last executing test programs:

3m11.366460913s ago: executing program 4 (id=174):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000800000000200000000000000b3", @ANYRES32=r1, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m11.268474061s ago: executing program 4 (id=176):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

3m11.195477896s ago: executing program 4 (id=177):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
fcntl$setstatus(r1, 0x4, 0x6000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000000000000000000000000000018120000c14abc23120fe3f08858954f61e7766658e9976a2243f1899f14a9d64c2c95e78c0dd2810fd1903de23675c8687d4fd3080cc845300f09c534c4dcdffad0516e1751b975c96b77cb7e652940a0322711b3c6f7d17f4571c4ef842d0d6a9900359bfbf672e464faef2f79126e651fed59df42c90ce6b1c91a3fd8d9fbd1f4fe31d039f3f0526fb5497b3889641baf0e63877dc3da424fb8a0d2102b045d48c59ee65de72f81e764d2804bafa999de7700f7ee046ec1ba5265d4b52425027bf52c66ffa35fad20f375e76bcb2e04", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6c8100, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r2)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0xe3baa9debe116ec4)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x2}, 0x10)
r6 = semget$private(0x0, 0x4, 0x61)
semop(r6, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1800}, {0x1, 0x3}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
utime(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff8984"], 0xffbf)

3m11.058104968s ago: executing program 4 (id=182):
r0 = socket(0x10, 0x3, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
open_tree(0xffffffffffffffff, 0xfffffffffffffffe, 0x1801)
r1 = socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000340)})
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5")
sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

3m10.869809303s ago: executing program 4 (id=185):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffee6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_gettime(r1, &(0x7f0000000100))
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20822, &(0x7f0000000e80)=ANY=[@ANYBLOB='mode=01777777777740000000000,gid=', @ANYRESHEX=r5, @ANYBLOB="2c6d6f6478acce2d30300200000000303030303e6b8634b6903031312c7569643d", @ANYRESHEX=r6, @ANYBLOB=',gid=', @ANYRESHEX=r7, @ANYBLOB="2c736d61636b66736861743d2a25242c736d61636b66737472616e736d7574653df43a242c646f6e745f6d6561737572652c6f626a5f726f6c653d24293a2c7063723d30303030303030303030303030303030303030322c6c617a7974696d652c00"])
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)

3m10.227767245s ago: executing program 4 (id=196):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/2209], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
fcntl$lock(r1, 0x7, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x44c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x18, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)

3m10.197615448s ago: executing program 32 (id=196):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/2209], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
fcntl$lock(r1, 0x7, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x44c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x18, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)

44.85134719s ago: executing program 3 (id=2779):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0xc, 0x0, 0xfffffffd}, {0x16}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = getpid()
unshare(0x6020400)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x2000000)
write$UHID_INPUT(r5, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xb8}}, 0x0)
r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r9)
keyctl$read(0xb, r9, 0x0, 0x0)

44.832226302s ago: executing program 3 (id=2781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0xc, 0x0, 0xfffffffd}, {0x16}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = getpid()
unshare(0x6020400)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x2000000)
write$UHID_INPUT(r5, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000020000000090000000100000000000000b215bba74e9da1d8907e6faf944bf9877f6bd5dbb5860500c044f58d00000000bc320fa3d9f4578434ed8a0931c86e7f367a02f4ebbf6afb7070832b260662334106ebeaec05fd486b913231002f2f443c773493915cf87769f1d6d4c2bc25c14cdf53ccee3e5056e8da2c4bfa99a0883bd08f6ccc8cfd669a9f9f178d499ea4c845eb478ee76efd16c08eb92177bbfe9b2778fca329c5826f88c636ff34b15d3b39da2f3e2b404b331ac0a2fe9848bea50a0e7d80bd68745d3fe670cccccc61a740d38000d1fc6e35639d6f150c152caec1372e567a8d53384a67d4199827244d8fd84c94b40693dd2732ea0b9a89809c2d8299784bdd4d7c82e70a3a4b98342d2568076a5e4fde68853bf56225efdd6472b160299317eb7b0ac8214832a2b8f69741452025ad178a21"], 0xb8}}, 0x0)
r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r9)
keyctl$read(0xb, r9, 0x0, 0x0)

44.749187778s ago: executing program 3 (id=2783):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000007c0)="4369b49bc163b8adbd3f775bbe20e2c8a5b23f2de6c1eee091bac97d3463bfdc33538a969da6ba0af68ec0714118f3022f206410f57916886a286e61bc441783e270a5f09e85bbe147ceb7be414d615e37c854e9aa4abbe324e045e10062e0e77ec968c77fe562d0d2259e3b872ea11ebe2785c98467ea8547a3a34f31a1abaaf27ae1e83ee181d8c0bdbfe3f0f984e72eb87820f2353c5a497c1a0be771bcaa0e5115ee9fc0c04d118e821b8615d205ad1beb388392b8f8e86df74edd691e3e5d4054c08d", 0xc5}, {&(0x7f0000000440)="dd7d6a8f7a5356dd54397ad845fff83824c6c9dbb462d555086cf640ed09e07cf2dbc735266badd69adb3097bf65bba3cb0880c92233cb7bc7dbd328863ad01d9aa8e7692f2a66130030e31f2cfa17757ee1cd430331e086e74fa433b800a9e7e69ca5ffafe49e076f58c9d64ded8cc99b539310bbed4b", 0x77}], 0x2, 0x749, 0x1, 0x16)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180000f9", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="18190000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
getcwd(&(0x7f00000008c0)=""/209, 0xd1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000000000090000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10, 0x0, 0x8}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x6, 0x9, 0xa0, 0x50}, {0x1ff, 0xc, 0xf, 0xfffffff9}, {0x2, 0x9, 0xb, 0x1}, {0x9, 0x1, 0x75, 0xc}, {0x2, 0x80, 0x0, 0x2}, {0xaa, 0xf, 0x8, 0xf}, {0x8c4e, 0xcd, 0x4}]})
socket$inet_mptcp(0x2, 0x1, 0x106)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

44.674370364s ago: executing program 3 (id=2784):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9GNuPy7tncr8fsmlM3PucJ7p7dNz7uk5cwOorMH0n1rE/oiYTiL6k/nFss7ICgcXnvfgz4/Opo8k6vXXfk8iyY7lz0+yr33ZyT0R8eMPSezrWF3vzNy1i+NTU5NXs/3h2UvTwzNz1w5fuDR+fvL85OXRF0ZPHD92/MTIkZau63rBsdM3332//5OxN7/56q9k5NtfxpI4GS9nT1x6HVtlMAYb35NkdVHfia2urCQd2c/J0pc46Sx44q42BsWG5a9fV0Q8Ef3REQ9fvP74+JVSgwO2VT2JqAMVlch/qKi8H5C/t1/5PrhWSq8EaIf7pxYGAFbnf+fC2GD0NMYGdj9IYumwThIRrY3MLbcnIu7eGbt57s7YzdjMOFzRGBOwKfM3IuLJovxPGvk/ED0x0Mj/2rKUS/sFZ7Kv6fFXW6x/ZRpvxzg8UGwh/3vWzP9okv9vLcn/t1usf/Dh5ju9y/K/t9VLAgAAAAAAgMq6fSoini/6+39tcf5PFMz/6YuIk1tQ/+CK/dV//6/d24JqgAL3T0W8VDj/t5bP/h3oyLb+05gP0JWcuzA1eSQi/hsRh6JrV7o/skYdhz/d92WzssFs/l/+SOu/m80FzOK417li7ejE+Oz4o143EHH/RsRThfN/k8X2Pylo/9PfB9MbrGPfs7fONCtbP/+B7VL/OuJgYfv/8K4Vydr35xhu9AeG817Bak9/+Nl3zepvNf9N/4dHl7b/u9fO/4Fk6f16ZjZfx9G5znqzslb7/93J641bznRnxz4Yn529OhLRnZzuSI8uOz66+ZjhcZTnQ54vaf4fembt8b+i/n9vRMyv+L+TP5avKc79/+++X5vFo/8P5Unzf2JT7f/mN0ZvDXzfrP6Ntf/HGm39oeyI8T9Y8EWept3LjxekY2dRUbvjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQS0i9kRSG1rcrtWGhiL6IuJ/sbs2dWVm9rlzV967PJGWNT7/v5Z/0m//wn6Sf/7/wJL90RX7RyNib0R83tHb2B86e2VqouyLBwAAAAAAAAAAAAAAAAAAgB2ir8n6/9RvHWVHB2y7zrIDAEpTkP8/lREH0H6ttf+7tjwOoP30/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7D1w++ckIuZf7G08Ut1ZWVepkQHbrVZ2AEBp3OIHqsvUH6gu7/GBZJ3ynqYnrXfmWqbPPsLJAAAAAAAAAAAAAFA5B/db/w9VZf0/VJf1/1Bd+fr/AyXHAbSf9/hArLOSv3D9/7pnAQAAAAAAAAAAAABbaWbu2sXxqanJqzbe2BlhtHOjXq9fT38Kdko8//KNfCr8TolnxUa+1m9jZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjunwAAAP//OKok1w==")
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r1, 0x0, 0x0)
get_mempolicy(&(0x7f0000000080), &(0x7f00000011c0), 0x9, &(0x7f0000ff9000/0x4000)=nil, 0x3)
semget(0x2, 0x4, 0xa0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000180)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a69508671568ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab811905352483b154cdc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dd0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x40000)
chroot(&(0x7f0000001200)='./file0\x00')

44.60113288s ago: executing program 3 (id=2785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
ioctl$EVIOCGABS20(r1, 0x40044591, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
connect$netlink(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x4044040)
bind$qrtr(r6, &(0x7f0000000080), 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x200000000000000)

43.934235775s ago: executing program 3 (id=2795):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x7048, 0x77218}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x400c110)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ff01a84df5d5000000fe02001085000000070095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000340))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73, 0x0, r7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb8}}, 0x4c050)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

43.915956246s ago: executing program 33 (id=2795):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x7048, 0x77218}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x400c110)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ff01a84df5d5000000fe02001085000000070095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000340))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73, 0x0, r7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb8}}, 0x4c050)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

2.885665795s ago: executing program 5 (id=3560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r3 = fcntl$dupfd(r2, 0x406, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0xffffffe8, 0x5}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x88)
sendmsg$sock(r1, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x6ea4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x4008000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r5 = gettid()
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = eventfd2(0x0, 0x0)
write$eventfd(r8, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(r8, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.765418115s ago: executing program 0 (id=3568):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x10}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000100080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0xf0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8c01, 0x96)
pwrite64(r6, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
tgkill(0x0, 0x0, 0x21)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x1f, 0x1, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r4, r5, 0xc, 0x8, 0x0, @void, @value=r5, @void, @void, r7}, 0x20)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="fdffffffffffffff0000000000824a78cc0000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0xcc0b, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000009}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x1c0000000000}, 0x18)
r10 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
shmdt(r10)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0xf00)

2.45509165s ago: executing program 0 (id=3571):
r0 = socket(0x10, 0x803, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="4900000008000000e2000000a04bc30006d4db3a5bae00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex_waitv(&(0x7f0000001a00)=[{0x4, &(0x7f0000000840)=0xf, 0x2, 0x2000000}, {0x2, &(0x7f0000000880)=0x101, 0x82}, {0x0, &(0x7f00000008c0)=0xa, 0x82}, {0x4, &(0x7f0000000900)=0x9, 0x82}, {0x9, &(0x7f0000000940)=0xc9, 0x82}, {0x4, 0x0, 0x82}, {0xffffffff00000001, &(0x7f0000000a40)=0x7, 0x2}, {0x3, &(0x7f0000000ac0)=0x9, 0x82}, {0x7ff, &(0x7f0000000b00)=0x5, 0x82}, {0x9, &(0x7f0000000b40)=0xc, 0x2}, {0x1, &(0x7f0000000b80)=0x9, 0x82}, {0xa42, &(0x7f0000000bc0)=0x8, 0x82}, {0x9, &(0x7f0000000c00)=0x101, 0x82}, {0xffffffffffffffff, &(0x7f0000000c40)=0x4, 0x82}, {0xfffffffffffffff7, &(0x7f0000000c80)=0x1ff, 0x82}, {0x7, &(0x7f0000000cc0)=0x4948, 0x2}, {0xfffffffffffffff0, &(0x7f0000000d00)=0xf6, 0x2}, {0x4, &(0x7f0000000d40)=0xd, 0x82}, {0xffffffffffffffff, &(0x7f0000000d80)=0x10000, 0x2}, {0x8, &(0x7f0000000dc0)=0xfffffffffffffff8, 0x82}, {0xfb5, 0x0, 0x82}, {0x7f7b, 0x0, 0x2}, {0xc, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x52, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0xb2, 0x0, 0x82}, {0xfffffffffffffffb, 0x0, 0x82}, {0x80000000, 0x0, 0x80}, {0x579, 0x0, 0x2}, {0x8000, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x1, 0x0}, {0x400, 0x0, 0x2}, {0xaf, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x392e, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x1af4, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0xeaf, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0xba6, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0x400, 0x0}, {0xcad, 0x0, 0x2}, {0x65, 0x0, 0x2}, {0x5c00000000000000, 0x0, 0x2}], 0x31, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') (fail_nth: 14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e00)={0x98, 0x17, 0x100, 0x70bd26, 0x25dfdbfe, {0x4}, [@generic="1478d7df9569f0bb19bd2af6c80046ffb74b6f19ab70cc4dd6835e833d4be9494e4f2833bb300bb4e6df42b6b322f57416722017dd0ea453522517fa8161950f7c58bdd28edc86e748", @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x1}, @generic, @generic="10c8a5d98e15dcda6c211681db01ca38a33c3cefe55c945992729fa90ea06474e5112ed64fadb588562f2ab361d41f48"]}, 0x98}, 0x1, 0x0, 0x0, 0x24004000}, 0x800)
r5 = socket$key(0xf, 0x3, 0x2)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@rand_addr, <r6=>0x0}, &(0x7f0000000200)=0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1c1d}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x7, 0x3bc8bf7afec67f7b, 0x100}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0xaf, &(0x7f0000000380)=""/175, 0x41000, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0xfffffffa, 0xc, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r7], &(0x7f0000000640)=[{0x7, 0x3, 0xb, 0xa}, {0x2, 0x1, 0xc, 0x1}], 0x10, 0x1}, 0x94)
lgetxattr(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)=@known='trusted.syz\x00', &(0x7f0000000980)=""/151, 0x97)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x40)

2.425963933s ago: executing program 0 (id=3572):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
sendto$inet6(r0, &(0x7f0000000280)="ff", 0x1, 0x20048840, &(0x7f0000000240)={0xa, 0x2, 0x2, @empty}, 0x1c)
shutdown(r0, 0x1)

2.391510445s ago: executing program 0 (id=3574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000506241a010414c22413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696fe507240a050702800c241b01040300050701000209058103ff030604050904010000020d00000904010102020d0000090582020004f10209090503022000260d07"], 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x4000)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000100))
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x100000000000000)

2.020234776s ago: executing program 5 (id=3581):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000240)=0x6, 0x4)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x9cfa7d3b1a00a44b}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbda97000ffdbdfc5b3381bbf20c8366088f98aa823779120602511242dce76a51c13f819086be4f0dfb830c51cc32024fb830af9bc3ebf6af86523e33f1cb54fd6f62bcccfa4f5736be5503ae46d55b5bb3e64ff6547683925904c7750"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r7 = dup(r6)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x1ffe, 0x0, 0x5, 0x0})

1.910400845s ago: executing program 6 (id=3584):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
close(r5)
r6 = dup2(r1, r1)
getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, 0x0)
write$tun(r6, 0x0, 0x46)

1.773921946s ago: executing program 1 (id=3587):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0xc, 0x0, 0xfffffffd}, {0x16}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = getpid()
unshare(0x6020400)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x2000000)
write$UHID_INPUT(r5, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xb8}}, 0x0)
r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r9)
keyctl$read(0xb, r9, 0x0, 0x0)

1.747148788s ago: executing program 1 (id=3589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0)

1.574398412s ago: executing program 0 (id=3590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9)
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="143afa200000000100000001", @ANYRES32=r0], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffd3)
close(0x3)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2, r9}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0)

1.172706425s ago: executing program 5 (id=3591):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000fd79f7ccf35b184fea6a25645806b04a2c32c42e4758eb3c26485b691c4e1bba6705", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.155660786s ago: executing program 5 (id=3592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r3 = fcntl$dupfd(r2, 0x406, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0xffffffe8, 0x5}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x88)
sendmsg$sock(r1, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x6ea4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x4008000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r5 = gettid()
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = eventfd2(0x0, 0x0)
write$eventfd(r8, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(r8, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.022393527s ago: executing program 6 (id=3593):
syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)

1.021811987s ago: executing program 6 (id=3595):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b000000000003000000050000001800018014020073797a5f748633298e0000000000000008000500ff0300000c0003800400010204000380"], 0x40}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xfbW', 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3})
mq_timedreceive(r8, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x3ed7, 0x0)

1.021327247s ago: executing program 6 (id=3596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0xc, 0x0, 0xfffffffd}, {0x16}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = getpid()
unshare(0x6020400)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x2000000)
write$UHID_INPUT(r4, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000020000000090000000100000000000000b215bba74e9da1d8907e6faf944bf9877f6bd5dbb5860500c044f58d00000000bc320fa3d9f4578434ed8a0931c86e7f367a02f4ebbf6afb7070832b260662334106ebeaec05fd486b913231002f2f443c773493915cf87769f1d6d4c2bc25c14cdf53ccee3e5056e8da2c4bfa99a0883bd08f6ccc8cfd669a9f9f178d499ea4c845eb478ee76efd16c08eb92177bbfe9b2778fca329c5826f88c636ff34b15d3b39da2f3e2b404b331ac0a2fe9848bea50a0e7d80bd68745d3fe670cccccc61a740d38000d1fc6e35639d6f150c152caec1372e567a8d53384a67d4199827244d8fd84c94b40693dd2732ea0b9a89809c2d8299784bdd4d7c82e70a3a4b98342d2568076a5e4fde68853bf56225efdd6472b160299317eb7b0ac8214832a2b8f69741452025ad178a21"], 0xb8}}, 0x0)
r8 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r8)
keyctl$read(0xb, r8, 0x0, 0x0)

954.144182ms ago: executing program 6 (id=3597):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0)
sendto$packet(r0, &(0x7f0000000080)="33031600d1fd", 0x6, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x18, 0x3a, 0xa01, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x600}, [@nested={0x4, 0xc7}]}, 0x18}}, 0x0)
accept$inet6(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x1c)
poll(0x0, 0x0, 0xfff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x90000004})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"})
write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
syz_open_pts(r4, 0x8182)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYRES32], 0x50)

909.638176ms ago: executing program 2 (id=3599):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x44080) (fail_nth: 1)

890.673788ms ago: executing program 1 (id=3600):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x4, 0x0, 0xfffffffc, 0xfffffffb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x3f7, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x4000000)

830.369273ms ago: executing program 2 (id=3601):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00RL&'], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

687.112144ms ago: executing program 1 (id=3602):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001700)={[{@discard}, {@auto_da_alloc}], [{@euid_gt}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x69, 0x30, 0x65, 0x5e, 0x39, 0x36, 0x32, 0x36], 0x2d, [0x62, 0x64, 0x63, 0x32], 0x2d, [0xe3d7eca6065efdbe, 0x39, 0x39, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x38], 0x2d, [0x38, 0x37, 0x35, 0x9c, 0x63, 0x31, 0x64, 0x35]}}}]}, 0x1, 0x53b, &(0x7f00000011c0)="$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")
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

665.583866ms ago: executing program 0 (id=3603):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
rt_sigprocmask(0x1000000, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18)
socket$inet6(0xa, 0x80002, 0x88)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9})
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000)
socket$netlink(0x10, 0x3, 0x0)

569.367203ms ago: executing program 2 (id=3604):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00RL&'], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

542.355426ms ago: executing program 1 (id=3605):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18fdffffffffffffff00000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00006fceba00003fa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000f0cab6b21c45c", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "6ba1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a30554ec98e950cfed21fcad7ff0fbcb566a0982f8938caa0f6ad59300", 0xfffff7ff}, 0x48, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000)
keyctl$reject(0x13, 0x0, 0x10001, 0x3, r1)

478.477891ms ago: executing program 1 (id=3606):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x2000)

376.90262ms ago: executing program 2 (id=3607):
timerfd_create(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
fcntl$addseals(r0, 0x409, 0x7)
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000000c0), 0x0)
r2 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

312.491124ms ago: executing program 2 (id=3608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0xc, 0x0, 0xfffffffd}, {0x16}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = getpid()
unshare(0x6020400)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x2000000)
write$UHID_INPUT(r4, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xb8}}, 0x0)
r8 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r8)
keyctl$read(0xb, r8, 0x0, 0x0)

266.346368ms ago: executing program 5 (id=3609):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
sendto$inet6(r0, &(0x7f0000000280)="ff", 0x1, 0x20048840, &(0x7f0000000240)={0xa, 0x2, 0x2, @empty}, 0x1c)
shutdown(r0, 0x1)

190.979335ms ago: executing program 5 (id=3610):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0)

4.88138ms ago: executing program 2 (id=3611):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0xa1, 0x0, 0x0, 0x2}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfca, &(0x7f0000001e00)=""/4042, 0x40f00, 0x60, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='afs_io_error\x00', r3}, 0x18)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f0000000440)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004485c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="18", 0x1}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)
sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

0s ago: executing program 6 (id=3612):
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938c9d52dd8d39af73035c446ad5930000eb00", 0xffffffff}, 0x48, 0xffffffffffffffff)
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=<r3=>0x0], 0x1, 0x1058, &(0x7f0000002180)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff62)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000736faa93000000000000260018110000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa2000000000000070200da2bffff0e0000000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYBLOB="2e5c71bf1fbaa2cfb6a18be3f625f0b91b8231358cc700d1746e", @ANYRESDEC=0x0, @ANYRESDEC=r5, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0128cb002cbd70001e2206"], 0x14}}, 0x800)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='objagg_obj_parent_assign\x00', r4}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10)
close(r8)
r11 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r11, r0, r0, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
splice(r14, 0x0, r15, 0x0, 0x1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r15, 0x541b, 0x0)
write(r13, 0x0, 0x0)

kernel console output (not intermixed with test programs):


[  204.133318][T12475]  ? ipv4_sk_update_pmtu+0x4e2/0xac0
[  204.133348][T12475]  ip_route_output_key_hash_rcu+0xef5/0x1380
[  204.133390][T12475]  ip_route_output_flow+0x7b/0x130
[  204.133413][T12475]  raw_sendmsg+0xa0c/0xe60
[  204.133450][T12475]  ? __pfx_raw_sendmsg+0x10/0x10
[  204.133533][T12475]  inet_sendmsg+0xc2/0xd0
[  204.133598][T12475]  __sock_sendmsg+0x102/0x180
[  204.133620][T12475]  ____sys_sendmsg+0x345/0x4e0
[  204.133660][T12475]  ___sys_sendmsg+0x17b/0x1d0
[  204.133776][T12475]  __sys_sendmmsg+0x178/0x300
[  204.133807][T12475]  __x64_sys_sendmmsg+0x57/0x70
[  204.133822][T12475]  x64_sys_call+0x1c4a/0x2ff0
[  204.133840][T12475]  do_syscall_64+0xd2/0x200
[  204.133884][T12475]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  204.133912][T12475]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  204.133991][T12475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.134009][T12475] RIP: 0033:0x7f34c19cebe9
[  204.134024][T12475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.134044][T12475] RSP: 002b:00007f34c0437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  204.134063][T12475] RAX: ffffffffffffffda RBX: 00007f34c1bf5fa0 RCX: 00007f34c19cebe9
[  204.134076][T12475] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  204.134089][T12475] RBP: 00007f34c0437090 R08: 0000000000000000 R09: 0000000000000000
[  204.134129][T12475] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001
[  204.134139][T12475] R13: 00007f34c1bf6038 R14: 00007f34c1bf5fa0 R15: 00007ffe195d03f8
[  204.134157][T12475]  </TASK>
[  204.377805][T12477] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  204.753893][T12513] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  204.819509][T12384] syz.5.2936 (12384) used greatest stack depth: 6408 bytes left
[  204.889556][T12519] FAULT_INJECTION: forcing a failure.
[  204.889556][T12519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.902793][T12519] CPU: 0 UID: 0 PID: 12519 Comm: syz.0.2989 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  204.902824][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  204.902835][T12519] Call Trace:
[  204.902841][T12519]  <TASK>
[  204.902846][T12519]  __dump_stack+0x1d/0x30
[  204.902870][T12519]  dump_stack_lvl+0xe8/0x140
[  204.902944][T12519]  dump_stack+0x15/0x1b
[  204.902958][T12519]  should_fail_ex+0x265/0x280
[  204.902995][T12519]  should_fail+0xb/0x20
[  204.903028][T12519]  should_fail_usercopy+0x1a/0x20
[  204.903176][T12519]  _copy_from_user+0x1c/0xb0
[  204.903203][T12519]  ___sys_sendmsg+0xc1/0x1d0
[  204.903346][T12519]  __x64_sys_sendmsg+0xd4/0x160
[  204.903384][T12519]  x64_sys_call+0x191e/0x2ff0
[  204.903402][T12519]  do_syscall_64+0xd2/0x200
[  204.903463][T12519]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  204.903490][T12519]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  204.903509][T12519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.903528][T12519] RIP: 0033:0x7f34c19cebe9
[  204.903616][T12519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.903636][T12519] RSP: 002b:00007f34c0437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.903654][T12519] RAX: ffffffffffffffda RBX: 00007f34c1bf5fa0 RCX: 00007f34c19cebe9
[  204.903668][T12519] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000006
[  204.903682][T12519] RBP: 00007f34c0437090 R08: 0000000000000000 R09: 0000000000000000
[  204.903695][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.903706][T12519] R13: 00007f34c1bf6038 R14: 00007f34c1bf5fa0 R15: 00007ffe195d03f8
[  204.903723][T12519]  </TASK>
[  205.139667][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  205.139723][   T29] audit: type=1326 audit(1754716441.653:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc19188d84a code=0x7ffc0000
[  205.196038][   T29] audit: type=1326 audit(1754716441.673:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.219694][   T29] audit: type=1326 audit(1754716441.673:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.278625][   T29] audit: type=1326 audit(1754716441.753:12088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.302367][   T29] audit: type=1326 audit(1754716441.753:12089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.326075][   T29] audit: type=1326 audit(1754716441.763:12090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.349897][   T29] audit: type=1326 audit(1754716441.763:12091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.373467][   T29] audit: type=1326 audit(1754716441.763:12092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.397195][   T29] audit: type=1326 audit(1754716441.763:12093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.420959][   T29] audit: type=1326 audit(1754716441.763:12094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19188ebe9 code=0x7ffc0000
[  205.484556][T12542] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  205.618279][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  205.693213][T12560] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  205.705103][T12559] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3003'.
[  205.803975][T12572] cgroup: Invalid name
[  205.804032][T12565] loop6: detected capacity change from 0 to 8192
[  205.902706][T12579] loop6: detected capacity change from 0 to 2048
[  205.918348][T12579] journal_path: Non-blockdev passed as './file1'
[  205.920440][T12574] vhci_hcd: invalid port number 254
[  205.924785][T12579] EXT4-fs: error: could not find journal device path
[  205.929920][T12574] vhci_hcd: invalid port number 254
[  205.956849][T12584] FAULT_INJECTION: forcing a failure.
[  205.956849][T12584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.969995][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.2.3013 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  205.970018][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  205.970029][T12584] Call Trace:
[  205.970034][T12584]  <TASK>
[  205.970041][T12584]  __dump_stack+0x1d/0x30
[  205.970061][T12584]  dump_stack_lvl+0xe8/0x140
[  205.970104][T12584]  dump_stack+0x15/0x1b
[  205.970118][T12584]  should_fail_ex+0x265/0x280
[  205.970195][T12584]  should_fail+0xb/0x20
[  205.970227][T12584]  should_fail_usercopy+0x1a/0x20
[  205.970249][T12584]  _copy_from_user+0x1c/0xb0
[  205.970346][T12584]  memdup_user+0x5e/0xd0
[  205.970375][T12584]  strndup_user+0x68/0xb0
[  205.970403][T12584]  __se_sys_request_key+0xea/0x290
[  205.970494][T12584]  ? fput+0x8f/0xc0
[  205.970550][T12584]  __x64_sys_request_key+0x55/0x70
[  205.970651][T12584]  x64_sys_call+0x1d98/0x2ff0
[  205.970676][T12584]  do_syscall_64+0xd2/0x200
[  205.970766][T12584]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.970839][T12584]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  205.971008][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.971031][T12584] RIP: 0033:0x7fc19188ebe9
[  205.971071][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.971092][T12584] RSP: 002b:00007fc1902f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  205.971114][T12584] RAX: ffffffffffffffda RBX: 00007fc191ab5fa0 RCX: 00007fc19188ebe9
[  205.971129][T12584] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  205.971161][T12584] RBP: 00007fc1902f7090 R08: 0000000000000000 R09: 0000000000000000
[  205.971173][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.971183][T12584] R13: 00007fc191ab6038 R14: 00007fc191ab5fa0 R15: 00007ffc748a6988
[  205.971224][T12584]  </TASK>
[  206.031727][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3012'.
[  206.233813][T12591] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  206.297568][T12593] loop6: detected capacity change from 0 to 8192
[  206.426517][T12603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3021'.
[  206.477538][T12605] loop6: detected capacity change from 0 to 1024
[  206.487977][T12605] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  206.499719][T12605] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  206.503369][T12608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3023'.
[  206.507639][T12605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000]
[  206.532374][T12605] System zones: 0-1, 3-12
[  206.536819][T12605] EXT4-fs (loop6): orphan cleanup on readonly fs
[  206.546216][T12605] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.3022: Freeing blocks not in datazone - block = 0, count = 4096
[  206.561402][T12605] EXT4-fs (loop6): Remounting filesystem read-only
[  206.568020][T12605] EXT4-fs (loop6): 1 orphan inode deleted
[  206.576373][T12605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.614695][T11949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.687841][T12622] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  206.780970][T12632] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3034'.
[  206.818129][T12633] lo speed is unknown, defaulting to 1000
[  206.841028][T12635] FAULT_INJECTION: forcing a failure.
[  206.841028][T12635] name failslab, interval 1, probability 0, space 0, times 0
[  206.853791][T12635] CPU: 1 UID: 0 PID: 12635 Comm: syz.6.3035 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  206.853834][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  206.853845][T12635] Call Trace:
[  206.853852][T12635]  <TASK>
[  206.853859][T12635]  __dump_stack+0x1d/0x30
[  206.853882][T12635]  dump_stack_lvl+0xe8/0x140
[  206.853905][T12635]  dump_stack+0x15/0x1b
[  206.853923][T12635]  should_fail_ex+0x265/0x280
[  206.853997][T12635]  should_failslab+0x8c/0xb0
[  206.854022][T12635]  kmem_cache_alloc_noprof+0x50/0x310
[  206.854049][T12635]  ? audit_log_start+0x365/0x6c0
[  206.854085][T12635]  audit_log_start+0x365/0x6c0
[  206.854168][T12635]  audit_seccomp+0x48/0x100
[  206.854197][T12635]  ? __seccomp_filter+0x68c/0x10d0
[  206.854238][T12635]  __seccomp_filter+0x69d/0x10d0
[  206.854264][T12635]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  206.854295][T12635]  ? vfs_write+0x75e/0x8e0
[  206.854382][T12635]  __secure_computing+0x82/0x150
[  206.854407][T12635]  syscall_trace_enter+0xcf/0x1e0
[  206.854432][T12635]  do_syscall_64+0xac/0x200
[  206.854537][T12635]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  206.854600][T12635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.854624][T12635] RIP: 0033:0x7f1296ccebe9
[  206.854641][T12635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.854658][T12635] RSP: 002b:00007f129572f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e2
[  206.854687][T12635] RAX: ffffffffffffffda RBX: 00007f1296ef5fa0 RCX: 00007f1296ccebe9
[  206.854701][T12635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  206.854715][T12635] RBP: 00007f129572f090 R08: 0000000000000000 R09: 0000000000000000
[  206.854728][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.854741][T12635] R13: 00007f1296ef6038 R14: 00007f1296ef5fa0 R15: 00007fff3efc7ce8
[  206.854843][T12635]  </TASK>
[  207.085542][T12640] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3037'.
[  207.198704][T12645] loop6: detected capacity change from 0 to 2048
[  207.212054][T12648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.218820][T12645] journal_path: Non-blockdev passed as './file1'
[  207.225355][T12645] EXT4-fs: error: could not find journal device path
[  207.232837][T12648] syzkaller0: entered promiscuous mode
[  207.238326][T12648] syzkaller0: entered allmulticast mode
[  207.261309][T12648] tipc: Resetting bearer <eth:syzkaller0>
[  207.268049][T12646] tipc: Resetting bearer <eth:syzkaller0>
[  207.279964][T12646] tipc: Disabling bearer <eth:syzkaller0>
[  207.335579][T12656] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  207.346749][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'.
[  207.389941][T12652] loop5: detected capacity change from 0 to 8192
[  207.394812][T12660] geneve2: entered promiscuous mode
[  207.594615][T12683] FAULT_INJECTION: forcing a failure.
[  207.594615][T12683] name failslab, interval 1, probability 0, space 0, times 0
[  207.595720][T12675] loop5: detected capacity change from 0 to 512
[  207.607270][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.0.3053 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  207.607301][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.607315][T12683] Call Trace:
[  207.607322][T12683]  <TASK>
[  207.607329][T12683]  __dump_stack+0x1d/0x30
[  207.607430][T12683]  dump_stack_lvl+0xe8/0x140
[  207.607452][T12683]  dump_stack+0x15/0x1b
[  207.607471][T12683]  should_fail_ex+0x265/0x280
[  207.607515][T12683]  ? audit_log_d_path+0x8d/0x150
[  207.607621][T12683]  should_failslab+0x8c/0xb0
[  207.607652][T12683]  __kmalloc_cache_noprof+0x4c/0x320
[  207.607692][T12683]  audit_log_d_path+0x8d/0x150
[  207.607769][T12683]  audit_log_d_path_exe+0x42/0x70
[  207.607807][T12683]  audit_log_task+0x1e9/0x250
[  207.607923][T12683]  audit_seccomp+0x61/0x100
[  207.607953][T12683]  ? __seccomp_filter+0x68c/0x10d0
[  207.607980][T12683]  __seccomp_filter+0x69d/0x10d0
[  207.608030][T12683]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  207.608070][T12683]  ? vfs_read+0x47f/0x6f0
[  207.608095][T12683]  __secure_computing+0x82/0x150
[  207.608113][T12683]  syscall_trace_enter+0xcf/0x1e0
[  207.608137][T12683]  do_syscall_64+0xac/0x200
[  207.608212][T12683]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  207.608240][T12683]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  207.608339][T12683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.608412][T12683] RIP: 0033:0x7f34c19cd69f
[  207.608481][T12683] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  207.608545][T12683] RSP: 002b:00007f34c0437030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  207.608570][T12683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34c19cd69f
[  207.608586][T12683] RDX: 0000000000000001 RSI: 00007f34c04370a0 RDI: 0000000000000006
[  207.608617][T12683] RBP: 00007f34c0437090 R08: 0000000000000000 R09: 0000000000000000
[  207.608701][T12683] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000002
[  207.608715][T12683] R13: 00007f34c1bf6038 R14: 00007f34c1bf5fa0 R15: 00007ffe195d03f8
[  207.608740][T12683]  </TASK>
[  207.786200][T12695] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  207.795287][T12675] EXT4-fs: Ignoring removed nobh option
[  207.866569][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3050: corrupted inode contents
[  207.889117][T12675] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.3050: mark_inode_dirty error
[  207.931712][T12703] loop6: detected capacity change from 0 to 8192
[  207.938994][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3050: corrupted inode contents
[  207.958250][T12675] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3050: mark_inode_dirty error
[  207.974856][T12675] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3050: Failed to acquire dquot type 0
[  207.993474][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3050: corrupted inode contents
[  208.047496][T12713] SELinux: failed to load policy
[  208.049471][T12675] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.3050: mark_inode_dirty error
[  208.122857][T12721] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  208.133306][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3050: corrupted inode contents
[  208.164400][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3061'.
[  208.174110][T12675] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3050: mark_inode_dirty error
[  208.181363][T12726] loop6: detected capacity change from 0 to 1024
[  208.194827][T12726] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  208.206042][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3050: corrupted inode contents
[  208.227237][T12675] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  208.249728][T12675] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3050: corrupted inode contents
[  208.271037][T12675] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.3050: mark_inode_dirty error
[  208.285804][T12727] netlink: 'syz.6.3064': attribute type 13 has an invalid length.
[  208.293662][T12727] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3064'.
[  208.304612][T12675] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  208.317263][T12727] erspan0: refused to change device tx_queue_len
[  208.323393][T12732] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3064'.
[  208.332675][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'.
[  208.344995][T12675] EXT4-fs (loop5): 1 truncate cleaned up
[  208.354238][T12734] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  208.365080][T12675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.387814][T12675] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.421850][ T4091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.545479][T12753] loop5: detected capacity change from 0 to 512
[  208.570150][T12753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.584171][T12753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.637116][T12763] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  208.698511][T12769] lo speed is unknown, defaulting to 1000
[  208.876677][T12775] FAULT_INJECTION: forcing a failure.
[  208.876677][T12775] name failslab, interval 1, probability 0, space 0, times 0
[  208.889518][T12775] CPU: 0 UID: 0 PID: 12775 Comm: syz.0.3082 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  208.889619][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.889631][T12775] Call Trace:
[  208.889635][T12775]  <TASK>
[  208.889641][T12775]  __dump_stack+0x1d/0x30
[  208.889660][T12775]  dump_stack_lvl+0xe8/0x140
[  208.889681][T12775]  dump_stack+0x15/0x1b
[  208.889741][T12775]  should_fail_ex+0x265/0x280
[  208.889779][T12775]  should_failslab+0x8c/0xb0
[  208.889801][T12775]  kmem_cache_alloc_noprof+0x50/0x310
[  208.889829][T12775]  ? dst_alloc+0xbd/0x100
[  208.889920][T12775]  dst_alloc+0xbd/0x100
[  208.889946][T12775]  ? ipv4_sk_update_pmtu+0x4e2/0xac0
[  208.889985][T12775]  ip_route_output_key_hash_rcu+0xef5/0x1380
[  208.890020][T12775]  ip_route_output_flow+0x7b/0x130
[  208.890044][T12775]  raw_sendmsg+0xa0c/0xe60
[  208.890163][T12775]  ? __pfx_raw_sendmsg+0x10/0x10
[  208.890238][T12775]  inet_sendmsg+0xc2/0xd0
[  208.890271][T12775]  __sock_sendmsg+0x102/0x180
[  208.890327][T12775]  ____sys_sendmsg+0x345/0x4e0
[  208.890417][T12775]  ___sys_sendmsg+0x17b/0x1d0
[  208.890460][T12775]  __sys_sendmmsg+0x178/0x300
[  208.890492][T12775]  __x64_sys_sendmmsg+0x57/0x70
[  208.890539][T12775]  x64_sys_call+0x1c4a/0x2ff0
[  208.890562][T12775]  do_syscall_64+0xd2/0x200
[  208.890628][T12775]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  208.890720][T12775]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  208.890739][T12775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.890757][T12775] RIP: 0033:0x7f34c19cebe9
[  208.890770][T12775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.890933][T12775] RSP: 002b:00007f34c0437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  208.890997][T12775] RAX: ffffffffffffffda RBX: 00007f34c1bf5fa0 RCX: 00007f34c19cebe9
[  208.891008][T12775] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005
[  208.891022][T12775] RBP: 00007f34c0437090 R08: 0000000000000000 R09: 0000000000000000
[  208.891036][T12775] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001
[  208.891048][T12775] R13: 00007f34c1bf6038 R14: 00007f34c1bf5fa0 R15: 00007ffe195d03f8
[  208.891065][T12775]  </TASK>
[  209.248204][T12781] loop6: detected capacity change from 0 to 1024
[  209.255588][T12781] EXT4-fs: dax option not supported
[  209.554988][T12785] loop5: detected capacity change from 0 to 8192
[  209.616788][T12793] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  209.726338][T12801] tipc: Invalid UDP bearer configuration
[  209.726351][T12801] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.847212][T12806] loop6: detected capacity change from 0 to 512
[  209.863077][T12806] EXT4-fs: dax option not supported
[  209.875971][T12805] netlink: 'syz.6.3096': attribute type 1 has an invalid length.
[  209.914443][T12813] FAULT_INJECTION: forcing a failure.
[  209.914443][T12813] name failslab, interval 1, probability 0, space 0, times 0
[  209.927200][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.5.3098 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  209.927266][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.927277][T12813] Call Trace:
[  209.927282][T12813]  <TASK>
[  209.927288][T12813]  __dump_stack+0x1d/0x30
[  209.927387][T12813]  dump_stack_lvl+0xe8/0x140
[  209.927403][T12813]  dump_stack+0x15/0x1b
[  209.927425][T12813]  should_fail_ex+0x265/0x280
[  209.927462][T12813]  should_failslab+0x8c/0xb0
[  209.927483][T12813]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  209.927510][T12813]  ? sidtab_sid2str_get+0xa0/0x130
[  209.927606][T12813]  kmemdup_noprof+0x2b/0x70
[  209.927634][T12813]  sidtab_sid2str_get+0xa0/0x130
[  209.927739][T12813]  security_sid_to_context_core+0x1eb/0x2e0
[  209.927771][T12813]  security_sid_to_context+0x27/0x40
[  209.927804][T12813]  selinux_lsmprop_to_secctx+0x67/0xf0
[  209.927908][T12813]  security_lsmprop_to_secctx+0x43/0x80
[  209.927937][T12813]  audit_log_task_context+0x77/0x190
[  209.927983][T12813]  audit_log_task+0xf4/0x250
[  209.928058][T12813]  audit_seccomp+0x61/0x100
[  209.928086][T12813]  ? __seccomp_filter+0x68c/0x10d0
[  209.928133][T12813]  __seccomp_filter+0x69d/0x10d0
[  209.928158][T12813]  ? save_fpregs_to_fpstate+0x100/0x160
[  209.928184][T12813]  ? _raw_spin_unlock+0x26/0x50
[  209.928259][T12813]  __secure_computing+0x82/0x150
[  209.928278][T12813]  syscall_trace_enter+0xcf/0x1e0
[  209.928300][T12813]  do_syscall_64+0xac/0x200
[  209.928327][T12813]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  209.928371][T12813]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  209.928397][T12813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.928418][T12813] RIP: 0033:0x7f7f0e0fd5fc
[  209.928505][T12813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  209.928522][T12813] RSP: 002b:00007f7f0cb67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  209.928567][T12813] RAX: ffffffffffffffda RBX: 00007f7f0e325fa0 RCX: 00007f7f0e0fd5fc
[  209.928578][T12813] RDX: 000000000000000f RSI: 00007f7f0cb670a0 RDI: 0000000000000008
[  209.928658][T12813] RBP: 00007f7f0cb67090 R08: 0000000000000000 R09: 0000000000000000
[  209.928669][T12813] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002
[  209.928679][T12813] R13: 00007f7f0e326038 R14: 00007f7f0e325fa0 R15: 00007ffd5b3896a8
[  209.928696][T12813]  </TASK>
[  210.201018][T12813] loop5: detected capacity change from 0 to 1024
[  210.208137][T12813] EXT4-fs: inline encryption not supported
[  210.213994][T12813] EXT4-fs: Ignoring removed i_version option
[  210.228966][   T29] kauditd_printk_skb: 419 callbacks suppressed
[  210.228982][   T29] audit: type=1326 audit(1754716446.433:12509): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7f0e0fd5fc code=0x7ffc0000
[  210.256198][   T29] audit: type=1326 audit(1754716446.703:12510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f0e0fd69f code=0x7ffc0000
[  210.279667][   T29] audit: type=1326 audit(1754716446.703:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f0e0fd84a code=0x7ffc0000
[  210.303042][   T29] audit: type=1326 audit(1754716446.703:12512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.326625][   T29] audit: type=1326 audit(1754716446.703:12513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.350254][   T29] audit: type=1326 audit(1754716446.703:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.373707][   T29] audit: type=1326 audit(1754716446.703:12515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.397269][   T29] audit: type=1326 audit(1754716446.703:12516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.420871][   T29] audit: type=1326 audit(1754716446.703:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.444464][   T29] audit: type=1326 audit(1754716446.703:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.5.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f0e0febe9 code=0x7ffc0000
[  210.503656][T12813] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  210.533622][T12813] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3098: lblock 2 mapped to illegal pblock 2 (length 1)
[  210.548686][T12813] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3098: lblock 0 mapped to illegal pblock 48 (length 1)
[  210.581201][T12813] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3098: Failed to acquire dquot type 0
[  210.592914][T12813] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  210.605921][T12813] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3098: mark_inode_dirty error
[  210.617853][T12813] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  210.647935][T12813] EXT4-fs (loop5): 1 orphan inode deleted
[  210.655010][T12813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.671540][ T8597] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  210.700087][T12833] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  210.717901][ T8597] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  210.761026][T12813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.776634][T12813] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.3098: Invalid inode table block 1 in block_group 0
[  210.820663][T12813] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  210.843235][T12813] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.3098: mark_inode_dirty error
[  211.019223][T12860] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  211.059092][T12865] FAULT_INJECTION: forcing a failure.
[  211.059092][T12865] name failslab, interval 1, probability 0, space 0, times 0
[  211.071816][T12865] CPU: 1 UID: 0 PID: 12865 Comm: syz.1.3119 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  211.071908][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  211.071918][T12865] Call Trace:
[  211.071923][T12865]  <TASK>
[  211.071929][T12865]  __dump_stack+0x1d/0x30
[  211.071947][T12865]  dump_stack_lvl+0xe8/0x140
[  211.071981][T12865]  dump_stack+0x15/0x1b
[  211.071999][T12865]  should_fail_ex+0x265/0x280
[  211.072038][T12865]  should_failslab+0x8c/0xb0
[  211.072108][T12865]  __kvmalloc_node_noprof+0x123/0x4e0
[  211.072134][T12865]  ? io_alloc_cache_init+0x31/0xa0
[  211.072158][T12865]  io_alloc_cache_init+0x31/0xa0
[  211.072214][T12865]  io_ring_ctx_alloc+0x32d/0x6a0
[  211.072246][T12865]  io_uring_create+0x10f/0x610
[  211.072281][T12865]  __se_sys_io_uring_setup+0x1f7/0x210
[  211.072315][T12865]  __x64_sys_io_uring_setup+0x31/0x40
[  211.072382][T12865]  x64_sys_call+0x2b21/0x2ff0
[  211.072400][T12865]  do_syscall_64+0xd2/0x200
[  211.072421][T12865]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  211.072462][T12865]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  211.072481][T12865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.072506][T12865] RIP: 0033:0x7f2295c9ebe9
[  211.072540][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.072558][T12865] RSP: 002b:00007f2294706fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  211.072574][T12865] RAX: ffffffffffffffda RBX: 00007f2295ec5fa0 RCX: 00007f2295c9ebe9
[  211.072585][T12865] RDX: 00002000000000c0 RSI: 0000200000001480 RDI: 0000000000000bc3
[  211.072595][T12865] RBP: 0000200000001480 R08: 0000000000000000 R09: 00002000000000c0
[  211.072605][T12865] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  211.072699][T12865] R13: 0000200000000040 R14: 0000000000000bc3 R15: 00002000000000c0
[  211.072721][T12865]  </TASK>
[  211.109996][T12866] loop6: detected capacity change from 0 to 8192
[  211.263752][T12875] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  211.331960][T12885] __nla_validate_parse: 7 callbacks suppressed
[  211.331972][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'.
[  211.406960][T12869] lo speed is unknown, defaulting to 1000
[  211.481408][T12899] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  211.580510][T12869] chnl_net:caif_netlink_parms(): no params data found
[  211.620326][T12914] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  211.647530][T12905] loop6: detected capacity change from 0 to 512
[  211.704893][T12869] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.712032][T12869] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.733931][T12869] bridge_slave_0: entered allmulticast mode
[  211.740889][T12869] bridge_slave_0: entered promiscuous mode
[  211.747919][T12869] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.755108][T12869] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.762560][T12928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3140'.
[  211.771997][T12869] bridge_slave_1: entered allmulticast mode
[  211.778622][T12869] bridge_slave_1: entered promiscuous mode
[  211.810447][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.821639][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.850348][T12869] team0: Port device team_slave_0 added
[  211.857071][T12869] team0: Port device team_slave_1 added
[  211.860108][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'.
[  211.894488][T12939] team_slave_0: entered promiscuous mode
[  211.900194][T12939] team_slave_1: entered promiscuous mode
[  211.908230][T12939] macsec1: entered promiscuous mode
[  211.913496][T12939] team0: entered promiscuous mode
[  211.918837][T12939] macsec1: entered allmulticast mode
[  211.924173][T12939] team0: entered allmulticast mode
[  211.929319][T12939] team_slave_0: entered allmulticast mode
[  211.935043][T12939] team_slave_1: entered allmulticast mode
[  211.944613][T12946] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  211.952496][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.959587][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.985601][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.997689][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.004783][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.030751][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.043627][T12948] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  212.078062][T12869] hsr_slave_0: entered promiscuous mode
[  212.084890][T12869] hsr_slave_1: entered promiscuous mode
[  212.090902][T12869] debugfs: 'hsr0' already exists in 'hsr'
[  212.096666][T12869] Cannot create hsr debugfs directory
[  212.108603][T12953] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  212.160717][T12958] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  212.182796][T12869] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.193154][T12869] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.203526][T12869] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  212.225576][T12962] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  212.262020][T12869] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.272453][T12869] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.282767][T12869] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  212.300823][T12970] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  212.333363][T12869] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.343799][T12869] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.354103][T12869] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  212.414160][T12869] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.424538][T12869] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.434867][T12869] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  212.497304][T12985] program syz.0.3163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.498018][T12869] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.517932][T12869] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.528248][T12869] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.552279][T12869] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  212.634554][T12869] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.648553][T12869] 8021q: adding VLAN 0 to HW filter on device team0
[  212.659023][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.666124][ T8598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.679458][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.686530][ T8598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.714036][T13005] wg2: entered promiscuous mode
[  212.718914][T13005] wg2: entered allmulticast mode
[  212.807127][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.951142][T12869] veth0_vlan: entered promiscuous mode
[  212.962909][T12869] veth1_vlan: entered promiscuous mode
[  212.983670][T12869] veth0_macvtap: entered promiscuous mode
[  212.996036][T12869] veth1_macvtap: entered promiscuous mode
[  213.029073][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.043505][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.056686][ T8625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.093511][ T8625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.109751][ T8597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.118630][ T8597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.562717][T13061] lo speed is unknown, defaulting to 1000
[  213.625962][T13061] chnl_net:caif_netlink_parms(): no params data found
[  213.662864][T13061] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.670039][T13061] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.679476][T13061] bridge_slave_0: entered allmulticast mode
[  213.689023][T13061] bridge_slave_0: entered promiscuous mode
[  213.694466][T13078] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3182'.
[  213.698166][T13061] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.711079][T13061] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.719438][T13061] bridge_slave_1: entered allmulticast mode
[  213.726242][T13061] bridge_slave_1: entered promiscuous mode
[  213.726764][T13078] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3182'.
[  213.744881][T13078] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3182'.
[  213.765081][T13061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.779561][T13061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.799968][T13061] team0: Port device team_slave_0 added
[  213.806467][T13061] team0: Port device team_slave_1 added
[  213.823089][T13061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.830148][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.856093][T13061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.867803][T13061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.874830][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.900762][T13061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.952331][T13061] hsr_slave_0: entered promiscuous mode
[  213.964716][T13061] hsr_slave_1: entered promiscuous mode
[  213.970821][T13061] debugfs: 'hsr0' already exists in 'hsr'
[  213.976561][T13061] Cannot create hsr debugfs directory
[  214.004498][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'.
[  214.017859][T13085] vlan2: entered allmulticast mode
[  214.049906][T13061] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.094124][T13061] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.131261][T13061] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.182287][T13061] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.259103][T13061] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  214.269044][T13061] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  214.279793][T13061] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  214.288862][T13061] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  214.337349][T13061] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.358937][T13061] 8021q: adding VLAN 0 to HW filter on device team0
[  214.374962][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.382034][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.399480][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.406643][ T8598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.520884][T13061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.619227][T13146] loop5: detected capacity change from 0 to 8192
[  214.633171][T13146] vfat filesystem being mounted at /14/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  214.771544][T13061] veth0_vlan: entered promiscuous mode
[  214.779834][T13061] veth1_vlan: entered promiscuous mode
[  214.800743][T13061] veth0_macvtap: entered promiscuous mode
[  214.814535][T13061] veth1_macvtap: entered promiscuous mode
[  214.836080][T13061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.845714][T13061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.935766][ T8599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.947433][T13162] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  214.953952][T13162] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  214.961645][T13162] vhci_hcd vhci_hcd.0: Device attached
[  215.010575][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.066367][T13165] vhci_hcd: connection closed
[  215.066700][ T8598] vhci_hcd: stop threads
[  215.075667][ T8598] vhci_hcd: release socket
[  215.080131][ T8598] vhci_hcd: disconnect device
[  215.112517][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.190613][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.376123][ T8599] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.448971][T13182] lo speed is unknown, defaulting to 1000
[  215.468618][ T8599] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.506284][ T8599] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.551290][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'.
[  215.578050][   T29] kauditd_printk_skb: 635 callbacks suppressed
[  215.578062][   T29] audit: type=1326 audit(5264150883.707:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.607854][   T29] audit: type=1326 audit(5264150883.707:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.632715][   T29] audit: type=1326 audit(5264150883.707:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.656474][   T29] audit: type=1326 audit(5264150883.707:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.680091][   T29] audit: type=1326 audit(5264150883.707:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.703686][   T29] audit: type=1326 audit(5264150883.707:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.727402][   T29] audit: type=1326 audit(5264150883.747:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.750959][   T29] audit: type=1326 audit(5264150883.747:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.774600][   T29] audit: type=1326 audit(5264150883.747:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.798300][   T29] audit: type=1326 audit(5264150883.747:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296ccebe9 code=0x7ffc0000
[  215.837645][ T8599] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.883271][T13182] chnl_net:caif_netlink_parms(): no params data found
[  215.935887][T13182] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.943314][T13182] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.950852][T13182] bridge_slave_0: entered allmulticast mode
[  215.957203][T13182] bridge_slave_0: entered promiscuous mode
[  215.965379][T13182] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.972493][T13182] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.979870][T13182] bridge_slave_1: entered allmulticast mode
[  215.986191][T13182] bridge_slave_1: entered promiscuous mode
[  216.016085][T13221] tbf_change: 9 callbacks suppressed
[  216.016101][T13221] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  216.038442][T13182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.047724][ T8599] bridge_slave_1: left allmulticast mode
[  216.053547][ T8599] bridge_slave_1: left promiscuous mode
[  216.059274][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.069499][ T8599] bridge_slave_0: left promiscuous mode
[  216.075628][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.090823][T13223] loop5: detected capacity change from 0 to 8192
[  216.101093][T13223] vfat filesystem being mounted at /19/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  216.301746][ T8599] bond0 (unregistering): left promiscuous mode
[  216.307950][ T8599] bond_slave_0: left promiscuous mode
[  216.313491][ T8599] bond_slave_1: left promiscuous mode
[  216.319257][ T8599] dummy0: left promiscuous mode
[  216.327751][ T8599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.336451][ T8599] bond_slave_0: left allmulticast mode
[  216.343201][ T8599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.352239][ T8599] bond_slave_1: left allmulticast mode
[  216.358740][ T8599] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  216.367761][ T8599] dummy0: left allmulticast mode
[  216.373598][ T8599] bond0 (unregistering): Released all slaves
[  216.382552][ T8599] bond1 (unregistering): Released all slaves
[  216.391654][ T8599] bond2 (unregistering): Released all slaves
[  216.401061][T13182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.443369][T13182] team0: Port device team_slave_0 added
[  216.453713][ T8599] IPVS: stopping master sync thread 11138 ...
[  216.471920][T13182] team0: Port device team_slave_1 added
[  216.492263][ T8599] hsr_slave_0: left promiscuous mode
[  216.498071][ T8599] hsr_slave_1: left promiscuous mode
[  216.504548][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.511952][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.521317][ T8599] team0: left allmulticast mode
[  216.526264][ T8599] team_slave_0: left allmulticast mode
[  216.531920][ T8599] team_slave_1: left allmulticast mode
[  216.537402][ T8599] team0: left promiscuous mode
[  216.542327][ T8599] team_slave_0: left promiscuous mode
[  216.547694][ T8599] team_slave_1: left promiscuous mode
[  216.553514][ T8599] veth1_macvtap: left promiscuous mode
[  216.559012][ T8599] veth0_macvtap: left promiscuous mode
[  216.564756][ T8599] veth1_vlan: left promiscuous mode
[  216.570134][ T8599] veth0_vlan: left promiscuous mode
[  216.669387][ T8599] team0 (unregistering): Port device team_slave_1 removed
[  216.681764][ T8599] team0 (unregistering): Port device team_slave_0 removed
[  217.124505][T13247] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  217.132949][T13182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.139954][T13182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.165966][T13182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.177765][T13182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.184794][T13182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.210719][T13182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.252185][T13182] hsr_slave_0: entered promiscuous mode
[  217.258413][T13182] hsr_slave_1: entered promiscuous mode
[  217.265274][T13182] debugfs: 'hsr0' already exists in 'hsr'
[  217.271084][T13182] Cannot create hsr debugfs directory
[  217.285010][T13251] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  217.444272][T13267] loop6: detected capacity change from 0 to 2048
[  217.452879][T13267] journal_path: Non-blockdev passed as './file1'
[  217.459254][T13267] EXT4-fs: error: could not find journal device path
[  217.554158][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'.
[  217.577700][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3242'.
[  217.622344][T13278] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  217.642894][T13182] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  217.651571][T13182] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  217.660228][T13282] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  217.667643][T13182] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  217.678073][T13182] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  217.725603][T13182] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.743193][T13182] 8021q: adding VLAN 0 to HW filter on device team0
[  217.752805][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.759917][ T8599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.773349][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.780429][ T8600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.859861][T13182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.962818][T13319] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  217.970687][T13182] veth0_vlan: entered promiscuous mode
[  217.978561][T13182] veth1_vlan: entered promiscuous mode
[  217.996227][T13322] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  218.022348][T13182] veth0_macvtap: entered promiscuous mode
[  218.029911][T13182] veth1_macvtap: entered promiscuous mode
[  218.038587][T13325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3258'.
[  218.045391][T13182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.050054][T13323] netlink: 'syz.1.3256': attribute type 1 has an invalid length.
[  218.059622][T13182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.086679][T13323] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.110762][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.119511][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.139772][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.139843][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'.
[  218.173681][T13323] bond1 (unregistering): Released all slaves
[  218.207908][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.271584][T13338] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  218.317458][T13344] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  218.325420][T13342] loop5: detected capacity change from 0 to 1024
[  218.372768][T13342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.389717][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3269'.
[  218.402738][T13348] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  218.461220][T13363] FAULT_INJECTION: forcing a failure.
[  218.461220][T13363] name failslab, interval 1, probability 0, space 0, times 0
[  218.463497][T13365] FAULT_INJECTION: forcing a failure.
[  218.463497][T13365] name failslab, interval 1, probability 0, space 0, times 0
[  218.473913][T13363] CPU: 0 UID: 0 PID: 13363 Comm: syz.0.3273 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  218.474029][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.474042][T13363] Call Trace:
[  218.474049][T13363]  <TASK>
[  218.474063][T13363]  __dump_stack+0x1d/0x30
[  218.474117][T13363]  dump_stack_lvl+0xe8/0x140
[  218.474245][T13363]  dump_stack+0x15/0x1b
[  218.474266][T13363]  should_fail_ex+0x265/0x280
[  218.474307][T13363]  ? p9_client_create+0x59/0xbc0
[  218.474353][T13363]  should_failslab+0x8c/0xb0
[  218.474383][T13363]  __kmalloc_cache_noprof+0x4c/0x320
[  218.474495][T13363]  ? v9fs_session_init+0x78/0xde0
[  218.474522][T13363]  p9_client_create+0x59/0xbc0
[  218.474564][T13363]  ? __kmalloc_node_track_caller_noprof+0x370/0x410
[  218.474672][T13363]  ? v9fs_session_init+0x78/0xde0
[  218.474713][T13363]  v9fs_session_init+0xf7/0xde0
[  218.474736][T13363]  ? v9fs_mount+0x51/0x5c0
[  218.474799][T13363]  ? perf_trace_kmalloc+0xe1/0x110
[  218.474833][T13363]  ? v9fs_mount+0x51/0x5c0
[  218.474859][T13363]  ? __kmalloc_cache_noprof+0x299/0x320
[  218.474908][T13363]  v9fs_mount+0x67/0x5c0
[  218.474935][T13363]  ? selinux_capable+0x31/0x40
[  218.474965][T13363]  ? __pfx_v9fs_mount+0x10/0x10
[  218.475075][T13363]  legacy_get_tree+0x75/0xd0
[  218.475102][T13363]  vfs_get_tree+0x54/0x1d0
[  218.475129][T13363]  do_new_mount+0x207/0x5e0
[  218.475209][T13363]  ? security_capable+0x83/0x90
[  218.475237][T13363]  path_mount+0x4a4/0xb20
[  218.475386][T13363]  ? user_path_at+0x109/0x130
[  218.475480][T13363]  __se_sys_mount+0x28f/0x2e0
[  218.475507][T13363]  ? fput+0x8f/0xc0
[  218.475558][T13363]  __x64_sys_mount+0x67/0x80
[  218.475627][T13363]  x64_sys_call+0x2b4d/0x2ff0
[  218.475654][T13363]  do_syscall_64+0xd2/0x200
[  218.475687][T13363]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.475717][T13363]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.475818][T13363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.475845][T13363] RIP: 0033:0x7fe61c8bebe9
[  218.475862][T13363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.475885][T13363] RSP: 002b:00007fe61b327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  218.475908][T13363] RAX: ffffffffffffffda RBX: 00007fe61cae5fa0 RCX: 00007fe61c8bebe9
[  218.475924][T13363] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000
[  218.475938][T13363] RBP: 00007fe61b327090 R08: 0000200000000200 R09: 0000000000000000
[  218.476033][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  218.476047][T13363] R13: 00007fe61cae6038 R14: 00007fe61cae5fa0 R15: 00007ffe18eb41c8
[  218.476077][T13363]  </TASK>
[  218.751169][T13365] CPU: 1 UID: 0 PID: 13365 Comm: syz.1.3274 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  218.751191][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.751201][T13365] Call Trace:
[  218.751208][T13365]  <TASK>
[  218.751213][T13365]  __dump_stack+0x1d/0x30
[  218.751230][T13365]  dump_stack_lvl+0xe8/0x140
[  218.751245][T13365]  dump_stack+0x15/0x1b
[  218.751257][T13365]  should_fail_ex+0x265/0x280
[  218.751283][T13365]  should_failslab+0x8c/0xb0
[  218.751353][T13365]  kmem_cache_alloc_noprof+0x50/0x310
[  218.751374][T13365]  ? getname_flags+0x80/0x3b0
[  218.751396][T13365]  getname_flags+0x80/0x3b0
[  218.751417][T13365]  __x64_sys_rename+0x33/0x70
[  218.751514][T13365]  x64_sys_call+0x1f9/0x2ff0
[  218.751530][T13365]  do_syscall_64+0xd2/0x200
[  218.751549][T13365]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.751643][T13365]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.751660][T13365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.751726][T13365] RIP: 0033:0x7f2295c9ebe9
[  218.751737][T13365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.751751][T13365] RSP: 002b:00007f2294707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  218.751772][T13365] RAX: ffffffffffffffda RBX: 00007f2295ec5fa0 RCX: 00007f2295c9ebe9
[  218.751782][T13365] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[  218.751791][T13365] RBP: 00007f2294707090 R08: 0000000000000000 R09: 0000000000000000
[  218.751800][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.751810][T13365] R13: 00007f2295ec6038 R14: 00007f2295ec5fa0 R15: 00007ffd1a460f18
[  218.751824][T13365]  </TASK>
[  218.753795][T12869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.881206][T13379] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  218.942240][T13379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  218.949773][T13379] vhci_hcd vhci_hcd.0: Device attached
[  218.987462][T13387] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3282'.
[  219.004613][T13385] loop5: detected capacity change from 0 to 1024
[  219.049141][T13385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.067794][T13385] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.3276: missing EA_INODE flag
[  219.079830][T13385] EXT4-fs (loop5): Remounting filesystem read-only
[  219.086576][T13403] loop6: detected capacity change from 0 to 512
[  219.116350][T13403] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3287: iget: bad extended attribute block 1
[  219.129045][T13403] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3287: couldn't read orphan inode 15 (err -117)
[  219.141023][ T3382] vhci_hcd: vhci_device speed not set
[  219.152589][T12869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.162279][T13403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.197729][T11949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.200269][ T3382] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  219.272971][T13421] FAULT_INJECTION: forcing a failure.
[  219.272971][T13421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.286091][T13421] CPU: 1 UID: 0 PID: 13421 Comm: syz.5.3295 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  219.286137][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  219.286152][T13421] Call Trace:
[  219.286160][T13421]  <TASK>
[  219.286168][T13421]  __dump_stack+0x1d/0x30
[  219.286190][T13421]  dump_stack_lvl+0xe8/0x140
[  219.286209][T13421]  dump_stack+0x15/0x1b
[  219.286247][T13421]  should_fail_ex+0x265/0x280
[  219.286291][T13421]  should_fail+0xb/0x20
[  219.286328][T13421]  should_fail_usercopy+0x1a/0x20
[  219.286345][T13421]  _copy_to_user+0x20/0xa0
[  219.286369][T13421]  simple_read_from_buffer+0xb5/0x130
[  219.286389][T13421]  proc_fail_nth_read+0x10e/0x150
[  219.286416][T13421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.286439][T13421]  vfs_read+0x1a0/0x6f0
[  219.286512][T13421]  ? __sys_setsockopt+0x18e/0x200
[  219.286540][T13421]  ? __rcu_read_unlock+0x4f/0x70
[  219.286605][T13421]  ? __fget_files+0x184/0x1c0
[  219.286629][T13421]  ksys_read+0xda/0x1a0
[  219.286649][T13421]  __x64_sys_read+0x40/0x50
[  219.286669][T13421]  x64_sys_call+0x27bc/0x2ff0
[  219.286688][T13421]  do_syscall_64+0xd2/0x200
[  219.286761][T13421]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  219.286782][T13421]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  219.286876][T13421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.286896][T13421] RIP: 0033:0x7fbec2acd5fc
[  219.286910][T13421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  219.287006][T13421] RSP: 002b:00007fbec1537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  219.287136][T13421] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acd5fc
[  219.287147][T13421] RDX: 000000000000000f RSI: 00007fbec15370a0 RDI: 0000000000000004
[  219.287157][T13421] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  219.287168][T13421] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  219.287178][T13421] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  219.287246][T13421]  </TASK>
[  219.558319][T13430] netlink: 'syz.5.3299': attribute type 39 has an invalid length.
[  219.602123][T13381] vhci_hcd: connection reset by peer
[  219.607779][ T8600] vhci_hcd: stop threads
[  219.612126][ T8600] vhci_hcd: release socket
[  219.616561][ T8600] vhci_hcd: disconnect device
[  219.682195][T13442] loop5: detected capacity change from 0 to 8192
[  219.689770][T13442] vfat filesystem being mounted at /32/bus supports timestamps until 2107-12-31 (0x10391447e)
[  219.777971][T13449] netlink: 'syz.5.3304': attribute type 4 has an invalid length.
[  219.785868][T13449] netlink: 177512 bytes leftover after parsing attributes in process `syz.5.3304'.
[  219.987587][T13454] FAULT_INJECTION: forcing a failure.
[  219.987587][T13454] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  220.000875][T13454] CPU: 1 UID: 0 PID: 13454 Comm: syz.0.3307 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  220.000971][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.000981][T13454] Call Trace:
[  220.000987][T13454]  <TASK>
[  220.000993][T13454]  __dump_stack+0x1d/0x30
[  220.001011][T13454]  dump_stack_lvl+0xe8/0x140
[  220.001028][T13454]  dump_stack+0x15/0x1b
[  220.001077][T13454]  should_fail_ex+0x265/0x280
[  220.001106][T13454]  should_fail_alloc_page+0xf2/0x100
[  220.001131][T13454]  __alloc_frozen_pages_noprof+0xff/0x360
[  220.001244][T13454]  alloc_pages_mpol+0xb3/0x250
[  220.001389][T13454]  vma_alloc_folio_noprof+0x1aa/0x300
[  220.001487][T13454]  handle_mm_fault+0xec2/0x2c20
[  220.001571][T13454]  do_user_addr_fault+0x636/0x1090
[  220.001610][T13454]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  220.001709][T13454]  exc_page_fault+0x62/0xa0
[  220.001732][T13454]  asm_exc_page_fault+0x26/0x30
[  220.001753][T13454] RIP: 0033:0x7fe61c780ba3
[  220.001766][T13454] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  220.001782][T13454] RSP: 002b:00007fe61b3054a0 EFLAGS: 00010206
[  220.001799][T13454] RAX: 0000000000007000 RBX: 00007fe61b305540 RCX: 00007fe612ee6000
[  220.001847][T13454] RDX: 00007fe61b3056e0 RSI: 0000000000000001 RDI: 00007fe61b3055e0
[  220.001857][T13454] RBP: 0000000000000079 R08: 0000000000000008 R09: 000000000000009e
[  220.001868][T13454] R10: 00000000000000c4 R11: 00007fe61b305540 R12: 0000000000000001
[  220.001879][T13454] R13: 00007fe61c95d980 R14: 0000000000000003 R15: 00007fe61b3055e0
[  220.001900][T13454]  </TASK>
[  220.001910][T13454] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  220.358308][T13461] FAULT_INJECTION: forcing a failure.
[  220.358308][T13461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.371656][T13461] CPU: 0 UID: 0 PID: 13461 Comm: syz.2.3310 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  220.371692][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.371708][T13461] Call Trace:
[  220.371716][T13461]  <TASK>
[  220.371725][T13461]  __dump_stack+0x1d/0x30
[  220.371750][T13461]  dump_stack_lvl+0xe8/0x140
[  220.371770][T13461]  dump_stack+0x15/0x1b
[  220.371842][T13461]  should_fail_ex+0x265/0x280
[  220.371886][T13461]  should_fail+0xb/0x20
[  220.371923][T13461]  should_fail_usercopy+0x1a/0x20
[  220.371942][T13461]  copy_fpstate_to_sigframe+0x628/0x7d0
[  220.372019][T13461]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  220.372140][T13461]  ? x86_task_fpu+0x36/0x60
[  220.372178][T13461]  get_sigframe+0x34d/0x490
[  220.372198][T13461]  ? get_signal+0xdc8/0xf70
[  220.372245][T13461]  x64_setup_rt_frame+0xa8/0x580
[  220.372307][T13461]  arch_do_signal_or_restart+0x27c/0x480
[  220.372340][T13461]  exit_to_user_mode_loop+0x7a/0x100
[  220.372364][T13461]  do_syscall_64+0x1d6/0x200
[  220.372460][T13461]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  220.372492][T13461]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  220.372521][T13461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.372550][T13461] RIP: 0033:0x7f7959ebebe7
[  220.372569][T13461] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  220.372638][T13461] RSP: 002b:00007f7958927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  220.372662][T13461] RAX: 0000000000000010 RBX: 00007f795a0e5fa0 RCX: 00007f7959ebebe9
[  220.372737][T13461] RDX: 0000200000000400 RSI: 00000000c0502100 RDI: 0000000000000003
[  220.372753][T13461] RBP: 00007f7958927090 R08: 0000000000000000 R09: 0000000000000000
[  220.372784][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  220.372800][T13461] R13: 00007f795a0e6038 R14: 00007f795a0e5fa0 R15: 00007ffc836b97a8
[  220.372848][T13461]  </TASK>
[  220.653294][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  220.653311][   T29] audit: type=1326 audit(5264150888.786:13324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.707069][   T29] audit: type=1326 audit(5264150888.786:13325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.730775][   T29] audit: type=1326 audit(5264150888.786:13326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.754456][T13472] loop5: detected capacity change from 0 to 8192
[  220.760854][   T29] audit: type=1326 audit(5264150888.786:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.784420][   T29] audit: type=1326 audit(5264150888.786:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.787627][T13472] vfat filesystem being mounted at /33/bus supports timestamps until 2107-12-31 (0x10391447e)
[  220.808039][   T29] audit: type=1326 audit(5264150888.786:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.841916][   T29] audit: type=1326 audit(5264150888.816:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.844256][T13475] loop6: detected capacity change from 0 to 1024
[  220.865521][   T29] audit: type=1326 audit(5264150888.816:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.865556][   T29] audit: type=1326 audit(5264150888.826:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7959ebebe9 code=0x7ffc0000
[  220.876754][T13475] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  220.928067][T13475] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3316: Failed to acquire dquot type 0
[  220.970565][T13475] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  220.987529][T13475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3316: corrupted inode contents
[  220.989142][T13487] netlink: 'syz.5.3312': attribute type 4 has an invalid length.
[  221.007268][T13487] netlink: 177512 bytes leftover after parsing attributes in process `syz.5.3312'.
[  221.052018][T13475] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.3316: mark_inode_dirty error
[  221.066898][T13475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3316: corrupted inode contents
[  221.112557][T13475] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3316: mark_inode_dirty error
[  221.175624][T13475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3316: corrupted inode contents
[  221.187676][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'.
[  221.187970][T13475] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  221.223244][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3324'.
[  221.239551][T13475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3316: corrupted inode contents
[  221.267631][T13475] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.3316: mark_inode_dirty error
[  221.283150][T13475] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  221.296265][T13475] EXT4-fs (loop6): 1 truncate cleaned up
[  221.302424][T13475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.343224][T11949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.509135][T13519] IPVS: Error connecting to the multicast addr
[  221.941921][T13532] loop5: detected capacity change from 0 to 2048
[  221.948631][T13532] journal_path: Non-blockdev passed as './file1'
[  221.955105][T13532] EXT4-fs: error: could not find journal device path
[  222.035679][ T3403] IPVS: starting estimator thread 0...
[  222.036397][T13540] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  222.140725][T13542] IPVS: using max 2400 ests per chain, 120000 per kthread
[  222.491897][T13567] usb usb1: check_ctrlrecip: process 13567 (wÞ£ÿ) requesting ep 01 but needs 81
[  222.510760][T13567] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[  223.079833][T13583] tbf_change: 3 callbacks suppressed
[  223.079845][T13583] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  223.196629][T13591] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  223.327586][T13599] __nla_validate_parse: 4 callbacks suppressed
[  223.327601][T13599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3363'.
[  223.334744][T13605] tipc: Started in network mode
[  223.347688][T13605] tipc: Node identity ac14140f, cluster identity 4711
[  223.354890][T13605] tipc: New replicast peer: 255.255.255.255
[  223.360950][T13605] tipc: Enabled bearer <udp:syz2>, priority 10
[  223.571323][T13614] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  223.670641][T13633] FAULT_INJECTION: forcing a failure.
[  223.670641][T13633] name failslab, interval 1, probability 0, space 0, times 0
[  223.683341][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.5.3377 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  223.683373][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.683388][T13633] Call Trace:
[  223.683427][T13633]  <TASK>
[  223.683433][T13633]  __dump_stack+0x1d/0x30
[  223.683491][T13633]  dump_stack_lvl+0xe8/0x140
[  223.683512][T13633]  dump_stack+0x15/0x1b
[  223.683544][T13633]  should_fail_ex+0x265/0x280
[  223.683582][T13633]  should_failslab+0x8c/0xb0
[  223.683601][T13633]  __kmalloc_noprof+0xa5/0x3e0
[  223.683622][T13633]  ? unregister_netdevice_many_notify+0x4c9/0x15d0
[  223.683664][T13633]  ? unlist_netdevice+0x2cc/0x320
[  223.683679][T13633]  unregister_netdevice_many_notify+0x4c9/0x15d0
[  223.683734][T13633]  unregister_netdevice_queue+0x1f5/0x220
[  223.683762][T13633]  vti6_siocdevprivate+0x273/0x8e0
[  223.683793][T13633]  dev_ifsioc+0x8f8/0xaa0
[  223.683846][T13633]  dev_ioctl+0x78d/0x960
[  223.683861][T13633]  sock_ioctl+0x593/0x610
[  223.683944][T13633]  ? __pfx_sock_ioctl+0x10/0x10
[  223.683961][T13633]  __se_sys_ioctl+0xcb/0x140
[  223.683987][T13633]  __x64_sys_ioctl+0x43/0x50
[  223.684013][T13633]  x64_sys_call+0x1816/0x2ff0
[  223.684029][T13633]  do_syscall_64+0xd2/0x200
[  223.684048][T13633]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  223.684066][T13633]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  223.684219][T13633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.684239][T13633] RIP: 0033:0x7fbec2acebe9
[  223.684250][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.684264][T13633] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.684278][T13633] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  223.684287][T13633] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003
[  223.684296][T13633] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  223.684363][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.684372][T13633] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  223.684386][T13633]  </TASK>
[  223.965952][T13635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3378'.
[  223.990112][T13638] FAULT_INJECTION: forcing a failure.
[  223.990112][T13638] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  224.002242][T13641] netlink: 'syz.0.3380': attribute type 21 has an invalid length.
[  224.003386][T13638] CPU: 0 UID: 0 PID: 13638 Comm: syz.5.3379 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  224.003422][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  224.003438][T13638] Call Trace:
[  224.003446][T13638]  <TASK>
[  224.003554][T13638]  __dump_stack+0x1d/0x30
[  224.003579][T13638]  dump_stack_lvl+0xe8/0x140
[  224.003603][T13638]  dump_stack+0x15/0x1b
[  224.003624][T13638]  should_fail_ex+0x265/0x280
[  224.003718][T13638]  should_fail_alloc_page+0xf2/0x100
[  224.003752][T13638]  __alloc_frozen_pages_noprof+0xff/0x360
[  224.003819][T13638]  alloc_pages_mpol+0xb3/0x250
[  224.003859][T13638]  vma_alloc_folio_noprof+0x1aa/0x300
[  224.003902][T13638]  do_wp_page+0x5db/0x24e0
[  224.003958][T13638]  ? css_rstat_updated+0xb7/0x240
[  224.003995][T13638]  ? __rcu_read_lock+0x37/0x50
[  224.004025][T13638]  handle_mm_fault+0x77d/0x2c20
[  224.004086][T13638]  do_user_addr_fault+0x636/0x1090
[  224.004212][T13638]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  224.004314][T13638]  exc_page_fault+0x62/0xa0
[  224.004340][T13638]  asm_exc_page_fault+0x26/0x30
[  224.004364][T13638] RIP: 0033:0x7fbec2990c50
[  224.004381][T13638] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  224.004403][T13638] RSP: 002b:00007fbec15364a0 EFLAGS: 00010202
[  224.004421][T13638] RAX: 0000000000005005 RBX: 00007fbec1536540 RCX: 0000000000000013
[  224.004495][T13638] RDX: 00000000000003ff RSI: 0000000000000c00 RDI: 00007fbec15365e0
[  224.004511][T13638] RBP: 0000000000000014 R08: 00007fbeb9117000 R09: 0000000000000004
[  224.004582][T13638] R10: 0000200000002402 R11: 000000000000045a R12: 0000000000000801
[  224.004597][T13638] R13: 00007fbec2b6d980 R14: 0000000000000016 R15: 00007fbec15365e0
[  224.004627][T13638]  </TASK>
[  224.004636][T13638] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  224.011195][T13641] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3380'.
[  224.034730][T13638] loop5: detected capacity change from 0 to 512
[  224.204434][T13647] loop6: detected capacity change from 0 to 164
[  224.241428][T13638] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  224.244486][ T3382] usb 3-1: enqueue for inactive port 0
[  224.271194][ T3382] usb 3-1: enqueue for inactive port 0
[  224.277306][T13638] EXT4-fs (loop5): 1 truncate cleaned up
[  224.283116][T13647] ISOFS: unable to read i-node block
[  224.288464][T13647] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  224.291438][T13638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.316728][T13638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.361172][ T3382] vhci_hcd: vhci_device speed not set
[  224.451837][T13655] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  224.461057][   T23] tipc: Node number set to 2886997007
[  224.631784][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'.
[  224.767145][T13675] loop5: detected capacity change from 0 to 8192
[  224.776694][T13675] vfat filesystem being mounted at /51/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  224.819681][T13683] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  224.986806][T13697] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  225.004788][T13699] FAULT_INJECTION: forcing a failure.
[  225.004788][T13699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.017956][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.6.3401 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  225.017987][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.017999][T13699] Call Trace:
[  225.018004][T13699]  <TASK>
[  225.018010][T13699]  __dump_stack+0x1d/0x30
[  225.018029][T13699]  dump_stack_lvl+0xe8/0x140
[  225.018090][T13699]  dump_stack+0x15/0x1b
[  225.018108][T13699]  should_fail_ex+0x265/0x280
[  225.018195][T13699]  should_fail+0xb/0x20
[  225.018262][T13699]  should_fail_usercopy+0x1a/0x20
[  225.018284][T13699]  _copy_from_user+0x1c/0xb0
[  225.018312][T13699]  set_user_sigmask+0x61/0x190
[  225.018336][T13699]  __se_sys_epoll_pwait2+0x95/0x230
[  225.018451][T13699]  __x64_sys_epoll_pwait2+0x78/0x90
[  225.018562][T13699]  x64_sys_call+0x2f57/0x2ff0
[  225.018580][T13699]  do_syscall_64+0xd2/0x200
[  225.018613][T13699]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  225.018716][T13699]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  225.018739][T13699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.018757][T13699] RIP: 0033:0x7f1296ccebe9
[  225.018770][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.018815][T13699] RSP: 002b:00007f129570e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9
[  225.018836][T13699] RAX: ffffffffffffffda RBX: 00007f1296ef6090 RCX: 00007f1296ccebe9
[  225.018850][T13699] RDX: 0000000000000005 RSI: 0000200000000080 RDI: ffffffffffffffff
[  225.018864][T13699] RBP: 00007f129570e090 R08: 0000200000000200 R09: 0000000000000008
[  225.018877][T13699] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  225.018939][T13699] R13: 00007f1296ef6128 R14: 00007f1296ef6090 R15: 00007fff3efc7ce8
[  225.018960][T13699]  </TASK>
[  225.248104][T13707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.271936][T13707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.287346][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[  225.322673][T13713] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  225.330408][T13713] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3407'.
[  225.344838][T13713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=13713 comm=syz.0.3407
[  225.437948][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.446583][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.478036][T13725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3412'.
[  225.612399][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'.
[  226.036539][T13763] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3424'.
[  226.098415][T13775] loop6: detected capacity change from 0 to 512
[  226.106388][T13775] ext4: Unknown parameter 'euid>00000000000000000000'
[  226.122377][   T29] kauditd_printk_skb: 287 callbacks suppressed
[  226.122401][   T29] audit: type=1326 audit(5264150894.245:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.152595][   T29] audit: type=1326 audit(5264150894.245:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.176697][   T29] audit: type=1326 audit(5264150894.245:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.200318][   T29] audit: type=1326 audit(5264150894.245:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.223968][   T29] audit: type=1326 audit(5264150894.245:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.247740][   T29] audit: type=1326 audit(5264150894.245:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.271508][   T29] audit: type=1326 audit(5264150894.245:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.295095][   T29] audit: type=1326 audit(5264150894.245:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.318658][   T29] audit: type=1326 audit(5264150894.245:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.342268][   T29] audit: type=1326 audit(5264150894.245:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbec2acebe9 code=0x7ffc0000
[  226.416511][T13783] FAULT_INJECTION: forcing a failure.
[  226.416511][T13783] name failslab, interval 1, probability 0, space 0, times 0
[  226.429220][T13783] CPU: 1 UID: 0 PID: 13783 Comm: syz.5.3432 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  226.429248][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.429319][T13783] Call Trace:
[  226.429324][T13783]  <TASK>
[  226.429331][T13783]  __dump_stack+0x1d/0x30
[  226.429351][T13783]  dump_stack_lvl+0xe8/0x140
[  226.429368][T13783]  dump_stack+0x15/0x1b
[  226.429383][T13783]  should_fail_ex+0x265/0x280
[  226.429412][T13783]  should_failslab+0x8c/0xb0
[  226.429500][T13783]  kmem_cache_alloc_node_noprof+0x57/0x320
[  226.429527][T13783]  ? __alloc_skb+0x101/0x320
[  226.429555][T13783]  __alloc_skb+0x101/0x320
[  226.429582][T13783]  netlink_alloc_large_skb+0xba/0xf0
[  226.429662][T13783]  netlink_sendmsg+0x3cf/0x6b0
[  226.429694][T13783]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.429775][T13783]  __sock_sendmsg+0x142/0x180
[  226.429798][T13783]  ____sys_sendmsg+0x345/0x4e0
[  226.429961][T13783]  ___sys_sendmsg+0x17b/0x1d0
[  226.430006][T13783]  __sys_sendmmsg+0x178/0x300
[  226.430091][T13783]  __x64_sys_sendmmsg+0x57/0x70
[  226.430167][T13783]  x64_sys_call+0x1c4a/0x2ff0
[  226.430187][T13783]  do_syscall_64+0xd2/0x200
[  226.430241][T13783]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  226.430351][T13783]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  226.430412][T13783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.430431][T13783] RIP: 0033:0x7fbec2acebe9
[  226.430462][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.430495][T13783] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  226.430513][T13783] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  226.430525][T13783] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  226.430537][T13783] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  226.430549][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.430562][T13783] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  226.430580][T13783]  </TASK>
[  226.474560][T13783] syz.5.3432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  226.636925][T13799] loop6: detected capacity change from 0 to 2048
[  226.656158][T13799] journal_path: Non-blockdev passed as './file1'
[  226.662576][T13799] EXT4-fs: error: could not find journal device path
[  226.669714][T13802] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  226.702373][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3437'.
[  226.757560][T13817] netlink: 'syz.6.3443': attribute type 6 has an invalid length.
[  226.765689][T13817] random: crng reseeded on system resumption
[  227.670603][T13838] random: crng reseeded on system resumption
[  227.689674][T13838] FAULT_INJECTION: forcing a failure.
[  227.689674][T13838] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  227.703044][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.6.3449 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  227.703138][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  227.703149][T13838] Call Trace:
[  227.703154][T13838]  <TASK>
[  227.703160][T13838]  __dump_stack+0x1d/0x30
[  227.703178][T13838]  dump_stack_lvl+0xe8/0x140
[  227.703267][T13838]  dump_stack+0x15/0x1b
[  227.703283][T13838]  should_fail_ex+0x265/0x280
[  227.703376][T13838]  should_fail_alloc_page+0xf2/0x100
[  227.703400][T13838]  __alloc_frozen_pages_noprof+0xff/0x360
[  227.703503][T13838]  alloc_pages_mpol+0xb3/0x250
[  227.703542][T13838]  alloc_pages_noprof+0x90/0x130
[  227.703579][T13838]  get_zeroed_page_noprof+0x1a/0x40
[  227.703674][T13838]  get_image_page+0x2b/0x420
[  227.703698][T13838]  ? alloc_pages_noprof+0xa9/0x130
[  227.703727][T13838]  alloc_rtree_node+0x146/0x1f0
[  227.703753][T13838]  memory_bm_create+0x723/0xd90
[  227.703870][T13838]  create_basic_memory_bitmaps+0xa6/0x450
[  227.703895][T13838]  snapshot_open+0x1b4/0x270
[  227.703929][T13838]  ? __pfx_snapshot_open+0x10/0x10
[  227.704038][T13838]  misc_open+0x1d3/0x200
[  227.704062][T13838]  chrdev_open+0x2eb/0x3a0
[  227.704093][T13838]  do_dentry_open+0x646/0xa20
[  227.704127][T13838]  ? __pfx_chrdev_open+0x10/0x10
[  227.704227][T13838]  vfs_open+0x37/0x1e0
[  227.704283][T13838]  path_openat+0x1c5e/0x2170
[  227.704311][T13838]  do_filp_open+0x109/0x230
[  227.704337][T13838]  do_sys_openat2+0xa6/0x110
[  227.704416][T13838]  __x64_sys_openat+0xf2/0x120
[  227.704448][T13838]  x64_sys_call+0x2e9c/0x2ff0
[  227.704467][T13838]  do_syscall_64+0xd2/0x200
[  227.704490][T13838]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  227.704527][T13838]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  227.704585][T13838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.704604][T13838] RIP: 0033:0x7f1296ccebe9
[  227.704618][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.704635][T13838] RSP: 002b:00007f129572f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  227.704652][T13838] RAX: ffffffffffffffda RBX: 00007f1296ef5fa0 RCX: 00007f1296ccebe9
[  227.704675][T13838] RDX: 0000000000004001 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  227.704687][T13838] RBP: 00007f129572f090 R08: 0000000000000000 R09: 0000000000000000
[  227.704715][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  227.704727][T13838] R13: 00007f1296ef6038 R14: 00007f1296ef5fa0 R15: 00007fff3efc7ce8
[  227.704745][T13838]  </TASK>
[  228.019969][T13850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  228.026545][T13850] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  228.033978][T13850] vhci_hcd vhci_hcd.0: Device attached
[  228.058427][T13853] vhci_hcd: connection closed
[  228.058595][ T8593] vhci_hcd: stop threads
[  228.067603][ T8593] vhci_hcd: release socket
[  228.072302][ T8593] vhci_hcd: disconnect device
[  228.164726][T13871] lo speed is unknown, defaulting to 1000
[  229.067408][T13906] netlink: '+}[@': attribute type 13 has an invalid length.
[  229.072743][T13903] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  229.120047][T13906] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.131795][T13906] 8021q: adding VLAN 0 to HW filter on device team0
[  229.142388][T13906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.163783][T13918] bridge_slave_0: left promiscuous mode
[  229.169561][T13918] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.177194][T13918] bridge_slave_1: left allmulticast mode
[  229.182873][T13918] bridge_slave_1: left promiscuous mode
[  229.188522][T13918] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.197520][T13918] bond0: (slave bond_slave_0): Releasing backup interface
[  229.205730][T13918] bond0: (slave bond_slave_1): Releasing backup interface
[  229.216314][T13918] team0: Failed to send options change via netlink (err -105)
[  229.223925][T13918] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  229.233399][T13918] team0: Port device team_slave_0 removed
[  229.239866][T13918] team0: Failed to send options change via netlink (err -105)
[  229.247461][T13918] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  229.256930][T13918] team0: Port device team_slave_1 removed
[  229.263382][T13918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.270800][T13918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.311409][T13927] loop6: detected capacity change from 0 to 512
[  229.319743][T13927] ext4: Unknown parameter 'euid>00000000000000000000'
[  229.647712][T13942] loop6: detected capacity change from 0 to 128
[  229.681035][T13942] vfat filesystem being mounted at /130/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  229.969548][T13954] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  230.063334][T13967] loop5: detected capacity change from 0 to 512
[  230.089117][T13965] loop6: detected capacity change from 0 to 8192
[  230.091879][T13967] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  230.104956][T13965] vfat filesystem being mounted at /134/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  230.116357][T13967] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3496: invalid indirect mapped block 2683928664 (level 1)
[  230.131169][T13967] EXT4-fs (loop5): 1 truncate cleaned up
[  230.137276][T13967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.194202][T13967] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.3496: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  230.226793][T13967] __nla_validate_parse: 2 callbacks suppressed
[  230.226810][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3496'.
[  230.289227][T12869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.341141][T13987] FAULT_INJECTION: forcing a failure.
[  230.341141][T13987] name failslab, interval 1, probability 0, space 0, times 0
[  230.353985][T13987] CPU: 1 UID: 0 PID: 13987 Comm: syz.1.3505 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  230.354020][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  230.354036][T13987] Call Trace:
[  230.354043][T13987]  <TASK>
[  230.354052][T13987]  __dump_stack+0x1d/0x30
[  230.354077][T13987]  dump_stack_lvl+0xe8/0x140
[  230.354098][T13987]  dump_stack+0x15/0x1b
[  230.354164][T13987]  should_fail_ex+0x265/0x280
[  230.354206][T13987]  should_failslab+0x8c/0xb0
[  230.354267][T13987]  kmem_cache_alloc_node_noprof+0x57/0x320
[  230.354304][T13987]  ? __alloc_skb+0x101/0x320
[  230.354355][T13987]  __alloc_skb+0x101/0x320
[  230.354395][T13987]  netlink_dump+0x10d/0x8a0
[  230.354447][T13987]  netlink_recvmsg+0x420/0x550
[  230.354556][T13987]  ? __pfx_netlink_recvmsg+0x10/0x10
[  230.354602][T13987]  sock_recvmsg+0x139/0x170
[  230.354636][T13987]  ____sys_recvmsg+0xf5/0x280
[  230.354668][T13987]  ___sys_recvmsg+0x11f/0x370
[  230.354775][T13987]  do_recvmmsg+0x1ef/0x540
[  230.354809][T13987]  ? fput+0x8f/0xc0
[  230.354851][T13987]  __x64_sys_recvmmsg+0xe5/0x170
[  230.354881][T13987]  x64_sys_call+0x27a6/0x2ff0
[  230.354907][T13987]  do_syscall_64+0xd2/0x200
[  230.355001][T13987]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  230.355034][T13987]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  230.355064][T13987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.355089][T13987] RIP: 0033:0x7f2295c9ebe9
[  230.355248][T13987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.355273][T13987] RSP: 002b:00007f2294707038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  230.355310][T13987] RAX: ffffffffffffffda RBX: 00007f2295ec5fa0 RCX: 00007f2295c9ebe9
[  230.355327][T13987] RDX: 0000000000000001 RSI: 0000200000001a00 RDI: 0000000000000003
[  230.355342][T13987] RBP: 00007f2294707090 R08: 0000000000000000 R09: 0000000000000000
[  230.355400][T13987] R10: 0000000040010080 R11: 0000000000000246 R12: 0000000000000001
[  230.355416][T13987] R13: 00007f2295ec6038 R14: 00007f2295ec5fa0 R15: 00007ffd1a460f18
[  230.355448][T13987]  </TASK>
[  230.581630][T13997] FAULT_INJECTION: forcing a failure.
[  230.581630][T13997] name failslab, interval 1, probability 0, space 0, times 0
[  230.594240][T13997] CPU: 1 UID: 0 PID: 13997 Comm: syz.5.3506 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  230.594267][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  230.594300][T13997] Call Trace:
[  230.594306][T13997]  <TASK>
[  230.594312][T13997]  __dump_stack+0x1d/0x30
[  230.594335][T13997]  dump_stack_lvl+0xe8/0x140
[  230.594357][T13997]  dump_stack+0x15/0x1b
[  230.594372][T13997]  should_fail_ex+0x265/0x280
[  230.594470][T13997]  ? xfrm_policy_alloc+0x62/0x1b0
[  230.594500][T13997]  should_failslab+0x8c/0xb0
[  230.594522][T13997]  __kmalloc_cache_noprof+0x4c/0x320
[  230.594599][T13997]  ? kmem_cache_free+0xdf/0x300
[  230.594626][T13997]  xfrm_policy_alloc+0x62/0x1b0
[  230.594687][T13997]  pfkey_spdadd+0x1a5/0x950
[  230.594710][T13997]  pfkey_sendmsg+0x718/0x900
[  230.594738][T13997]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  230.594819][T13997]  __sock_sendmsg+0x142/0x180
[  230.594843][T13997]  ____sys_sendmsg+0x31e/0x4e0
[  230.594877][T13997]  ___sys_sendmsg+0x17b/0x1d0
[  230.594980][T13997]  __x64_sys_sendmsg+0xd4/0x160
[  230.595015][T13997]  x64_sys_call+0x191e/0x2ff0
[  230.595093][T13997]  do_syscall_64+0xd2/0x200
[  230.595187][T13997]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  230.595248][T13997]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  230.595268][T13997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.595287][T13997] RIP: 0033:0x7fbec2acebe9
[  230.595301][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.595385][T13997] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.595402][T13997] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  230.595414][T13997] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  230.595425][T13997] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  230.595436][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.595513][T13997] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  230.595530][T13997]  </TASK>
[  231.281253][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'.
[  231.289923][T14033] loop6: detected capacity change from 0 to 2048
[  231.290238][T14035] netlink: 'syz.1.3519': attribute type 30 has an invalid length.
[  231.296904][T14033] journal_path: Non-blockdev passed as './file1'
[  231.310698][T14033] EXT4-fs: error: could not find journal device path
[  231.317516][ T8593] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.326600][ T8593] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.347155][ T8593] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.361060][ T8593] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.408511][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'.
[  231.471068][T14052] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  231.606277][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'.
[  231.629519][T14071] FAULT_INJECTION: forcing a failure.
[  231.629519][T14071] name failslab, interval 1, probability 0, space 0, times 0
[  231.642246][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.5.3533 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  231.642322][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  231.642335][T14071] Call Trace:
[  231.642340][T14071]  <TASK>
[  231.642349][T14071]  __dump_stack+0x1d/0x30
[  231.642374][T14071]  dump_stack_lvl+0xe8/0x140
[  231.642406][T14071]  dump_stack+0x15/0x1b
[  231.642502][T14071]  should_fail_ex+0x265/0x280
[  231.642543][T14071]  should_failslab+0x8c/0xb0
[  231.642646][T14071]  __kmalloc_cache_node_noprof+0x54/0x320
[  231.642678][T14071]  ? __get_vm_area_node+0x106/0x1d0
[  231.642717][T14071]  __get_vm_area_node+0x106/0x1d0
[  231.642749][T14071]  __vmalloc_node_range_noprof+0x273/0xe00
[  231.642825][T14071]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.642856][T14071]  ? avc_has_perm_noaudit+0x1b1/0x200
[  231.642880][T14071]  ? cred_has_capability+0x210/0x280
[  231.642938][T14071]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.642964][T14071]  __vmalloc_noprof+0x83/0xc0
[  231.643021][T14071]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.643053][T14071]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.643154][T14071]  ? bpf_prog_alloc+0x2a/0x150
[  231.643179][T14071]  bpf_prog_alloc+0x3c/0x150
[  231.643206][T14071]  bpf_prog_load+0x514/0x1070
[  231.643304][T14071]  ? security_bpf+0x2b/0x90
[  231.643343][T14071]  __sys_bpf+0x462/0x7b0
[  231.643405][T14071]  __x64_sys_bpf+0x41/0x50
[  231.643435][T14071]  x64_sys_call+0x2aea/0x2ff0
[  231.643509][T14071]  do_syscall_64+0xd2/0x200
[  231.643559][T14071]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  231.643605][T14071]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  231.643633][T14071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.643659][T14071] RIP: 0033:0x7fbec2acebe9
[  231.643714][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.643735][T14071] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  231.643757][T14071] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  231.643773][T14071] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  231.643788][T14071] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  231.643829][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.643841][T14071] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  231.643859][T14071]  </TASK>
[  231.643979][T14071] syz.5.3533: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  231.782523][T14066] loop6: detected capacity change from 0 to 1024
[  231.786931][T14071] ,cpuset=/,mems_allowed=0
[  231.909239][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.5.3533 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  231.909336][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  231.909349][T14071] Call Trace:
[  231.909355][T14071]  <TASK>
[  231.909361][T14071]  __dump_stack+0x1d/0x30
[  231.909434][T14071]  dump_stack_lvl+0xe8/0x140
[  231.909456][T14071]  dump_stack+0x15/0x1b
[  231.909472][T14071]  warn_alloc+0x12b/0x1a0
[  231.909587][T14071]  __vmalloc_node_range_noprof+0x297/0xe00
[  231.909635][T14071]  ? avc_has_perm_noaudit+0x1b1/0x200
[  231.909662][T14071]  ? cred_has_capability+0x210/0x280
[  231.909704][T14071]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.909733][T14071]  __vmalloc_noprof+0x83/0xc0
[  231.909777][T14071]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.909840][T14071]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  231.909873][T14071]  ? bpf_prog_alloc+0x2a/0x150
[  231.909909][T14071]  bpf_prog_alloc+0x3c/0x150
[  231.910068][T14071]  bpf_prog_load+0x514/0x1070
[  231.910109][T14071]  ? security_bpf+0x2b/0x90
[  231.910147][T14071]  __sys_bpf+0x462/0x7b0
[  231.910238][T14071]  __x64_sys_bpf+0x41/0x50
[  231.910265][T14071]  x64_sys_call+0x2aea/0x2ff0
[  231.910351][T14071]  do_syscall_64+0xd2/0x200
[  231.910391][T14071]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  231.910423][T14071]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  231.910521][T14071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.910568][T14071] RIP: 0033:0x7fbec2acebe9
[  231.910585][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.910608][T14071] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  231.910627][T14071] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  231.910696][T14071] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  231.910713][T14071] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  231.910728][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.910744][T14071] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  231.910769][T14071]  </TASK>
[  231.910787][T14071] Mem-Info:
[  231.991825][T14066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.995016][T14071] active_anon:6420 inactive_anon:3 isolated_anon:0
[  231.995016][T14071]  active_file:25142 inactive_file:2340 isolated_file:0
[  231.995016][T14071]  unevictable:0 dirty:502 writeback:0
[  231.995016][T14071]  slab_reclaimable:3618 slab_unreclaimable:37322
[  231.995016][T14071]  mapped:29428 shmem:3380 pagetables:1045
[  231.995016][T14071]  sec_pagetables:0 bounce:0
[  231.995016][T14071]  kernel_misc_reclaimable:0
[  231.995016][T14071]  free:1850567 free_pcp:14780 free_cma:0
[  232.184828][T14071] Node 0 active_anon:25680kB inactive_anon:12kB active_file:100568kB inactive_file:9360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117712kB dirty:2008kB writeback:0kB shmem:13520kB kernel_stack:4464kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.184996][T14071] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.185131][T14071] lowmem_reserve[]: 0 2883 7862 7862
[  232.185155][T14071] Node 0 DMA32 free:2949324kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952856kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  232.185218][T14071] lowmem_reserve[]: 0 0 4978 4978
[  232.185287][T14071] Node 0 Normal free:4437584kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25680kB inactive_anon:12kB active_file:100568kB inactive_file:9360kB unevictable:0kB writepending:2008kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55444kB local_pcp:34292kB free_cma:0kB
[  232.185354][T14071] lowmem_reserve[]: 0 0 0 0
[  232.185383][T14071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.185555][T14071] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949324kB
[  232.185753][T14071] Node 0 Normal: 5*4kB (E) 145*8kB (UE) 203*16kB (UME) 327*32kB (UME) 341*64kB (UME) 181*128kB (UM) 88*256kB (UM) 48*512kB (UME) 105*1024kB (UM) 66*2048kB (UM) 998*4096kB (UM) = 4437484kB
[  232.186102][T14071] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  232.186127][T14071] 30865 total pagecache pages
[  232.186191][T14071] 7 pages in swap cache
[  232.186198][T14071] Free swap  = 124968kB
[  232.186206][T14071] Total swap = 124996kB
[  232.186214][T14071] 2097051 pages RAM
[  232.186220][T14071] 0 pages HighMem/MovableOnly
[  232.186244][T14071] 80437 pages reserved
[  232.419177][T14096] loop5: detected capacity change from 0 to 512
[  232.499091][T14096] ext4: Unknown parameter 'euid>00000000000000000000'
[  232.499196][T11949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.639593][T14108] FAULT_INJECTION: forcing a failure.
[  232.639593][T14108] name failslab, interval 1, probability 0, space 0, times 0
[  232.652302][T14108] CPU: 1 UID: 0 PID: 14108 Comm: syz.5.3544 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  232.652397][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.652412][T14108] Call Trace:
[  232.652419][T14108]  <TASK>
[  232.652426][T14108]  __dump_stack+0x1d/0x30
[  232.652445][T14108]  dump_stack_lvl+0xe8/0x140
[  232.652541][T14108]  dump_stack+0x15/0x1b
[  232.652573][T14108]  should_fail_ex+0x265/0x280
[  232.652629][T14108]  should_failslab+0x8c/0xb0
[  232.652650][T14108]  __kmalloc_noprof+0xa5/0x3e0
[  232.652674][T14108]  ? inotify_handle_inode_event+0x125/0x3d0
[  232.652743][T14108]  inotify_handle_inode_event+0x125/0x3d0
[  232.652798][T14108]  ? __pfx_inotify_handle_inode_event+0x10/0x10
[  232.652833][T14108]  fsnotify_handle_inode_event+0x1c0/0x220
[  232.652873][T14108]  fsnotify+0x1290/0x14b0
[  232.652953][T14108]  __fsnotify_parent+0x29e/0x330
[  232.652989][T14108]  vfs_open+0x19c/0x1e0
[  232.653017][T14108]  path_openat+0x1c5e/0x2170
[  232.653054][T14108]  do_filp_open+0x109/0x230
[  232.653106][T14108]  do_sys_openat2+0xa6/0x110
[  232.653139][T14108]  __x64_sys_openat+0xf2/0x120
[  232.653177][T14108]  x64_sys_call+0x2e9c/0x2ff0
[  232.653198][T14108]  do_syscall_64+0xd2/0x200
[  232.653234][T14108]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  232.653258][T14108]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  232.653281][T14108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.653299][T14108] RIP: 0033:0x7fbec2acebe9
[  232.653349][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.653371][T14108] RSP: 002b:00007fbec1537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  232.653392][T14108] RAX: ffffffffffffffda RBX: 00007fbec2cf5fa0 RCX: 00007fbec2acebe9
[  232.653403][T14108] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c
[  232.653418][T14108] RBP: 00007fbec1537090 R08: 0000000000000000 R09: 0000000000000000
[  232.653429][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  232.653440][T14108] R13: 00007fbec2cf6038 R14: 00007fbec2cf5fa0 R15: 00007ffef04141b8
[  232.653523][T14108]  </TASK>
[  233.109553][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  233.109606][   T29] audit: type=1326 audit(5264150901.234:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.194777][   T29] audit: type=1326 audit(5264150901.274:13744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.218646][   T29] audit: type=1326 audit(5264150901.274:13745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.242301][   T29] audit: type=1326 audit(5264150901.274:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.266029][   T29] audit: type=1326 audit(5264150901.274:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.289541][   T29] audit: type=1326 audit(5264150901.274:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.313172][   T29] audit: type=1326 audit(5264150901.274:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.336741][   T29] audit: type=1326 audit(5264150901.274:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.360227][   T29] audit: type=1326 audit(5264150901.274:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.383998][   T29] audit: type=1326 audit(5264150901.274:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c8bebe9 code=0x7ffc0000
[  233.453746][T14124] loop5: detected capacity change from 0 to 8192
[  233.636377][T14124] vfat filesystem being mounted at /78/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  233.834482][T14137] loop6: detected capacity change from 0 to 8192
[  233.842079][T14137] vfat filesystem being mounted at /145/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  233.902763][T14158] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  233.929444][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3557'.
[  233.978851][T14165] loop6: detected capacity change from 0 to 8192
[  233.989426][T14165] vfat filesystem being mounted at /147/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  234.038787][T14180] FAULT_INJECTION: forcing a failure.
[  234.038787][T14180] name failslab, interval 1, probability 0, space 0, times 0
[  234.051522][T14180] CPU: 0 UID: 0 PID: 14180 Comm: syz.0.3571 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  234.051554][T14180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.051567][T14180] Call Trace:
[  234.051572][T14180]  <TASK>
[  234.051597][T14180]  __dump_stack+0x1d/0x30
[  234.051616][T14180]  dump_stack_lvl+0xe8/0x140
[  234.051683][T14180]  dump_stack+0x15/0x1b
[  234.051748][T14180]  should_fail_ex+0x265/0x280
[  234.051841][T14180]  should_failslab+0x8c/0xb0
[  234.051863][T14180]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  234.051909][T14180]  ? v9fs_session_init+0x78/0xde0
[  234.051934][T14180]  kstrdup+0x3e/0xd0
[  234.052020][T14180]  v9fs_session_init+0x78/0xde0
[  234.052037][T14180]  ? __rcu_read_unlock+0x4f/0x70
[  234.052057][T14180]  ? avc_has_perm_noaudit+0x1b1/0x200
[  234.052078][T14180]  ? should_fail_ex+0xdb/0x280
[  234.052139][T14180]  ? v9fs_mount+0x51/0x5c0
[  234.052172][T14180]  ? should_failslab+0x8c/0xb0
[  234.052266][T14180]  ? __kmalloc_cache_noprof+0x189/0x320
[  234.052365][T14180]  v9fs_mount+0x67/0x5c0
[  234.052394][T14180]  ? selinux_capable+0x31/0x40
[  234.052424][T14180]  ? __pfx_v9fs_mount+0x10/0x10
[  234.052504][T14180]  legacy_get_tree+0x75/0xd0
[  234.052532][T14180]  vfs_get_tree+0x54/0x1d0
[  234.052604][T14180]  do_new_mount+0x207/0x5e0
[  234.052627][T14180]  ? security_capable+0x83/0x90
[  234.052674][T14180]  path_mount+0x4a4/0xb20
[  234.052693][T14180]  ? user_path_at+0x109/0x130
[  234.052772][T14180]  __se_sys_mount+0x28f/0x2e0
[  234.052834][T14180]  ? fput+0x8f/0xc0
[  234.052873][T14180]  __x64_sys_mount+0x67/0x80
[  234.052902][T14180]  x64_sys_call+0x2b4d/0x2ff0
[  234.052960][T14180]  do_syscall_64+0xd2/0x200
[  234.052985][T14180]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  234.053026][T14180]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  234.053055][T14180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.053084][T14180] RIP: 0033:0x7fe61c8bebe9
[  234.053103][T14180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.053159][T14180] RSP: 002b:00007fe61b327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.053176][T14180] RAX: ffffffffffffffda RBX: 00007fe61cae5fa0 RCX: 00007fe61c8bebe9
[  234.053189][T14180] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[  234.053200][T14180] RBP: 00007fe61b327090 R08: 0000200000000300 R09: 0000000000000000
[  234.053263][T14180] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002
[  234.053279][T14180] R13: 00007fe61cae6038 R14: 00007fe61cae5fa0 R15: 00007ffe18eb41c8
[  234.053305][T14180]  </TASK>
[  234.321360][T14177] lo speed is unknown, defaulting to 1000
[  234.395096][T14190] FAULT_INJECTION: forcing a failure.
[  234.395096][T14190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.408289][T14190] CPU: 1 UID: 0 PID: 14190 Comm: syz.6.3575 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  234.408352][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.408368][T14190] Call Trace:
[  234.408375][T14190]  <TASK>
[  234.408381][T14190]  __dump_stack+0x1d/0x30
[  234.408400][T14190]  dump_stack_lvl+0xe8/0x140
[  234.408422][T14190]  dump_stack+0x15/0x1b
[  234.408442][T14190]  should_fail_ex+0x265/0x280
[  234.408554][T14190]  should_fail+0xb/0x20
[  234.408580][T14190]  should_fail_usercopy+0x1a/0x20
[  234.408598][T14190]  strncpy_from_user+0x25/0x230
[  234.408628][T14190]  ? kmem_cache_alloc_noprof+0x186/0x310
[  234.408688][T14190]  ? getname_flags+0x80/0x3b0
[  234.408718][T14190]  getname_flags+0xae/0x3b0
[  234.408802][T14190]  user_path_at+0x28/0x130
[  234.408830][T14190]  __se_sys_mount+0x25b/0x2e0
[  234.408851][T14190]  ? fput+0x8f/0xc0
[  234.408899][T14190]  __x64_sys_mount+0x67/0x80
[  234.408921][T14190]  x64_sys_call+0x2b4d/0x2ff0
[  234.408974][T14190]  do_syscall_64+0xd2/0x200
[  234.409002][T14190]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  234.409027][T14190]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  234.409053][T14190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.409087][T14190] RIP: 0033:0x7f1296ccebe9
[  234.409103][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.409121][T14190] RSP: 002b:00007f129572f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  234.409137][T14190] RAX: ffffffffffffffda RBX: 00007f1296ef5fa0 RCX: 00007f1296ccebe9
[  234.409148][T14190] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[  234.409177][T14190] RBP: 00007f129572f090 R08: 0000200000000040 R09: 0000000000000000
[  234.409191][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.409205][T14190] R13: 00007f1296ef6038 R14: 00007f1296ef5fa0 R15: 00007fff3efc7ce8
[  234.409227][T14190]  </TASK>
[  234.683527][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'.
[  234.853675][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3581'.
[  234.862799][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3581'.
[  234.871738][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3581'.
[  234.885967][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3581'.
[  234.929510][T14204] vhci_hcd: invalid port number 254
[  235.778339][T14247] loop6: detected capacity change from 0 to 8192
[  235.786155][T14247] vfat filesystem being mounted at /154/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  235.860962][T14253] FAULT_INJECTION: forcing a failure.
[  235.860962][T14253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.874149][T14253] CPU: 0 UID: 0 PID: 14253 Comm: syz.2.3599 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  235.874182][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.874198][T14253] Call Trace:
[  235.874205][T14253]  <TASK>
[  235.874213][T14253]  __dump_stack+0x1d/0x30
[  235.874239][T14253]  dump_stack_lvl+0xe8/0x140
[  235.874321][T14253]  dump_stack+0x15/0x1b
[  235.874340][T14253]  should_fail_ex+0x265/0x280
[  235.874380][T14253]  should_fail+0xb/0x20
[  235.874451][T14253]  should_fail_usercopy+0x1a/0x20
[  235.874468][T14253]  _copy_from_user+0x1c/0xb0
[  235.874490][T14253]  ___sys_sendmsg+0xc1/0x1d0
[  235.874578][T14253]  __sys_sendmmsg+0x178/0x300
[  235.874614][T14253]  __x64_sys_sendmmsg+0x57/0x70
[  235.874641][T14253]  x64_sys_call+0x1c4a/0x2ff0
[  235.874695][T14253]  do_syscall_64+0xd2/0x200
[  235.874716][T14253]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  235.874743][T14253]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  235.874831][T14253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.874850][T14253] RIP: 0033:0x7f7959ebebe9
[  235.874895][T14253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.874917][T14253] RSP: 002b:00007f7958927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  235.874939][T14253] RAX: ffffffffffffffda RBX: 00007f795a0e5fa0 RCX: 00007f7959ebebe9
[  235.874953][T14253] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006
[  235.874968][T14253] RBP: 00007f7958927090 R08: 0000000000000000 R09: 0000000000000000
[  235.874982][T14253] R10: 0000000000044080 R11: 0000000000000246 R12: 0000000000000001
[  235.875057][T14253] R13: 00007f795a0e6038 R14: 00007f795a0e5fa0 R15: 00007ffc836b97a8
[  235.875136][T14253]  </TASK>
[  235.877307][T14255] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  236.616942][T14285] loop5: detected capacity change from 0 to 512
[  236.649144][T14285] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  236.683253][T14285] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3610: invalid indirect mapped block 2683928664 (level 1)
[  236.773836][T14285] EXT4-fs (loop5): 1 truncate cleaned up
[  236.794722][T14285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.815178][T14285] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.3610: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  236.835287][T14291] loop6: detected capacity change from 0 to 1756
[  236.842664][T14285] __nla_validate_parse: 2 callbacks suppressed
[  236.842834][T14285] ==================================================================
[  236.856995][T14285] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  236.863614][T14285] 
[  236.865933][T14285] write to 0xffffffff8686acf0 of 8 bytes by task 14291 on cpu 0:
[  236.873643][T14285]  data_alloc+0x27d/0x2b0
[  236.877981][T14285]  prb_reserve+0x808/0xaf0
[  236.882426][T14285]  vprintk_store+0x56d/0x860
[  236.887034][T14285]  vprintk_emit+0x178/0x650
[  236.891534][T14285]  vprintk_default+0x26/0x30
[  236.896123][T14285]  vprintk+0x1d/0x30
[  236.900018][T14285]  _printk+0x79/0xa0
[  236.903923][T14285]  isofs_fill_super+0x1199/0x1270
[  236.908960][T14285]  get_tree_bdev_flags+0x291/0x300
[  236.914073][T14285]  get_tree_bdev+0x1f/0x30
[  236.918494][T14285]  isofs_get_tree+0x1c/0x30
[  236.923016][T14285]  vfs_get_tree+0x54/0x1d0
[  236.927434][T14285]  do_new_mount+0x207/0x5e0
[  236.931934][T14285]  path_mount+0x4a4/0xb20
[  236.936262][T14285]  __se_sys_mount+0x28f/0x2e0
[  236.940941][T14285]  __x64_sys_mount+0x67/0x80
[  236.945541][T14285]  x64_sys_call+0x2b4d/0x2ff0
[  236.950229][T14285]  do_syscall_64+0xd2/0x200
[  236.954738][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.960630][T14285] 
[  236.962950][T14285] read to 0xffffffff8686acf0 of 8 bytes by task 14285 on cpu 1:
[  236.970572][T14285]  prb_reserve+0x221/0xaf0
[  236.974999][T14285]  vprintk_store+0x56d/0x860
[  236.979622][T14285]  vprintk_emit+0x178/0x650
[  236.984124][T14285]  vprintk_default+0x26/0x30
[  236.988710][T14285]  vprintk+0x1d/0x30
[  236.992622][T14285]  _printk+0x79/0xa0
[  236.996522][T14285]  __nla_validate_parse+0x1738/0x1d00
[  237.001892][T14285]  __nla_parse+0x40/0x60
[  237.006137][T14285]  xfrm_user_rcv_msg+0x3b1/0x660
[  237.011087][T14285]  netlink_rcv_skb+0x120/0x220
[  237.015871][T14285]  xfrm_netlink_rcv+0x48/0x60
[  237.020561][T14285]  netlink_unicast+0x5c0/0x690
[  237.025337][T14285]  netlink_sendmsg+0x58b/0x6b0
[  237.030115][T14285]  __sock_sendmsg+0x142/0x180
[  237.034793][T14285]  ____sys_sendmsg+0x31e/0x4e0
[  237.039567][T14285]  ___sys_sendmsg+0x17b/0x1d0
[  237.044253][T14285]  __x64_sys_sendmsg+0xd4/0x160
[  237.049115][T14285]  x64_sys_call+0x191e/0x2ff0
[  237.053795][T14285]  do_syscall_64+0xd2/0x200
[  237.058299][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.064200][T14285] 
[  237.066527][T14285] value changed: 0xfffffffffffc8b08 -> 0x00000000000626b8
[  237.073631][T14285] 
[  237.075950][T14285] Reported by Kernel Concurrency Sanitizer on:
[  237.082100][T14285] CPU: 1 UID: 0 PID: 14285 Comm: syz.5.3610 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) 
[  237.094256][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  237.104311][T14285] ==================================================================
[  236.842678][T14285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3610'.
[  237.122845][T14287] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  237.157412][T14287] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  237.185077][T12869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.