  829.102553][T10915] write to 0xffff888117084100 of 8 bytes by task 10914 on cpu 1:
[  829.110277][T10915]  mas_replace_node+0x1b8/0x430
[  829.115139][T10915]  mas_wr_store_entry+0x1fbf/0x2d10
[  829.120357][T10915]  mas_store_prealloc+0x6bf/0x960
[  829.125401][T10915]  vma_complete+0x3a7/0x760
[  829.129914][T10915]  __split_vma+0x620/0x6a0
[  829.134342][T10915]  vma_modify+0x17d/0x1e0
[  829.138773][T10915]  vma_modify_flags+0xf1/0x120
[  829.143549][T10915]  mprotect_fixup+0x31a/0x5e0
[  829.148243][T10915]  do_mprotect_pkey+0x653/0x960
[  829.153107][T10915]  __x64_sys_mprotect+0x48/0x60
[  829.157969][T10915]  x64_sys_call+0x2770/0x2dc0
[  829.162656][T10915]  do_syscall_64+0xc9/0x1c0
[  829.167167][T10915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.173086][T10915] 
[  829.175413][T10915] read to 0xffff888117084100 of 8 bytes by task 10915 on cpu 0:
[  829.183047][T10915]  mtree_range_walk+0x33d/0x460
[  829.187911][T10915]  mas_walk+0x16e/0x320
[  829.192086][T10915]  lock_vma_under_rcu+0x95/0x260
[  829.197035][T10915]  exc_page_fault+0x150/0x650
[  829.201737][T10915]  asm_exc_page_fault+0x26/0x30
[  829.206609][T10915] 
[  829.208933][T10915] value changed: 0xffff88811708470e -> 0xffff888117084100
[  829.216047][T10915] 
[  829.218399][T10915] Reported by Kernel Concurrency Sanitizer on:
[  829.224547][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.5.14377 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  829.235403][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  829.245462][T10915] ==================================================================
[  829.275833][T10916] loop5: detected capacity change from 0 to 512
[  829.289956][T10916] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  829.703935][T26787] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.751870][T26787] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.801102][T26787] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.841086][T26787] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.902335][T26787] bridge_slave_1: left allmulticast mode
[  829.908020][T26787] bridge_slave_1: left promiscuous mode
[  829.913756][T26787] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.921867][T26787] bridge_slave_0: left allmulticast mode
[  829.927585][T26787] bridge_slave_0: left promiscuous mode
[  829.933338][T26787] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.070753][T26787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.080484][T26787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.090224][T26787] bond0 (unregistering): Released all slaves
[  830.098745][T26787] bond1 (unregistering): Released all slaves
[  830.106910][T26787] bond2 (unregistering): Released all slaves
[  830.115051][T26787] bond3 (unregistering): Released all slaves
[  830.167106][T26787] hsr_slave_0: left promiscuous mode
[  830.172921][T26787] hsr_slave_1: left promiscuous mode
[  830.179099][T26787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  830.186706][T26787] batman_adv: batadv0: Removing interface: batadv_slave_0
[  830.194588][T26787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  830.202065][T26787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  830.211728][T26787] veth1_macvtap: left promiscuous mode
[  830.217231][T26787] veth0_macvtap: left promiscuous mode
[  830.533195][T26787] IPVS: stop unused estimator thread 0...