last executing test programs:

17m35.872036462s ago: executing program 32 (id=923):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x4, 0x100000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

15m20.849505558s ago: executing program 4 (id=1988):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
epoll_pwait(r1, 0x0, 0x0, 0x80000000, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20000010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 1)

15m20.705955732s ago: executing program 4 (id=1991):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) (fail_nth: 5)

15m20.171239504s ago: executing program 4 (id=1996):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a40), 0x109080, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010007010078340200000200000008", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10)
mprotect(&(0x7f0000ac5000/0x2000)=nil, 0x2000, 0x200000f)
syz_emit_ethernet(0x5f0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ba, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00')
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x2, 0xffff, 0x2, 0x8}, 0x4, 0x6, 0xd6})

15m19.720718788s ago: executing program 4 (id=2007):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc805, &(0x7f0000000740), 0x1, 0x59d, &(0x7f0000000bc0)="$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")
r2 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x8, 0x30, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
close(r2)

15m19.581413502s ago: executing program 4 (id=2011):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'bridge_slave_1\x00', {0x3}, 0x8})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', <r2=>0x0, 0x700, 0x8000, 0x8, 0x3ff, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0x39, [@local]}, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x64}, {@multicast2, 0x3}, {@remote, 0x80000001}]}, @rr={0x7, 0x17, 0x6, [@loopback, @remote, @loopback, @multicast1, @multicast2]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@delqdisc={0x34, 0x25, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0xfffe}, {0xf, 0x5}, {0x0, 0x7}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}]}, 0x34}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x4, 0x4, 0x1, 0x7, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x700, 0x9, 0x101}})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={r9, 0x5b}, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0))
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003be8c5ee17688a2003c000203000aff3f000098fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115dd3801000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000003c0)=<r11=>0x0)
bind$nfc_llcp(r10, &(0x7f0000000f00)={0x27, r11, 0x0, 0x2, 0x7, 0x60, "88340fc19bd0fa120f6a3ad0a2db7eaadeca7c7170bfd7ac468d2890edaf2543fe7abcd4944fc171ef003a5b5566802a35604bd44a60ae19b66c7831c7cf25", 0x29}, 0x60)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r13}, 0x10)
r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r14, 0x408c5333, &(0x7f0000000580)={0x0, 0xffffffff, 0x0, 'queue0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

15m18.922764346s ago: executing program 4 (id=2017):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
unshare(0x28000600)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

15m18.921981167s ago: executing program 33 (id=2017):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
unshare(0x28000600)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

13m3.671709515s ago: executing program 1 (id=4577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

13m3.606565062s ago: executing program 1 (id=4579):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

13m3.528902319s ago: executing program 1 (id=4582):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800})
socket$key(0xf, 0x3, 0x2)

13m3.451298886s ago: executing program 1 (id=4585):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="4f3a77b5", @ANYRES16=r4, @ANYBLOB="20002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060011000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
creat(0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x80}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="799721f9b00cd4e0464898af65d73b61000000006d7586b26081b244d5480000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
close_range(r1, 0xffffffffffffffff, 0x0)

13m3.408099861s ago: executing program 1 (id=4586):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000580)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r0], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0xc, 0x121, 0x0, 0x0, @u64=0x75}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9c"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x48, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80"], 0x24}], 0x1}, 0x2404c8c0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
ustat(0x7fffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x6}, 0x18)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r10 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r10)
r11 = io_uring_setup(0x52f7, &(0x7f0000000080)={0x0, 0x7b01, 0x800, 0x1, 0x2c6})
io_uring_enter(r11, 0x2a9e, 0x13ff, 0x0, &(0x7f0000000000)={[0x6]}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10)
close(r0)

13m3.307558311s ago: executing program 1 (id=4589):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r4, 0x0, 0x0)
connect$inet(r4, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x40000160, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0xffff, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1136}]}, 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000000101040000000000f53714461247714ee44ee600000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16=r8, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX, @ANYRES8=r6], 0x8)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

12m48.227835508s ago: executing program 34 (id=4589):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r4, 0x0, 0x0)
connect$inet(r4, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x40000160, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0xffff, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1136}]}, 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000000101040000000000f53714461247714ee44ee600000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16=r8, @ANYRES16, @ANYBLOB="42bd3370367907a13b01797db247622ceab5b3c3712c69d0e243d9097834b963fd94fddf2aadc52c33a0bdce3f22eb03c8a6fffeded8d9b921519392af041d47e1d2742f2d1ce3ff5b179549bc70451dfb298e9e1c390bf48c938970d0a928a1b71ea024c34130c497fe8f66b9816abf2b23c5ebbbe3efef03817563a11261a2dbc2e94820364ea832f0d7c2323142d512f9956c46adebb765162200970791", @ANYRESHEX, @ANYRES8=r6], 0x8)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

12m9.592712873s ago: executing program 5 (id=5675):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

12m9.21155426s ago: executing program 5 (id=5681):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x1, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x388d, 0x4c3, 0x43, 0x0, 0x0)

12m8.343682475s ago: executing program 5 (id=5685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x74}}, 0x0)

12m8.317458898s ago: executing program 5 (id=5686):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb)

12m8.115049927s ago: executing program 5 (id=5687):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

12m7.755336942s ago: executing program 5 (id=5694):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x99, 0x1, 0x1575, 0x0, 0x0, 0x9})

12m7.736649534s ago: executing program 35 (id=5694):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x99, 0x1, 0x1575, 0x0, 0x0, 0x9})

12m1.270129428s ago: executing program 6 (id=5777):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

12m0.93885654s ago: executing program 6 (id=5779):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
close(0xffffffffffffffff)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

12m0.9349602s ago: executing program 6 (id=5780):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x10}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}]}, 0x210)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000c00)={0x80})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r9=>0x0, &(0x7f0000000400)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x1, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r8, 0x388d, 0x4c3, 0x43, 0x0, 0x0)

12m0.916442792s ago: executing program 6 (id=5781):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb)

12m0.893083515s ago: executing program 6 (id=5782):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x200000000000000)

11m57.903926117s ago: executing program 6 (id=5809):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xa80024, &(0x7f0000000040), 0x1, 0x240, &(0x7f0000000300)="$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")

11m57.886422949s ago: executing program 36 (id=5809):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xa80024, &(0x7f0000000040), 0x1, 0x240, &(0x7f0000000300)="$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")

11m48.086745319s ago: executing program 0 (id=5924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xa5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)

11m48.064109281s ago: executing program 0 (id=5925):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x10}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}]}, 0x210)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000c00)={0x80})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r8=>0x0, &(0x7f0000000400)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r6, 0x1, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r7, 0x388d, 0x4c3, 0x43, 0x0, 0x0)

11m46.677013897s ago: executing program 0 (id=5934):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x97, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r0 = memfd_secret(0x0)
syz_emit_ethernet(0x82, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61bc4a06004c2f00ffffffff0000000000000000000000bbff0200000000000000000000000000010c26463a6edb3f7df2c3f22088be00060001bf3f030b7d277ef25f5b58ccf505010008000003000086dd080088be000000031c0885100100000000007b40080022eb0000000223022309020000000000000300eb"], 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x2e, 0x4608, @void}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r2)
sendmmsg$unix(r1, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e27, 0xa, @remote, 0xfffffffb}}, 0x100, 0x9458}, &(0x7f0000000180)=0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_buf(r0, 0x0, 0x11efa0027b1c60db, &(0x7f0000000380)=""/254, &(0x7f0000000200)=0xfe) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00')

11m46.480695867s ago: executing program 0 (id=5939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb)

11m46.479933477s ago: executing program 0 (id=5940):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xb, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

11m46.284697166s ago: executing program 0 (id=5942):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

11m46.268886857s ago: executing program 37 (id=5942):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

7.089964275s ago: executing program 8 (id=17015):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (fail_nth: 5)

6.781152445s ago: executing program 8 (id=17018):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x103001, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611871000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="ca", 0x1}], 0x1}}], 0x1, 0x4000000)
fdatasync(r2)
ftruncate(r2, 0x5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="dbdff2acb93200"/18, @ANYRES32=r8, @ANYBLOB="0500f60013000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r9)

5.299257591s ago: executing program 8 (id=17033):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x20000000)

2.982713197s ago: executing program 8 (id=17046):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ufshcd_auto_bkops_state\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgroups(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@jqfmt_vfsv1}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
syz_pidfd_open(0xffffffffffffffff, 0x0)

2.829820712s ago: executing program 8 (id=17049):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa2000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.365702608s ago: executing program 8 (id=17050):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffa7)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
syz_usbip_server_init(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
timer_create(0x2, 0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0xff28)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.179253387s ago: executing program 2 (id=17052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
io_setup(0xfffffffe, &(0x7f0000000140)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0)
splice(r4, 0x0, r3, 0x0, 0x7f, 0xe)
r6 = eventfd(0x69f)
io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1abaf85e6031e639, 0x9, r0, &(0x7f00000001c0)="2c674ec0cb1586fa20869dbd4afd0ef5112ac68f2bf58184436cd7798b6f522416fbbea1289035", 0x27, 0x200, 0x0, 0x3, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="c0ad860fa7273d49bc6c097d79ba82ffd31e9926ff9b1dd4151cd208f1530fecbb597c21242abdff9b10ea26550cdc98c803b6c22d4f301a9f3a9053a50858aedc70ed0c50556e35664761cc51759d815d4fb88b1e2f29b258536051255ec250b0b32f46cf92441c65814cf6874f2c4428ccec57cbe5e847db5183d6634f355dd62ed41a4d1a35bf5afcc9b448c409f3c9e2cfe08ebfa770444c05209b76a266e12ead6cfcb0f5a1ad6846bf37afccddbcb10c57dd8cf2023e", 0xb9, 0x4, 0x0, 0x0, r6}])
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6704973e3b4f9c65178c4ecad3340db65bb888619d6b558af5f8e6a37b33dd04e067ecabdc0f3741046e1b550d485bfb37030000000000", @ANYRES16=r5, @ANYBLOB=',\x00'])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000001200)=ANY=[@ANYBLOB="48010000", @ANYRES8=r5, @ANYBLOB="01002abd7000ffdbdf250b0000003c00018008000300030000001400020067656e6501653100000000000000000008000300000000001400020002007a6b616c6c6572310000000000003000018008000100", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRESHEX=r3, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES8=r7, @ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="2c0001801400020070696d367265670000000000000000001400020076657468315f746f5f7465616d00000038000180140002006261746164765f736c6176655f30000008000100", @ANYRES32, @ANYBLOB="080003000100000008040100", @ANYRES32, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="ca28cb68f5aa1da4f4f457ded1d81e8ff773ae239dfe9c7e0b5d3b017a679f2d0ef5c639ac7439eabc6a86e990d21c117b94d9636c92bc836c91f176c7cd4f1deea18231a5be3aebf8c19970a4cf845ae04f4328d319ee335c9d2168b8b76318822759c7"], 0x148}, 0x1, 0x0, 0x0, 0x40100c1}, 0xc0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', <r10=>0x0, 0x7, 0x8000, 0x1, 0x2008, {{0xc, 0x4, 0x0, 0x2c, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "155c4cb6"}]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x9, [0x1, 0x4, 0x8]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, <r11=>0x0}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r10, 0x25, 0x17, @val=@tracing={r11, 0x2}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018520000a93e420c3d7a597854db4734c08589b17fc1a6c4429ecc227fc4c15873f8ebfd4e59b4bec48b892504ab7aa121c92919f3b2046ede", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x4d, &(0x7f0000000740)=""/77, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x16, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r4, 0x1, &(0x7f00000007c0)=[r5, r5, r5, r0], &(0x7f0000000800)=[{0x0, 0x5, 0x3, 0xb}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

1.919520732s ago: executing program 7 (id=17056):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
read(r0, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_read_part_table(0x1054, &(0x7f0000002100)="$eJzsz7sNwkAQBNBd/NER0AMdUA394IBWCGiBhALohQ4wOvsCGkAI6b3Aox2NLF3wU7dt/XYRWbNEDHPcs179x2pXV9MyiU3r5uERUfr9pXT1fB3WOsc1n22WLaflf6d+PHfZyozj9esPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/8A4AAP//Lq4Knw==") (fail_nth: 8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0x2e)
quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r9, &(0x7f0000000200))

1.558861597s ago: executing program 7 (id=17058):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3dac09fff8f900", "acba84f0a6731f234db1cc7f3f382ad796f8ffffff2ea99509873931d2873103", "0f9dafb4", "ffffffffffffffff"}, 0x38)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
syz_emit_ethernet(0x31, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "c9eb94"}}}}}}, 0x0)
sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f00000006c0)=@phonet={0x23, 0x2, 0x4, 0x7}, 0x80, 0x0}}], 0x1, 0x40001)

1.496251233s ago: executing program 3 (id=17059):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1b09}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b8b0100000000005c0012800b00010062726964676500004c00028005002500010000000c001f00fcfffffbffffffff05001800010000000500260001000000050029000100000008001c000500000005001600010000000c002e"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0xffffffff, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000640))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gre0\x00', <r9=>0x0})
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011d2cbd7000000000000a1d1400fe04ff06"], 0x1c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bind$packet(r8, &(0x7f0000000300)={0x11, 0x1b, r9, 0x1, 0xfc, 0x6, @local}, 0x14)

1.463773177s ago: executing program 7 (id=17060):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pidfd_send_signal(r1, 0x1d, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4484}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xf4, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcc, 0x6, "a73ae9e2f608813238f059975c93feefb754f73edab99d09cc21f47b9704c15fe1d795d413f8c53e5691511bc2601564175347dd22352c83b4a5aeb13216af8f9031c5cd41714baffb714a5329d91ea5b4fb2b64abf87091845ce81c9c0e083549140339cfe00a280d3332e8b1fb9e8071c990758d44c95e2f7e868b2639f2e87d6b4ddbd30542c973277bb97a20c216ae62a77fe94bf053d0a673181b7379ec5f5ab0b7146271df18524abb61f5a3b153d8059c22e06a5104c6dba36fb1cbecffed636426bc8e9d"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44}, 0x41)
io_uring_setup(0x530e, &(0x7f00000002c0)={0x0, 0x1003, 0x200, 0x1, 0x1000})
r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x9, 0x0)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r6, r5, 0x0, 0xfffa83)

1.348489858s ago: executing program 3 (id=17063):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd07, 0x40}, 0xc887ca4744539764, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
fsync(r1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r2, 0x4bfa, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x0, 0x5, 0x3, 0x408, 0xffffffffffffffff, 0xfff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r7, r7, 0x0, r7}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x50}, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008108113c000000000000000000008a490a125ce62b9cf534e2e422e5be2c725fd87fa9c662fa8956301cf598413fef72d412d58abdac0f9d6033f3876fef1da9c6602f31bc2ae87e1dd707c13dc2a16332a1be8c669be427d6cf4806aaa032e20cab951a3738a2e6893b95eb6aa6b7998d9f9679e2fc1bf48afbd2e0f091606346df166769247a1ae3"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000034000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r9, &(0x7f0000000100)=0x1, 0x12)

1.32486089s ago: executing program 2 (id=17064):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0)

1.259086786s ago: executing program 2 (id=17067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="09024000000000000001010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)

1.232295689s ago: executing program 3 (id=17068):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB])
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.212368891s ago: executing program 2 (id=17069):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000640)="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", 0x296}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c553359a7dce5cad9e69bd2bd62e1a81d61f05700503d4aa5debf98ffa041d397d5dc8cbf9dc290e08158912b52a9101557ee5d819059fd760d75380c0d07990283b882e5e5d8ecfd2f4bf9f032c99e130e9948a857812243d3a7302", 0x92}, {&(0x7f0000000a40)="0be623851ed424a740141583d87c98f8988e5bb236a3c8638f646c9f896c1f179a922adb3649b1196e6bed31dbbe935ece5f91f2804171d2cfd5ead4bd8b4b72f198820f96e9f39153bfb4", 0x4b}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40408e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

754.809746ms ago: executing program 3 (id=17072):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)

662.777405ms ago: executing program 3 (id=17073):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1b09}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b8b0100000000005c0012800b00010062726964676500004c00028005002500010000000c001f00fcfffffbffffffff05001800010000000500260001000000050029000100000008001c000500000005001600010000000c002e"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0xffffffff, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000640))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gre0\x00', <r9=>0x0})
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011d2cbd7000000000000a1d1400fe04ff06"], 0x1c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bind$packet(r8, &(0x7f0000000300)={0x11, 0x1b, r9, 0x1, 0xfc, 0x6, @local}, 0x14)

506.7587ms ago: executing program 7 (id=17075):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
r1 = inotify_init1(0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000)
write$binfmt_elf32(r0, &(0x7f0000005640)=ANY=[@ANYRES16=r4], 0x69)
close(r0)
execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120)
write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4)
write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4)
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c0000040019840100000000140000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0)

474.050083ms ago: executing program 3 (id=17077):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c553359a7dce5cad9e69bd2bd62e1a81d61f05700503d4aa5debf9", 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d15187940450e3b35c63d66f24df397537c747612c3e38daf2f2336c6de65eb8048c4860fc269b96a50098a9485f692d75ecdfa39b03f216a5d5043db8b86a74ca734a3481", 0x73}, {&(0x7f0000000d00)="7e93ddb16d6dded2586d9a83d6d79a26d8e5f8c7fc7279fe5fe209663600f76ffd8db76b41b6d87176d3d81c389026c02d2d9636e7267b8a8c6174215780c2df56dad99f5b9154655f610732b786f822c05cb9c98a414f61dd3435793e43df0eea078cc2", 0x64}, {&(0x7f0000000b80)="de12a02b8d1f1f1dce2f9257c8ddf7bf4ccfaa79e06de7f1c316c60d11cb578a2f13dd726f37fd7cc1e7588c8f857a1eb868e237ff915cd16242a08227018fe4376e75dff7", 0x45}], 0x3}}], 0x2, 0x40408e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

358.516465ms ago: executing program 2 (id=17079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="09024000000000000001010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)

323.569378ms ago: executing program 7 (id=17080):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000})
r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/201, 0xc9}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1})
io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

304.83753ms ago: executing program 9 (id=17081):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000})
r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/201, 0xc9}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1})
io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

304.09883ms ago: executing program 2 (id=17082):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
io_setup(0xfffffffe, &(0x7f0000000140)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0)
splice(r4, 0x0, r3, 0x0, 0x7f, 0xe)
r6 = eventfd(0x69f)
io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1abaf85e6031e639, 0x9, r0, &(0x7f00000001c0)="2c674ec0cb1586fa20869dbd4afd0ef5112ac68f2bf58184436cd7798b6f522416fbbea1289035", 0x27, 0x200, 0x0, 0x3, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="c0ad860fa7273d49bc6c097d79ba82ffd31e9926ff9b1dd4151cd208f1530fecbb597c21242abdff9b10ea26550cdc98c803b6c22d4f301a9f3a9053a50858aedc70ed0c50556e35664761cc51759d815d4fb88b1e2f29b258536051255ec250b0b32f46cf92441c65814cf6874f2c4428ccec57cbe5e847db5183d6634f355dd62ed41a4d1a35bf5afcc9b448c409f3c9e2cfe08ebfa770444c05209b76a266e12ead6cfcb0f5a1ad6846bf37afccddbcb10c57dd8cf2023e", 0xb9, 0x4, 0x0, 0x0, r6}])
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6704973e3b4f9c65178c4ecad3340db65bb888619d6b558af5f8e6a37b33dd04e067ecabdc0f3741046e1b550d485bfb37030000000000", @ANYRES16=r5, @ANYBLOB=',\x00'])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000001200)=ANY=[@ANYBLOB="48010000", @ANYRES8=r5, @ANYBLOB="01002abd7000ffdbdf250b0000003c00018008000300030000001400020067656e6501653100000000000000000008000300000000001400020002007a6b616c6c6572310000000000003000018008000100", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRESHEX=r3, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES8=r7, @ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="2c0001801400020070696d367265670000000000000000001400020076657468315f746f5f7465616d00000038000180140002006261746164765f736c6176655f30000008000100", @ANYRES32, @ANYBLOB="080003000100000008040100", @ANYRES32, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="ca28cb68f5aa1da4f4f457ded1d81e8ff773ae239dfe9c7e0b5d3b017a679f2d0ef5c639ac7439eabc6a86e990d21c117b94d9636c92bc836c91f176c7cd4f1deea18231a5be3aebf8c19970a4cf845ae04f4328d319ee335c9d2168b8b76318822759c7"], 0x148}, 0x1, 0x0, 0x0, 0x40100c1}, 0xc0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', <r10=>0x0, 0x7, 0x8000, 0x1, 0x2008, {{0xc, 0x4, 0x0, 0x2c, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "155c4cb6"}]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x9, [0x1, 0x4, 0x8]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, <r11=>0x0}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r10, 0x25, 0x17, @val=@tracing={r11, 0x2}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018520000a93e420c3d7a597854db4734c08589b17fc1a6c4429ecc227fc4c15873f8ebfd4e59b4bec48b892504ab7aa121c92919f3b2046ede", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x4d, &(0x7f0000000740)=""/77, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x16, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r4, 0x1, &(0x7f00000007c0)=[r5, r5, r5, r0], &(0x7f0000000800)=[{0x0, 0x5, 0x3, 0xb}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendfile(r13, r12, 0x0, 0x7ffff000)

248.963055ms ago: executing program 7 (id=17083):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
io_setup(0xfffffffe, &(0x7f0000000140)=<r1=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0)
splice(r4, 0x0, r3, 0x0, 0x7f, 0xe)
r6 = eventfd(0x69f)
io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1abaf85e6031e639, 0x9, r0, &(0x7f00000001c0)="2c674ec0cb1586fa20869dbd4afd0ef5112ac68f2bf58184436cd7798b6f522416fbbea1289035", 0x27, 0x200, 0x0, 0x3, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="c0ad860fa7273d49bc6c097d79ba82ffd31e9926ff9b1dd4151cd208f1530fecbb597c21242abdff9b10ea26550cdc98c803b6c22d4f301a9f3a9053a50858aedc70ed0c50556e35664761cc51759d815d4fb88b1e2f29b258536051255ec250b0b32f46cf92441c65814cf6874f2c4428ccec57cbe5e847db5183d6634f355dd62ed41a4d1a35bf5afcc9b448c409f3c9e2cfe08ebfa770444c05209b76a266e12ead6cfcb0f5a1ad6846bf37afccddbcb10c57dd8cf2023e", 0xb9, 0x4, 0x0, 0x0, r6}])
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="6704973e3b4f9c65178c4ecad3340db65bb888619d6b558af5f8e6a37b33dd04e067ecabdc0f3741046e1b550d485bfb37030000000000", @ANYRES16=r5, @ANYBLOB=',\x00'])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000001200)=ANY=[@ANYBLOB="48010000", @ANYRES8=r5, @ANYBLOB="01002abd7000ffdbdf250b0000003c00018008000300030000001400020067656e6501653100000000000000000008000300000000001400020002007a6b616c6c6572310000000000003000018008000100", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRESHEX=r3, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES8=r7, @ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="2c0001801400020070696d367265670000000000000000001400020076657468315f746f5f7465616d00000038000180140002006261746164765f736c6176655f30000008000100", @ANYRES32, @ANYBLOB="080003000100000008040100", @ANYRES32, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="ca28cb68f5aa1da4f4f457ded1d81e8ff773ae239dfe9c7e0b5d3b017a679f2d0ef5c639ac7439eabc6a86e990d21c117b94d9636c92bc836c91f176c7cd4f1deea18231a5be3aebf8c19970a4cf845ae04f4328d319ee335c9d2168b8b76318822759c7"], 0x148}, 0x1, 0x0, 0x0, 0x40100c1}, 0xc0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', <r10=>0x0, 0x7, 0x8000, 0x1, 0x2008, {{0xc, 0x4, 0x0, 0x2c, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "155c4cb6"}]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x9, [0x1, 0x4, 0x8]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, <r11=>0x0}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r10, 0x25, 0x17, @val=@tracing={r11, 0x2}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018520000a93e420c3d7a597854db4734c08589b17fc1a6c4429ecc227fc4c15873f8ebfd4e59b4bec48b892504ab7aa121c92919f3b2046ede", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x4d, &(0x7f0000000740)=""/77, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x16, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r4, 0x1, &(0x7f00000007c0)=[r5, r5, r5, r0], &(0x7f0000000800)=[{0x0, 0x5, 0x3, 0xb}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendfile(r13, r12, 0x0, 0x7ffff000)

216.268458ms ago: executing program 9 (id=17084):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)

164.682944ms ago: executing program 9 (id=17085):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r1 = getpgid(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x13, 0x8, 0x5, 0xf9, 0x0, 0xfffffffffffffff9, 0x10005, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x4a09}, 0x1808, 0x7, 0x4, 0x6, 0x1ff, 0x7, 0xffff, 0x0, 0x9, 0x0, 0x10001}, r1, 0x9, r2, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1034}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

164.296094ms ago: executing program 9 (id=17086):
r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0)

145.212876ms ago: executing program 9 (id=17087):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
sendfile(r2, r1, &(0x7f0000000040)=0x5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x53, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
mmap$perf(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x80000e, 0x8010, r0, 0x7)
finit_module(r0, 0x0, 0x7)

0s ago: executing program 9 (id=17088):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e72cffffffffffff00000000000000"], 0x50)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
fcntl$notify(r1, 0x402, 0x1)
getdents64(r1, &(0x7f0000000040)=""/105, 0x69)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x4ddd, 0x0, 0x1, 'queue1\x00', 0x6})
write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0x5, 0x3, 0x2, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x89, 0xe40f, 0x4, 0xf, 0x9, 0x7, 0x9}}}, 0x1d)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)
dup3(r5, r3, 0x80000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2d, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r10}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000500000018670000090000000000000004000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000021320c001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000ff0500004094e0fff0ffffff181100000a4f03727dc3f6b5056c16770faf45a5521902680d91189648fa4be3d09c5198c1176ad43e69922faa04f4339c9d037580d2f4bfeb198de4e630d0e8c0732c521eff20012e61c8c45cfd707f1ec9224b2d95", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1854}, 0x94)
r12 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r12, 0x540a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r11}, 0x10)

kernel console output (not intermixed with test programs):

105.640605][T10430] R13: 0000000000000000 R14: ffffffff8196f0c2 R15: 0000000000000001
[ 1105.640622][T10430]  ? fdget+0x12/0x110
[ 1105.640655][T10430]  ? do_dup2+0x376/0x490
[ 1105.640738][T10430]  ? do_dup2+0x376/0x490
[ 1105.640772][T10430]  ? do_dup2+0x376/0x490
[ 1105.640864][T10430]  </TASK>
[ 1105.640870][T10430] memory: usage 307200kB, limit 307200kB, failcnt 174
[ 1105.888265][T10430] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0
[ 1105.896353][T10430] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1105.903702][T10430] Memory cgroup stats for /syz7:
[ 1105.904314][T10430] cache 0
[ 1105.912305][T10430] rss 4096
[ 1105.915405][T10430] shmem 0
[ 1105.918412][T10430] mapped_file 0
[ 1105.921876][T10430] dirty 0
[ 1105.924889][T10430] writeback 8192
[ 1105.928452][T10430] workingset_refault_anon 29281
[ 1105.933319][T10430] workingset_refault_file 0
[ 1105.937852][T10430] swap 217088
[ 1105.941135][T10430] swapcached 8192
[ 1105.944798][T10430] pgpgin 895109
[ 1105.948249][T10430] pgpgout 895107
[ 1105.951797][T10430] pgfault 1162945
[ 1105.955561][T10430] pgmajfault 3991
[ 1105.959227][T10430] inactive_anon 8192
[ 1105.963135][T10430] active_anon 0
[ 1105.966682][T10430] inactive_file 0
[ 1105.970319][T10430] active_file 0
[ 1105.973795][T10430] unevictable 0
[ 1105.977396][T10430] hierarchical_memory_limit 314572800
[ 1105.982871][T10430] hierarchical_memsw_limit 9223372036854771712
[ 1105.989094][T10430] total_cache 0
[ 1105.992583][T10430] total_rss 4096
[ 1105.996188][T10430] total_shmem 0
[ 1105.999661][T10430] total_mapped_file 0
[ 1106.003652][T10430] total_dirty 0
[ 1106.007209][T10430] total_writeback 8192
[ 1106.011299][T10430] total_workingset_refault_anon 29281
[ 1106.016742][T10430] total_workingset_refault_file 0
[ 1106.021941][T10430] total_swap 217088
[ 1106.025842][T10430] total_swapcached 8192
[ 1106.030151][T10430] total_pgpgin 895109
[ 1106.034248][T10430] total_pgpgout 895107
[ 1106.038528][T10430] total_pgfault 1162945
[ 1106.042746][T10430] total_pgmajfault 3991
[ 1106.046974][T10430] total_inactive_anon 8192
[ 1106.051413][T10430] total_active_anon 0
[ 1106.055474][T10430] total_inactive_file 0
[ 1106.056353][T10525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10525 comm=syz.3.16289
[ 1106.059661][T10430] total_active_file 0
[ 1106.076373][T10430] total_unevictable 0
[ 1106.080357][T10430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.16274,pid=10430,uid=0
[ 1106.095198][T10430] Memory cgroup out of memory: Killed process 10430 (syz.7.16274) total-vm:94088kB, anon-rss:1140kB, file-rss:22564kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1106.225131][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16292'.
[ 1106.421948][T10541] lo speed is unknown, defaulting to 1000
[ 1106.428425][T10541] lo speed is unknown, defaulting to 1000
[ 1106.733459][T10565] netlink: 268 bytes leftover after parsing attributes in process `syz.7.16294'.
[ 1106.851433][T10567] loop8: detected capacity change from 0 to 128
[ 1106.860658][T10567] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1106.881594][T10567] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1106.929842][ T4327] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1106.997565][T10586] x_tables: duplicate underflow at hook 3
[ 1107.041328][T10588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10588 comm=syz.3.16301
[ 1107.100179][T10597] netlink: 348 bytes leftover after parsing attributes in process `syz.8.16304'.
[ 1107.197662][T10604] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1107.199453][T10601] lo speed is unknown, defaulting to 1000
[ 1107.212144][T10601] lo speed is unknown, defaulting to 1000
[ 1107.314642][T10627] loop8: detected capacity change from 0 to 512
[ 1107.349133][T10627] EXT4-fs error (device loop8): ext4_quota_enable:7136: inode #3: comm syz.8.16308: unexpected EA_INODE flag
[ 1107.361887][T10627] EXT4-fs (loop8): Remounting filesystem read-only
[ 1107.368666][T10627] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[ 1107.383680][T10627] EXT4-fs (loop8): mount failed
[ 1107.484893][T10645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10645 comm=syz.8.16314
[ 1107.498410][T10388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set
[ 1107.631147][T10656] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1107.663938][   T29] kauditd_printk_skb: 617 callbacks suppressed
[ 1107.663956][   T29] audit: type=1326 audit(1107.840:59312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.693388][   T29] audit: type=1326 audit(1107.840:59313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.716623][   T29] audit: type=1326 audit(1107.840:59314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.739943][   T29] audit: type=1326 audit(1107.840:59315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.763115][   T29] audit: type=1326 audit(1107.840:59316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.786473][   T29] audit: type=1326 audit(1107.840:59317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.809628][   T29] audit: type=1326 audit(1107.840:59318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.832910][   T29] audit: type=1326 audit(1107.840:59319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.856155][   T29] audit: type=1326 audit(1107.840:59320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1107.879579][   T29] audit: type=1326 audit(1107.870:59321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.8.16316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1108.039419][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.059525][T10666] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1108.106489][T10678] loop3: detected capacity change from 0 to 1024
[ 1108.117704][T10678] EXT4-fs: Ignoring removed nobh option
[ 1108.123333][T10678] EXT4-fs: Ignoring removed bh option
[ 1108.133842][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16326'.
[ 1108.144641][T10678] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1108.165508][T10678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.347409][T10695] lo speed is unknown, defaulting to 1000
[ 1108.354002][T10695] lo speed is unknown, defaulting to 1000
[ 1108.918376][T10699] x_tables: duplicate underflow at hook 3
[ 1109.260220][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16332'.
[ 1109.271226][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1109.302255][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16333'.
[ 1109.411017][T10739] loop2: detected capacity change from 0 to 1024
[ 1109.419663][T10743] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1109.435475][T10739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1109.464035][T10746] loop3: detected capacity change from 0 to 1024
[ 1109.614803][T10751] lo speed is unknown, defaulting to 1000
[ 1109.621548][T10751] lo speed is unknown, defaulting to 1000
[ 1109.769235][T10746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1109.854864][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.083827][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.591586][T10798] loop3: detected capacity change from 0 to 128
[ 1110.598897][T10798] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1110.611008][T10798] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1110.636746][ T4309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1110.847856][T10811] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10811 comm=syz.7.16351
[ 1111.040241][T10819] loop8: detected capacity change from 0 to 1024
[ 1111.055082][T10819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1111.156494][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.263310][T10829] loop8: detected capacity change from 0 to 512
[ 1111.271194][T10829] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1111.284369][T10829] EXT4-fs (loop8): 1 truncate cleaned up
[ 1111.290452][T10829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.563478][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.855204][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16366'.
[ 1111.888268][T10861] x_tables: duplicate underflow at hook 3
[ 1111.938343][T10864] bridge1: entered promiscuous mode
[ 1111.943652][T10864] bridge1: entered allmulticast mode
[ 1112.154088][T10878] random: crng reseeded on system resumption
[ 1112.319031][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16377'.
[ 1112.396898][T10898] loop9: detected capacity change from 0 to 128
[ 1112.403680][T10898] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1112.415752][T10898] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1112.438244][ T4309] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1112.456973][T10903] loop9: detected capacity change from 0 to 512
[ 1112.473562][T10903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1112.505581][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.952850][T10926] loop8: detected capacity change from 0 to 1024
[ 1113.001134][T10926] EXT4-fs: Ignoring removed nobh option
[ 1113.006866][T10926] EXT4-fs: Ignoring removed bh option
[ 1113.102522][   T29] kauditd_printk_skb: 403 callbacks suppressed
[ 1113.102541][   T29] audit: type=1326 audit(1113.312:59725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.132870][   T29] audit: type=1326 audit(1113.312:59726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.156032][   T29] audit: type=1326 audit(1113.312:59727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.193192][T10934] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1113.226111][T10926] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1113.279840][T10933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10933 comm=syz.3.16386
[ 1113.341292][   T29] audit: type=1326 audit(1113.443:59728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.364544][T10926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1113.376929][   T29] audit: type=1326 audit(1113.443:59729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.400177][   T29] audit: type=1326 audit(1113.443:59730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.423771][   T29] audit: type=1326 audit(1113.453:59731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.447143][   T29] audit: type=1326 audit(1113.453:59732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.470424][   T29] audit: type=1326 audit(1113.453:59733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.493652][   T29] audit: type=1326 audit(1113.453:59734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.2.16387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1113.875498][T10960] x_tables: duplicate underflow at hook 3
[ 1113.930300][T10959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10959 comm=syz.3.16395
[ 1114.114327][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.193650][T10972] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10972 comm=syz.7.16400
[ 1114.392484][T11000] netlink: 348 bytes leftover after parsing attributes in process `syz.8.16408'.
[ 1114.436335][T11005] loop3: detected capacity change from 0 to 1024
[ 1114.444949][T11005] EXT4-fs: Ignoring removed nobh option
[ 1114.450882][T11005] EXT4-fs: Ignoring removed bh option
[ 1114.473970][T11005] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1114.496390][T11005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1114.619094][T11020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11020 comm=syz.8.16413
[ 1114.683065][T11030] netlink: 'syz.8.16416': attribute type 1 has an invalid length.
[ 1114.892962][T11042] loop8: detected capacity change from 0 to 512
[ 1114.927736][T11044] netlink: 'syz.9.16419': attribute type 10 has an invalid length.
[ 1114.976462][T11042] EXT4-fs (loop8): too many log groups per flexible block group
[ 1114.986986][T11037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11037 comm=syz.2.16418
[ 1115.014776][T11042] EXT4-fs (loop8): failed to initialize mballoc (-12)
[ 1115.118787][T11042] EXT4-fs (loop8): mount failed
[ 1115.221300][T11065] random: crng reseeded on system resumption
[ 1115.252303][T11068] loop8: detected capacity change from 0 to 512
[ 1115.345310][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.390947][T11068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1115.541083][T11087] x_tables: duplicate underflow at hook 3
[ 1115.615077][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.655356][T11098] loop8: detected capacity change from 0 to 512
[ 1115.655954][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16431'.
[ 1115.664745][T11098] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1115.716268][T11098] EXT4-fs (loop8): 1 truncate cleaned up
[ 1115.728593][T11098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1115.948607][T11110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11110 comm=syz.9.16432
[ 1116.111003][T11112] netlink: 348 bytes leftover after parsing attributes in process `syz.9.16433'.
[ 1116.178824][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.259750][T11121] random: crng reseeded on system resumption
[ 1116.310355][T11123] loop9: detected capacity change from 0 to 512
[ 1116.322393][T11123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1116.438232][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.521783][T11145] loop9: detected capacity change from 0 to 4096
[ 1116.530064][T11145] EXT4-fs (loop9): revision level too high, forcing read-only mode
[ 1116.538661][T11145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1116.551791][T11145] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.632805][T11154] bridge1: entered promiscuous mode
[ 1116.638052][T11154] bridge1: entered allmulticast mode
[ 1116.980695][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16450'.
[ 1117.185399][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16456'.
[ 1117.194563][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16456'.
[ 1117.383548][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16457'.
[ 1117.467647][T11183] bridge_slave_1: left allmulticast mode
[ 1117.473524][T11183] bridge_slave_1: left promiscuous mode
[ 1117.479229][T11183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.622521][T11183] bridge_slave_0: left allmulticast mode
[ 1117.628261][T11183] bridge_slave_0: left promiscuous mode
[ 1117.633989][T11183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.230679][T11216] lo speed is unknown, defaulting to 1000
[ 1118.237000][T11216] lo speed is unknown, defaulting to 1000
[ 1118.479599][T11219] loop3: detected capacity change from 0 to 128
[ 1118.504359][T11219] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1118.697789][T11219] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1118.732449][ T4290] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1118.841925][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16470'.
[ 1118.950988][T11258] netlink: 10 bytes leftover after parsing attributes in process `syz.7.16472'.
[ 1119.061633][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16477'.
[ 1119.071288][T11279] netlink: 268 bytes leftover after parsing attributes in process `syz.2.16481'.
[ 1119.080958][T11278] loop3: detected capacity change from 0 to 512
[ 1119.101221][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1119.128280][T11288] loop2: detected capacity change from 0 to 512
[ 1119.154161][T11288] EXT4-fs error (device loop2): ext4_quota_enable:7136: inode #3: comm syz.2.16483: unexpected EA_INODE flag
[ 1119.291948][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1119.300999][T11288] EXT4-fs (loop2): Remounting filesystem read-only
[ 1119.307600][T11288] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[ 1119.322973][T11288] EXT4-fs (loop2): mount failed
[ 1119.379056][T11299] bridge1: entered promiscuous mode
[ 1119.384516][T11299] bridge1: entered allmulticast mode
[ 1119.462776][T11302] lo speed is unknown, defaulting to 1000
[ 1119.469302][T11302] lo speed is unknown, defaulting to 1000
[ 1120.111475][T11334] lo speed is unknown, defaulting to 1000
[ 1120.118290][T11334] lo speed is unknown, defaulting to 1000
[ 1120.557805][T11360] random: crng reseeded on system resumption
[ 1120.718384][   T29] kauditd_printk_skb: 220 callbacks suppressed
[ 1120.718402][   T29] audit: type=1326 audit(1120.946:59955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.779199][   T29] audit: type=1326 audit(1120.976:59956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.802537][   T29] audit: type=1326 audit(1120.976:59957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.809961][T11378] loop8: detected capacity change from 0 to 512
[ 1120.825932][   T29] audit: type=1326 audit(1120.976:59958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.835977][T11380] loop2: detected capacity change from 0 to 128
[ 1120.855211][   T29] audit: type=1326 audit(1120.976:59959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.884722][   T29] audit: type=1326 audit(1120.976:59960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.907910][   T29] audit: type=1326 audit(1120.976:59961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.914675][T11380] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1120.931159][   T29] audit: type=1326 audit(1120.976:59962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.966120][   T29] audit: type=1326 audit(1120.976:59963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1120.978276][T11380] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1120.989533][   T29] audit: type=1326 audit(1120.976:59964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.16491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1121.024893][T11378] EXT4-fs error (device loop8): ext4_quota_enable:7136: inode #3: comm syz.8.16494: unexpected EA_INODE flag
[ 1121.041279][T11378] EXT4-fs (loop8): Remounting filesystem read-only
[ 1121.054726][T11378] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[ 1121.091007][ T4290] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1121.117929][T11378] EXT4-fs (loop8): mount failed
[ 1121.504750][T11407] bridge0: entered promiscuous mode
[ 1121.510136][T11407] bridge0: entered allmulticast mode
[ 1121.522224][T11408] loop9: detected capacity change from 0 to 764
[ 1121.565807][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16501'.
[ 1121.641102][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16501'.
[ 1121.742613][T11421] xt_hashlimit: max too large, truncated to 1048576
[ 1121.750059][T11421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1121.878938][T11433] loop3: detected capacity change from 0 to 128
[ 1121.886153][T11433] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1121.899869][T11433] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1121.950531][ T4309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1122.004805][T11447] loop3: detected capacity change from 0 to 1024
[ 1122.012009][T11447] EXT4-fs: Ignoring removed nobh option
[ 1122.017758][T11447] EXT4-fs: Ignoring removed bh option
[ 1122.041844][T11447] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1122.066759][T11455] __nla_validate_parse: 5 callbacks suppressed
[ 1122.066775][T11455] netlink: 348 bytes leftover after parsing attributes in process `syz.2.16513'.
[ 1122.110003][T11447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1123.114330][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1123.350174][T11486] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11486 comm=syz.9.16521
[ 1123.587637][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16522'.
[ 1123.664571][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16522'.
[ 1123.862077][T11500] loop8: detected capacity change from 0 to 1024
[ 1123.893215][T11500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1124.026115][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1124.131397][T11527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11527 comm=syz.2.16534
[ 1124.148883][T11531] netlink: 268 bytes leftover after parsing attributes in process `syz.8.16535'.
[ 1124.382286][T11543] lo speed is unknown, defaulting to 1000
[ 1124.388817][T11543] lo speed is unknown, defaulting to 1000
[ 1124.782822][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16541'.
[ 1124.833463][T11572] loop3: detected capacity change from 0 to 1024
[ 1124.851286][T11572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1124.865344][T11577] x_tables: duplicate underflow at hook 3
[ 1125.012931][T11581] lo speed is unknown, defaulting to 1000
[ 1125.019110][T11581] lo speed is unknown, defaulting to 1000
[ 1125.280698][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.394923][T11610] netlink: 268 bytes leftover after parsing attributes in process `syz.8.16548'.
[ 1125.454019][T11611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11611 comm=syz.2.16546
[ 1125.575711][T11626] macvtap1: entered promiscuous mode
[ 1125.581170][T11626] macvtap1: entered allmulticast mode
[ 1125.664271][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16557'.
[ 1125.837262][T11655] random: crng reseeded on system resumption
[ 1125.862970][T11657] loop2: detected capacity change from 0 to 164
[ 1125.869310][   T29] kauditd_printk_skb: 512 callbacks suppressed
[ 1125.869396][   T29] audit: type=1326 audit(1126.089:60477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1125.898963][   T29] audit: type=1326 audit(1126.089:60478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1125.922595][   T29] audit: type=1326 audit(1126.089:60479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43a1b0f003 code=0x7ffc0000
[ 1125.945609][   T29] audit: type=1326 audit(1126.089:60480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43a1b0da7f code=0x7ffc0000
[ 1125.968662][   T29] audit: type=1326 audit(1126.089:60481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f43a1b0f057 code=0x7ffc0000
[ 1125.991817][   T29] audit: type=1326 audit(1126.089:60482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43a1b0d810 code=0x7ffc0000
[ 1126.014985][   T29] audit: type=1326 audit(1126.089:60483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43a1b0ebcb code=0x7ffc0000
[ 1126.039392][   T29] audit: type=1326 audit(1126.109:60484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43a1b0dc2a code=0x7ffc0000
[ 1126.062462][   T29] audit: type=1326 audit(1126.109:60485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43a1b0dc2a code=0x7ffc0000
[ 1126.085702][   T29] audit: type=1326 audit(1126.109:60486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.2.16565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43a1b0d717 code=0x7ffc0000
[ 1126.125183][T11662] bridge2: entered promiscuous mode
[ 1126.130461][T11662] bridge2: entered allmulticast mode
[ 1126.157035][T11670] loop9: detected capacity change from 0 to 512
[ 1126.165746][T11670] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1126.178139][T11676] FAULT_INJECTION: forcing a failure.
[ 1126.178139][T11676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1126.187767][T11677] loop2: detected capacity change from 0 to 1024
[ 1126.191486][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.7.16572 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1126.191532][T11676] Tainted: [W]=WARN
[ 1126.191541][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1126.191559][T11676] Call Trace:
[ 1126.191587][T11676]  <TASK>
[ 1126.191597][T11676]  __dump_stack+0x1d/0x30
[ 1126.191628][T11676]  dump_stack_lvl+0xe8/0x140
[ 1126.191657][T11676]  dump_stack+0x15/0x1b
[ 1126.191682][T11676]  should_fail_ex+0x265/0x280
[ 1126.191738][T11676]  should_fail+0xb/0x20
[ 1126.191760][T11676]  should_fail_usercopy+0x1a/0x20
[ 1126.191789][T11676]  _copy_from_user+0x1c/0xb0
[ 1126.191822][T11676]  __copy_msghdr+0x244/0x300
[ 1126.192000][T11676]  ___sys_sendmsg+0x109/0x1d0
[ 1126.192060][T11676]  __sys_sendmmsg+0x178/0x300
[ 1126.192118][T11676]  __x64_sys_sendmmsg+0x57/0x70
[ 1126.192224][T11676]  x64_sys_call+0x1c4a/0x3000
[ 1126.192288][T11676]  do_syscall_64+0xd2/0x200
[ 1126.192370][T11676]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1126.192437][T11676]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1126.192481][T11676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.192515][T11676] RIP: 0033:0x7f196a84efc9
[ 1126.192535][T11676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1126.192561][T11676] RSP: 002b:00007f19692af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1126.192659][T11676] RAX: ffffffffffffffda RBX: 00007f196aaa5fa0 RCX: 00007f196a84efc9
[ 1126.192673][T11676] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003
[ 1126.192691][T11676] RBP: 00007f19692af090 R08: 0000000000000000 R09: 0000000000000000
[ 1126.192709][T11676] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001
[ 1126.192728][T11676] R13: 00007f196aaa6038 R14: 00007f196aaa5fa0 R15: 00007ffd7e2e8ea8
[ 1126.192754][T11676]  </TASK>
[ 1126.226262][T11670] EXT4-fs (loop9): 1 truncate cleaned up
[ 1126.236568][T11677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1126.239388][T11670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1126.395131][T11692] hub 1-0:1.0: USB hub found
[ 1126.420439][T11692] hub 1-0:1.0: 8 ports detected
[ 1126.506734][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1126.517704][T11708] random: crng reseeded on system resumption
[ 1126.517946][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1126.582256][T11724] netlink: 148 bytes leftover after parsing attributes in process `syz.8.16586'.
[ 1126.637411][T11728] loop2: detected capacity change from 0 to 512
[ 1126.645499][T11728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1126.657198][T11728] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[ 1126.726932][T11728] EXT4-fs (loop2): 1 truncate cleaned up
[ 1126.788209][T11728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1126.846767][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1127.184850][T11744] 9pnet_fd: Insufficient options for proto=fd
[ 1127.210804][T11746] loop2: detected capacity change from 0 to 1024
[ 1127.226613][T11746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1127.250456][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1127.479416][T11766] random: crng reseeded on system resumption
[ 1127.514371][T11768] netlink: 148 bytes leftover after parsing attributes in process `syz.8.16600'.
[ 1127.706040][T11783] lo speed is unknown, defaulting to 1000
[ 1127.725962][T11783] lo speed is unknown, defaulting to 1000
[ 1127.870538][T11824] loop3: detected capacity change from 0 to 128
[ 1127.880728][T11824] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1127.896546][T11824] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1127.931363][ T4309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1128.007093][T11838] random: crng reseeded on system resumption
[ 1128.182633][T11842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16616'.
[ 1128.247052][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16613'.
[ 1128.276449][T11835] loop9: detected capacity change from 0 to 32768
[ 1128.324236][T11835]  loop9: p1 p2 p3 < p5 p6 >
[ 1128.330131][T11835] loop9: p2 size 16775168 extends beyond EOD, truncated
[ 1128.340226][T11835] loop9: p5 start 4294970168 is beyond EOD, truncated
[ 1128.422457][T11773] syz.7.16603 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1128.433649][T11773] CPU: 0 UID: 0 PID: 11773 Comm: syz.7.16603 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1128.433749][T11773] Tainted: [W]=WARN
[ 1128.433758][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1128.433838][T11773] Call Trace:
[ 1128.433847][T11773]  <TASK>
[ 1128.433856][T11773]  __dump_stack+0x1d/0x30
[ 1128.433891][T11773]  dump_stack_lvl+0xe8/0x140
[ 1128.433914][T11773]  dump_stack+0x15/0x1b
[ 1128.433947][T11773]  dump_header+0x81/0x220
[ 1128.433969][T11773]  oom_kill_process+0x342/0x400
[ 1128.434005][T11773]  out_of_memory+0x979/0xb80
[ 1128.434133][T11773]  try_charge_memcg+0x610/0xa10
[ 1128.434171][T11773]  charge_memcg+0x51/0xc0
[ 1128.434259][T11773]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[ 1128.434289][T11773]  __read_swap_cache_async+0x17b/0x2d0
[ 1128.434316][T11773]  swap_cluster_readahead+0x262/0x3c0
[ 1128.434416][T11773]  swapin_readahead+0xde/0x6f0
[ 1128.434440][T11773]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[ 1128.434476][T11773]  ? __lruvec_stat_mod_folio+0xd6/0x120
[ 1128.434534][T11773]  ? __rcu_read_unlock+0x4f/0x70
[ 1128.434604][T11773]  ? swap_cache_get_folio+0x277/0x280
[ 1128.434628][T11773]  do_swap_page+0x2ae/0x2370
[ 1128.434658][T11773]  ? css_rstat_updated+0xb7/0x240
[ 1128.434682][T11773]  ? __pfx_default_wake_function+0x10/0x10
[ 1128.434729][T11773]  handle_mm_fault+0x9a5/0x2be0
[ 1128.434757][T11773]  ? vma_start_read+0x141/0x1f0
[ 1128.434864][T11773]  do_user_addr_fault+0x630/0x1080
[ 1128.434891][T11773]  ? fpregs_assert_state_consistent+0xb4/0xe0
[ 1128.435052][T11773]  exc_page_fault+0x62/0xa0
[ 1128.435104][T11773]  asm_exc_page_fault+0x26/0x30
[ 1128.435186][T11773] RIP: 0033:0x7f196a72592f
[ 1128.435203][T11773] Code: c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 24 38 00 85 c0 0f 8e a3 fd ff ff e8 8d 9b fe ff 49 39 c4 73 a0 48 8d 1d 71 06 38 00 <83> 3d 76 24 38 00 00 48 8d ab 00 1e 00 00 0f 8e 7e fd ff ff 0f 1f
[ 1128.435224][T11773] RSP: 002b:00007ffd7e2e9010 EFLAGS: 00010293
[ 1128.435242][T11773] RAX: 00000000001138b5 RBX: 00007f196aaa5fa0 RCX: 0000000000113640
[ 1128.435257][T11773] RDX: 0000000000000275 RSI: 00007ffd7e2e8ff0 RDI: 0000000000000001
[ 1128.435271][T11773] RBP: 00007f196aaa7da0 R08: 000000002584346d R09: 7fffffffffffffff
[ 1128.435283][T11773] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000001138b0
[ 1128.435361][T11773] R13: 00007f196aaa6180 R14: ffffffffffffffff R15: 00007ffd7e2e9120
[ 1128.435404][T11773]  </TASK>
[ 1128.435411][T11773] memory: usage 307200kB, limit 307200kB, failcnt 673
[ 1128.504811][T11860] loop8: detected capacity change from 0 to 2048
[ 1128.509802][T11773] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0
[ 1128.509822][T11773] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1128.604174][T11875] netlink: 268 bytes leftover after parsing attributes in process `syz.9.16621'.
[ 1128.617007][T11773] Memory cgroup stats for /syz7:
[ 1128.620745][T11773] cache 0
[ 1128.634510][T11878] loop2: detected capacity change from 0 to 512
[ 1128.639280][T11773] rss 0
[ 1128.655373][T11878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1128.663272][T11773] shmem 0
[ 1128.663284][T11773] mapped_file 0
[ 1128.663305][T11773] dirty 0
[ 1128.663342][T11773] writeback 4096
[ 1128.663350][T11773] workingset_refault_anon 29398
[ 1128.663361][T11773] workingset_refault_file 0
[ 1128.663370][T11773] swap 217088
[ 1128.663379][T11773] swapcached 8192
[ 1128.663404][T11773] pgpgin 907558
[ 1128.663413][T11773] pgpgout 907556
[ 1128.769900][T11773] pgfault 1181833
[ 1128.773574][T11773] pgmajfault 4036
[ 1128.777241][T11773] inactive_anon 8192
[ 1128.781132][T11773] active_anon 0
[ 1128.784625][T11773] inactive_file 0
[ 1128.788265][T11773] active_file 0
[ 1128.791734][T11773] unevictable 0
[ 1128.795226][T11773] hierarchical_memory_limit 314572800
[ 1128.795823][T11889] random: crng reseeded on system resumption
[ 1128.800674][T11773] hierarchical_memsw_limit 9223372036854771712
[ 1128.800690][T11773] total_cache 0
[ 1128.800699][T11773] total_rss 0
[ 1128.819686][T11773] total_shmem 0
[ 1128.819699][T11773] total_mapped_file 0
[ 1128.819715][T11773] total_dirty 0
[ 1128.819737][T11773] total_writeback 4096
[ 1128.819746][T11773] total_workingset_refault_anon 29398
[ 1128.819755][T11773] total_workingset_refault_file 0
[ 1128.819763][T11773] total_swap 217088
[ 1128.819770][T11773] total_swapcached 8192
[ 1128.819777][T11773] total_pgpgin 907558
[ 1128.819784][T11773] total_pgpgout 907556
[ 1128.819791][T11773] total_pgfault 1181833
[ 1128.819800][T11773] total_pgmajfault 4036
[ 1128.870102][T11773] total_inactive_anon 8192
[ 1128.874573][T11773] total_active_anon 0
[ 1128.874586][T11773] total_inactive_file 0
[ 1128.874596][T11773] total_active_file 0
[ 1128.874605][T11773] total_unevictable 0
[ 1128.874612][T11773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.16603,pid=11773,uid=0
[ 1128.905606][T11773] Memory cgroup out of memory: Killed process 11773 (syz.7.16603) total-vm:94092kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1128.930812][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1128.948550][T11888] Alternate GPT is invalid, using primary GPT.
[ 1128.954932][T11888]  loop8: p1 p2 p3
[ 1128.973363][T11860] Alternate GPT is invalid, using primary GPT.
[ 1128.979722][T11860]  loop8: p1 p2 p3
[ 1128.992254][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16627'.
[ 1129.102490][T11915] lo speed is unknown, defaulting to 1000
[ 1129.109145][T11915] lo speed is unknown, defaulting to 1000
[ 1129.519253][T11949] loop2: detected capacity change from 0 to 164
[ 1129.571452][T11951] loop8: detected capacity change from 0 to 128
[ 1129.594841][T11951] vfat: Unknown parameter '00000000000000000000'
[ 1129.607769][T11956] loop3: detected capacity change from 0 to 1024
[ 1129.666803][T11956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1129.707906][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1129.724290][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16639'.
[ 1129.777412][T11987] random: crng reseeded on system resumption
[ 1129.782241][T11988] bridge2: entered promiscuous mode
[ 1129.788866][T11988] bridge2: entered allmulticast mode
[ 1129.923174][T12000] FAULT_INJECTION: forcing a failure.
[ 1129.923174][T12000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1129.936351][T12000] CPU: 0 UID: 0 PID: 12000 Comm: syz.2.16649 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1129.936446][T12000] Tainted: [W]=WARN
[ 1129.936453][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1129.936509][T12000] Call Trace:
[ 1129.936517][T12000]  <TASK>
[ 1129.936526][T12000]  __dump_stack+0x1d/0x30
[ 1129.936554][T12000]  dump_stack_lvl+0xe8/0x140
[ 1129.936577][T12000]  dump_stack+0x15/0x1b
[ 1129.936596][T12000]  should_fail_ex+0x265/0x280
[ 1129.936660][T12000]  should_fail+0xb/0x20
[ 1129.936678][T12000]  should_fail_usercopy+0x1a/0x20
[ 1129.936700][T12000]  _copy_from_user+0x1c/0xb0
[ 1129.936805][T12000]  ____sys_sendmsg+0x1c5/0x4e0
[ 1129.936844][T12000]  ___sys_sendmsg+0x17b/0x1d0
[ 1129.936956][T12000]  __x64_sys_sendmsg+0xd4/0x160
[ 1129.937073][T12000]  x64_sys_call+0x191e/0x3000
[ 1129.937142][T12000]  do_syscall_64+0xd2/0x200
[ 1129.937160][T12000]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1129.937188][T12000]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1129.937221][T12000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.937287][T12000] RIP: 0033:0x7f43a1b0efc9
[ 1129.937305][T12000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1129.937324][T12000] RSP: 002b:00007f43a0577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1129.937344][T12000] RAX: ffffffffffffffda RBX: 00007f43a1d65fa0 RCX: 00007f43a1b0efc9
[ 1129.937357][T12000] RDX: 000000002800c051 RSI: 0000200000001640 RDI: 0000000000000003
[ 1129.937442][T12000] RBP: 00007f43a0577090 R08: 0000000000000000 R09: 0000000000000000
[ 1129.937454][T12000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1129.937466][T12000] R13: 00007f43a1d66038 R14: 00007f43a1d65fa0 R15: 00007ffc377c5918
[ 1129.937557][T12000]  </TASK>
[ 1130.187598][T12002] lo speed is unknown, defaulting to 1000
[ 1130.194317][T12002] lo speed is unknown, defaulting to 1000
[ 1130.689843][T12028] loop3: detected capacity change from 0 to 1024
[ 1130.763648][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16654'.
[ 1130.775090][T12028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1130.833714][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1130.843955][T12046] loop2: detected capacity change from 0 to 512
[ 1130.860598][T12048] loop8: detected capacity change from 0 to 128
[ 1130.872019][T12046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1130.885602][T12048] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1130.898950][T12048] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1130.912097][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1130.929925][ T4290] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1131.065385][T12074] lo speed is unknown, defaulting to 1000
[ 1131.072376][T12074] lo speed is unknown, defaulting to 1000
[ 1131.343677][T12057] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12057 comm=syz.7.16661
[ 1131.459579][T12102] loop8: detected capacity change from 0 to 1764
[ 1131.470182][   T29] kauditd_printk_skb: 590 callbacks suppressed
[ 1131.470198][   T29] audit: type=1400 audit(1131.702:61077): avc:  denied  { mount } for  pid=12101 comm="syz.8.16667" name="/" dev="loop8" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[ 1131.507086][T12104] 9pnet_fd: Insufficient options for proto=fd
[ 1131.535761][T12109] loop2: detected capacity change from 0 to 1024
[ 1131.554051][T12109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1131.690005][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1131.861262][T12158] x_tables: duplicate underflow at hook 3
[ 1131.861884][T12120] lo speed is unknown, defaulting to 1000
[ 1131.873335][T12120] lo speed is unknown, defaulting to 1000
[ 1131.881939][   T29] audit: type=1326 audit(1132.102:61078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1131.887956][T12156] loop3: detected capacity change from 0 to 512
[ 1131.905152][   T29] audit: type=1326 audit(1132.102:61079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1131.905194][   T29] audit: type=1326 audit(1132.102:61080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1131.905253][   T29] audit: type=1326 audit(1132.102:61081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1131.981116][   T29] audit: type=1326 audit(1132.102:61082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1131.991278][T12162] random: crng reseeded on system resumption
[ 1132.004320][   T29] audit: type=1326 audit(1132.102:61083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1132.033471][   T29] audit: type=1326 audit(1132.102:61084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1132.039205][T12156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1132.056782][   T29] audit: type=1326 audit(1132.102:61085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1132.056821][   T29] audit: type=1326 audit(1132.102:61086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.16673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1132.162316][ T4327] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.163310][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1132.185056][T12120] chnl_net:caif_netlink_parms(): no params data found
[ 1132.216701][T12286] 9pnet_fd: Insufficient options for proto=fd
[ 1132.237161][ T4327] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.272837][T12120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.279943][T12120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.287279][T12120] bridge_slave_0: entered allmulticast mode
[ 1132.294157][T12120] bridge_slave_0: entered promiscuous mode
[ 1132.294464][T12279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12279 comm=syz.9.16681
[ 1132.301431][T12120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.319937][T12120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.327612][T12120] bridge_slave_1: entered allmulticast mode
[ 1132.334947][T12120] bridge_slave_1: entered promiscuous mode
[ 1132.464016][ T4327] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.501784][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1132.545693][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1132.558957][ T4327] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.589421][T12366] loop9: detected capacity change from 0 to 1024
[ 1132.686115][T12120] team0: Port device team_slave_0 added
[ 1132.751212][T12120] team0: Port device team_slave_1 added
[ 1132.826699][T12366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1132.844929][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1132.852016][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.878210][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1132.900451][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1132.917261][T12440] loop2: detected capacity change from 0 to 164
[ 1132.935464][T12445] loop9: detected capacity change from 0 to 2048
[ 1132.985109][T12445] Alternate GPT is invalid, using primary GPT.
[ 1132.991653][T12445]  loop9: p1 p2 p3
[ 1133.018197][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16689'.
[ 1133.089295][ T4327] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.101927][ T4327] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.111507][T12465] random: crng reseeded on system resumption
[ 1133.124533][ T4327] .` (unregistering): Released all slaves
[ 1133.134077][ T4327] bond0 (unregistering): Released all slaves
[ 1133.143627][ T4327] bond1 (unregistering): Released all slaves
[ 1133.155611][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1133.162701][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1133.188650][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1133.272749][T12120] hsr_slave_0: entered promiscuous mode
[ 1133.279192][T12120] hsr_slave_1: entered promiscuous mode
[ 1133.300090][T12120] debugfs: 'hsr0' already exists in 'hsr'
[ 1133.305944][T12120] Cannot create hsr debugfs directory
[ 1133.319137][ T4327] hsr_slave_0: left promiscuous mode
[ 1133.325668][ T4327] hsr_slave_1: left promiscuous mode
[ 1133.331511][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1133.338895][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1133.348494][T12511] x_tables: duplicate underflow at hook 3
[ 1133.381569][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1133.389029][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1133.399893][ T4327] veth1_macvtap: left promiscuous mode
[ 1133.406504][ T4327] veth0_macvtap: left promiscuous mode
[ 1133.457291][T12515] 9pnet_fd: Insufficient options for proto=fd
[ 1133.474574][ T4327] pim6reg (unregistering): left allmulticast mode
[ 1133.516974][ T4327] team0 (unregistering): Port device team_slave_1 removed
[ 1133.974217][ T1299] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1133.985496][ T1299] CPU: 1 UID: 0 PID: 1299 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1133.985575][ T1299] Tainted: [W]=WARN
[ 1133.985663][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1133.985677][ T1299] Call Trace:
[ 1133.985684][ T1299]  <TASK>
[ 1133.985692][ T1299]  __dump_stack+0x1d/0x30
[ 1133.985715][ T1299]  dump_stack_lvl+0xe8/0x140
[ 1133.985735][ T1299]  dump_stack+0x15/0x1b
[ 1133.985805][ T1299]  dump_header+0x81/0x220
[ 1133.985823][ T1299]  oom_kill_process+0x342/0x400
[ 1133.985864][ T1299]  out_of_memory+0x979/0xb80
[ 1133.985982][ T1299]  try_charge_memcg+0x610/0xa10
[ 1133.986024][ T1299]  charge_memcg+0x51/0xc0
[ 1133.986048][ T1299]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[ 1133.986092][ T1299]  __read_swap_cache_async+0x17b/0x2d0
[ 1133.986116][ T1299]  swap_cluster_readahead+0x262/0x3c0
[ 1133.986177][ T1299]  swapin_readahead+0xde/0x6f0
[ 1133.986204][ T1299]  ? css_rstat_updated+0xb7/0x240
[ 1133.986236][ T1299]  ? __rcu_read_unlock+0x4f/0x70
[ 1133.986293][ T1299]  ? __rcu_read_unlock+0x4f/0x70
[ 1133.986325][ T1299]  ? swap_cache_get_folio+0x277/0x280
[ 1133.986402][ T1299]  do_swap_page+0x2ae/0x2370
[ 1133.986424][ T1299]  ? _raw_spin_unlock+0x26/0x50
[ 1133.986453][ T1299]  ? finish_task_switch+0xad/0x2b0
[ 1133.986544][ T1299]  ? __pfx_default_wake_function+0x10/0x10
[ 1133.986610][ T1299]  handle_mm_fault+0x9a5/0x2be0
[ 1133.986635][ T1299]  ? vma_start_read+0x141/0x1f0
[ 1133.986672][ T1299]  do_user_addr_fault+0x630/0x1080
[ 1133.986699][ T1299]  ? fpregs_restore_userregs+0xe2/0x1d0
[ 1133.986768][ T1299]  ? switch_fpu_return+0xe/0x20
[ 1133.986862][ T1299]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1133.986958][ T1299]  exc_page_fault+0x62/0xa0
[ 1133.986994][ T1299]  asm_exc_page_fault+0x26/0x30
[ 1133.987067][ T1299] RIP: 0033:0x7f43a1b41845
[ 1133.987085][ T1299] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[ 1133.987107][ T1299] RSP: 002b:00007ffc377c5c58 EFLAGS: 00010246
[ 1133.987209][ T1299] RAX: 0000000000000000 RBX: 00000000000003b0 RCX: 00007f43a1b41843
[ 1133.987223][ T1299] RDX: 00007ffc377c5c70 RSI: 0000000000000000 RDI: 0000000000000000
[ 1133.987238][ T1299] RBP: 00007ffc377c5cdc R08: 000000003b2f6778 R09: 0000000000000000
[ 1133.987254][ T1299] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[ 1133.987287][ T1299] R13: 00000000000927c0 R14: 0000000000114adc R15: 00007ffc377c5d30
[ 1133.987306][ T1299]  </TASK>
[ 1133.987312][ T1299] memory: usage 307200kB, limit 307200kB, failcnt 2994
[ 1134.238813][ T1299] memory+swap: usage 323784kB, limit 9007199254740988kB, failcnt 0
[ 1134.246725][ T1299] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[ 1134.254053][ T1299] Memory cgroup stats for /syz2:
[ 1134.258475][ T1299] cache 0
[ 1134.266595][ T1299] rss 0
[ 1134.269418][ T1299] shmem 0
[ 1134.272432][ T1299] mapped_file 0
[ 1134.275918][ T1299] dirty 0
[ 1134.278879][ T1299] writeback 0
[ 1134.282266][ T1299] workingset_refault_anon 33430
[ 1134.287134][ T1299] workingset_refault_file 0
[ 1134.291685][ T1299] swap 16982016
[ 1134.295194][ T1299] swapcached 0
[ 1134.298570][ T1299] pgpgin 952186
[ 1134.302076][ T1299] pgpgout 952181
[ 1134.305627][ T1299] pgfault 1184805
[ 1134.309280][ T1299] pgmajfault 4892
[ 1134.312982][ T1299] inactive_anon 0
[ 1134.316683][ T1299] active_anon 0
[ 1134.320245][ T1299] inactive_file 0
[ 1134.324055][ T1299] active_file 20480
[ 1134.327899][ T1299] unevictable 0
[ 1134.331458][ T1299] hierarchical_memory_limit 314572800
[ 1134.336824][ T1299] hierarchical_memsw_limit 9223372036854771712
[ 1134.342997][ T1299] total_cache 0
[ 1134.346452][ T1299] total_rss 0
[ 1134.349728][ T1299] total_shmem 0
[ 1134.353286][ T1299] total_mapped_file 0
[ 1134.357264][ T1299] total_dirty 0
[ 1134.360850][ T1299] total_writeback 0
[ 1134.364666][ T1299] total_workingset_refault_anon 33430
[ 1134.370030][ T1299] total_workingset_refault_file 0
[ 1134.375109][ T1299] total_swap 16982016
[ 1134.379093][ T1299] total_swapcached 0
[ 1134.383054][ T1299] total_pgpgin 952187
[ 1134.387144][ T1299] total_pgpgout 952182
[ 1134.391270][ T1299] total_pgfault 1184807
[ 1134.395426][ T1299] total_pgmajfault 4892
[ 1134.399662][ T1299] total_inactive_anon 0
[ 1134.403865][ T1299] total_active_anon 0
[ 1134.407852][ T1299] total_inactive_file 0
[ 1134.412347][ T1299] total_active_file 20480
[ 1134.416711][ T1299] total_unevictable 0
[ 1134.420735][ T1299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.16689,pid=12449,uid=0
[ 1134.435513][ T1299] Memory cgroup out of memory: Killed process 12449 (syz.2.16689) total-vm:93956kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1134.464947][T12594] lo speed is unknown, defaulting to 1000
[ 1134.471291][T12594] lo speed is unknown, defaulting to 1000
[ 1134.646719][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1134.648312][T12120] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1134.655681][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1134.754513][T12120] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1135.590653][T12120] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1135.602395][T12651] lo speed is unknown, defaulting to 1000
[ 1135.608614][T12651] lo speed is unknown, defaulting to 1000
[ 1135.609354][T12120] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1135.690856][T12682] 9pnet_fd: Insufficient options for proto=fd
[ 1135.721999][T12698] loop3: detected capacity change from 0 to 128
[ 1135.743331][T12120] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1135.752706][T12698] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1135.769592][T12703] loop2: detected capacity change from 0 to 2048
[ 1135.783347][T12120] 8021q: adding VLAN 0 to HW filter on device team0
[ 1135.793035][T12698] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1135.810912][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.818016][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1135.829202][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.836430][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1135.854429][T12120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1135.864843][T12120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1135.879089][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16711'.
[ 1135.900524][T12703] Alternate GPT is invalid, using primary GPT.
[ 1135.906893][T12703]  loop2: p1 p2 p3
[ 1135.922617][T12713] loop3: detected capacity change from 0 to 2048
[ 1135.983078][T12713] Alternate GPT is invalid, using primary GPT.
[ 1135.989364][T12713]  loop3: p1 p2 p3
[ 1135.997683][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.657750][T12784] FAULT_INJECTION: forcing a failure.
[ 1136.657750][T12784] name failslab, interval 1, probability 0, space 0, times 0
[ 1136.670592][T12784] CPU: 0 UID: 0 PID: 12784 Comm: syz.9.16724 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1136.670633][T12784] Tainted: [W]=WARN
[ 1136.670640][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1136.670653][T12784] Call Trace:
[ 1136.670659][T12784]  <TASK>
[ 1136.670740][T12784]  __dump_stack+0x1d/0x30
[ 1136.670769][T12784]  dump_stack_lvl+0xe8/0x140
[ 1136.670791][T12784]  dump_stack+0x15/0x1b
[ 1136.670846][T12784]  should_fail_ex+0x265/0x280
[ 1136.670886][T12784]  should_failslab+0x8c/0xb0
[ 1136.670921][T12784]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[ 1136.671013][T12784]  ? __alloc_skb+0x101/0x320
[ 1136.671115][T12784]  __alloc_skb+0x101/0x320
[ 1136.671146][T12784]  netlink_dump+0x10d/0x8a0
[ 1136.671175][T12784]  ? __kfree_skb+0x109/0x150
[ 1136.671268][T12784]  ? nlmon_xmit+0x4f/0x60
[ 1136.671294][T12784]  ? consume_skb+0x49/0x150
[ 1136.671332][T12784]  __netlink_dump_start+0x43e/0x520
[ 1136.671445][T12784]  ? __pfx_inet6_dump_ifaddr+0x10/0x10
[ 1136.671470][T12784]  rtnetlink_rcv_msg+0x552/0x6d0
[ 1136.671494][T12784]  ? __pfx_inet6_dump_ifaddr+0x10/0x10
[ 1136.671514][T12784]  ? __pfx_inet6_dump_ifaddr+0x10/0x10
[ 1136.671541][T12784]  netlink_rcv_skb+0x123/0x220
[ 1136.671581][T12784]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1136.671633][T12784]  rtnetlink_rcv+0x1c/0x30
[ 1136.671658][T12784]  netlink_unicast+0x5c0/0x690
[ 1136.671695][T12784]  netlink_sendmsg+0x58b/0x6b0
[ 1136.671777][T12784]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1136.671839][T12784]  __sock_sendmsg+0x145/0x180
[ 1136.671863][T12784]  ____sys_sendmsg+0x31e/0x4e0
[ 1136.671900][T12784]  ___sys_sendmsg+0x17b/0x1d0
[ 1136.671952][T12784]  __x64_sys_sendmsg+0xd4/0x160
[ 1136.672045][T12784]  x64_sys_call+0x191e/0x3000
[ 1136.672067][T12784]  do_syscall_64+0xd2/0x200
[ 1136.672084][T12784]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1136.672161][T12784]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1136.672193][T12784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1136.672217][T12784] RIP: 0033:0x7f6bf8eeefc9
[ 1136.672234][T12784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1136.672254][T12784] RSP: 002b:00007f6bf7957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1136.672325][T12784] RAX: ffffffffffffffda RBX: 00007f6bf9145fa0 RCX: 00007f6bf8eeefc9
[ 1136.672342][T12784] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1136.672357][T12784] RBP: 00007f6bf7957090 R08: 0000000000000000 R09: 0000000000000000
[ 1136.672372][T12784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1136.672462][T12784] R13: 00007f6bf9146038 R14: 00007f6bf9145fa0 R15: 00007fff1892ee88
[ 1136.672485][T12784]  </TASK>
[ 1136.976835][   T29] kauditd_printk_skb: 281 callbacks suppressed
[ 1136.976852][   T29] audit: type=1326 audit(1137.204:61368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.010693][   T29] audit: type=1326 audit(1137.244:61369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.034238][   T29] audit: type=1326 audit(1137.244:61370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.045546][T12787] 9pnet_fd: Insufficient options for proto=fd
[ 1137.057569][   T29] audit: type=1326 audit(1137.244:61371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.087160][   T29] audit: type=1326 audit(1137.244:61372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.110824][   T29] audit: type=1326 audit(1137.244:61373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.134017][   T29] audit: type=1326 audit(1137.244:61374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.141023][T12120] veth0_vlan: entered promiscuous mode
[ 1137.157575][   T29] audit: type=1326 audit(1137.244:61375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.9.16726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1137.230466][T12120] veth1_vlan: entered promiscuous mode
[ 1137.253564][T12120] veth0_macvtap: entered promiscuous mode
[ 1137.271253][T12120] veth1_macvtap: entered promiscuous mode
[ 1137.291658][T12804] random: crng reseeded on system resumption
[ 1137.312381][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1137.327280][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1137.330444][T12798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12798 comm=syz.3.16727
[ 1137.341347][ T4318] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.379923][T12806] bridge2: entered promiscuous mode
[ 1137.381670][T12810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16731'.
[ 1137.385237][T12806] bridge2: entered allmulticast mode
[ 1137.415611][   T29] audit: type=1326 audit(1137.645:61376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.8.16730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1137.442546][ T4318] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.454412][   T29] audit: type=1326 audit(1137.645:61377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.8.16730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1137.462303][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16732'.
[ 1137.490856][ T4290] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.509798][ T4290] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.593324][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16671'.
[ 1137.606734][T12836] FAULT_INJECTION: forcing a failure.
[ 1137.606734][T12836] name failslab, interval 1, probability 0, space 0, times 0
[ 1137.619644][T12836] CPU: 1 UID: 0 PID: 12836 Comm: syz.3.16739 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1137.619677][T12836] Tainted: [W]=WARN
[ 1137.619686][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1137.619702][T12836] Call Trace:
[ 1137.619710][T12836]  <TASK>
[ 1137.619720][T12836]  __dump_stack+0x1d/0x30
[ 1137.619749][T12836]  dump_stack_lvl+0xe8/0x140
[ 1137.619801][T12836]  dump_stack+0x15/0x1b
[ 1137.619822][T12836]  should_fail_ex+0x265/0x280
[ 1137.619919][T12836]  should_failslab+0x8c/0xb0
[ 1137.619955][T12836]  kmem_cache_alloc_noprof+0x50/0x480
[ 1137.620064][T12836]  ? getname_flags+0x80/0x3b0
[ 1137.620105][T12836]  getname_flags+0x80/0x3b0
[ 1137.620139][T12836]  __x64_sys_rmdir+0x21/0x40
[ 1137.620235][T12836]  x64_sys_call+0x2390/0x3000
[ 1137.620258][T12836]  do_syscall_64+0xd2/0x200
[ 1137.620342][T12836]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1137.620467][T12836]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1137.620502][T12836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1137.620601][T12836] RIP: 0033:0x7f2e6450efc9
[ 1137.620620][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1137.620643][T12836] RSP: 002b:00007f2e62f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 1137.620663][T12836] RAX: ffffffffffffffda RBX: 00007f2e64765fa0 RCX: 00007f2e6450efc9
[ 1137.620716][T12836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240
[ 1137.620732][T12836] RBP: 00007f2e62f77090 R08: 0000000000000000 R09: 0000000000000000
[ 1137.620748][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1137.620764][T12836] R13: 00007f2e64766038 R14: 00007f2e64765fa0 R15: 00007ffda3057778
[ 1137.620794][T12836]  </TASK>
[ 1138.107643][T12849] bridge3: entered promiscuous mode
[ 1138.113151][T12849] bridge3: entered allmulticast mode
[ 1138.156758][T12852] lo speed is unknown, defaulting to 1000
[ 1138.163057][T12852] lo speed is unknown, defaulting to 1000
[ 1138.197531][T12863] 9pnet_fd: Insufficient options for proto=fd
[ 1138.252827][T12886] FAULT_INJECTION: forcing a failure.
[ 1138.252827][T12886] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1138.266150][T12886] CPU: 0 UID: 0 PID: 12886 Comm: syz.7.16748 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1138.266191][T12886] Tainted: [W]=WARN
[ 1138.266200][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1138.266215][T12886] Call Trace:
[ 1138.266224][T12886]  <TASK>
[ 1138.266234][T12886]  __dump_stack+0x1d/0x30
[ 1138.266262][T12886]  dump_stack_lvl+0xe8/0x140
[ 1138.266302][T12886]  dump_stack+0x15/0x1b
[ 1138.266319][T12886]  should_fail_ex+0x265/0x280
[ 1138.266360][T12886]  should_fail+0xb/0x20
[ 1138.266379][T12886]  should_fail_usercopy+0x1a/0x20
[ 1138.266480][T12886]  _copy_from_user+0x1c/0xb0
[ 1138.266504][T12886]  do_ipv6_setsockopt+0x124/0x2160
[ 1138.266542][T12886]  ? kstrtoull+0x111/0x140
[ 1138.266598][T12886]  ? avc_has_perm_noaudit+0x1b1/0x200
[ 1138.266655][T12886]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[ 1138.266695][T12886]  ipv6_setsockopt+0x59/0x130
[ 1138.266731][T12886]  udpv6_setsockopt+0x99/0xb0
[ 1138.266803][T12886]  sock_common_setsockopt+0x69/0x80
[ 1138.266832][T12886]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1138.266863][T12886]  __sys_setsockopt+0x184/0x200
[ 1138.266915][T12886]  __x64_sys_setsockopt+0x64/0x80
[ 1138.266949][T12886]  x64_sys_call+0x20ec/0x3000
[ 1138.266978][T12886]  do_syscall_64+0xd2/0x200
[ 1138.267074][T12886]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1138.267103][T12886]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1138.267143][T12886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.267169][T12886] RIP: 0033:0x7f309eabefc9
[ 1138.267210][T12886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1138.267232][T12886] RSP: 002b:00007f309d51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1138.267252][T12886] RAX: ffffffffffffffda RBX: 00007f309ed15fa0 RCX: 00007f309eabefc9
[ 1138.267284][T12886] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006
[ 1138.267296][T12886] RBP: 00007f309d51f090 R08: 0000000000000018 R09: 0000000000000000
[ 1138.267307][T12886] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1138.267370][T12886] R13: 00007f309ed16038 R14: 00007f309ed15fa0 R15: 00007ffeca8dff98
[ 1138.267394][T12886]  </TASK>
[ 1138.790993][T12906] lo speed is unknown, defaulting to 1000
[ 1138.797768][T12906] lo speed is unknown, defaulting to 1000
[ 1139.183326][T12935] loop9: detected capacity change from 0 to 512
[ 1139.205995][T12935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1139.259629][T12935] EXT4-fs error (device loop9): __ext4_fill_super:5512: inode #2: comm syz.9.16756: inode has both inline data and extents flags
[ 1139.287484][T12935] EXT4-fs (loop9): get root inode failed
[ 1139.293307][T12935] EXT4-fs (loop9): mount failed
[ 1139.345494][T12946] loop2: detected capacity change from 0 to 512
[ 1139.353204][T12946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1139.365289][T12946] EXT4-fs (loop2): 1 truncate cleaned up
[ 1139.371445][T12946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1139.461904][T12955] bridge1: entered promiscuous mode
[ 1139.467191][T12955] bridge1: entered allmulticast mode
[ 1139.475320][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.492669][T12951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12951 comm=syz.3.16759
[ 1139.582335][T12975] loop3: detected capacity change from 0 to 512
[ 1139.589779][T12975] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1139.601815][T12975] EXT4-fs (loop3): 1 truncate cleaned up
[ 1139.620529][T12981] loop2: detected capacity change from 0 to 512
[ 1139.628857][T12981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1139.640479][T12975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1139.678086][T12983] lo speed is unknown, defaulting to 1000
[ 1139.684197][T12983] lo speed is unknown, defaulting to 1000
[ 1140.620158][T12981] EXT4-fs (loop2): 1 truncate cleaned up
[ 1140.665308][T12981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1140.701869][T13015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13015 comm=syz.7.16770
[ 1140.760867][T13022] 9pnet_fd: Insufficient options for proto=fd
[ 1140.801824][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1141.006922][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1141.071767][T13054] smc: net device bond0 applied user defined pnetid SYZ0
[ 1141.079511][T13054] smc: net device bond0 erased user defined pnetid SYZ0
[ 1141.097871][T13054] loop2: detected capacity change from 0 to 128
[ 1141.113904][T13054] bio_check_eod: 100 callbacks suppressed
[ 1141.113980][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.113980][T13054] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[ 1141.191615][T13063] random: crng reseeded on system resumption
[ 1141.228210][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.228210][T13054] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[ 1141.267148][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.267148][T13054] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128
[ 1141.340967][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.340967][T13054] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[ 1141.370133][T13065] lo speed is unknown, defaulting to 1000
[ 1141.376392][T13065] lo speed is unknown, defaulting to 1000
[ 1141.510921][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.510921][T13054] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[ 1141.621856][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.621856][T13054] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[ 1141.810448][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.810448][T13054] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[ 1141.865942][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.865942][T13054] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[ 1141.879641][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.879641][T13054] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128
[ 1141.916096][T13054] syz.2.16779: attempt to access beyond end of device
[ 1141.916096][T13054] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128
[ 1141.964900][T13105] loop9: detected capacity change from 0 to 512
[ 1141.975024][T13105] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.16788: iget: bad i_size value: 38620345925642
[ 1141.988357][T13105] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.16788: couldn't read orphan inode 15 (err -117)
[ 1142.002671][T13105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1142.024618][   T29] kauditd_printk_skb: 446 callbacks suppressed
[ 1142.024636][   T29] audit: type=1400 audit(1142.257:61824): avc:  denied  { ioctl } for  pid=13103 comm="syz.9.16788" path="/353/file1/memory.events.local" dev="loop9" ino=18 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1142.056749][   T29] audit: type=1400 audit(1142.267:61825): avc:  denied  { read } for  pid=13103 comm="syz.9.16788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1142.095228][T13118] loop8: detected capacity change from 0 to 2048
[ 1142.150072][T13118] Alternate GPT is invalid, using primary GPT.
[ 1142.156422][T13118]  loop8: p1 p2 p3
[ 1142.240566][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16794'.
[ 1142.360814][T13138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13138 comm=syz.8.16795
[ 1142.785724][T13142] random: crng reseeded on system resumption
[ 1142.785724][   T29] audit: type=1400 audit(1143.017:61826): avc:  denied  { write } for  pid=13141 comm="syz.7.16797" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1142.820101][T13142] Restarting kernel threads ...
[ 1142.825591][T13142] Done restarting kernel threads.
[ 1142.833447][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.946097][T13155] 9pnet: Could not find request transport: r
[ 1142.999078][T13161] loop9: detected capacity change from 0 to 512
[ 1143.013020][T13161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1143.028642][T13161] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1143.029159][T13166] bridge1: entered promiscuous mode
[ 1143.040319][T13166] bridge1: entered allmulticast mode
[ 1143.062379][T13161] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.16803: bg 0: block 248: padding at end of block bitmap is not set
[ 1143.077479][T13161] Quota error (device loop9): write_blk: dquota write failed
[ 1143.084893][T13161] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1143.094963][T13161] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.16803: Failed to acquire dquot type 1
[ 1143.107467][T13161] EXT4-fs (loop9): 1 truncate cleaned up
[ 1143.113860][T13161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1143.130153][T13171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13171 comm=syz.2.16806
[ 1143.142939][   T29] audit: type=1400 audit(1143.367:61827): avc:  denied  { write } for  pid=13160 comm="syz.9.16803" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1143.220637][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1143.268347][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16813'.
[ 1143.289037][T13190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13190 comm=syz.9.16812
[ 1143.327462][T13200] lo speed is unknown, defaulting to 1000
[ 1143.333625][T13200] lo speed is unknown, defaulting to 1000
[ 1143.442367][T13232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13232 comm=syz.9.16818
[ 1143.526562][T13243] ���������������: renamed from wg2 (while UP)
[ 1143.807261][T13259] random: crng reseeded on system resumption
[ 1143.930550][T13265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13265 comm=syz.7.16831
[ 1144.053377][   T29] audit: type=1326 audit(1144.288:61828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.2.16835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x0
[ 1144.198270][T13283] lo speed is unknown, defaulting to 1000
[ 1144.204914][T13283] lo speed is unknown, defaulting to 1000
[ 1144.390966][T13315] hsr0: entered promiscuous mode
[ 1144.405637][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16836'.
[ 1144.523043][T13315] loop2: detected capacity change from 0 to 512
[ 1144.595505][   T29] audit: type=1326 audit(1144.828:61829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.9.16838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1144.618898][   T29] audit: type=1326 audit(1144.828:61830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.9.16838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1144.643557][T13315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1144.831061][T13325] loop3: detected capacity change from 0 to 2048
[ 1144.895155][T13315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1144.911696][   T29] audit: type=1326 audit(1144.878:61831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.9.16838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1144.944466][T13315] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.16835: failed to insert inode 16: doubly allocated?
[ 1144.973009][T13336] random: crng reseeded on system resumption
[ 1144.987044][T13336] Restarting kernel threads ...
[ 1144.997605][T13336] Done restarting kernel threads.
[ 1145.003124][T13325] Alternate GPT is invalid, using primary GPT.
[ 1145.009647][T13325]  loop3: p1 p2 p3
[ 1145.016815][T13315] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[ 1145.056515][T13348] netlink: 348 bytes leftover after parsing attributes in process `syz.7.16844'.
[ 1145.106250][T13358] usb usb1: check_ctrlrecip: process 13358 (syz.8.16845) requesting ep 01 but needs 81
[ 1145.116217][T13358] usb usb1: usbfs: process 13358 (syz.8.16845) did not claim interface 0 before use
[ 1145.126875][T13358] vhci_hcd: default hub control req: a20a v0000 i0001 l0
[ 1145.145328][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1145.247068][T13370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13370 comm=syz.2.16848
[ 1145.346043][T13390] bridge2: entered promiscuous mode
[ 1145.351326][T13390] bridge2: entered allmulticast mode
[ 1145.360716][T13394] loop9: detected capacity change from 0 to 256
[ 1145.419318][T13406] netlink: 348 bytes leftover after parsing attributes in process `syz.7.16857'.
[ 1146.061401][T13431] bridge2: entered promiscuous mode
[ 1146.066721][T13431] bridge2: entered allmulticast mode
[ 1146.118157][T13435] loop8: detected capacity change from 0 to 2048
[ 1146.177082][T13435] Alternate GPT is invalid, using primary GPT.
[ 1146.183673][T13435]  loop8: p2 p3 p7
[ 1146.206957][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16868'.
[ 1146.319852][T13467] bond4: entered promiscuous mode
[ 1146.325006][T13467] bond4: entered allmulticast mode
[ 1146.325100][T13464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13464 comm=syz.2.16876
[ 1146.330360][T13467] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1146.373162][T13467] bond4 (unregistering): Released all slaves
[ 1146.387429][T13505] netlink: 348 bytes leftover after parsing attributes in process `syz.7.16879'.
[ 1146.464803][T13544] bridge4: entered promiscuous mode
[ 1146.470258][T13544] bridge4: entered allmulticast mode
[ 1146.525184][T13552] loop2: detected capacity change from 0 to 512
[ 1146.537574][T13552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1146.555912][T13554] netlink: 140 bytes leftover after parsing attributes in process `syz.7.16886'.
[ 1146.626608][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1146.702251][T13572] FAULT_INJECTION: forcing a failure.
[ 1146.702251][T13572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1146.715559][T13572] CPU: 1 UID: 0 PID: 13572 Comm: syz.8.16890 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1146.715593][T13572] Tainted: [W]=WARN
[ 1146.715600][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1146.715613][T13572] Call Trace:
[ 1146.715622][T13572]  <TASK>
[ 1146.715650][T13572]  __dump_stack+0x1d/0x30
[ 1146.715679][T13572]  dump_stack_lvl+0xe8/0x140
[ 1146.715706][T13572]  dump_stack+0x15/0x1b
[ 1146.715729][T13572]  should_fail_ex+0x265/0x280
[ 1146.715818][T13572]  should_fail+0xb/0x20
[ 1146.715839][T13572]  should_fail_usercopy+0x1a/0x20
[ 1146.715866][T13572]  _copy_from_user+0x1c/0xb0
[ 1146.715897][T13572]  __sys_bpf+0x183/0x7c0
[ 1146.715932][T13572]  __x64_sys_bpf+0x41/0x50
[ 1146.716080][T13572]  x64_sys_call+0x2aee/0x3000
[ 1146.716105][T13572]  do_syscall_64+0xd2/0x200
[ 1146.716128][T13572]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1146.716232][T13572]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1146.716266][T13572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.716294][T13572] RIP: 0033:0x7f9133beefc9
[ 1146.716314][T13572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1146.716377][T13572] RSP: 002b:00007f913264f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1146.716396][T13572] RAX: ffffffffffffffda RBX: 00007f9133e45fa0 RCX: 00007f9133beefc9
[ 1146.716408][T13572] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[ 1146.716421][T13572] RBP: 00007f913264f090 R08: 0000000000000000 R09: 0000000000000000
[ 1146.716458][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1146.716474][T13572] R13: 00007f9133e46038 R14: 00007f9133e45fa0 R15: 00007ffce516c898
[ 1146.716499][T13572]  </TASK>
[ 1146.991383][T13578] netlink: 348 bytes leftover after parsing attributes in process `syz.7.16892'.
[ 1147.029889][   T29] kauditd_printk_skb: 444 callbacks suppressed
[ 1147.029915][   T29] audit: type=1326 audit(1147.269:62276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43a1b05e67 code=0x7ffc0000
[ 1147.075085][   T29] audit: type=1326 audit(1147.269:62277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43a1aab099 code=0x7ffc0000
[ 1147.098282][   T29] audit: type=1326 audit(1147.269:62278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1147.121573][   T29] audit: type=1326 audit(1147.279:62279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43a1b05e67 code=0x7ffc0000
[ 1147.144830][   T29] audit: type=1326 audit(1147.279:62280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43a1aab099 code=0x7ffc0000
[ 1147.168073][   T29] audit: type=1326 audit(1147.279:62281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1147.191294][   T29] audit: type=1326 audit(1147.279:62282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43a1b05e67 code=0x7ffc0000
[ 1147.214538][   T29] audit: type=1326 audit(1147.279:62283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43a1aab099 code=0x7ffc0000
[ 1147.237690][   T29] audit: type=1326 audit(1147.279:62284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a1b0efc9 code=0x7ffc0000
[ 1147.261000][   T29] audit: type=1326 audit(1147.299:62285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.2.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43a1b05e67 code=0x7ffc0000
[ 1147.382450][T13602] bridge1: entered promiscuous mode
[ 1147.387878][T13602] bridge1: entered allmulticast mode
[ 1147.393764][T13607] random: crng reseeded on system resumption
[ 1147.440904][T13613] netlink: 348 bytes leftover after parsing attributes in process `syz.3.16904'.
[ 1147.524270][T13620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16907'.
[ 1147.686955][T13624] lo speed is unknown, defaulting to 1000
[ 1147.693289][T13624] lo speed is unknown, defaulting to 1000
[ 1147.949090][T13623] bridge3: entered promiscuous mode
[ 1147.954592][T13623] bridge3: entered allmulticast mode
[ 1148.129635][T13657] loop2: detected capacity change from 0 to 512
[ 1148.162838][T13657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1148.188681][T13657] EXT4-fs (loop2): 1 truncate cleaned up
[ 1148.189092][T13657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1148.292161][T13671] netlink: 304 bytes leftover after parsing attributes in process `syz.3.16916'.
[ 1148.302060][T13672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13672 comm=syz.7.16915
[ 1148.439003][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1148.465553][T13682] bridge3: entered promiscuous mode
[ 1148.470876][T13682] bridge3: entered allmulticast mode
[ 1148.536386][T13694] loop9: detected capacity change from 0 to 2048
[ 1148.595216][T13694] Alternate GPT is invalid, using primary GPT.
[ 1148.600134][T13703] netlink: 'syz.2.16928': attribute type 10 has an invalid length.
[ 1148.601591][T13694]  loop9: p1 p2 p3
[ 1148.610316][T13703] batman_adv: batadv0: Interface deactivated: dummy0
[ 1148.621300][T13703] batman_adv: batadv0: Removing interface: dummy0
[ 1148.632760][T13703] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1148.635626][T13705] netlink: 304 bytes leftover after parsing attributes in process `syz.7.16929'.
[ 1148.731893][T13729] bridge4: entered promiscuous mode
[ 1148.737436][T13729] bridge4: entered allmulticast mode
[ 1148.752096][T13734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13734 comm=syz.2.16936
[ 1148.810358][T13739] netlink: 'syz.2.16938': attribute type 13 has an invalid length.
[ 1148.860789][T13739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.868048][T13739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.920456][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1148.931955][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1148.946807][T13739] hsr0: left promiscuous mode
[ 1149.008098][ T4309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.023757][T13743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13743 comm=syz.9.16940
[ 1149.036436][ T4309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.045442][ T4309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.059521][ T4309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.093698][T13745] loop2: detected capacity change from 0 to 2048
[ 1149.105941][T13754] loop9: detected capacity change from 0 to 512
[ 1149.111194][T13753] netlink: 304 bytes leftover after parsing attributes in process `syz.7.16944'.
[ 1149.113689][T13754] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1149.139951][T13754] EXT4-fs (loop9): 1 truncate cleaned up
[ 1149.143806][T13745] Alternate GPT is invalid, using primary GPT.
[ 1149.147328][T13754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1149.152006][T13745]  loop2: p1 p2 p3
[ 1149.237871][T13772] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13772 comm=syz.7.16947
[ 1149.262968][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1149.277640][T13776] bridge3: entered promiscuous mode
[ 1149.282898][T13776] bridge3: entered allmulticast mode
[ 1149.334433][T13788] random: crng reseeded on system resumption
[ 1149.347622][T13788] Restarting kernel threads ...
[ 1149.354130][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16950'.
[ 1149.363281][T13788] Done restarting kernel threads.
[ 1149.562296][T13797] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13797 comm=syz.3.16954
[ 1149.619302][T13800] netlink: 304 bytes leftover after parsing attributes in process `syz.7.16955'.
[ 1149.659962][T13802] loop3: detected capacity change from 0 to 2048
[ 1149.723614][T13802] Alternate GPT is invalid, using primary GPT.
[ 1149.730037][T13802]  loop3: p1 p2 p3
[ 1149.951994][T13786] syz.9.16950 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1149.966264][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.9.16950 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1149.966354][T13786] Tainted: [W]=WARN
[ 1149.966360][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1149.966372][T13786] Call Trace:
[ 1149.966389][T13786]  <TASK>
[ 1149.966397][T13786]  __dump_stack+0x1d/0x30
[ 1149.966417][T13786]  dump_stack_lvl+0xe8/0x140
[ 1149.966443][T13786]  dump_stack+0x15/0x1b
[ 1149.966513][T13786]  dump_header+0x81/0x220
[ 1149.966529][T13786]  oom_kill_process+0x342/0x400
[ 1149.966628][T13786]  out_of_memory+0x979/0xb80
[ 1149.966709][T13786]  try_charge_memcg+0x610/0xa10
[ 1149.966738][T13786]  obj_cgroup_charge_pages+0xa6/0x150
[ 1149.966826][T13786]  __memcg_kmem_charge_page+0x9f/0x170
[ 1149.966846][T13786]  __alloc_frozen_pages_noprof+0x188/0x360
[ 1149.966882][T13786]  alloc_pages_mpol+0xb3/0x260
[ 1149.966964][T13786]  ? alloc_pages_noprof+0xf4/0x130
[ 1149.966990][T13786]  alloc_pages_noprof+0x90/0x130
[ 1149.967083][T13786]  __vmalloc_node_range_noprof+0x7a5/0xed0
[ 1149.967129][T13786]  __kvmalloc_node_noprof+0x483/0x670
[ 1149.967166][T13786]  ? ip_set_alloc+0x24/0x30
[ 1149.967221][T13786]  ? ip_set_alloc+0x24/0x30
[ 1149.967248][T13786]  ? __kmalloc_cache_noprof+0x249/0x4a0
[ 1149.967278][T13786]  ip_set_alloc+0x24/0x30
[ 1149.967305][T13786]  hash_netiface_create+0x282/0x740
[ 1149.967343][T13786]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1149.967445][T13786]  ip_set_create+0x3cc/0x970
[ 1149.967470][T13786]  ? __nla_parse+0x40/0x60
[ 1149.967491][T13786]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1149.967533][T13786]  netlink_rcv_skb+0x123/0x220
[ 1149.967675][T13786]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1149.967706][T13786]  nfnetlink_rcv+0x167/0x16c0
[ 1149.967729][T13786]  ? kmem_cache_free+0xe4/0x3d0
[ 1149.967833][T13786]  ? __kfree_skb+0x109/0x150
[ 1149.967908][T13786]  ? nlmon_xmit+0x4f/0x60
[ 1149.967929][T13786]  ? consume_skb+0x49/0x150
[ 1149.967956][T13786]  ? nlmon_xmit+0x4f/0x60
[ 1149.967979][T13786]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1149.968074][T13786]  ? __dev_queue_xmit+0x1200/0x2000
[ 1149.968117][T13786]  ? __dev_queue_xmit+0x182/0x2000
[ 1149.968247][T13786]  ? ref_tracker_free+0x37d/0x3e0
[ 1149.968284][T13786]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1149.968318][T13786]  netlink_unicast+0x5c0/0x690
[ 1149.968353][T13786]  netlink_sendmsg+0x58b/0x6b0
[ 1149.968458][T13786]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1149.968490][T13786]  __sock_sendmsg+0x145/0x180
[ 1149.968574][T13786]  ____sys_sendmsg+0x31e/0x4e0
[ 1149.968609][T13786]  ___sys_sendmsg+0x17b/0x1d0
[ 1149.968718][T13786]  __x64_sys_sendmsg+0xd4/0x160
[ 1149.968752][T13786]  x64_sys_call+0x191e/0x3000
[ 1149.968799][T13786]  do_syscall_64+0xd2/0x200
[ 1149.968815][T13786]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1149.968840][T13786]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1149.968867][T13786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1149.968934][T13786] RIP: 0033:0x7f6bf8eeefc9
[ 1149.968968][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1149.968984][T13786] RSP: 002b:00007f6bf7957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1149.969001][T13786] RAX: ffffffffffffffda RBX: 00007f6bf9145fa0 RCX: 00007f6bf8eeefc9
[ 1149.969039][T13786] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 1149.969049][T13786] RBP: 00007f6bf8f71f91 R08: 0000000000000000 R09: 0000000000000000
[ 1149.969062][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1149.969079][T13786] R13: 00007f6bf9146038 R14: 00007f6bf9145fa0 R15: 00007fff1892ee88
[ 1149.969103][T13786]  </TASK>
[ 1149.969113][T13786] memory: usage 307200kB, limit 307200kB, failcnt 409
[ 1150.131289][T13824] loop8: detected capacity change from 0 to 512
[ 1150.134304][T13786] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0
[ 1150.134360][T13786] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1150.134371][T13786] Memory cgroup stats for /syz9:
[ 1150.134557][T13786] cache 0
[ 1150.170399][T13826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13826 comm=syz.2.16962
[ 1150.172869][T13786] rss 4096
[ 1150.172881][T13786] shmem 0
[ 1150.172889][T13786] mapped_file 0
[ 1150.172898][T13786] dirty 0
[ 1150.172906][T13786] writeback 0
[ 1150.172914][T13786] workingset_refault_anon 29032
[ 1150.203936][T13824] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1150.207805][T13786] workingset_refault_file 0
[ 1150.207818][T13786] swap 319488
[ 1150.207827][T13786] swapcached 8192
[ 1150.216843][T13828] bridge5: entered promiscuous mode
[ 1150.217402][T13786] pgpgin 766621
[ 1150.217414][T13786] pgpgout 766619
[ 1150.222119][T13828] bridge5: entered allmulticast mode
[ 1150.226636][T13786] pgfault 1051346
[ 1150.226648][T13786] pgmajfault 4584
[ 1150.226657][T13786] inactive_anon 0
[ 1150.226666][T13786] active_anon 8192
[ 1150.226673][T13786] inactive_file 0
[ 1150.226680][T13786] active_file 0
[ 1150.226706][T13786] unevictable 0
[ 1150.226713][T13786] hierarchical_memory_limit 314572800
[ 1150.236681][T13824] EXT4-fs (loop8): 1 truncate cleaned up
[ 1150.238530][T13786] hierarchical_memsw_limit 9223372036854771712
[ 1150.245769][T13824] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1150.248882][T13786] total_cache 0
[ 1150.248894][T13786] total_rss 4096
[ 1150.492344][T13786] total_shmem 0
[ 1150.495874][T13786] total_mapped_file 0
[ 1150.499878][T13786] total_dirty 0
[ 1150.503369][T13786] total_writeback 0
[ 1150.507203][T13786] total_workingset_refault_anon 29032
[ 1150.512603][T13786] total_workingset_refault_file 0
[ 1150.517636][T13786] total_swap 319488
[ 1150.521550][T13786] total_swapcached 8192
[ 1150.525721][T13786] total_pgpgin 766621
[ 1150.529713][T13786] total_pgpgout 766619
[ 1150.533889][T13786] total_pgfault 1051346
[ 1150.538135][T13786] total_pgmajfault 4584
[ 1150.542418][T13786] total_inactive_anon 0
[ 1150.546620][T13786] total_active_anon 8192
[ 1150.550868][T13786] total_inactive_file 0
[ 1150.555068][T13786] total_active_file 0
[ 1150.559089][T13786] total_unevictable 0
[ 1150.563102][T13786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.16950,pid=13785,uid=0
[ 1150.577957][T13786] Memory cgroup out of memory: Killed process 13785 (syz.9.16950) total-vm:93956kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1150.598879][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16964'.
[ 1150.625205][ T2213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1150.660649][T13842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1150.815921][T13853] tmpfs: Unknown parameter 'g�>;O�e�N��4�[��a�kU����{3��g��7AnUH[�7'
[ 1150.833132][T13853] loop3: detected capacity change from 0 to 1024
[ 1150.840075][T13853] EXT4-fs: Ignoring removed orlov option
[ 1150.858223][T13853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1150.899377][T13863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13863 comm=syz.7.16973
[ 1150.936852][T13866] netlink: 'syz.3.16968': attribute type 3 has an invalid length.
[ 1151.076083][T13872] loop9: detected capacity change from 0 to 512
[ 1151.085625][T13872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1151.114838][T13872] EXT4-fs error (device loop9): __ext4_fill_super:5512: inode #2: comm syz.9.16977: inode has both inline data and extents flags
[ 1151.147832][T13872] EXT4-fs (loop9): get root inode failed
[ 1151.153554][T13872] EXT4-fs (loop9): mount failed
[ 1151.204504][T13882] netlink: 4884 bytes leftover after parsing attributes in process `syz.9.16979'.
[ 1151.240319][T13884] syzkaller1: entered promiscuous mode
[ 1151.245954][T13884] syzkaller1: entered allmulticast mode
[ 1151.256975][T13884] loop9: detected capacity change from 0 to 512
[ 1151.293836][T13884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1151.375581][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1151.398636][T13895] FAULT_INJECTION: forcing a failure.
[ 1151.398636][T13895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1151.411848][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.9.16981 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1151.411934][T13895] Tainted: [W]=WARN
[ 1151.412001][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1151.412018][T13895] Call Trace:
[ 1151.412026][T13895]  <TASK>
[ 1151.412036][T13895]  __dump_stack+0x1d/0x30
[ 1151.412063][T13895]  dump_stack_lvl+0xe8/0x140
[ 1151.412141][T13895]  dump_stack+0x15/0x1b
[ 1151.412161][T13895]  should_fail_ex+0x265/0x280
[ 1151.412193][T13895]  should_fail+0xb/0x20
[ 1151.412231][T13895]  should_fail_usercopy+0x1a/0x20
[ 1151.412306][T13895]  copy_to_user_nofault+0x7f/0x120
[ 1151.412382][T13895]  bpf_probe_write_user+0x83/0xc0
[ 1151.412409][T13895]  bpf_prog_8f5dadf009f59a0a+0x44/0x4c
[ 1151.412426][T13895]  bpf_trace_run2+0x107/0x1c0
[ 1151.412464][T13895]  ? selinux_release_secctx+0x45/0x80
[ 1151.412571][T13895]  ? selinux_release_secctx+0x45/0x80
[ 1151.412593][T13895]  __traceiter_kfree+0x2e/0x50
[ 1151.412639][T13895]  ? selinux_release_secctx+0x45/0x80
[ 1151.412697][T13895]  kfree+0x351/0x400
[ 1151.412731][T13895]  selinux_release_secctx+0x45/0x80
[ 1151.412754][T13895]  security_release_secctx+0x42/0x60
[ 1151.412783][T13895]  audit_log_subj_ctx+0xe1/0x3e0
[ 1151.412811][T13895]  ? skb_put+0xa9/0xf0
[ 1151.412906][T13895]  audit_log_task_context+0x48/0x70
[ 1151.412935][T13895]  audit_log_task+0xf4/0x250
[ 1151.412988][T13895]  ? kstrtouint+0x76/0xc0
[ 1151.413035][T13895]  audit_seccomp+0x61/0x100
[ 1151.413065][T13895]  ? __seccomp_filter+0x82d/0x1250
[ 1151.413187][T13895]  __seccomp_filter+0x83e/0x1250
[ 1151.413216][T13895]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1151.413246][T13895]  ? vfs_write+0x7e8/0x960
[ 1151.413284][T13895]  __secure_computing+0x82/0x150
[ 1151.413336][T13895]  syscall_trace_enter+0xcf/0x1e0
[ 1151.413367][T13895]  do_syscall_64+0xac/0x200
[ 1151.413400][T13895]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1151.413429][T13895]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1151.413467][T13895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.413551][T13895] RIP: 0033:0x7f6bf8eeefc9
[ 1151.413569][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1151.413592][T13895] RSP: 002b:00007f6bf7957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1151.413616][T13895] RAX: ffffffffffffffda RBX: 00007f6bf9145fa0 RCX: 00007f6bf8eeefc9
[ 1151.413628][T13895] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000006
[ 1151.413703][T13895] RBP: 00007f6bf7957090 R08: 0000000000000000 R09: 0000000000000000
[ 1151.413718][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1151.413733][T13895] R13: 00007f6bf9146038 R14: 00007f6bf9145fa0 R15: 00007fff1892ee88
[ 1151.413756][T13895]  </TASK>
[ 1151.712377][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1151.772212][T13900] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13900 comm=syz.2.16984
[ 1151.912260][T13918] random: crng reseeded on system resumption
[ 1152.030550][T13934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13934 comm=syz.9.16998
[ 1152.049029][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16996'.
[ 1152.206886][T13937] lo speed is unknown, defaulting to 1000
[ 1152.213506][T13937] lo speed is unknown, defaulting to 1000
[ 1152.686360][T13969] bridge4: entered promiscuous mode
[ 1152.691681][T13969] bridge4: entered allmulticast mode
[ 1152.787637][T13979] random: crng reseeded on system resumption
[ 1152.938397][T13988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13988 comm=syz.3.17009
[ 1152.951922][   T29] kauditd_printk_skb: 752 callbacks suppressed
[ 1152.951936][   T29] audit: type=1326 audit(1153.192:63038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.007365][T13992] random: crng reseeded on system resumption
[ 1153.019251][   T29] audit: type=1326 audit(1153.222:63039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.042514][   T29] audit: type=1326 audit(1153.222:63040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.065676][   T29] audit: type=1326 audit(1153.222:63041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.088895][   T29] audit: type=1326 audit(1153.222:63042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.112116][   T29] audit: type=1326 audit(1153.222:63043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.135346][   T29] audit: type=1326 audit(1153.222:63044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.135383][   T29] audit: type=1326 audit(1153.232:63045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.135411][   T29] audit: type=1326 audit(1153.232:63046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.17010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1153.236455][T14001] bridge5: entered promiscuous mode
[ 1153.241842][T14001] bridge5: entered allmulticast mode
[ 1153.260394][   T29] audit: type=1326 audit(1153.493:63047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14004 comm="syz.8.17015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9133beefc9 code=0x7ffc0000
[ 1153.270974][T14006] FAULT_INJECTION: forcing a failure.
[ 1153.270974][T14006] name failslab, interval 1, probability 0, space 0, times 0
[ 1153.296329][T14006] CPU: 1 UID: 0 PID: 14006 Comm: syz.8.17015 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1153.296367][T14006] Tainted: [W]=WARN
[ 1153.296446][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1153.296461][T14006] Call Trace:
[ 1153.296468][T14006]  <TASK>
[ 1153.296476][T14006]  __dump_stack+0x1d/0x30
[ 1153.296498][T14006]  dump_stack_lvl+0xe8/0x140
[ 1153.296517][T14006]  dump_stack+0x15/0x1b
[ 1153.296543][T14006]  should_fail_ex+0x265/0x280
[ 1153.296585][T14006]  ? audit_log_d_path+0x8d/0x150
[ 1153.296610][T14006]  should_failslab+0x8c/0xb0
[ 1153.296711][T14006]  __kmalloc_cache_noprof+0x4c/0x4a0
[ 1153.296810][T14006]  audit_log_d_path+0x8d/0x150
[ 1153.296834][T14006]  audit_log_d_path_exe+0x42/0x70
[ 1153.296867][T14006]  audit_log_task+0x1e9/0x250
[ 1153.296907][T14006]  ? kstrtouint+0x76/0xc0
[ 1153.296997][T14006]  audit_seccomp+0x61/0x100
[ 1153.297139][T14006]  ? __seccomp_filter+0x82d/0x1250
[ 1153.297171][T14006]  __seccomp_filter+0x83e/0x1250
[ 1153.297206][T14006]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1153.297300][T14006]  ? vfs_write+0x7e8/0x960
[ 1153.297373][T14006]  ? __rcu_read_unlock+0x4f/0x70
[ 1153.297399][T14006]  ? __fget_files+0x184/0x1c0
[ 1153.297428][T14006]  __secure_computing+0x82/0x150
[ 1153.297502][T14006]  syscall_trace_enter+0xcf/0x1e0
[ 1153.297529][T14006]  do_syscall_64+0xac/0x200
[ 1153.297564][T14006]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1153.297658][T14006]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1153.297693][T14006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1153.297718][T14006] RIP: 0033:0x7f9133beefc9
[ 1153.297734][T14006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1153.297754][T14006] RSP: 002b:00007f913264f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1153.297852][T14006] RAX: ffffffffffffffda RBX: 00007f9133e45fa0 RCX: 00007f9133beefc9
[ 1153.297869][T14006] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[ 1153.297885][T14006] RBP: 00007f913264f090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.297897][T14006] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001
[ 1153.297909][T14006] R13: 00007f9133e46038 R14: 00007f9133e45fa0 R15: 00007ffce516c898
[ 1153.297932][T14006]  </TASK>
[ 1153.563939][T14011] random: crng reseeded on system resumption
[ 1153.593123][T14011] Restarting kernel threads ...
[ 1153.595350][T14019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14019 comm=syz.3.17022
[ 1153.608874][T14011] Done restarting kernel threads.
[ 1153.618922][T14017] usb usb1: check_ctrlrecip: process 14017 (syz.9.17021) requesting ep 01 but needs 81
[ 1153.628674][T14017] usb usb1: usbfs: process 14017 (syz.9.17021) did not claim interface 0 before use
[ 1153.638533][T14017] vhci_hcd: default hub control req: a20a v0000 i0001 l0
[ 1153.670198][T14023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17024'.
[ 1153.852924][T14041] bridge6: entered promiscuous mode
[ 1153.858212][T14041] bridge6: entered allmulticast mode
[ 1155.024707][T14049] lo speed is unknown, defaulting to 1000
[ 1155.031037][T14049] lo speed is unknown, defaulting to 1000
[ 1155.503902][T14060] loop3: detected capacity change from 0 to 512
[ 1155.510784][T14060] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1155.517336][T14060] EXT4-fs: inline encryption not supported
[ 1155.523307][T14060] EXT4-fs: test_dummy_encryption option not supported
[ 1155.841193][T14058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14058 comm=syz.9.17034
[ 1156.094953][T14051] lo speed is unknown, defaulting to 1000
[ 1156.103133][T14051] lo speed is unknown, defaulting to 1000
[ 1156.862944][T14046] lo speed is unknown, defaulting to 1000
[ 1156.869350][T14046] lo speed is unknown, defaulting to 1000
[ 1156.883401][T14099] random: crng reseeded on system resumption
[ 1156.910783][T14099] Restarting kernel threads ...
[ 1156.931067][T14099] Done restarting kernel threads.
[ 1157.039892][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17037'.
[ 1157.305536][T14172] loop9: detected capacity change from 0 to 1024
[ 1157.319650][T14172] EXT4-fs: inline encryption not supported
[ 1157.343607][T14172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1157.370124][T14178] bridge4: entered promiscuous mode
[ 1157.375436][T14178] bridge4: entered allmulticast mode
[ 1157.383162][ T5933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.397079][T14181] loop8: detected capacity change from 0 to 512
[ 1157.410008][T14181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1157.424284][T14181] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.17046: inode has both inline data and extents flags
[ 1157.439954][T14181] EXT4-fs (loop8): get root inode failed
[ 1157.445696][T14181] EXT4-fs (loop8): mount failed
[ 1157.450111][T14188] bond3: option arp_all_targets: invalid value (262144)
[ 1157.471826][T14188] bond3 (unregistering): Released all slaves
[ 1157.502803][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17049'.
[ 1157.513606][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17049'.
[ 1157.683602][T14271] lo speed is unknown, defaulting to 1000
[ 1157.690178][T14271] lo speed is unknown, defaulting to 1000
[ 1158.069180][   T29] kauditd_printk_skb: 125 callbacks suppressed
[ 1158.069201][   T29] audit: type=1400 audit(1158.285:63173): avc:  denied  { relabelfrom } for  pid=14296 comm="syz.8.17050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1158.095010][   T29] audit: type=1400 audit(1158.285:63174): avc:  denied  { relabelto } for  pid=14296 comm="syz.8.17050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1158.159560][   T29] audit: type=1326 audit(1158.405:63175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.182924][   T29] audit: type=1326 audit(1158.405:63176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.206104][   T29] audit: type=1326 audit(1158.405:63177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.236430][T14313] random: crng reseeded on system resumption
[ 1158.252310][T14314] tmpfs: Unknown parameter 'g�>;O�e�N��4�[��a�kU����{3��g��7AnUH[�7'
[ 1158.263673][   T29] audit: type=1326 audit(1158.405:63178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.286968][   T29] audit: type=1326 audit(1158.405:63179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.310097][   T29] audit: type=1326 audit(1158.405:63180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.313318][T14314] loop2: detected capacity change from 0 to 1024
[ 1158.333279][   T29] audit: type=1326 audit(1158.405:63181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.333318][   T29] audit: type=1326 audit(1158.405:63182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.17053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf8eeefc9 code=0x7ffc0000
[ 1158.384209][T14314] EXT4-fs: Ignoring removed orlov option
[ 1158.424266][T14318] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[ 1158.430830][T14318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1158.438549][T14318] vhci_hcd vhci_hcd.0: Device attached
[ 1158.450839][T14325] FAULT_INJECTION: forcing a failure.
[ 1158.450839][T14325] name failslab, interval 1, probability 0, space 0, times 0
[ 1158.463587][T14325] CPU: 1 UID: 0 PID: 14325 Comm: syz.7.17056 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1158.463625][T14325] Tainted: [W]=WARN
[ 1158.463632][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1158.463646][T14325] Call Trace:
[ 1158.463654][T14325]  <TASK>
[ 1158.463663][T14325]  __dump_stack+0x1d/0x30
[ 1158.463729][T14325]  dump_stack_lvl+0xe8/0x140
[ 1158.463752][T14325]  dump_stack+0x15/0x1b
[ 1158.463772][T14325]  should_fail_ex+0x265/0x280
[ 1158.463828][T14325]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1158.463854][T14325]  should_failslab+0x8c/0xb0
[ 1158.463935][T14325]  kmem_cache_alloc_lru_noprof+0x55/0x490
[ 1158.463984][T14325]  ? shmem_alloc_inode+0x34/0x50
[ 1158.464009][T14325]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1158.464080][T14325]  shmem_alloc_inode+0x34/0x50
[ 1158.464104][T14325]  alloc_inode+0x40/0x170
[ 1158.464131][T14325]  new_inode+0x1d/0xe0
[ 1158.464204][T14325]  shmem_get_inode+0x244/0x750
[ 1158.464231][T14325]  __shmem_file_setup+0x113/0x210
[ 1158.464280][T14325]  shmem_file_setup+0x3b/0x50
[ 1158.464299][T14325]  __se_sys_memfd_create+0x2c3/0x590
[ 1158.464328][T14325]  __x64_sys_memfd_create+0x31/0x40
[ 1158.464354][T14325]  x64_sys_call+0x2ac2/0x3000
[ 1158.464453][T14325]  do_syscall_64+0xd2/0x200
[ 1158.464482][T14325]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1158.464513][T14325]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1158.464602][T14325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.464652][T14325] RIP: 0033:0x7f309eabefc9
[ 1158.464671][T14325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1158.464691][T14325] RSP: 002b:00007f309d51ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1158.464713][T14325] RAX: ffffffffffffffda RBX: 0000000000001054 RCX: 00007f309eabefc9
[ 1158.464727][T14325] RDX: 00007f309d51edec RSI: 0000000000000000 RDI: 00007f309eb42960
[ 1158.464742][T14325] RBP: 0000200000002100 R08: 00007f309d51eb07 R09: 0000000000000000
[ 1158.464807][T14325] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[ 1158.464869][T14325] R13: 00007f309d51edec R14: 00007f309d51edf0 R15: 00007ffeca8dff98
[ 1158.464890][T14325]  </TASK>
[ 1158.479831][T14314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1158.567664][T14331] loop3: detected capacity change from 0 to 1024
[ 1158.574355][T14312] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1158.609016][T14331] EXT4-fs: inline encryption not supported
[ 1158.739303][ T4327] syzkaller0: tun_net_xmit 76
[ 1158.744220][ T4327] syzkaller0: tun_net_xmit 48
[ 1158.768147][T14331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1158.780845][T19681] syzkaller0: tun_net_xmit 76
[ 1158.788980][ T5770] usb 17-1: new high-speed USB device number 2 using vhci_hcd
[ 1158.846569][ T3521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.911613][T14343] bridge5: entered promiscuous mode
[ 1158.916910][T14343] bridge5: entered allmulticast mode
[ 1158.928289][T23317] syzkaller0: tun_net_xmit 76
[ 1158.969174][T23317] syzkaller0: tun_net_xmit 76
[ 1158.999293][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1159.018781][T14319] vhci_hcd: connection reset by peer
[ 1159.035593][T14296] syzkaller0: delete flow: hash 1839812704 index 1
[ 1159.049431][ T4290] vhci_hcd: stop threads
[ 1159.053730][ T4290] vhci_hcd: release socket
[ 1159.058264][ T4290] vhci_hcd: disconnect device
[ 1159.117648][T14368] 9pnet_fd: Insufficient options for proto=fd
[ 1159.220675][T14368] lo speed is unknown, defaulting to 1000
[ 1159.236554][T14368] lo speed is unknown, defaulting to 1000
[ 1159.770636][T14406] bridge6: entered promiscuous mode
[ 1159.775928][T14406] bridge6: entered allmulticast mode
[ 1159.783957][T14405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14405 comm=syz.9.17074
[ 1159.873236][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x1
[ 1159.880859][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.888416][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.895828][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.903397][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.910876][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.918760][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.926171][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.933632][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x2
[ 1159.941069][ T5772] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0
[ 1159.951216][ T5772] hid-generic 0000:0000:0000.006A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1160.149450][T14443] tmpfs: Unknown parameter 'g�>;O�e�N��4�[��a�kU����{3��g��7AnUH[�7'
[ 1160.174919][T14443] loop2: detected capacity change from 0 to 1024
[ 1160.181724][T14443] EXT4-fs: Ignoring removed orlov option
[ 1160.183149][T14446] tmpfs: Unknown parameter 'g�>;O�e�N��4�[��a�kU����{3��g��7AnUH[�7'
[ 1160.199000][T14443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1160.298865][T14455] netlink: 'syz.2.17082': attribute type 3 has an invalid length.
[ 1160.308930][T14454] netlink: 'syz.7.17083': attribute type 3 has an invalid length.
[ 1160.430998][T14443] ==================================================================
[ 1160.439149][T14443] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode
[ 1160.447450][T14443] 
[ 1160.449797][T14443] write to 0xffff8881229c7a18 of 4 bytes by task 14455 on cpu 1:
[ 1160.457537][T14443]  writeback_single_inode+0x150/0x3f0
[ 1160.462952][T14443]  sync_inode_metadata+0x5b/0x90
[ 1160.467917][T14443]  generic_buffers_fsync_noflush+0xd9/0x120
[ 1160.473839][T14443]  ext4_sync_file+0x1ab/0x690
[ 1160.478531][T14443]  vfs_fsync_range+0x10d/0x130
[ 1160.483329][T14443]  ext4_buffered_write_iter+0x34f/0x3c0
[ 1160.488913][T14443]  ext4_file_write_iter+0x387/0xf60
[ 1160.494130][T14443]  iter_file_splice_write+0x666/0xa60
[ 1160.499523][T14443]  direct_splice_actor+0x156/0x2a0
[ 1160.504661][T14443]  splice_direct_to_actor+0x312/0x680
[ 1160.509253][T14459] random: crng reseeded on system resumption
[ 1160.510064][T14443]  do_splice_direct+0xda/0x150
[ 1160.510094][T14443]  do_sendfile+0x380/0x650
[ 1160.510124][T14443]  __x64_sys_sendfile64+0x105/0x150
[ 1160.510155][T14443]  x64_sys_call+0x2bb4/0x3000
[ 1160.535211][T14443]  do_syscall_64+0xd2/0x200
[ 1160.539741][T14443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.545663][T14443] 
[ 1160.547996][T14443] read to 0xffff8881229c7a18 of 4 bytes by task 14443 on cpu 0:
[ 1160.555663][T14443]  __mark_inode_dirty+0x191/0x750
[ 1160.560741][T14443]  ext4_write_inline_data_end+0x3e5/0x5f0
[ 1160.566517][T14443]  ext4_write_end+0x3d7/0x730
[ 1160.571238][T14443]  generic_perform_write+0x312/0x490
[ 1160.576553][T14443]  ext4_buffered_write_iter+0x1ee/0x3c0
[ 1160.582131][T14443]  ext4_file_write_iter+0x387/0xf60
[ 1160.587396][T14443]  iter_file_splice_write+0x666/0xa60
[ 1160.592803][T14443]  direct_splice_actor+0x156/0x2a0
[ 1160.597942][T14443]  splice_direct_to_actor+0x312/0x680
[ 1160.603343][T14443]  do_splice_direct+0xda/0x150
[ 1160.608123][T14443]  do_sendfile+0x380/0x650
[ 1160.612615][T14443]  __x64_sys_sendfile64+0x105/0x150
[ 1160.617882][T14443]  x64_sys_call+0x2bb4/0x3000
[ 1160.622793][T14443]  do_syscall_64+0xd2/0x200
[ 1160.627373][T14443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.633299][T14443] 
[ 1160.635632][T14443] value changed: 0x00000070 -> 0x00000002
[ 1160.641373][T14443] 
[ 1160.643704][T14443] Reported by Kernel Concurrency Sanitizer on:
[ 1160.649873][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.2.17082 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1160.661365][T14443] Tainted: [W]=WARN
[ 1160.665189][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1160.675260][T14443] ==================================================================
[ 1160.933480][ T1299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1163.955916][ T5770] vhci_hcd: vhci_device speed not set