last executing test programs:

2m8.06684758s ago: executing program 0 (id=762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")

2m7.938181012s ago: executing program 0 (id=765):
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xfffffd7e}}, './bus\x00'})
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004006}, 0x4000800)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000100)=ANY=[@ANYBLOB='check=relaxed,uni_xlate=1,coTepage=874,utf8=0,uni_xlate=1\rrodir,uni_xlate=0,\x00'], 0x1, 0x23a, &(0x7f00000002c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

2m7.836429544s ago: executing program 0 (id=770):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x3)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)

2m7.588418709s ago: executing program 0 (id=773):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000e40)={[{@sysvgroups}, {@noload}, {@sysvgroups}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x2000010000, 0x2000000000002, 0x3, 0x0, 0x7ffd})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101442, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf)
socket$tipc(0x1e, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x16, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
sendmmsg$unix(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000780)="432a7711a7e4b60e4b483ba626a7627a98600159b9f6b5304c8c583dd93af95147b89265e9faea81e6d890dd4c3be632896f07b67b94ceb8a14d058ef60dc9c6c1d506c831ccf5acabafded4fe3e611d670ba352d688b7aa7e99dc6cc4e1e1b2992b52785b2a8bd95530b9e7829c1c7ef8433ce1c7a842940e7c3eebb585c3bcbb3e3137ca80bde8c889ed0c45e87abc8a9648ba974785d9fe4b6abae4a7cd3a4bcd606a818d75eb014d60b431", 0xad}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000a00)="e17d95bbebcb7c2d141375453100a30bb8685046831337a20a8279d9064587af479539b90110cd6f43cbf1ddca88d0a2e588724667e532e0a9afcd4f8223933cf43c3bb41a20e9017450658e6cb053ba24ae52998e9ad56743ee180f9da10ae42fa23163aa6bd880775855ed1c2ecc49da522f46a02d8e5be7eb9bf26bd493af113a21683d07cf21b425dccc099319dc98d2a2f7ab5bddc7fc6276226d7b26df56da5dbac8a91a89b29b3ba6270c4cdfa91fd6abc52623a44f98c07a1c40d7e9c04ed3fcb25d3e694bca03bbd88d1fcf", 0xd0}, {&(0x7f0000000b00)="f80ad705a791792f3368efcb3bc8b4c99a789a9149f434ba570bc5bb35117d340004547d4bd3194956e394fdbe1b28a0d4d73d5ba83efea86358656c432d5f3c81781aa1882fd4db0d5b9b10ceb2c3bb7ffb7bf9bd38a50b3c8711647be91db1d95a230d2399b5114dbedd3d38345e330f8234a936cd0b98c6c806714e2c446f208b06b99ffefe5e2f1609336e4e7e2ada3317ea6defb5ffb2883cc80363d3c8aafb0d133932356e2cbb16cafd9cbb1d82b36769cd2575715501fa4ef1e4d6c4ad21a0d03141ce62", 0xc8}, {&(0x7f0000000840)="548b42bfc85fff376e244fe2e3d0a3293faf232b2d220d262c9b3669e74db4c05f463601d3199aceea475654b4c06877de94f22ec3b8ba021f1c5df45d290482f692464c7dd23024a86128c872614a38c54cb5405ca58ff99b0e3cbf1a6e9bdf690f73e614ffb6bce634095bed981d1b3845df97c620d5bbecc6f59f39451e2d8762e85135eb321b03dcee98f15fe1b8194f41e38886d33cb2d7e08092e5ea7f1ac968b6eedbd351e9e6", 0xaa}], 0x5, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x96787e6f45d2d75a}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="501cce5548d9e7e352ca2d2cc0a3cc2ef43cb1fd54", 0x15}, {&(0x7f0000000d00)="80c8444c5674d5b5986a7c8076653fb4495de863627ce2223f47c56402788b2c6aa51c816b896108a3b7756afe35b045a3074fb65af7f319da0785dff53dd695b648fe166eb08780cb8942633d0470d6cab413e8b3b2ea141082d8ae92ccda6d758ee5260ccaba6067cccb2b2ddbe09d6bf75abb4ab759f19adc809c68a54b432bad1c5dd66ac3a6b997fc101a8957952d357a9ac93e132164b173d8071d5cd67e66b3f73f2908153cee70ff8dc1d3eea318a635653a9fb7c9d8eb586e09b417", 0xc0}, {&(0x7f00000006c0)="8720160addd65efe205ff8f03776f410973f5315fd873bcce91363bd0dc289c12fe9c8c2ef98dac4137d008b2e56c7bd1a6be10d99f35940ac64000b1873c888e581709c9e868589", 0x48}], 0x3, 0x0, 0x0, 0x800}}], 0x2, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000090900010073797a300000080080000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003f3c001280140001800c000100636f756e7465720004000280100001800c000100636f756e74657200140001801c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800)
r11 = pidfd_getfd(r3, r3, 0x0)
setns(r11, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)

2m6.609294358s ago: executing program 0 (id=791):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x2, 0x2, 0x2, 0x5}]})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2m5.656231767s ago: executing program 0 (id=798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
move_pages(0x0, 0x2, &(0x7f0000000740)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000880)=[0x10000, 0x9], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

2m5.655956907s ago: executing program 32 (id=798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
move_pages(0x0, 0x2, &(0x7f0000000740)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000880)=[0x10000, 0x9], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

4.395189974s ago: executing program 1 (id=2457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r3, 0x0, 0xeffd)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001000)='tcp_probe\x00', r5, 0x0, 0x1}, 0x18)
socket(0x2c, 0x3, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0xfc, 0x2, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000000008, 0x1}, 0x3013, 0x10000, 0x0, 0x1, 0x8, 0x20008, 0xb, 0x0, 0x8, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, r5, 0x2)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x200, 0x1000000}], 0x0)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x80800)
splice(r6, 0x0, r6, &(0x7f0000000180)=0x8, 0x6, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000068b9e55a85000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.898722813s ago: executing program 3 (id=2464):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="ad3ca0420b80d97a57863c5a0d0e2a648adbcb110b118039b5d4b578922e7b8c3ad5feef1b1a8a96da23a96d92eb2f79a217d3c26eaea3546043dfb25db0f34769b4ed8361999d4e1b8b9eccb30f0972a3b3aee6f7e1dfa1e43727b54d5ea21368730128b5146c66f3a0", 0x6a}], 0x1, 0x7, 0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xff}, &(0x7f0000004500)=0x8)

3.642773299s ago: executing program 5 (id=2469):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0)
sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0)
sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = getpid()
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={<r8=>r1, 0x1, 0x2, 0x9})
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x4)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x81, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0x1, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x5, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x64, 0xff, 0x24, 0x5, 0xe7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x9, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0xb, 0x5, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x3, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x3, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x6, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x5, 0x7fffffff, 0x0, 0x6, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x1, 0x3, 0xa, 0x1, 0x0, 0x7, 0x300, 0x5, 0x3, 0x6, 0xfffffffd, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x400, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0xb, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x2, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x6, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x2, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0xc0, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0x7, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x80000002, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb56, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.501815051s ago: executing program 1 (id=2470):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000140000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x5)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x182, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x3)
acct(0xfffffffffffffffe)

3.096091919s ago: executing program 4 (id=2471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0xbb3, 0x0, 0x0, 0x41100, 0x2c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180))
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xc0, 0x12, 0x4, 0x70bd26, 0x25dfdbfb, {0xa, 0x9, 0x2, 0x9, {0x4e21, 0x4e21, [0x28, 0x8, 0xfffffffc, 0x40], [0x5, 0xe, 0x2, 0x2], 0x0, [0x6, 0xa3ed]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x72, 0x1, "af4aaca19b0b9fefe333850f9e078aa9ddd536ff80d4050103a0fdacba061555b7f1c0c18ec7ea3cce4986a0e1a27b33ef6b3f168a7395e1ecf3927e785d46840d60ff366da4101fd72f352f8f268070c9f42ca3c53ead7ccbd0492356977bf7b0a3ecbb03f7423af8d1a6cef26f"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000814)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x3}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000002000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
r11 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)

3.003233901s ago: executing program 3 (id=2472):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x1432})

2.870083403s ago: executing program 3 (id=2473):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000004000000080007000000000008000200050000021abf131142ca2ec74d4d75824d2282f65ace9b76944e728731fa93ac8f64c4e8"], 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = socket(0x80000000000000a, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r11, 0x0, 0x1000000000000}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="ed176d3fc4bf9f1d007c566977a599b43398822060d8ed1dabe0c2c7c0276571a816f31b0c6be208696cd6c6eaff8c00a5a12c35286aab07514739261ec2f7961b4a0bda27c0b5cfe416132fcb2bc83e66797dd402ebee4ebc7dd22f51a0d42fe24c12072690d624cb6fd682060d58b03ccf11f029ed5bda2ccd91340ea5a1071aa93e079ec5f9a6f1e12eeee019fda34fcaa30cc01ebdd9b65ab09009588f173cacb6d4ee7f00418d999ae6108a2161ea29d831eb0f"], 0x1c}}, 0x0)
r13 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r14, 0x0, 0x3}, 0x18)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}}}, 0x108)

2.776515495s ago: executing program 2 (id=2474):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x7fc6023be75802e7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setxattr$incfs_metadata(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000b80)="15ca05765ad86218d433e26ab10546a47a5f373a23f3f24950a62be4ac050b0c319e89190ed2ebb19c45de272ceefd7a0eeb175f0d4df74768578f3e0ebba8544b78eb071febd82fd22006f5e8f1f46dcb6dc56a4e3978fec095c2e9b2ddc8cfea8c52625996167f93e8c31655886bdf8592ccdcac2cc957b991f0bc029c470d9b86c0039b18bbda986f86029435ee0e7fb13c50b86c062e723a1510d7d7c5207e07d2e7d4d1cf5b41268b6199df60a4c25978d29bfff9997246756b34e3a7c7b8ec2b34ebe8ea813d695878c2354ae38a6d62c380af3b8a3a69cc391d2b", 0xde, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x7, 0x0, 0x89cf, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0xfd}}, 0xe8)
process_vm_writev(r5, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/161, 0xa1}], 0x1, &(0x7f0000001d80), 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r11 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
setreuid(r12, r12)
linkat(r11, &(0x7f00000001c0)='./file1\x00', r11, 0x0, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x18)

2.710054257s ago: executing program 5 (id=2475):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
syz_emit_ethernet(0x3ad, &(0x7f0000001240)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x5, 0x6, '*nG', 0x373, 0x11, 0x0, @mcast2, @remote, {[@fragment={0x2f, 0x0, 0x5, 0x0, 0x0, 0xb, 0x65}, @fragment={0x2e, 0x0, 0x7, 0x1, 0x0, 0xa, 0x65}, @srh={0xe9, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, [@mcast2, @empty]}, @dstopts={0x2b, 0x2, '\x00', [@generic={0x35, 0x10, "3d586f9fa1810e0052d6887714147b05"}]}, @dstopts={0x3a, 0x28, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6}, @generic={0x2, 0xdc, "617073522cf1fe44b82dfb06dfe453552cbdfddfa8a41f934e069ecbd936b8dab6ad2d471593047fcdad0eb905ffe1d92b29b7632d20526a89a46815d4f9695963d510997c139b80609d63612163978ac61798f904e5ba82ec316c580e531898445f7318257571693b8b7c4ca79cfa452143be043c8022f003d920f78ecf10426e7b789ca0c85f55841289d14d84f28f4f23973cacdae16b81c66ac0fee156465a06be60bffbeb1940b31c08d7b6414ef5f9c0502728fa91e7592a2162da45ad9bad4ccf58d85791eca4af14093eed9cc9502163b7152fe94fe720e2"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1b}}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x1000, [0x31, 0x200, 0x928, 0x6, 0xbffb, 0x8]}}, @pad1, @enc_lim={0x4, 0x1, 0x6c}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @hopopts={0x3c, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x63}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @generic={0xde, 0x53, "0ca32527763d190f90c091a2bc0cdf09a2b4fddd0712b1de3c660dd4b217f2c1c572713f42e438bfa5be885559e58319b93aeee9d426ae09e0f66e879f06c90208468685ceb0b25d4788066092d8f4a4855212"}, @generic={0xa, 0x44, "90f628c01755f312a44f076753eabf6f12f701c3710a1eaf0fec875e4518978e119049dfb3106c0a228102569eb3bb4b8d8a88627984daa670cde4ee4cff035260e7bac6"}, @ra={0x5, 0x2, 0x4}]}, @srh={0xff, 0x4, 0x4, 0x2, 0x9, 0x10, 0x9, [@private1, @dev={0xfe, 0x80, '\x00', 0x3e}]}], {0x4e24, 0x4e21, 0xd3, 0x0, @gue={{0x1, 0x0, 0x3, 0x6, 0x100, @void}, "4b574c6dc1e37f0960fc93a62ab187d17621cc4692adcb81a40dbff2ed57c593c66b906be25f16d121ba00d92ef27e6800fae5e1f6e396a3d2b000955f9a71a59a924b8d9db60f50f222776630eccad3a24f0bb9656ba19ad7cf432effbf40015929ddb76dbaec300d107b3be11ca782ff985a7c8288b93efa7fc01c5c96cc81e02370a81f2b2520a12e9f0e30485d80a8890b9c604e8807293006e54e930bff366e2be355217ead7bc446ae9daa123a5ff00fde48886cb89af8b3597e3d01c250cbd055e84e10"}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x370, 0x498, 0x0, 0x230, 0x498, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, &(0x7f0000000400), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vxcan1\x00', {0xff}, {}, 0x6c, 0x40, 0x5, 0x43}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x13, 0xa, 0x8000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0x0, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xff000000], 'macvlan1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x67, 0x6, 0x2, 0x14}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@ipv6header={{0x28}, {0xf8, 0xc, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@remote, 0x3b, 0x26, 0xb942}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@local, 0x36, 0x3a, 0xa}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xfff, 0x3, 0x1000, 0x1}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0x0, 0xff], 'wg2\x00', 'pim6reg1\x00', {}, {0xff}, 0x3c, 0xa7, 0x2, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000240)=[{0x1d, 0x0, 0x0, 0x10000000}, {0x6}]})
fcntl$setlease(r2, 0x400, 0x1)

2.690230957s ago: executing program 4 (id=2476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')

2.656388157s ago: executing program 2 (id=2477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000500))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x7, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@loopback, 0x33})

2.627627298s ago: executing program 1 (id=2478):
r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x3, 0xfffffff8}, 0x4, 0x3, 'id0\x00', 'timer1\x00', 0x0, 0x471, 0x0, 0x7, 0xf8b})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x195, 0x99, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf8}}, 0x40040)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x25, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000006000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000820800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xb, 0x9, &(0x7f0000000540)=""/9, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r4, r4, r0, r4], &(0x7f0000000a80)=[{0x4, 0x1, 0x8, 0x2}, {0x3, 0x2, 0xc, 0x7}, {0x0, 0x1, 0x3, 0x2}, {0x5, 0x1, 0x6, 0x7}, {0x5, 0x3, 0x3}, {0x2, 0x5, 0x2, 0x6}, {0x1, 0x4, 0x10, 0x8}], 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000004c0)='kvm_mmio\x00', r6, 0x0, 0x4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18)
syz_genetlink_get_family_id$l2tp(0x0, r0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})

2.56828746s ago: executing program 2 (id=2479):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000a80)={0x0, 0x2df0, 0x80, 0x0, 0x2b2})
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r5, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000000000)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@dioread_nolock}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")

2.567669099s ago: executing program 4 (id=2480):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7, 0x20, 0x10, 0x659, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x66, 0x0, 0x40, 0x0, 0x0, @empty, @multicast1, {[@noop, @lsrr={0x83, 0x13, 0x4e, [@remote, @local, @loopback, @private=0xa010100]}, @cipso={0x86, 0x17, 0x1, [{0x0, 0x11, "6884742fe2a4d5916887bd9a99fe06"}]}]}}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280))
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010030bd7800fbdbdf250f00000008002c000000000008000300"], 0x24}, 0x1, 0x0, 0x0, 0xa33bb5bc3e491fbb}, 0x4080)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4006)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x3}, {0x0, 0xfff1}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010)

2.407678523s ago: executing program 4 (id=2481):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000440)={'syztnl0\x00', <r0=>0x0, 0x8, 0x20, 0x8001, 0x6, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x64, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@ssrr={0x89, 0xf, 0x87, [@rand_addr=0x64010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}]}, @end, @timestamp_addr={0x44, 0x24, 0xf7, 0x1, 0x5, [{@multicast1, 0x7}, {@private=0xa010102, 0x470}, {@private=0xa010100, 0x7fffffff}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xd8, 0x0, 0x3, [0x3, 0x5, 0x1, 0x148, 0x3, 0x8, 0x4]}, @end]}}}}})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000003c0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
syz_clone3(&(0x7f0000000080)={0x180800400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
sendto$inet6(r3, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r3, 0x1)
socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r5, 0x0, 0x48800)
sendmsg$inet(r5, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(0x0, &(0x7f0000000080)='./file2\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)

2.321298624s ago: executing program 2 (id=2482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
dup(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

2.003458421s ago: executing program 3 (id=2483):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syncfs(0xffffffffffffffff)
write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = open(0x0, 0x109cc2, 0x5c)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, 0x0)
renameat2(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
inotify_init()
ftruncate(r5, 0x200004)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7}, 0x94)

1.857827063s ago: executing program 5 (id=2484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@prjquota}, {@nodiscard}, {@nobh}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@jqfmt_vfsold}]}, 0x9, 0x55f, &(0x7f0000001880)="$eJzs3c9rHFUcAPDvbJL+/pFCKepBAj1Yqd00iT8qeKhH0WJB73VJpqFk0y3ZTWliwfZgL16kCCIWxD/Au8fiP+BfUdBCkRL04CUym9l02+wm22bbTZ3PBybM2ze7b74z8315s2+XDaCwxrI/pYhXI+LbJOJwRCR53XDklWNr2608vD6dLUmsrn72V9LcLiu3Xqv1vP154ZWI+O3riJOlje3Wl5bnKtVqupCXxxvzV8brS8unLs1XZtPZ9PLk1NSZd6Ym33/v3b7F+ub5f3749O5HZ745vvL9L/eP3E7ibBzI69rj2IYb7YWxGMuPyUicfWLDiT40tpMkg94BnslQnucjkfUBh2Moz3rg/++riFgFCiqR/1BQrXFA696+T/fBL40HH67dAG2Mf3jtvZHY07w32reSPHZnlN3vjvah/ayNX/+8cztbon/vQwBs6cbNiDg9PLyx/0vy/u/Zne5hmyfb0P/Bi3M3G/+81Wn8U1of/0SH8c/+Drn7LLbO/9L9PjTTVTb++6Dj+Hd90mp0KC8dbI75RpKLl6pp1rcdiogTMbI7K282n3Nm5d5qt7r28V+2ZO23xoL5ftwf3v34c2Yqjcp2Ym734GbEax3Hv8n6+U86nP/seJzvsY1j6Z3Xu9VtHf/ztfpzxBsdz/+jGa1k8/nJ8eb1MN66Kjb6+9ax37u1P+j4s/O/b/P4R5P2+dr607fx055/0251j8UfvV//u5LPY71ziohrlUZjYSJiV/JJs7yr/fHJR89tlVvbZ/GfOL55/9fp+t8bEV/0GP+tox0mwDvFP6DzP/NU5//pV+59/OWP3drvrf97u7l2In+kl/6v1x3czrEDAAAAAACAnaYUEQciKZXX10ulcnnt8x1HY1+pWqs3Tl6sLV6eieZ3ZUcPRak103247fMQE/nnYVvlybVyaxo2nYqIIxHx3dDeZn15uladGXDsAAAAAAAAAAAAAAAAAAAAsFPs7/L9/8wfQ4PeO+C585PfUFxb5n8/fukJ2JH8/4fikv9QXPIfikv+Q3HJfygu+Q/FJf+huOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NX5c+eyZXXl4fXprDxzdWlxrnb11ExanyvPL06Xp2sLV8qztdpsNS1P1+a3er1qrXZlYjIWr4030npjvL60fGG+tni5ceHSfGU2vZCOvJCoAAAAAAAAAAAAAAAAAAAA4OVSX1qeq1Sr6YKV7a0cPVjQgzm8M3bDSp9XBt0zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wUAAP///Fk0HQ==")
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000001600)={<r3=>0x0, ""/256, <r4=>0x0, 0x0, <r5=>0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0, <r7=>0x0, <r8=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r5, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES8=r8, @ANYRES32=r5, @ANYRES8=r3, @ANYRES64=r3, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r7], 0x0, 0x0, &(0x7f0000000080))
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1, 0x9}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4080)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="4b1e953a092a15a2d6e806d300c81cce9922369c0ac87f7d9b11da82347e6e621fbdb06175fe833f5e6b93cb313bb16267c3ca2b4993b007146a077a8cec8af2e1bbd44a53e8418f723ddc37408ce66a46f99272ee14af0105399f57affa602d2f", 0x61, 0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYRES16=r7, @ANYRES32=r4, @ANYBLOB="9fa13608b979c31581aa8a462f9f94ad7a6be1e26ac9b58aec3cb155169f713b490d2d9db8f2139fed0d9f6f21c7e27728e32c80b7b39ba49647e4c3e80ebd4384e1cddf1a517d3eb1f0d8e2c05f8b6f86eceaa15e03828fbf10cddb1b2c74ac7b1c43d410c644c64d0556df6274f12ea1a7fa84b1652c7d7a1507119bfaf89137ed470547a17767d70c18c0534c78596647f59f3bc98bef6dc581adee96908e5c1ea50ead53433733e4b7120548a9ca5790a818a7906482ee7176540b8441a358f26d358db79f430702", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
r12 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r12, &(0x7f0000000240), 0xfffffecc)
r13 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
ioctl$int_in(r13, 0x5452, &(0x7f0000001840)=0x5d4)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080), &(0x7f0000000b00), 0x2, 0x0)
write$P9_RLOPEN(r13, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct, <r14=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000001fc0)={r14, 0xd, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r11, 0x0, 0x7}, 0x18)
socket(0x400000000010, 0xa, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000000c0)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b, 0x3)
r15 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r15, 0x2007ffc)
sendfile(r15, r15, 0x0, 0x800000009)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)

1.833617514s ago: executing program 3 (id=2485):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x18, 0x803, 0x1000)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
poll(&(0x7f0000000380)=[{r1, 0x4012}], 0x1, 0xa23)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x3, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000840)=[{0x0, 0x0, [0x9, 0x6, 0x6, 0x8cf, 0x7, 0x7ff, 0x8000, 0x4, 0xa9, 0xd, 0x8, 0xffffff0e, 0x4, 0x9, 0x2]}, {0x10, 0x0, [0x6, 0x8, 0x7, 0x0, 0x8, 0x2, 0xfffff001, 0x3, 0x380, 0x1, 0x3, 0x4, 0x8, 0x405, 0xfffffffb, 0x98d0]}, {0x8, 0x0, [0x0, 0x6, 0x7, 0x7f, 0x3, 0x7ff, 0x8, 0x1, 0x7f, 0x3, 0x2, 0xd, 0x2, 0x2, 0x6477e26b, 0x2da]}, {0x10, 0x0, [0xffff, 0x7, 0x0, 0x7, 0x5c11, 0x5, 0x8, 0xbe82, 0xf, 0xfffffffd, 0x9, 0x5, 0x4, 0x0, 0x8, 0x8000]}, {0x21, 0x0, [0x6, 0x1, 0x1, 0x1, 0x7, 0x9, 0xffff, 0x4, 0x20000000, 0x8, 0x0, 0x7, 0x3ff, 0x2, 0x2056, 0xf]}, {0x0, 0x0, [0x7d9c, 0x8, 0x3, 0x5, 0x4, 0x9, 0x5, 0x3, 0x0, 0xb, 0xffff8001, 0x3, 0x52, 0xffffff00, 0xf141, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000003c0)=0x4000000, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
socket$igmp(0x2, 0x3, 0x2)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0x5, &(0x7f0000000040)={@rand_addr=0x64010102, @private=0xa010101, 0xfffb, "66e5aff8e7eb3af1f6cec2e74200fcff8b84aea317000023f84992000400", 0x96bd, 0x1000003, 0xfffffff9, 0x4261}, 0x3c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='sched_switch\x00', r8, 0x0, 0x40000000003c9940}, 0x18)

1.205189216s ago: executing program 5 (id=2486):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syncfs(0xffffffffffffffff)
write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = open(0x0, 0x109cc2, 0x5c)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, 0x0)
renameat2(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
inotify_init()
ftruncate(r5, 0x200004)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}}, 0x0, 0x26}, 0x28) (fail_nth: 1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7}, 0x94)

1.089885028s ago: executing program 1 (id=2487):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)

963.837881ms ago: executing program 1 (id=2488):
bind$l2tp(0xffffffffffffffff, 0x0, 0x0)
getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f00000000c0))
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r4, &(0x7f0000001280)=""/4096, 0x1000, 0x40000100, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x1}}], 0x1, 0xc0)
sendto$inet(r4, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)

507.8556ms ago: executing program 5 (id=2489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000500))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x7, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@loopback, 0x33})

506.55317ms ago: executing program 3 (id=2490):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
r5 = gettid()
process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, 0x0, 0x4010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r5], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r8)

505.45783ms ago: executing program 4 (id=2491):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x34, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="170000001020000000000000", @ANYRES32=r0, @ANYBLOB="f9732e8ab5fc89173828641b7214bb5001c930db141b9ce6de955b11b4e75c715f0de0406c9da31ba367f1477d98a7422c00290ff998431c2abe0aeaed801c082c04d207e2d822d2408b5ba2809fc36ae3263e8aacafb2a6783efcad073e06654e7be36f8822c3937e9e6e713e39f79cf7bcc65424dc6c8c7e7a4948d988a12412d1d8b1d98cc89705ea0de3ee2e5765e0a732d2e78ce474bef8b355c26cb244e56586c4aaf529440ee0296d2d707304140135ad073eda7b209b272047f1f1d2382c96bc5dfe8b2b9afa3b7f8ea0fef89134d14cf18b6ed2282d29ff9a143335a9153875a7da80007d2ced6c6ba247c4740196fa939150e7bceef35546ba8fe81f8f2ab9e4268000c609178ca524c0d3d33ce4525bcd8a505f55ee83a975b747ed9222612905b7b57c6eafae986263183580d6c68b114d6b354c2d084c2bfca7fa8a403d71fe492dc0252dbdf69c5d6afec9cc5b2ba031128dd5912574fa16", @ANYRES64=r3], 0x20)
getpid()
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r10=>0x0})
setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote, r10}, 0xc)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x94}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002cbd7000ffdbdf250a00000004000180040001802c000180050002000d00000008000300ac14141308000700", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r13, @ANYBLOB='\x00'/16], 0x58}}, 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)

420.076051ms ago: executing program 2 (id=2492):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000a80)={0x0, 0x2df0, 0x80, 0x0, 0x2b2})
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r5, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000000000)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@dioread_nolock}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")

389.716792ms ago: executing program 5 (id=2493):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$netlink(0x10, 0x3, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000001180)={0x88, 0x12, 0x1, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @private0, @private1, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, 0x98)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x499, 0x6})
sendmsg$nl_route(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="0000000000020000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x40048d0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000010c0)='ext4_mb_release_inode_pa\x00', r6}, 0x18)
open(&(0x7f0000000280)='./file0\x00', 0x111000, 0x62)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0)
syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==")

321.380113ms ago: executing program 4 (id=2494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000a80)={0x0, 0x2df0, 0x80, 0x0, 0x2b2})
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r5, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000000000)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@dioread_nolock}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")

212.330775ms ago: executing program 2 (id=2495):
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4004, &(0x7f0000001680)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@data_err_ignore}, {@nogrpid}, {@resuid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}], [{@flag='rw'}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000003c0)={0x1, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
poll(&(0x7f0000000140)=[{r1, 0x248}, {r4, 0xb}, {r0}, {r2, 0x1d0}, {r3, 0x100}, {r5, 0x2}], 0x6, 0x80000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mlockall(0x2)
r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r6, @ANYRES16], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000b1e00001002abd7000004000000a201400000000031300010014000200f80231bc00000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x4c000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c000000100039046e35be71370531a2d60000000031c86eee878e567b", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000144c59f12a1e0382af6eed6ccbb6cb90b33bdf74bfed110d5fa447fb1e928aab164eb1f94fc9e973a066810945cd34b6fd563534a729bb426851ac2c799d537526d670dc619cb03ac327eeadeab7916451a3af6820ed824cf93eace6a66a8ad1b92de7cda159ce490fc87827dfe6a6f8bc717df8a2b56805549f72ab17d0d44d846a6f9f78de8bde00f86f637e0c07e8484e134bc55fc7e345423772eebd95447e34845a402ecd73df1508f12b8e8e54988b628077acf117b1807fdadb5e0decdf0056"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

0s ago: executing program 1 (id=2496):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x1432})

kernel console output (not intermixed with test programs):

e permissive=1
[  188.336960][T10114] FAT-fs (loop3): Directory bread(block 167) failed
[  188.339586][   T29] audit: type=1400 audit(1758705494.955:8390): avc:  denied  { open } for  pid=10119 comm="syz.4.2129" path="net:[4026532576]" dev="nsfs" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  188.370685][T10114] FAT-fs (loop3): Directory bread(block 168) failed
[  188.405278][T10114] FAT-fs (loop3): Directory bread(block 169) failed
[  188.412819][   T29] audit: type=1400 audit(1758705494.995:8391): avc:  denied  { create } for  pid=10119 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  188.435373][   T29] audit: type=1400 audit(1758705495.065:8392): avc:  denied  { write } for  pid=10119 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  188.458486][   T29] audit: type=1400 audit(1758705495.065:8393): avc:  denied  { mount } for  pid=10113 comm="syz.3.2126" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  188.482917][   T29] audit: type=1400 audit(1758705495.065:8394): avc:  denied  { ioctl } for  pid=10119 comm="syz.4.2129" path="socket:[29775]" dev="sockfs" ino=29775 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  188.511105][   T29] audit: type=1400 audit(1758705495.065:8395): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  188.544689][T10126] loop1: detected capacity change from 0 to 1024
[  188.557263][T10126] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.583050][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'.
[  188.595098][T10126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  188.628099][T10126] System zones: 0-1, 3-12
[  188.660244][   T29] audit: type=1326 audit(1758705495.285:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8c99eec9 code=0x7ffc0000
[  188.686994][   T29] audit: type=1326 audit(1758705495.285:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a8c99eec9 code=0x7ffc0000
[  188.702146][T10130] netlink: 'syz.3.2131': attribute type 13 has an invalid length.
[  188.713417][   T29] audit: type=1400 audit(1758705495.285:8398): avc:  denied  { read write } for  pid=10129 comm="syz.3.2131" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  188.743212][T10122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2130: bg 0: block 88: padding at end of block bitmap is not set
[  188.936718][T10138] loop3: detected capacity change from 0 to 1024
[  188.939264][T10138] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.978834][T10138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  188.978868][T10138] System zones: 0-1, 3-12
[  188.990619][T10138] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2132: bg 0: block 88: padding at end of block bitmap is not set
[  189.030097][T10147] loop5: detected capacity change from 0 to 1024
[  189.207180][T10147] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2135: Allocating blocks 449-513 which overlap fs metadata
[  189.262708][T10155] loop3: detected capacity change from 0 to 1024
[  189.267137][T10155] EXT4-fs: Ignoring removed nobh option
[  189.302540][T10155] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  189.356567][T10161] loop2: detected capacity change from 0 to 128
[  189.365524][T10161] FAT-fs (loop2): Directory bread(block 162) failed
[  189.365622][T10161] FAT-fs (loop2): Directory bread(block 163) failed
[  189.365647][T10161] FAT-fs (loop2): Directory bread(block 164) failed
[  189.365773][T10161] FAT-fs (loop2): Directory bread(block 165) failed
[  189.365794][T10161] FAT-fs (loop2): Directory bread(block 166) failed
[  189.365812][T10161] FAT-fs (loop2): Directory bread(block 167) failed
[  189.365876][T10161] FAT-fs (loop2): Directory bread(block 168) failed
[  189.365963][T10161] FAT-fs (loop2): Directory bread(block 169) failed
[  189.417392][T10164] IPv6: Can't replace route, no match found
[  189.437971][T10164] sctp: [Deprecated]: syz.2.2143 (pid 10164) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.437971][T10164] Use struct sctp_sack_info instead
[  189.480580][T10165] loop3: detected capacity change from 0 to 1024
[  189.522396][T10165] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2138: Allocating blocks 449-513 which overlap fs metadata
[  189.645244][T10162] EXT4-fs (loop3): pa ffff888107207ee0: logic 48, phys. 177, len 21
[  189.645353][T10162] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  189.778353][T10142] EXT4-fs (loop5): pa ffff888107207e70: logic 48, phys. 177, len 21
[  189.778388][T10142] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  189.838167][T10173] loop2: detected capacity change from 0 to 1024
[  189.848095][T10177] loop5: detected capacity change from 0 to 512
[  189.848782][T10177] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  189.868140][T10173] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.871333][T10177] EXT4-fs (loop5): 1 truncate cleaned up
[  189.902998][T10173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  189.903037][T10173] System zones: 0-1, 3-12
[  189.904848][T10173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2145: bg 0: block 88: padding at end of block bitmap is not set
[  189.941808][T10154] syz.1.2137 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  189.988981][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.1.2137 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  189.989018][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  189.989033][T10154] Call Trace:
[  189.989042][T10154]  <TASK>
[  189.989052][T10154]  __dump_stack+0x1d/0x30
[  189.989111][T10154]  dump_stack_lvl+0xe8/0x140
[  189.989135][T10154]  dump_stack+0x15/0x1b
[  189.989154][T10154]  dump_header+0x81/0x220
[  189.989255][T10154]  oom_kill_process+0x342/0x400
[  189.989294][T10154]  out_of_memory+0x979/0xb80
[  189.989331][T10154]  try_charge_memcg+0x5e6/0x9e0
[  189.989361][T10154]  obj_cgroup_charge_pages+0xa6/0x150
[  189.989472][T10154]  __memcg_kmem_charge_page+0x9f/0x170
[  189.989507][T10154]  __alloc_frozen_pages_noprof+0x188/0x360
[  189.989545][T10154]  alloc_pages_mpol+0x1e0/0x250
[  189.989656][T10154]  alloc_pages_noprof+0x90/0x130
[  189.989686][T10154]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  189.989811][T10154]  __kvmalloc_node_noprof+0x30f/0x4e0
[  189.989843][T10154]  ? ip_set_alloc+0x1f/0x30
[  189.989867][T10154]  ? ip_set_alloc+0x1f/0x30
[  189.989891][T10154]  ip_set_alloc+0x1f/0x30
[  189.989913][T10154]  hash_netiface_create+0x282/0x740
[  189.989943][T10154]  ? __pfx_hash_netiface_create+0x10/0x10
[  189.989968][T10154]  ip_set_create+0x3cc/0x960
[  189.990068][T10154]  ? __nla_parse+0x40/0x60
[  189.990097][T10154]  nfnetlink_rcv_msg+0x4c6/0x590
[  189.990133][T10154]  netlink_rcv_skb+0x120/0x220
[  189.990160][T10154]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  189.990179][T10177] netlink: 60 bytes leftover after parsing attributes in process `wÞ¡ÿ'.
[  189.990255][T10154]  nfnetlink_rcv+0x16b/0x1690
[  189.990277][T10154]  ? nlmon_xmit+0x4f/0x60
[  189.990306][T10154]  ? consume_skb+0x49/0x150
[  189.990360][T10154]  ? nlmon_xmit+0x4f/0x60
[  189.990389][T10154]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  189.990417][T10154]  ? __dev_queue_xmit+0x1200/0x2000
[  189.990472][T10154]  ? __dev_queue_xmit+0x182/0x2000
[  189.990500][T10154]  ? ref_tracker_free+0x37d/0x3e0
[  189.990529][T10154]  ? __netlink_deliver_tap+0x4dc/0x500
[  189.990558][T10154]  netlink_unicast+0x5c0/0x690
[  189.990657][T10154]  netlink_sendmsg+0x58b/0x6b0
[  189.990685][T10154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.990711][T10154]  __sock_sendmsg+0x145/0x180
[  189.990817][T10154]  ____sys_sendmsg+0x31e/0x4e0
[  189.990845][T10154]  ___sys_sendmsg+0x17b/0x1d0
[  189.990904][T10154]  __x64_sys_sendmsg+0xd4/0x160
[  189.990938][T10154]  x64_sys_call+0x191e/0x2ff0
[  189.991011][T10154]  do_syscall_64+0xd2/0x200
[  189.991042][T10154]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  189.991132][T10154]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  189.991161][T10154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.991183][T10154] RIP: 0033:0x7f9b801beec9
[  189.991201][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.991220][T10154] RSP: 002b:00007f9b7ec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.991288][T10154] RAX: ffffffffffffffda RBX: 00007f9b80415fa0 RCX: 00007f9b801beec9
[  189.991302][T10154] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  189.991316][T10154] RBP: 00007f9b80241f91 R08: 0000000000000000 R09: 0000000000000000
[  189.991329][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.991342][T10154] R13: 00007f9b80416038 R14: 00007f9b80415fa0 R15: 00007ffdd3860138
[  189.991361][T10154]  </TASK>
[  189.991446][T10154] memory: usage 307200kB, limit 307200kB, failcnt 905
[  190.393870][T10154] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  190.393899][T10154] kmem: usage 262144kB, limit 9007199254740988kB, failcnt 0
[  190.393912][T10154] Memory cgroup stats for /syz1:
[  190.394278][T10154] cache 46137344
[  190.422293][T10154] rss 0
[  190.425503][T10154] shmem 46137344
[  190.425516][T10154] mapped_file 0
[  190.425579][T10154] dirty 0
[  190.425586][T10154] writeback 0
[  190.425594][T10154] workingset_refault_anon 96
[  190.425603][T10154] workingset_refault_file 899
[  190.425610][T10154] swap 188416
[  190.425617][T10154] swapcached 0
[  190.425624][T10154] pgpgin 113211
[  190.425631][T10154] pgpgout 101947
[  190.425678][T10154] pgfault 137045
[  190.472171][T10154] pgmajfault 55
[  190.473362][T10185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.476269][T10154] inactive_anon 0
[  190.476279][T10154] active_anon 0
[  190.476284][T10154] inactive_file 0
[  190.476289][T10154] active_file 0
[  190.476294][T10154] unevictable 46137344
[  190.476299][T10154] hierarchical_memory_limit 314572800
[  190.476389][T10154] hierarchical_memsw_limit 9223372036854771712
[  190.476398][T10154] total_cache 46137344
[  190.476406][T10154] total_rss 0
[  190.476414][T10154] total_shmem 46137344
[  190.476421][T10154] total_mapped_file 0
[  190.476428][T10154] total_dirty 0
[  190.476435][T10154] total_writeback 0
[  190.476442][T10154] total_workingset_refault_anon 96
[  190.476450][T10154] total_workingset_refault_file 899
[  190.476459][T10154] total_swap 188416
[  190.562112][T10154] total_swapcached 0
[  190.566911][T10154] total_pgpgin 113211
[  190.571078][T10154] total_pgpgout 101947
[  190.576007][T10154] total_pgfault 137045
[  190.580183][T10154] total_pgmajfault 55
[  190.584776][T10154] total_inactive_anon 0
[  190.589315][T10154] total_active_anon 0
[  190.593526][T10154] total_inactive_file 0
[  190.597863][T10154] total_active_file 0
[  190.602338][T10154] total_unevictable 46137344
[  190.607317][T10154] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2137,pid=10152,uid=0
[  190.625324][T10154] Memory cgroup out of memory: Killed process 10152 (syz.1.2137) total-vm:93824kB, anon-rss:1264kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  190.696616][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'.
[  190.761530][T10194] loop5: detected capacity change from 0 to 512
[  190.781972][T10194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  190.814286][T10194] EXT4-fs (loop5): 1 truncate cleaned up
[  191.065654][T10202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.154982][T10208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.284761][T10212] loop2: detected capacity change from 0 to 128
[  191.293577][T10212] FAT-fs (loop2): Directory bread(block 162) failed
[  191.300468][T10212] FAT-fs (loop2): Directory bread(block 163) failed
[  191.307828][T10212] FAT-fs (loop2): Directory bread(block 164) failed
[  191.315097][T10212] FAT-fs (loop2): Directory bread(block 165) failed
[  191.322019][T10212] FAT-fs (loop2): Directory bread(block 166) failed
[  191.329326][T10212] FAT-fs (loop2): Directory bread(block 167) failed
[  191.336173][T10212] FAT-fs (loop2): Directory bread(block 168) failed
[  191.342946][T10212] FAT-fs (loop2): Directory bread(block 169) failed
[  191.375592][T10214] loop2: detected capacity change from 0 to 1024
[  191.383487][T10214] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.399055][T10214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  191.408045][T10214] System zones: 0-1, 3-12
[  191.415133][T10214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2159: bg 0: block 88: padding at end of block bitmap is not set
[  191.539010][T10222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.549321][T10222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.744577][T10230] loop4: detected capacity change from 0 to 8192
[  191.793749][ T6671]  loop4: p1 p2 < > p3 p4 < p5 >
[  191.799291][ T6671] loop4: partition table partially beyond EOD, truncated
[  191.807816][ T6671] loop4: p1 size 100663296 extends beyond EOD, truncated
[  191.816736][ T6671] loop4: p2 start 591104 is beyond EOD, truncated
[  191.824160][ T6671] loop4: p3 start 33572980 is beyond EOD, truncated
[  191.832664][ T6671] loop4: p5 size 100663296 extends beyond EOD, truncated
[  191.845590][T10230]  loop4: p1 p2 < > p3 p4 < p5 >
[  191.851766][T10230] loop4: partition table partially beyond EOD, truncated
[  191.860202][T10230] loop4: p1 size 100663296 extends beyond EOD, truncated
[  191.869516][T10230] loop4: p2 start 591104 is beyond EOD, truncated
[  191.877598][T10230] loop4: p3 start 33572980 is beyond EOD, truncated
[  191.887332][T10230] loop4: p5 size 100663296 extends beyond EOD, truncated
[  192.014086][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  192.015154][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  192.026738][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  192.066982][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  192.079880][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  192.080442][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  192.145045][T10239] loop4: detected capacity change from 0 to 8192
[  192.177113][T10245] __nla_validate_parse: 2 callbacks suppressed
[  192.177129][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'.
[  192.193880][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'.
[  192.204476][ T6671]  loop4: p1 p2 < > p3 p4 < p5 >
[  192.210579][ T6671] loop4: partition table partially beyond EOD, truncated
[  192.218947][ T6671] loop4: p1 size 100663296 extends beyond EOD, truncated
[  192.227307][ T6671] loop4: p2 start 591104 is beyond EOD, truncated
[  192.234355][ T6671] loop4: p3 start 33572980 is beyond EOD, truncated
[  192.241664][ T6671] loop4: p5 size 100663296 extends beyond EOD, truncated
[  192.269261][T10239]  loop4: p1 p2 < > p3 p4 < p5 >
[  192.274850][T10239] loop4: partition table partially beyond EOD, truncated
[  192.288429][T10239] loop4: p1 size 100663296 extends beyond EOD, truncated
[  192.295898][T10251] loop3: detected capacity change from 0 to 1024
[  192.299401][T10239] loop4: p2 start 591104 is beyond EOD, truncated
[  192.310696][T10239] loop4: p3 start 33572980 is beyond EOD, truncated
[  192.319174][T10251] EXT4-fs: Ignoring removed nomblk_io_submit option
[  192.321344][T10239] loop4: p5 size 100663296 extends beyond EOD, truncated
[  192.364377][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  192.377995][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  192.390829][T10251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  192.404811][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  192.422122][T10251] System zones: 0-1, 3-12
[  192.431380][T10251] EXT4-fs mount: 44 callbacks suppressed
[  192.431397][T10251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.458768][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  192.489306][T10251] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2174: bg 0: block 88: padding at end of block bitmap is not set
[  192.516384][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.539335][T10263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.588710][T10267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.813716][T10272] loop1: detected capacity change from 0 to 1024
[  192.821693][T10272] EXT4-fs: Ignoring removed nobh option
[  192.829815][T10272] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  192.902463][T10273] loop1: detected capacity change from 0 to 1024
[  192.938606][T10273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.968391][T10273] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2181: Allocating blocks 449-513 which overlap fs metadata
[  192.970845][T10273] EXT4-fs (loop1): pa ffff888107207d20: logic 48, phys. 177, len 21
[  192.991865][T10273] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  193.213531][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  193.354930][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.413671][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.510193][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'.
[  193.510218][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'.
[  193.699546][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.773220][T10294] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  193.792358][T10294] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  193.881515][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  193.881565][   T29] audit: type=1326 audit(1758705500.505:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10306 comm="syz.4.2194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c366eec9 code=0x0
[  193.921185][T10309] loop2: detected capacity change from 0 to 1024
[  193.946903][T10309] EXT4-fs: Ignoring removed nomblk_io_submit option
[  193.965403][   T29] audit: type=1400 audit(1758705500.595:8588): avc:  denied  { map_create } for  pid=10312 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  193.985511][   T29] audit: type=1400 audit(1758705500.595:8589): avc:  denied  { bpf } for  pid=10312 comm="syz.5.2197" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  194.006956][   T29] audit: type=1400 audit(1758705500.595:8590): avc:  denied  { map_read map_write } for  pid=10312 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  194.030975][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'.
[  194.032645][   T29] audit: type=1400 audit(1758705500.655:8591): avc:  denied  { prog_load } for  pid=10312 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  194.062431][   T29] audit: type=1400 audit(1758705500.655:8592): avc:  denied  { perfmon } for  pid=10312 comm="syz.5.2197" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  194.105954][   T29] audit: type=1400 audit(1758705500.725:8593): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.131451][   T29] audit: type=1400 audit(1758705500.725:8594): avc:  denied  { open } for  pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.157474][   T29] audit: type=1400 audit(1758705500.725:8595): avc:  denied  { ioctl } for  pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.200995][T10309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  194.201032][   T29] audit: type=1400 audit(1758705500.765:8596): avc:  denied  { prog_run } for  pid=10317 comm="syz.3.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  194.210324][T10309] System zones: 0-1, 3-12
[  194.263572][T10309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.280086][T10330] loop5: detected capacity change from 0 to 1024
[  194.287835][T10330] EXT4-fs: Ignoring removed nobh option
[  194.297784][T10330] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  194.310381][T10309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2195: bg 0: block 88: padding at end of block bitmap is not set
[  194.346891][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.366297][T10332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  194.366341][T10332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  194.424931][T10338] loop5: detected capacity change from 0 to 1024
[  194.437712][T10338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.491291][T10338] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2203: Allocating blocks 449-513 which overlap fs metadata
[  194.494874][T10338] EXT4-fs (loop5): pa ffff88810724af50: logic 48, phys. 177, len 21
[  194.516222][T10338] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  194.655122][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.656916][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.681941][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2210'.
[  194.791661][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'.
[  195.115308][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.170203][T10368] loop5: detected capacity change from 0 to 1024
[  195.193676][T10368] EXT4-fs: Ignoring removed nobh option
[  195.221563][T10368] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  195.226984][T10370] loop3: detected capacity change from 0 to 8192
[  195.294265][ T6671]  loop3: p1 p2 < > p3 p4 < p5 >
[  195.294280][ T6671] loop3: partition table partially beyond EOD, truncated
[  195.294400][ T6671] loop3: p1 size 100663296 extends beyond EOD, truncated
[  195.295469][ T6671] loop3: p2 start 591104 is beyond EOD, truncated
[  195.295489][ T6671] loop3: p3 start 33572980 is beyond EOD, truncated
[  195.295948][ T6671] loop3: p5 size 100663296 extends beyond EOD, truncated
[  195.303324][T10370]  loop3: p1 p2 < > p3 p4 < p5 >
[  195.303336][T10370] loop3: partition table partially beyond EOD, truncated
[  195.303453][T10370] loop3: p1 size 100663296 extends beyond EOD, truncated
[  195.306799][T10370] loop3: p2 start 591104 is beyond EOD, truncated
[  195.306823][T10370] loop3: p3 start 33572980 is beyond EOD, truncated
[  195.307439][T10370] loop3: p5 size 100663296 extends beyond EOD, truncated
[  195.407148][T10380] loop5: detected capacity change from 0 to 1024
[  195.515428][T10380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.535360][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'.
[  195.558062][T10377] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2214: Allocating blocks 449-513 which overlap fs metadata
[  195.617356][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  195.630398][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  195.630429][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  195.630443][ T3304] Call Trace:
[  195.630452][ T3304]  <TASK>
[  195.630462][ T3304]  __dump_stack+0x1d/0x30
[  195.630579][ T3304]  dump_stack_lvl+0xe8/0x140
[  195.630610][ T3304]  dump_stack+0x15/0x1b
[  195.630631][ T3304]  dump_header+0x81/0x220
[  195.630707][ T3304]  oom_kill_process+0x342/0x400
[  195.630747][ T3304]  out_of_memory+0x979/0xb80
[  195.630786][ T3304]  try_charge_memcg+0x5e6/0x9e0
[  195.630816][ T3304]  charge_memcg+0x51/0xc0
[  195.630906][ T3304]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  195.630933][ T3304]  __read_swap_cache_async+0x1df/0x350
[  195.630976][ T3304]  swap_cluster_readahead+0x376/0x3e0
[  195.631080][ T3304]  swapin_readahead+0xde/0x6f0
[  195.631113][ T3304]  ? __filemap_get_folio+0x4f7/0x6b0
[  195.631132][ T3304]  ? __rcu_read_unlock+0x34/0x70
[  195.631154][ T3304]  ? swap_cache_get_folio+0x77/0x200
[  195.631191][ T3304]  do_swap_page+0x301/0x2430
[  195.631229][ T3304]  ? finish_task_switch+0xad/0x2b0
[  195.631257][ T3304]  ? __pfx_default_wake_function+0x10/0x10
[  195.631296][ T3304]  handle_mm_fault+0x9a5/0x2c20
[  195.631400][ T3304]  do_user_addr_fault+0x636/0x1090
[  195.631435][ T3304]  ? fpregs_restore_userregs+0xe2/0x1d0
[  195.631491][ T3304]  ? switch_fpu_return+0xe/0x20
[  195.631523][ T3304]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  195.631548][ T3304]  exc_page_fault+0x62/0xa0
[  195.631574][ T3304]  asm_exc_page_fault+0x26/0x30
[  195.631596][ T3304] RIP: 0033:0x7f39c36a1745
[  195.631616][ T3304] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  195.631636][ T3304] RSP: 002b:00007ffe5a7c0b18 EFLAGS: 00010246
[  195.631653][ T3304] RAX: 0000000000000000 RBX: 000000000000041e RCX: 00007f39c36a1743
[  195.631665][ T3304] RDX: 00007ffe5a7c0b30 RSI: 0000000000000000 RDI: 0000000000000000
[  195.631678][ T3304] RBP: 00007ffe5a7c0b9c R08: 00000000194588f6 R09: 0000000000000000
[  195.631689][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  195.631744][ T3304] R13: 00000000000927c0 R14: 000000000002f8e5 R15: 00007ffe5a7c0bf0
[  195.631766][ T3304]  </TASK>
[  195.631774][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 788
[  195.950761][ T3304] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  195.950783][ T3304] kmem: usage 278524kB, limit 9007199254740988kB, failcnt 0
[  195.950799][ T3304] Memory cgroup stats for /syz4:
[  195.968034][ T3304] cache 29360128
[  195.976802][ T3304] rss 0
[  195.976815][ T3304] shmem 29360128
[  195.976823][ T3304] mapped_file 0
[  195.976830][ T3304] dirty 0
[  195.976838][ T3304] writeback 0
[  195.976845][ T3304] workingset_refault_anon 270
[  195.976852][ T3304] workingset_refault_file 4201
[  195.976860][ T3304] swap 184320
[  195.976867][ T3304] swapcached 4096
[  195.976873][ T3304] pgpgin 127860
[  195.976880][ T3304] pgpgout 120691
[  195.976888][ T3304] pgfault 158090
[  195.976957][ T3304] pgmajfault 197
[  195.976965][ T3304] inactive_anon 0
[  195.976973][ T3304] active_anon 4096
[  195.976988][ T3304] inactive_file 0
[  195.976996][ T3304] active_file 0
[  195.977003][ T3304] unevictable 29360128
[  195.977061][ T3304] hierarchical_memory_limit 314572800
[  195.977069][ T3304] hierarchical_memsw_limit 9223372036854771712
[  195.977153][ T3304] total_cache 29360128
[  195.977161][ T3304] total_rss 0
[  195.977168][ T3304] total_shmem 29360128
[  195.977176][ T3304] total_mapped_file 0
[  195.977182][ T3304] total_dirty 0
[  195.977237][ T3304] total_writeback 0
[  195.977245][ T3304] total_workingset_refault_anon 270
[  195.977255][ T3304] total_workingset_refault_file 4201
[  195.977264][ T3304] total_swap 184320
[  195.977341][ T3304] total_swapcached 4096
[  195.977355][ T3304] total_pgpgin 127860
[  195.977363][ T3304] total_pgpgout 120691
[  195.977378][ T3304] total_pgfault 158090
[  195.977386][ T3304] total_pgmajfault 197
[  195.977475][ T3304] total_inactive_anon 0
[  195.977505][ T3304] total_active_anon 4096
[  195.977512][ T3304] total_inactive_file 0
[  195.977528][ T3304] total_active_file 0
[  195.977536][ T3304] total_unevictable 29360128
[  195.977545][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2212,pid=10363,uid=0
[  195.977634][ T3304] Memory cgroup out of memory: Killed process 10363 (syz.4.2212) total-vm:93824kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  196.026795][T10367] EXT4-fs (loop5): pa ffff88810724af50: logic 48, phys. 177, len 21
[  196.026825][T10367] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  196.263481][T10412] loop1: detected capacity change from 0 to 1024
[  196.263852][T10412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.279798][T10412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  196.279836][T10412] System zones: 0-1, 3-12
[  196.280428][T10412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.281533][T10412] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2230: bg 0: block 88: padding at end of block bitmap is not set
[  196.300494][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.443729][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.481659][T10427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.163553][T10438] syz.4.2239 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  197.175721][T10438] CPU: 0 UID: 0 PID: 10438 Comm: syz.4.2239 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  197.175749][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  197.175797][T10438] Call Trace:
[  197.175805][T10438]  <TASK>
[  197.175813][T10438]  __dump_stack+0x1d/0x30
[  197.175844][T10438]  dump_stack_lvl+0xe8/0x140
[  197.175862][T10438]  dump_stack+0x15/0x1b
[  197.175878][T10438]  dump_header+0x81/0x220
[  197.175914][T10438]  oom_kill_process+0x342/0x400
[  197.175946][T10438]  out_of_memory+0x979/0xb80
[  197.176053][T10438]  try_charge_memcg+0x5e6/0x9e0
[  197.176088][T10438]  charge_memcg+0x51/0xc0
[  197.176176][T10438]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  197.176198][T10438]  __read_swap_cache_async+0x1df/0x350
[  197.176243][T10438]  swap_cluster_readahead+0x376/0x3e0
[  197.176327][T10438]  swapin_readahead+0xde/0x6f0
[  197.176396][T10438]  ? __filemap_get_folio+0x4f7/0x6b0
[  197.176414][T10438]  ? __rcu_read_unlock+0x34/0x70
[  197.176549][T10438]  ? swap_cache_get_folio+0x77/0x200
[  197.176580][T10438]  do_swap_page+0x301/0x2430
[  197.176603][T10438]  ? css_rstat_updated+0xb7/0x240
[  197.176722][T10438]  ? __pfx_default_wake_function+0x10/0x10
[  197.176745][T10438]  handle_mm_fault+0x9a5/0x2c20
[  197.176775][T10438]  do_user_addr_fault+0x636/0x1090
[  197.176841][T10438]  exc_page_fault+0x62/0xa0
[  197.176873][T10438]  asm_exc_page_fault+0x26/0x30
[  197.176893][T10438] RIP: 0033:0x7f39c35457fe
[  197.176985][T10438] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 b6 25 38 00 85 c0 0f 8e a3 fd ff ff <e8> ad 9c fe ff 49 39 c4 73 a0 48 8d 1d 91 07 38 00 83 3d 96 25 38
[  197.177005][T10438] RSP: 002b:00007ffe5a7c0940 EFLAGS: 00010202
[  197.177021][T10438] RAX: 0000000000000001 RBX: 00007f39c38c7da0 RCX: 0000000000000000
[  197.177034][T10438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555655ee808
[  197.177047][T10438] RBP: 00007f39c38c7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  197.177059][T10438] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000303e0
[  197.177095][T10438] R13: 00007ffe5a7c0a30 R14: ffffffffffffffff R15: 00007ffe5a7c0a50
[  197.177113][T10438]  </TASK>
[  197.177119][T10438] memory: usage 307200kB, limit 307200kB, failcnt 1208
[  197.427076][T10438] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  197.435975][T10438] kmem: usage 278528kB, limit 9007199254740988kB, failcnt 0
[  197.444387][T10438] Memory cgroup stats for /syz4:
[  197.444740][T10438] cache 29360128
[  197.454422][T10438] rss 0
[  197.457301][T10438] shmem 29360128
[  197.461242][T10438] mapped_file 0
[  197.465090][T10438] dirty 0
[  197.468808][T10438] writeback 0
[  197.472215][T10438] workingset_refault_anon 327
[  197.477747][T10438] workingset_refault_file 4588
[  197.482877][T10438] swap 188416
[  197.487559][T10438] swapcached 0
[  197.491390][T10438] pgpgin 128557
[  197.495156][T10438] pgpgout 121389
[  197.498983][T10438] pgfault 158820
[  197.502976][T10438] pgmajfault 232
[  197.507230][T10438] inactive_anon 0
[  197.511328][T10438] active_anon 0
[  197.513271][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.515075][T10438] inactive_file 0
[  197.530065][T10438] active_file 0
[  197.534559][T10438] unevictable 29360128
[  197.539179][T10438] hierarchical_memory_limit 314572800
[  197.545031][T10438] hierarchical_memsw_limit 9223372036854771712
[  197.552257][T10438] total_cache 29360128
[  197.556887][T10438] total_rss 0
[  197.560643][T10438] total_shmem 29360128
[  197.565245][T10438] total_mapped_file 0
[  197.569514][T10438] total_dirty 0
[  197.573082][T10438] total_writeback 0
[  197.577216][T10438] total_workingset_refault_anon 327
[  197.582507][T10438] total_workingset_refault_file 4588
[  197.587931][T10438] total_swap 188416
[  197.591891][T10438] total_swapcached 0
[  197.595917][T10438] total_pgpgin 128557
[  197.600181][T10438] total_pgpgout 121389
[  197.604732][T10438] total_pgfault 158820
[  197.609282][T10438] total_pgmajfault 232
[  197.613514][T10438] total_inactive_anon 0
[  197.617864][T10438] total_active_anon 0
[  197.622343][T10438] total_inactive_file 0
[  197.627025][T10438] total_active_file 0
[  197.631326][T10438] total_unevictable 29360128
[  197.636273][T10438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2239,pid=10438,uid=0
[  197.653803][T10438] Memory cgroup out of memory: Killed process 10438 (syz.4.2239) total-vm:93824kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  197.710529][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2243'.
[  197.712533][T10447] loop1: detected capacity change from 0 to 1024
[  197.727242][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  197.748864][T10447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.767378][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  197.809263][T10447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  197.824540][T10447] System zones: 0-1, 3-12
[  197.830362][T10447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.847866][T10447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2242: bg 0: block 88: padding at end of block bitmap is not set
[  197.875854][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2247'.
[  197.899286][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.977092][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.990340][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.115371][T10471] loop1: detected capacity change from 0 to 128
[  198.200883][T10475] IPv6: Can't replace route, no match found
[  198.613951][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'.
[  198.624778][T10488] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  198.650493][T10488] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  198.855643][T10484] syz.5.2256 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  198.867885][T10484] CPU: 1 UID: 0 PID: 10484 Comm: syz.5.2256 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  198.867931][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  198.867943][T10484] Call Trace:
[  198.867950][T10484]  <TASK>
[  198.867961][T10484]  __dump_stack+0x1d/0x30
[  198.867985][T10484]  dump_stack_lvl+0xe8/0x140
[  198.868007][T10484]  dump_stack+0x15/0x1b
[  198.868027][T10484]  dump_header+0x81/0x220
[  198.868067][T10484]  oom_kill_process+0x342/0x400
[  198.868101][T10484]  out_of_memory+0x979/0xb80
[  198.868211][T10484]  try_charge_memcg+0x5e6/0x9e0
[  198.868243][T10484]  charge_memcg+0x51/0xc0
[  198.868265][T10484]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  198.868290][T10484]  __read_swap_cache_async+0x1df/0x350
[  198.868398][T10484]  swap_cluster_readahead+0x376/0x3e0
[  198.868440][T10484]  swapin_readahead+0xde/0x6f0
[  198.868502][T10484]  ? __filemap_get_folio+0x4f7/0x6b0
[  198.868524][T10484]  ? __rcu_read_unlock+0x34/0x70
[  198.868599][T10484]  ? swap_cache_get_folio+0x77/0x200
[  198.868691][T10484]  do_swap_page+0x301/0x2430
[  198.868720][T10484]  ? css_rstat_updated+0xb7/0x240
[  198.868755][T10484]  ? __pfx_default_wake_function+0x10/0x10
[  198.868796][T10484]  handle_mm_fault+0x9a5/0x2c20
[  198.868833][T10484]  do_user_addr_fault+0x636/0x1090
[  198.868876][T10484]  exc_page_fault+0x62/0xa0
[  198.868909][T10484]  asm_exc_page_fault+0x26/0x30
[  198.868967][T10484] RIP: 0033:0x7fbfdcc257a8
[  198.868987][T10484] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 1a 26 38 00 00 0f 8e 09 fe ff ff e8 13 9d fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00
[  198.869009][T10484] RSP: 002b:00007ffc10494ed0 EFLAGS: 00010212
[  198.869030][T10484] RAX: 000000000003087b RBX: 00007fbfdcfa7da0 RCX: 0000000000030570
[  198.869046][T10484] RDX: 000000000000030b RSI: 00007ffc10494eb0 RDI: 0000000000000001
[  198.869101][T10484] RBP: 00007fbfdcfa7da0 R08: 000000002e7b382c R09: 7fffffffffffffff
[  198.869195][T10484] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000309fa
[  198.869210][T10484] R13: 00007ffc10494fc0 R14: ffffffffffffffff R15: 00007ffc10494fe0
[  198.869233][T10484]  </TASK>
[  198.869278][T10484] memory: usage 307200kB, limit 307200kB, failcnt 638
[  199.043477][   T29] kauditd_printk_skb: 177 callbacks suppressed
[  199.043497][   T29] audit: type=1326 audit(1758705505.665:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.3.2263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a8c99eec9 code=0x0
[  199.050495][T10484] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  199.134210][T10484] kmem: usage 290816kB, limit 9007199254740988kB, failcnt 0
[  199.141781][T10484] Memory cgroup stats for /syz5:
[  199.142221][T10484] cache 16777216
[  199.151397][T10484] rss 0
[  199.154483][T10484] shmem 16777216
[  199.158128][T10484] mapped_file 0
[  199.161759][T10484] dirty 0
[  199.164831][T10484] writeback 0
[  199.168165][T10484] workingset_refault_anon 128
[  199.173017][T10484] workingset_refault_file 0
[  199.177664][T10484] swap 200704
[  199.181141][T10484] swapcached 0
[  199.184607][T10484] pgpgin 83834
[  199.188007][T10484] pgpgout 79738
[  199.191463][T10484] pgfault 91029
[  199.194953][T10484] pgmajfault 66
[  199.198525][T10484] inactive_anon 0
[  199.202538][T10484] active_anon 0
[  199.206253][T10484] inactive_file 0
[  199.210286][T10484] active_file 0
[  199.214142][T10484] unevictable 16777216
[  199.218262][T10484] hierarchical_memory_limit 314572800
[  199.223760][T10484] hierarchical_memsw_limit 9223372036854771712
[  199.230101][T10484] total_cache 16777216
[  199.234470][T10484] total_rss 0
[  199.238023][T10484] total_shmem 16777216
[  199.242371][T10484] total_mapped_file 0
[  199.246401][T10484] total_dirty 0
[  199.250068][T10484] total_writeback 0
[  199.254592][T10484] total_workingset_refault_anon 128
[  199.260064][T10484] total_workingset_refault_file 0
[  199.265903][T10484] total_swap 200704
[  199.269935][T10484] total_swapcached 0
[  199.274062][T10484] total_pgpgin 83834
[  199.278090][T10484] total_pgpgout 79738
[  199.282167][T10484] total_pgfault 91029
[  199.286508][T10484] total_pgmajfault 66
[  199.290676][T10484] total_inactive_anon 0
[  199.294890][T10484] total_active_anon 0
[  199.299058][T10484] total_inactive_file 0
[  199.304235][T10484] total_active_file 0
[  199.308230][T10484] total_unevictable 16777216
[  199.313220][T10484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2256,pid=10484,uid=0
[  199.329617][T10484] Memory cgroup out of memory: Killed process 10484 (syz.5.2256) total-vm:93824kB, anon-rss:1188kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  199.353776][   T29] audit: type=1400 audit(1758705505.975:8775): avc:  denied  { perfmon } for  pid=10501 comm="syz.3.2263" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  199.411496][   T29] audit: type=1400 audit(1758705506.025:8776): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.436882][   T29] audit: type=1400 audit(1758705506.025:8777): avc:  denied  { open } for  pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.462927][   T29] audit: type=1400 audit(1758705506.035:8778): avc:  denied  { ioctl } for  pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.491158][   T29] audit: type=1400 audit(1758705506.105:8779): avc:  denied  { create } for  pid=10514 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  199.512865][   T29] audit: type=1400 audit(1758705506.115:8780): avc:  denied  { bind } for  pid=10514 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  199.533117][   T29] audit: type=1400 audit(1758705506.115:8781): avc:  denied  { map_create } for  pid=10514 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  199.549925][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'.
[  199.554412][   T29] audit: type=1400 audit(1758705506.115:8782): avc:  denied  { map_read map_write } for  pid=10514 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  199.584574][   T29] audit: type=1400 audit(1758705506.115:8783): avc:  denied  { prog_load } for  pid=10514 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  199.617488][T10515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.656457][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.665971][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.702788][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'.
[  199.850535][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'.
[  200.244824][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'.
[  200.254587][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'.
[  200.432595][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'.
[  200.963269][T10575] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  200.972047][T10550] syz.2.2280 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  200.978647][T10575] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  200.987287][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.2.2280 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.987318][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  200.987332][T10550] Call Trace:
[  200.987340][T10550]  <TASK>
[  200.987424][T10550]  __dump_stack+0x1d/0x30
[  200.987448][T10550]  dump_stack_lvl+0xe8/0x140
[  200.987469][T10550]  dump_stack+0x15/0x1b
[  200.987487][T10550]  dump_header+0x81/0x220
[  200.987520][T10550]  oom_kill_process+0x342/0x400
[  200.987592][T10550]  out_of_memory+0x979/0xb80
[  200.987712][T10550]  try_charge_memcg+0x5e6/0x9e0
[  200.987810][T10550]  obj_cgroup_charge_pages+0xa6/0x150
[  200.987842][T10550]  __memcg_kmem_charge_page+0x9f/0x170
[  200.987874][T10550]  __alloc_frozen_pages_noprof+0x188/0x360
[  200.987936][T10550]  alloc_pages_mpol+0x1e0/0x250
[  200.988102][T10550]  alloc_pages_noprof+0x90/0x130
[  200.988134][T10550]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  200.988177][T10550]  __kvmalloc_node_noprof+0x30f/0x4e0
[  200.988218][T10550]  ? ip_set_alloc+0x1f/0x30
[  200.988240][T10550]  ? ip_set_alloc+0x1f/0x30
[  200.988327][T10550]  ? __kmalloc_cache_noprof+0x189/0x320
[  200.988357][T10550]  ip_set_alloc+0x1f/0x30
[  200.988378][T10550]  hash_netiface_create+0x282/0x740
[  200.988481][T10550]  ? __pfx_hash_netiface_create+0x10/0x10
[  200.988584][T10550]  ip_set_create+0x3cc/0x960
[  200.988621][T10550]  ? __nla_parse+0x40/0x60
[  200.988650][T10550]  nfnetlink_rcv_msg+0x4c6/0x590
[  200.988806][T10550]  netlink_rcv_skb+0x120/0x220
[  200.988831][T10550]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  200.988857][T10550]  nfnetlink_rcv+0x16b/0x1690
[  200.988942][T10550]  ? nlmon_xmit+0x4f/0x60
[  200.988973][T10550]  ? consume_skb+0x49/0x150
[  200.988996][T10550]  ? nlmon_xmit+0x4f/0x60
[  200.989062][T10550]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  200.989091][T10550]  ? __dev_queue_xmit+0x1200/0x2000
[  200.989177][T10550]  ? __dev_queue_xmit+0x182/0x2000
[  200.989270][T10550]  ? ref_tracker_free+0x37d/0x3e0
[  200.989299][T10550]  ? __netlink_deliver_tap+0x4dc/0x500
[  200.989329][T10550]  netlink_unicast+0x5c0/0x690
[  200.989354][T10550]  netlink_sendmsg+0x58b/0x6b0
[  200.989421][T10550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.989448][T10550]  __sock_sendmsg+0x145/0x180
[  200.989491][T10550]  ____sys_sendmsg+0x31e/0x4e0
[  200.989521][T10550]  ___sys_sendmsg+0x17b/0x1d0
[  200.989563][T10550]  __x64_sys_sendmsg+0xd4/0x160
[  200.989688][T10550]  x64_sys_call+0x191e/0x2ff0
[  200.989712][T10550]  do_syscall_64+0xd2/0x200
[  200.989743][T10550]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  200.989811][T10550]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  200.989842][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.989882][T10550] RIP: 0033:0x7fdcba80eec9
[  200.989900][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.989919][T10550] RSP: 002b:00007fdcb9277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.990013][T10550] RAX: ffffffffffffffda RBX: 00007fdcbaa65fa0 RCX: 00007fdcba80eec9
[  200.990027][T10550] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  200.990040][T10550] RBP: 00007fdcba891f91 R08: 0000000000000000 R09: 0000000000000000
[  200.990054][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.990067][T10550] R13: 00007fdcbaa66038 R14: 00007fdcbaa65fa0 R15: 00007ffc599e7ff8
[  200.990086][T10550]  </TASK>
[  200.990095][T10550] memory: usage 307200kB, limit 307200kB, failcnt 2406
[  201.043862][T10570] loop5: detected capacity change from 0 to 32768
[  201.048460][T10550] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  201.048480][T10550] kmem: usage 266240kB, limit 9007199254740988kB, failcnt 0
[  201.048496][T10550] Memory cgroup stats for /syz2:
[  201.071850][T10550] cache 41943040
[  201.107769][T10578] IPv6: Can't replace route, no match found
[  201.108331][T10550] rss 0
[  201.108343][T10550] shmem 41943040
[  201.135461][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'.
[  201.139145][T10550] mapped_file 0
[  201.139158][T10550] dirty 0
[  201.139165][T10550] writeback 0
[  201.139172][T10550] workingset_refault_anon 397
[  201.139181][T10550] workingset_refault_file 2776
[  201.139203][T10550] swap 192512
[  201.437427][T10550] swapcached 0
[  201.440982][T10550] pgpgin 103662
[  201.444715][T10550] pgpgout 93422
[  201.448636][T10550] pgfault 131849
[  201.452281][T10550] pgmajfault 265
[  201.456153][T10550] inactive_anon 0
[  201.460034][T10550] active_anon 0
[  201.464120][T10550] inactive_file 0
[  201.467859][T10550] active_file 0
[  201.471693][T10550] unevictable 41943040
[  201.476864][T10550] hierarchical_memory_limit 314572800
[  201.482656][T10550] hierarchical_memsw_limit 9223372036854771712
[  201.488974][T10550] total_cache 41943040
[  201.493166][T10550] total_rss 0
[  201.496634][T10550] total_shmem 41943040
[  201.500816][T10550] total_mapped_file 0
[  201.504818][T10550] total_dirty 0
[  201.508645][T10550] total_writeback 0
[  201.512661][T10550] total_workingset_refault_anon 397
[  201.518293][T10550] total_workingset_refault_file 2776
[  201.523697][T10550] total_swap 192512
[  201.527706][T10550] total_swapcached 0
[  201.532117][T10550] total_pgpgin 103662
[  201.536224][T10550] total_pgpgout 93422
[  201.540527][T10550] total_pgfault 131849
[  201.544978][T10550] total_pgmajfault 265
[  201.550545][T10550] total_inactive_anon 0
[  201.558587][T10550] total_active_anon 0
[  201.562899][T10550] total_inactive_file 0
[  201.567190][T10550] total_active_file 0
[  201.571411][T10550] total_unevictable 41943040
[  201.576675][T10550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2280,pid=10549,uid=0
[  201.592105][T10550] Memory cgroup out of memory: Killed process 10549 (syz.2.2280) total-vm:93824kB, anon-rss:1136kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  201.663560][T10570]  loop5: p1 p3 < >
[  201.704097][T10589] FAULT_INJECTION: forcing a failure.
[  201.704097][T10589] name failslab, interval 1, probability 0, space 0, times 0
[  201.717830][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.5.2292 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  201.717865][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  201.717879][T10589] Call Trace:
[  201.717931][T10589]  <TASK>
[  201.717940][T10589]  __dump_stack+0x1d/0x30
[  201.717967][T10589]  dump_stack_lvl+0xe8/0x140
[  201.718006][T10589]  dump_stack+0x15/0x1b
[  201.718026][T10589]  should_fail_ex+0x265/0x280
[  201.718093][T10589]  should_failslab+0x8c/0xb0
[  201.718117][T10589]  kmem_cache_alloc_noprof+0x50/0x310
[  201.718160][T10589]  ? getname_flags+0x80/0x3b0
[  201.718193][T10589]  getname_flags+0x80/0x3b0
[  201.718224][T10589]  do_sys_openat2+0x60/0x110
[  201.718280][T10589]  __x64_sys_creat+0x65/0x90
[  201.718329][T10589]  x64_sys_call+0x2d94/0x2ff0
[  201.718399][T10589]  do_syscall_64+0xd2/0x200
[  201.718434][T10589]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  201.718532][T10589]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  201.718566][T10589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.718589][T10589] RIP: 0033:0x7fbfdcd4eec9
[  201.718608][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.718641][T10589] RSP: 002b:00007fbfdb7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  201.718673][T10589] RAX: ffffffffffffffda RBX: 00007fbfdcfa5fa0 RCX: 00007fbfdcd4eec9
[  201.718687][T10589] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000200000000040
[  201.718699][T10589] RBP: 00007fbfdb7b7090 R08: 0000000000000000 R09: 0000000000000000
[  201.718714][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.718727][T10589] R13: 00007fbfdcfa6038 R14: 00007fbfdcfa5fa0 R15: 00007ffc10494d68
[  201.718799][T10589]  </TASK>
[  202.003284][T10595] loop5: detected capacity change from 0 to 128
[  202.063323][T10599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  202.078366][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  202.085061][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  202.102747][T10599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  202.202278][T10606] loop5: detected capacity change from 0 to 8192
[  202.233748][ T6671]  loop5: p1 p2 < > p3 p4 < p5 >
[  202.238966][ T6671] loop5: partition table partially beyond EOD, truncated
[  202.248970][ T6671] loop5: p1 size 100663296 extends beyond EOD, truncated
[  202.266551][ T6671] loop5: p2 start 591104 is beyond EOD, truncated
[  202.268103][T10616] loop3: detected capacity change from 0 to 1024
[  202.273596][ T6671] loop5: p3 start 33572980 is beyond EOD, truncated
[  202.280603][T10616] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.289655][ T6671] loop5: p5 size 100663296 extends beyond EOD, truncated
[  202.311757][T10606]  loop5: p1 p2 < > p3 p4 < p5 >
[  202.317207][T10606] loop5: partition table partially beyond EOD, truncated
[  202.327518][T10606] loop5: p1 size 100663296 extends beyond EOD, truncated
[  202.327738][T10616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  202.335562][T10606] loop5: p2 start 591104 is beyond EOD, truncated
[  202.350522][T10606] loop5: p3 start 33572980 is beyond EOD, truncated
[  202.358752][T10606] loop5: p5 size 100663296 extends beyond EOD, truncated
[  202.380827][T10616] System zones: 0-1, 3-12
[  202.388352][T10616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.451896][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  202.465008][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  202.465753][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  202.484200][T10616] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2301: bg 0: block 88: padding at end of block bitmap is not set
[  202.494057][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  202.513790][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  202.525340][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  202.543892][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.853275][T10630] FAULT_INJECTION: forcing a failure.
[  202.853275][T10630] name failslab, interval 1, probability 0, space 0, times 0
[  202.867489][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.4.2305 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  202.867566][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  202.867580][T10630] Call Trace:
[  202.867588][T10630]  <TASK>
[  202.867597][T10630]  __dump_stack+0x1d/0x30
[  202.867622][T10630]  dump_stack_lvl+0xe8/0x140
[  202.867644][T10630]  dump_stack+0x15/0x1b
[  202.867713][T10630]  should_fail_ex+0x265/0x280
[  202.867740][T10630]  should_failslab+0x8c/0xb0
[  202.867767][T10630]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  202.867841][T10630]  ? __d_alloc+0x3d/0x340
[  202.867873][T10630]  __d_alloc+0x3d/0x340
[  202.867897][T10630]  ? __pfx_proc_self_get_link+0x10/0x10
[  202.868004][T10630]  d_alloc_parallel+0x53/0xc60
[  202.868035][T10630]  ? bloom_map_push_elem+0x30/0xd0
[  202.868066][T10630]  ? __rcu_read_unlock+0x34/0x70
[  202.868128][T10630]  ? lockref_get_not_dead+0x120/0x1c0
[  202.868235][T10630]  ? __rcu_read_unlock+0x4f/0x70
[  202.868324][T10630]  __lookup_slow+0x8c/0x250
[  202.868367][T10630]  lookup_slow+0x3c/0x60
[  202.868395][T10630]  link_path_walk+0x753/0x900
[  202.868494][T10630]  path_openat+0x1de/0x2170
[  202.868516][T10630]  ? _parse_integer_limit+0x170/0x190
[  202.868547][T10630]  do_filp_open+0x109/0x230
[  202.868596][T10630]  ? __pfx_kfree_link+0x10/0x10
[  202.868624][T10630]  do_sys_openat2+0xa6/0x110
[  202.868695][T10630]  __x64_sys_openat+0xf2/0x120
[  202.868730][T10630]  x64_sys_call+0x2e9c/0x2ff0
[  202.868754][T10630]  do_syscall_64+0xd2/0x200
[  202.868857][T10630]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  202.868887][T10630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.868912][T10630] RIP: 0033:0x7f39c366d710
[  202.868932][T10630] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  202.868983][T10630] RSP: 002b:00007f39c20cef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  202.869006][T10630] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f39c366d710
[  202.869057][T10630] RDX: 0000000000000002 RSI: 00007f39c20cefa0 RDI: 00000000ffffff9c
[  202.869069][T10630] RBP: 00007f39c20cefa0 R08: 0000000000000000 R09: 0000000000000000
[  202.869081][T10630] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  202.869093][T10630] R13: 00007f39c38c6038 R14: 00007f39c38c5fa0 R15: 00007ffe5a7c07d8
[  202.869223][T10630]  </TASK>
[  203.129783][T10610] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  203.148570][T10622] syz.5.2302 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  203.164121][T10622] CPU: 0 UID: 0 PID: 10622 Comm: syz.5.2302 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  203.164155][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  203.164167][T10622] Call Trace:
[  203.164174][T10622]  <TASK>
[  203.164245][T10622]  __dump_stack+0x1d/0x30
[  203.164270][T10622]  dump_stack_lvl+0xe8/0x140
[  203.164291][T10622]  dump_stack+0x15/0x1b
[  203.164312][T10610] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  203.164308][T10622]  dump_header+0x81/0x220
[  203.164419][T10622]  oom_kill_process+0x342/0x400
[  203.164454][T10622]  out_of_memory+0x979/0xb80
[  203.164487][T10622]  try_charge_memcg+0x5e6/0x9e0
[  203.164543][T10622]  obj_cgroup_charge_pages+0xa6/0x150
[  203.164655][T10622]  __memcg_kmem_charge_page+0x9f/0x170
[  203.164688][T10622]  __alloc_frozen_pages_noprof+0x188/0x360
[  203.164725][T10622]  alloc_pages_mpol+0x1e0/0x250
[  203.164763][T10622]  alloc_pages_noprof+0x90/0x130
[  203.164878][T10622]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  203.164921][T10622]  __kvmalloc_node_noprof+0x30f/0x4e0
[  203.164951][T10622]  ? ip_set_alloc+0x1f/0x30
[  203.165080][T10622]  ? ip_set_alloc+0x1f/0x30
[  203.165128][T10622]  ? __kmalloc_cache_noprof+0x189/0x320
[  203.165159][T10622]  ip_set_alloc+0x1f/0x30
[  203.165258][T10622]  hash_netiface_create+0x282/0x740
[  203.165284][T10622]  ? __pfx_hash_netiface_create+0x10/0x10
[  203.165308][T10622]  ip_set_create+0x3cc/0x960
[  203.165341][T10622]  ? __nla_parse+0x40/0x60
[  203.165390][T10622]  nfnetlink_rcv_msg+0x4c6/0x590
[  203.165446][T10622]  netlink_rcv_skb+0x120/0x220
[  203.165470][T10622]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  203.165560][T10622]  nfnetlink_rcv+0x16b/0x1690
[  203.165582][T10622]  ? nlmon_xmit+0x4f/0x60
[  203.165612][T10622]  ? consume_skb+0x49/0x150
[  203.165721][T10622]  ? nlmon_xmit+0x4f/0x60
[  203.165826][T10622]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  203.165855][T10622]  ? __dev_queue_xmit+0x1200/0x2000
[  203.165881][T10622]  ? __dev_queue_xmit+0x182/0x2000
[  203.165973][T10622]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  203.166009][T10622]  ? ref_tracker_free+0x37d/0x3e0
[  203.166094][T10622]  ? __netlink_deliver_tap+0x4dc/0x500
[  203.166130][T10622]  netlink_unicast+0x5c0/0x690
[  203.166154][T10622]  netlink_sendmsg+0x58b/0x6b0
[  203.166235][T10622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.166312][T10622]  __sock_sendmsg+0x145/0x180
[  203.166344][T10622]  ____sys_sendmsg+0x31e/0x4e0
[  203.166373][T10622]  ___sys_sendmsg+0x17b/0x1d0
[  203.166428][T10622]  __x64_sys_sendmsg+0xd4/0x160
[  203.166459][T10622]  x64_sys_call+0x191e/0x2ff0
[  203.166495][T10622]  do_syscall_64+0xd2/0x200
[  203.166571][T10622]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  203.166597][T10622]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  203.166646][T10622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.166669][T10622] RIP: 0033:0x7fbfdcd4eec9
[  203.166688][T10622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.166734][T10622] RSP: 002b:00007fbfdb7b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.166755][T10622] RAX: ffffffffffffffda RBX: 00007fbfdcfa5fa0 RCX: 00007fbfdcd4eec9
[  203.166793][T10622] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  203.166808][T10622] RBP: 00007fbfdcdd1f91 R08: 0000000000000000 R09: 0000000000000000
[  203.166821][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.166888][T10622] R13: 00007fbfdcfa6038 R14: 00007fbfdcfa5fa0 R15: 00007ffc10494d68
[  203.166908][T10622]  </TASK>
[  203.166915][T10622] memory: usage 306968kB, limit 307200kB, failcnt 738
[  203.276070][T10633] __nla_validate_parse: 4 callbacks suppressed
[  203.276163][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'.
[  203.278790][T10622] memory+swap: usage 307152kB, limit 9007199254740988kB, failcnt 0
[  203.323949][T10635] netlink: 'syz.1.2307': attribute type 6 has an invalid length.
[  203.326408][T10622] kmem: usage 290572kB, limit 9007199254740988kB, failcnt 0
[  203.370988][T10626] loop3: detected capacity change from 0 to 32768
[  203.377068][T10622] Memory cgroup stats for /syz5:
[  203.377604][T10622] cache 16777216
[  203.618163][T10622] rss 110592
[  203.622073][T10622] shmem 16777216
[  203.622648][T10640] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  203.626003][T10622] mapped_file 0
[  203.634260][T10640] SELinux: failed to load policy
[  203.637794][T10622] dirty 0
[  203.647114][T10640] 9pnet_fd: Insufficient options for proto=fd
[  203.654427][T10622] writeback 0
[  203.658330][T10622] workingset_refault_anon 198
[  203.663647][T10622] workingset_refault_file 0
[  203.669070][T10622] swap 90112
[  203.672629][T10622] swapcached 102400
[  203.676982][T10622] pgpgin 91434
[  203.680723][T10622] pgpgout 87311
[  203.684585][T10622] pgfault 100801
[  203.688573][T10622] pgmajfault 113
[  203.692945][T10622] inactive_anon 12288
[  203.697932][T10622] active_anon 98304
[  203.702001][T10622] inactive_file 0
[  203.706190][T10622] active_file 0
[  203.710060][T10622] unevictable 16777216
[  203.714610][T10622] hierarchical_memory_limit 314572800
[  203.720579][T10622] hierarchical_memsw_limit 9223372036854771712
[  203.727454][T10622] total_cache 16777216
[  203.731921][T10622] total_rss 110592
[  203.736775][T10622] total_shmem 16777216
[  203.741362][T10622] total_mapped_file 0
[  203.746112][T10622] total_dirty 0
[  203.750752][T10622] total_writeback 0
[  203.755770][T10622] total_workingset_refault_anon 198
[  203.762890][T10622] total_workingset_refault_file 0
[  203.769652][T10622] total_swap 90112
[  203.774439][T10622] total_swapcached 102400
[  203.779742][T10622] total_pgpgin 91434
[  203.791528][T10622] total_pgpgout 87311
[  203.800007][T10622] total_pgfault 100801
[  203.804794][T10622] total_pgmajfault 113
[  203.809396][T10622] total_inactive_anon 12288
[  203.814600][T10622] total_active_anon 98304
[  203.819489][T10622] total_inactive_file 0
[  203.824083][T10622] total_active_file 0
[  203.828537][T10622] total_unevictable 16777216
[  203.833178][T10622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2302,pid=10621,uid=0
[  203.849453][T10622] Memory cgroup out of memory: Killed process 10622 (syz.5.2302) total-vm:95872kB, anon-rss:1264kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  203.914295][ T6671]  loop3: p1 p3 < p5 >
[  203.918617][ T6671] loop3: partition table partially beyond EOD, truncated
[  203.946665][T10626]  loop3: p1 p3 < >
[  203.963798][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'.
[  204.003416][T10654] IPv6: Can't replace route, no match found
[  204.042084][T10656] loop1: detected capacity change from 0 to 1024
[  204.049195][T10656] EXT4-fs: Ignoring removed nobh option
[  204.069178][T10656] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  204.089640][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'.
[  204.105093][   T29] kauditd_printk_skb: 71 callbacks suppressed
[  204.105111][   T29] audit: type=1400 audit(1758705510.735:8855): avc:  denied  { remount } for  pid=10655 comm="syz.1.2314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  204.183248][   T29] audit: type=1400 audit(1758705510.805:8856): avc:  denied  { mount } for  pid=10661 comm="syz.5.2316" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  204.189095][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  204.189735][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  204.212889][   T29] audit: type=1400 audit(1758705510.825:8857): avc:  denied  { create } for  pid=10659 comm="syz.3.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.230562][   T29] audit: type=1400 audit(1758705510.855:8858): avc:  denied  { unmount } for  pid=10661 comm="syz.5.2316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  204.340622][T10665] loop1: detected capacity change from 0 to 1024
[  204.407651][   T29] audit: type=1400 audit(1758705511.025:8859): avc:  denied  { create } for  pid=10667 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  204.432794][   T29] audit: type=1400 audit(1758705511.035:8860): avc:  denied  { write } for  pid=10667 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  204.500312][T10665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.535540][   T29] audit: type=1400 audit(1758705511.165:8861): avc:  denied  { read write } for  pid=10655 comm="syz.1.2314" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  204.535580][   T29] audit: type=1400 audit(1758705511.165:8862): avc:  denied  { open } for  pid=10655 comm="syz.1.2314" path="/461/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  204.575564][   T29] audit: type=1400 audit(1758705511.195:8863): avc:  denied  { setopt } for  pid=10674 comm="syz.3.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  204.627437][T10663] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2314: Allocating blocks 449-513 which overlap fs metadata
[  204.689535][   T29] audit: type=1400 audit(1758705511.315:8864): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  204.851362][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.851536][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.878776][T10655] EXT4-fs (loop1): pa ffff888107207ee0: logic 48, phys. 177, len 21
[  204.878812][T10655] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  204.905103][T10685] loop4: detected capacity change from 0 to 1024
[  204.933259][T10687] IPv6: Can't replace route, no match found
[  204.935183][T10685] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.960255][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.994207][T10685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  205.003275][T10685] System zones: 0-1, 3-12
[  205.010914][T10685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.029657][T10685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2324: bg 0: block 88: padding at end of block bitmap is not set
[  205.074804][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.258155][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'.
[  205.363287][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'.
[  205.442343][T10717] loop3: detected capacity change from 0 to 128
[  205.463509][T10717] FAT-fs (loop3): Directory bread(block 162) failed
[  205.479223][T10717] FAT-fs (loop3): Directory bread(block 163) failed
[  205.488013][T10717] FAT-fs (loop3): Directory bread(block 164) failed
[  205.496061][T10717] FAT-fs (loop3): Directory bread(block 165) failed
[  205.502826][T10717] FAT-fs (loop3): Directory bread(block 166) failed
[  205.510450][T10717] FAT-fs (loop3): Directory bread(block 167) failed
[  205.518372][T10717] FAT-fs (loop3): Directory bread(block 168) failed
[  205.525681][T10717] FAT-fs (loop3): Directory bread(block 169) failed
[  205.813874][T10735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  205.822330][T10735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  205.857209][T10740] FAULT_INJECTION: forcing a failure.
[  205.857209][T10740] name failslab, interval 1, probability 0, space 0, times 0
[  205.871640][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.5.2344 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  205.871673][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  205.871686][T10740] Call Trace:
[  205.871694][T10740]  <TASK>
[  205.871746][T10740]  __dump_stack+0x1d/0x30
[  205.871788][T10740]  dump_stack_lvl+0xe8/0x140
[  205.871809][T10740]  dump_stack+0x15/0x1b
[  205.871840][T10740]  should_fail_ex+0x265/0x280
[  205.871864][T10740]  should_failslab+0x8c/0xb0
[  205.871892][T10740]  kmem_cache_alloc_noprof+0x50/0x310
[  205.871930][T10740]  ? audit_log_start+0x365/0x6c0
[  205.871959][T10740]  audit_log_start+0x365/0x6c0
[  205.872040][T10740]  audit_seccomp+0x48/0x100
[  205.872068][T10740]  ? __seccomp_filter+0x68c/0x10d0
[  205.872092][T10740]  __seccomp_filter+0x69d/0x10d0
[  205.872116][T10740]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  205.872214][T10740]  ? vfs_write+0x7e8/0x960
[  205.872244][T10740]  __secure_computing+0x82/0x150
[  205.872270][T10740]  syscall_trace_enter+0xcf/0x1e0
[  205.872317][T10740]  do_syscall_64+0xac/0x200
[  205.872399][T10740]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  205.872422][T10740]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  205.872534][T10740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.872555][T10740] RIP: 0033:0x7fbfdcd4eec9
[  205.872574][T10740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.872672][T10740] RSP: 002b:00007fbfdb7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000132
[  205.872698][T10740] RAX: ffffffffffffffda RBX: 00007fbfdcfa5fa0 RCX: 00007fbfdcd4eec9
[  205.872758][T10740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  205.872783][T10740] RBP: 00007fbfdb7b7090 R08: 0000000000000000 R09: 0000000000000000
[  205.872798][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.872813][T10740] R13: 00007fbfdcfa6038 R14: 00007fbfdcfa5fa0 R15: 00007ffc10494d68
[  205.872833][T10740]  </TASK>
[  206.099911][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2346'.
[  206.115367][ T3379] hid_parser_main: 8 callbacks suppressed
[  206.115389][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  206.130156][ T3379] hid-generic 0000:0000:0000.0003: unexpected long global item
[  206.182896][ T3379] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22
[  206.227881][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  206.235618][ T3379] hid-generic 0000:0000:0000.0004: unexpected long global item
[  206.300074][T10753] loop2: detected capacity change from 0 to 512
[  206.308062][ T3379] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22
[  206.352061][T10753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.375075][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2354'.
[  206.385020][T10753] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.424256][T10753] EXT4-fs (loop2): shut down requested (0)
[  206.453510][T10775] IPv6: Can't replace route, no match found
[  206.481338][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'.
[  206.489980][T10753] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[  206.523357][T10753] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[  206.620501][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.743084][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'.
[  206.752410][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'.
[  206.851315][T10794] FAULT_INJECTION: forcing a failure.
[  206.851315][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.865790][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.3.2362 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.865881][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  206.865892][T10794] Call Trace:
[  206.865899][T10794]  <TASK>
[  206.865990][T10794]  __dump_stack+0x1d/0x30
[  206.866017][T10794]  dump_stack_lvl+0xe8/0x140
[  206.866100][T10794]  dump_stack+0x15/0x1b
[  206.866118][T10794]  should_fail_ex+0x265/0x280
[  206.866141][T10794]  should_fail+0xb/0x20
[  206.866162][T10794]  should_fail_usercopy+0x1a/0x20
[  206.866326][T10794]  _copy_to_user+0x20/0xa0
[  206.866357][T10794]  simple_read_from_buffer+0xb5/0x130
[  206.866380][T10794]  proc_fail_nth_read+0x10e/0x150
[  206.866469][T10794]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  206.866645][T10794]  vfs_read+0x1a5/0x770
[  206.866671][T10794]  ? __rcu_read_unlock+0x4f/0x70
[  206.866692][T10794]  ? __fget_files+0x184/0x1c0
[  206.866782][T10794]  ksys_read+0xda/0x1a0
[  206.866811][T10794]  __x64_sys_read+0x40/0x50
[  206.866837][T10794]  x64_sys_call+0x27bc/0x2ff0
[  206.866859][T10794]  do_syscall_64+0xd2/0x200
[  206.866898][T10794]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  206.866923][T10794]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  206.866952][T10794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.867043][T10794] RIP: 0033:0x7f9a8c99d8dc
[  206.867060][T10794] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  206.867080][T10794] RSP: 002b:00007f9a8b407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  206.867104][T10794] RAX: ffffffffffffffda RBX: 00007f9a8cbf5fa0 RCX: 00007f9a8c99d8dc
[  206.867169][T10794] RDX: 000000000000000f RSI: 00007f9a8b4070a0 RDI: 0000000000000004
[  206.867182][T10794] RBP: 00007f9a8b407090 R08: 0000000000000000 R09: 0000000000000000
[  206.867197][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.867209][T10794] R13: 00007f9a8cbf6038 R14: 00007f9a8cbf5fa0 R15: 00007fff6b4a5358
[  206.867230][T10794]  </TASK>
[  207.193288][T10797] 9pnet: Could not find request transport: rdma
[  207.821522][T10778] syz.4.2356 (10778) used greatest stack depth: 6200 bytes left
[  208.247307][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.283317][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.314188][T10841] loop3: detected capacity change from 0 to 1024
[  208.332176][T10841] EXT4-fs: Ignoring removed nomblk_io_submit option
[  208.358434][T10845] IPv6: Can't replace route, no match found
[  208.377247][T10841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  208.493215][T10841] System zones: 0-1, 3-12
[  208.500620][T10841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.531949][T10841] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2374: bg 0: block 88: padding at end of block bitmap is not set
[  208.584199][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.724869][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  208.736154][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  208.736185][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  208.736196][ T3313] Call Trace:
[  208.736204][ T3313]  <TASK>
[  208.736212][ T3313]  __dump_stack+0x1d/0x30
[  208.736233][ T3313]  dump_stack_lvl+0xe8/0x140
[  208.736298][ T3313]  dump_stack+0x15/0x1b
[  208.736317][ T3313]  dump_header+0x81/0x220
[  208.736346][ T3313]  oom_kill_process+0x342/0x400
[  208.736450][ T3313]  out_of_memory+0x979/0xb80
[  208.736490][ T3313]  try_charge_memcg+0x5e6/0x9e0
[  208.736530][ T3313]  charge_memcg+0x51/0xc0
[  208.736587][ T3313]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  208.736611][ T3313]  __read_swap_cache_async+0x1df/0x350
[  208.736671][ T3313]  swap_cluster_readahead+0x277/0x3e0
[  208.736705][ T3313]  swapin_readahead+0xde/0x6f0
[  208.736770][ T3313]  ? __filemap_get_folio+0x4f7/0x6b0
[  208.736790][ T3313]  ? swap_cache_get_folio+0x77/0x200
[  208.736837][ T3313]  do_swap_page+0x301/0x2430
[  208.736909][ T3313]  ? css_rstat_updated+0xb7/0x240
[  208.737013][ T3313]  ? __pfx_default_wake_function+0x10/0x10
[  208.737100][ T3313]  handle_mm_fault+0x9a5/0x2c20
[  208.737188][ T3313]  do_user_addr_fault+0x636/0x1090
[  208.737229][ T3313]  exc_page_fault+0x62/0xa0
[  208.737263][ T3313]  asm_exc_page_fault+0x26/0x30
[  208.737379][ T3313] RIP: 0033:0x7fdcba6e5db7
[  208.737406][ T3313] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24
[  208.737424][ T3313] RSP: 002b:00007ffc599e8380 EFLAGS: 00010202
[  208.737442][ T3313] RAX: 0000001b33024000 RBX: 00000000000004a1 RCX: 0000000000032c80
[  208.737455][ T3313] RDX: 0000000009b6fc64 RSI: 00007ffc599e8410 RDI: 0000000000000009
[  208.737469][ T3313] RBP: 00007ffc599e83bc R08: 00000000250f192d R09: 7fffffffffffffff
[  208.737521][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  208.737592][ T3313] R13: 00000000000927c0 R14: 0000000000032c2f R15: 00007ffc599e8410
[  208.737616][ T3313]  </TASK>
[  208.737625][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 2771
[  208.965569][ T3313] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0
[  208.973778][ T3313] kmem: usage 266228kB, limit 9007199254740988kB, failcnt 0
[  208.981206][ T3313] Memory cgroup stats for /syz2:
[  208.987079][ T3313] cache 41943040
[  208.996243][ T3313] rss 0
[  208.998388][T10851] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  208.999139][ T3313] shmem 41943040
[  208.999150][ T3313] mapped_file 0
[  208.999159][ T3313] dirty 0
[  209.007678][T10851] SELinux: failed to load policy
[  209.010808][ T3313] writeback 0
[  209.010821][ T3313] workingset_refault_anon 459
[  209.010831][ T3313] workingset_refault_file 3627
[  209.020595][T10851] 9pnet_fd: Insufficient options for proto=fd
[  209.023220][ T3313] swap 180224
[  209.023232][ T3313] swapcached 12288
[  209.023241][ T3313] pgpgin 109311
[  209.023249][ T3313] pgpgout 99068
[  209.023259][ T3313] pgfault 139701
[  209.063056][ T3313] pgmajfault 302
[  209.067159][ T3313] inactive_anon 0
[  209.071245][ T3313] active_anon 12288
[  209.075356][ T3313] inactive_file 0
[  209.079184][ T3313] active_file 0
[  209.082765][ T3313] unevictable 41943040
[  209.087144][ T3313] hierarchical_memory_limit 314572800
[  209.092714][ T3313] hierarchical_memsw_limit 9223372036854771712
[  209.099679][ T3313] total_cache 41943040
[  209.103965][ T3313] total_rss 0
[  209.107712][ T3313] total_shmem 41943040
[  209.112054][ T3313] total_mapped_file 0
[  209.116279][ T3313] total_dirty 0
[  209.119844][ T3313] total_writeback 0
[  209.120609][   T29] kauditd_printk_skb: 490 callbacks suppressed
[  209.120623][   T29] audit: type=1400 audit(1758705515.745:9353): avc:  denied  { connect } for  pid=10853 comm="syz.4.2378" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.123792][ T3313] total_workingset_refault_anon 459
[  209.123805][ T3313] total_workingset_refault_file 3627
[  209.162614][ T3313] total_swap 180224
[  209.166626][ T3313] total_swapcached 12288
[  209.170975][ T3313] total_pgpgin 109311
[  209.171762][   T29] audit: type=1326 audit(1758705515.795:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c366eec9 code=0x0
[  209.175152][ T3313] total_pgpgout 99068
[  209.175163][ T3313] total_pgfault 139701
[  209.175173][ T3313] total_pgmajfault 302
[  209.175182][ T3313] total_inactive_anon 0
[  209.175191][ T3313] total_active_anon 12288
[  209.220243][ T3313] total_inactive_file 0
[  209.224517][ T3313] total_active_file 0
[  209.228516][ T3313] total_unevictable 41943040
[  209.233341][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2371,pid=10833,uid=0
[  209.248427][ T3313] Memory cgroup out of memory: Killed process 10833 (syz.2.2371) total-vm:93824kB, anon-rss:1136kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  209.324569][T10862] FAULT_INJECTION: forcing a failure.
[  209.324569][T10862] name failslab, interval 1, probability 0, space 0, times 0
[  209.337953][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.1.2380 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  209.338043][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  209.338057][T10862] Call Trace:
[  209.338066][T10862]  <TASK>
[  209.338075][T10862]  __dump_stack+0x1d/0x30
[  209.338101][T10862]  dump_stack_lvl+0xe8/0x140
[  209.338134][T10862]  dump_stack+0x15/0x1b
[  209.338155][T10862]  should_fail_ex+0x265/0x280
[  209.338292][T10862]  should_failslab+0x8c/0xb0
[  209.338317][T10862]  kmem_cache_alloc_noprof+0x50/0x310
[  209.338399][T10862]  ? radix_tree_node_alloc+0x8a/0x1f0
[  209.338437][T10862]  radix_tree_node_alloc+0x8a/0x1f0
[  209.338465][T10862]  idr_get_free+0x1fa/0x550
[  209.338492][T10862]  idr_alloc_u32+0xca/0x180
[  209.338607][T10862]  tcf_idr_check_alloc+0x193/0x240
[  209.338656][T10862]  tcf_pedit_init+0x1cf/0x9a0
[  209.338708][T10862]  ? should_fail_ex+0xdb/0x280
[  209.338735][T10862]  tcf_action_init_1+0x36a/0x4a0
[  209.338847][T10862]  tcf_action_init+0x267/0x6d0
[  209.338896][T10862]  ? mark_reg_read+0x233/0x340
[  209.338954][T10862]  tc_ctl_action+0x291/0x830
[  209.338996][T10862]  ? __pfx_tc_ctl_action+0x10/0x10
[  209.339046][T10862]  rtnetlink_rcv_msg+0x65a/0x6d0
[  209.339088][T10862]  netlink_rcv_skb+0x120/0x220
[  209.339174][T10862]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  209.339212][T10862]  rtnetlink_rcv+0x1c/0x30
[  209.339362][T10862]  netlink_unicast+0x5c0/0x690
[  209.339385][T10862]  netlink_sendmsg+0x58b/0x6b0
[  209.339411][T10862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.339442][T10862]  __sock_sendmsg+0x145/0x180
[  209.339488][T10862]  ____sys_sendmsg+0x31e/0x4e0
[  209.339521][T10862]  ___sys_sendmsg+0x17b/0x1d0
[  209.339629][T10862]  __x64_sys_sendmsg+0xd4/0x160
[  209.339657][T10862]  x64_sys_call+0x191e/0x2ff0
[  209.339676][T10862]  do_syscall_64+0xd2/0x200
[  209.339715][T10862]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  209.339744][T10862]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  209.339809][T10862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.339898][T10862] RIP: 0033:0x7f9b801beec9
[  209.339915][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.339933][T10862] RSP: 002b:00007f9b7ec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.339957][T10862] RAX: ffffffffffffffda RBX: 00007f9b80415fa0 RCX: 00007f9b801beec9
[  209.339984][T10862] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  209.339996][T10862] RBP: 00007f9b7ec27090 R08: 0000000000000000 R09: 0000000000000000
[  209.340007][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.340021][T10862] R13: 00007f9b80416038 R14: 00007f9b80415fa0 R15: 00007ffdd3860138
[  209.340043][T10862]  </TASK>
[  209.667489][   T29] audit: type=1400 audit(1758705516.295:9355): avc:  denied  { bind } for  pid=10863 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.697183][T10864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  209.697261][   T29] audit: type=1400 audit(1758705516.325:9356): avc:  denied  { create } for  pid=10863 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  209.728296][   T29] audit: type=1400 audit(1758705516.325:9357): avc:  denied  { write } for  pid=10863 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  209.750788][   T29] audit: type=1400 audit(1758705516.325:9358): avc:  denied  { name_bind } for  pid=10863 comm="syz.3.2381" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  209.776828][   T29] audit: type=1400 audit(1758705516.325:9359): avc:  denied  { node_bind } for  pid=10863 comm="syz.3.2381" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  209.786469][T10858] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  209.803579][   T29] audit: type=1400 audit(1758705516.325:9360): avc:  denied  { create } for  pid=10865 comm="syz.1.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  209.835295][   T29] audit: type=1400 audit(1758705516.325:9361): avc:  denied  { read } for  pid=10865 comm="syz.1.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  209.856969][T10858] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  209.893221][   T29] audit: type=1400 audit(1758705516.515:9362): avc:  denied  { create } for  pid=10871 comm="syz.5.2384" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  209.931873][T10872] __nla_validate_parse: 2 callbacks suppressed
[  209.932028][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2384'.
[  209.932303][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'.
[  209.959357][T10872] blktrace: Concurrent blktraces are not allowed on loop11
[  209.981922][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'.
[  210.002735][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'.
[  210.070279][T10890] veth0: entered promiscuous mode
[  210.139672][T10893] loop2: detected capacity change from 0 to 512
[  210.153881][T10893] EXT4-fs: Ignoring removed oldalloc option
[  210.160646][T10893] EXT4-fs: inline encryption not supported
[  210.167118][T10893] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.181651][T10893] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  210.206184][T10893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2390: bg 0: block 64: padding at end of block bitmap is not set
[  210.222542][T10893] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2390: Failed to acquire dquot type 0
[  210.234951][T10893] EXT4-fs (loop2): 1 truncate cleaned up
[  210.241425][T10893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.259586][T10889] veth0: left promiscuous mode
[  210.275786][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.307191][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2391'.
[  210.322914][T10898] openvswitch: netlink: Message has 6 unknown bytes.
[  210.422325][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  210.538776][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.549414][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.915267][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.934465][T10913] loop5: detected capacity change from 0 to 2048
[  210.955198][T10913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.959413][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.999867][T10913] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm +}[@: reserved inode found cleared - inode=1
[  211.052457][T10920] loop2: detected capacity change from 0 to 512
[  211.067896][T10920] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2399: couldn't read orphan inode 26 (err -116)
[  211.091391][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.127840][T10920] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.150357][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.161773][T10925] loop3: detected capacity change from 0 to 128
[  211.240654][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'.
[  211.509815][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.535320][T10940] tipc: Cannot configure node identity twice
[  211.543820][T10940] loop2: detected capacity change from 0 to 164
[  211.567153][T10940] ISOFS: unable to read i-node block
[  211.572718][T10940] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  211.615392][T10942] veth0: entered promiscuous mode
[  211.636662][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'.
[  211.704418][T10946] loop1: detected capacity change from 0 to 512
[  211.711573][T10946] EXT4-fs: Ignoring removed oldalloc option
[  211.717852][T10946] EXT4-fs: inline encryption not supported
[  211.724201][T10946] EXT4-fs: Ignoring removed mblk_io_submit option
[  211.775728][T10946] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  211.825824][T10946] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2403: bg 0: block 64: padding at end of block bitmap is not set
[  211.856125][T10946] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2403: Failed to acquire dquot type 0
[  211.882517][T10946] EXT4-fs (loop1): 1 truncate cleaned up
[  211.905682][T10946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.931356][T10953] loop3: detected capacity change from 0 to 8192
[  211.944375][T10939] veth0: left promiscuous mode
[  211.961512][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.012142][T10958] loop1: detected capacity change from 0 to 1024
[  212.019417][T10958] EXT4-fs: Ignoring removed nobh option
[  212.026475][T10958] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  212.054849][T10953]  loop3: p1 p2 < > p3 p4 < p5 >
[  212.055499][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2411'.
[  212.059966][T10953] loop3: partition table partially beyond EOD, truncated
[  212.108310][T10953] loop3: p1 size 100663296 extends beyond EOD, truncated
[  212.110009][T10953] loop3: p2 start 591104 is beyond EOD, truncated
[  212.122685][T10953] loop3: p3 start 33572980 is beyond EOD, truncated
[  212.165189][T10953] loop3: p5 size 100663296 extends beyond EOD, truncated
[  212.189624][ T2993]  loop3: p1 p2 < > p3 p4 < p5 >
[  212.195005][ T2993] loop3: partition table partially beyond EOD, truncated
[  212.230328][ T2993] loop3: p1 size 100663296 extends beyond EOD, truncated
[  212.230985][ T2993] loop3: p2 start 591104 is beyond EOD, truncated
[  212.231033][ T2993] loop3: p3 start 33572980 is beyond EOD, truncated
[  212.231639][ T2993] loop3: p5 size 100663296 extends beyond EOD, truncated
[  212.267672][T10961] loop1: detected capacity change from 0 to 1024
[  212.276620][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  212.278197][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  212.278237][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  212.303671][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  212.305396][ T6671] udevd[6671]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  212.317264][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  212.437925][T10961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.511606][T10961] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2410: Allocating blocks 449-513 which overlap fs metadata
[  212.539384][T10968] FAULT_INJECTION: forcing a failure.
[  212.539384][T10968] name failslab, interval 1, probability 0, space 0, times 0
[  212.539416][T10968] CPU: 1 UID: 0 PID: 10968 Comm: syz.3.2413 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  212.539445][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  212.539470][T10968] Call Trace:
[  212.539486][T10968]  <TASK>
[  212.539494][T10968]  __dump_stack+0x1d/0x30
[  212.539516][T10968]  dump_stack_lvl+0xe8/0x140
[  212.539539][T10968]  dump_stack+0x15/0x1b
[  212.539558][T10968]  should_fail_ex+0x265/0x280
[  212.539586][T10968]  should_failslab+0x8c/0xb0
[  212.539636][T10968]  kmem_cache_alloc_noprof+0x50/0x310
[  212.539673][T10968]  ? alloc_empty_file+0x76/0x200
[  212.539740][T10968]  ? fast_dput+0x44/0x2c0
[  212.539830][T10968]  alloc_empty_file+0x76/0x200
[  212.539862][T10968]  dentry_open+0x2d/0x90
[  212.539894][T10968]  ptm_open_peer+0x113/0x180
[  212.539925][T10968]  tty_ioctl+0x3bc/0xb80
[  212.540024][T10968]  ? __pfx_tty_ioctl+0x10/0x10
[  212.540043][T10968]  __se_sys_ioctl+0xce/0x140
[  212.540066][T10968]  __x64_sys_ioctl+0x43/0x50
[  212.540086][T10968]  x64_sys_call+0x1816/0x2ff0
[  212.540110][T10968]  do_syscall_64+0xd2/0x200
[  212.540234][T10968]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  212.540287][T10968]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  212.540320][T10968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.540342][T10968] RIP: 0033:0x7f9a8c99eec9
[  212.540416][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.540436][T10968] RSP: 002b:00007f9a8b407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.540460][T10968] RAX: ffffffffffffffda RBX: 00007f9a8cbf5fa0 RCX: 00007f9a8c99eec9
[  212.540474][T10968] RDX: 0000000000000002 RSI: 0000000000005441 RDI: 0000000000000003
[  212.540489][T10968] RBP: 00007f9a8b407090 R08: 0000000000000000 R09: 0000000000000000
[  212.540558][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.540572][T10968] R13: 00007f9a8cbf6038 R14: 00007f9a8cbf5fa0 R15: 00007fff6b4a5358
[  212.540594][T10968]  </TASK>
[  212.784488][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'.
[  212.817445][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.817662][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.062463][T10957] EXT4-fs (loop1): pa ffff888107207f50: logic 48, phys. 177, len 21
[  213.062721][T10957] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  213.380209][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.380389][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.468155][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.566576][T10998] IPv6: Can't replace route, no match found
[  213.770496][T11003] loop4: detected capacity change from 0 to 1024
[  213.782490][T11003] EXT4-fs: Ignoring removed nobh option
[  213.791764][T11003] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  213.918494][T11008] loop1: detected capacity change from 0 to 1024
[  213.925352][T11006] loop4: detected capacity change from 0 to 1024
[  213.934963][T11008] EXT4-fs: Ignoring removed nobh option
[  213.935615][T11008] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  213.977759][T11006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.994347][T11006] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2427: Allocating blocks 449-513 which overlap fs metadata
[  214.005172][T11006] EXT4-fs (loop4): pa ffff88810724ae00: logic 48, phys. 177, len 21
[  214.017963][T11006] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  214.037904][T11013] loop1: detected capacity change from 0 to 1024
[  214.057465][T11013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.078224][T11013] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2429: Allocating blocks 449-513 which overlap fs metadata
[  214.411101][   T29] kauditd_printk_skb: 96 callbacks suppressed
[  214.411119][   T29] audit: type=1400 audit(1758705521.035:9455): avc:  denied  { create } for  pid=11025 comm="syz.3.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  214.417920][   T29] audit: type=1400 audit(1758705521.045:9456): avc:  denied  { bind } for  pid=11025 comm="syz.3.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  214.440406][   T29] audit: type=1400 audit(1758705521.065:9457): avc:  denied  { write } for  pid=11025 comm="syz.3.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  214.523636][T11026] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  214.523690][T11026] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  214.547377][   T29] audit: type=1400 audit(1758705521.175:9458): avc:  denied  { write } for  pid=11032 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  214.547652][   T29] audit: type=1400 audit(1758705521.175:9459): avc:  denied  { ioctl } for  pid=11032 comm="syz.2.2436" path="socket:[32451]" dev="sockfs" ino=32451 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  214.648295][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.680928][   T29] audit: type=1326 audit(1758705521.305:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c366eec9 code=0x7ffc0000
[  214.707748][   T29] audit: type=1326 audit(1758705521.305:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c366eec9 code=0x7ffc0000
[  214.741578][   T29] audit: type=1326 audit(1758705521.335:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c366eec9 code=0x7ffc0000
[  214.741615][   T29] audit: type=1326 audit(1758705521.335:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c366eec9 code=0x7ffc0000
[  214.741645][   T29] audit: type=1326 audit(1758705521.335:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c366eec9 code=0x7ffc0000
[  214.802616][T11039] SELinux: ebitmap: truncated map
[  214.803106][T11039] SELinux: failed to load policy
[  214.829865][T11007] EXT4-fs (loop1): pa ffff88810724ae70: logic 48, phys. 177, len 21
[  214.829918][T11007] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  214.910063][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.910147][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.933421][T11044] __nla_validate_parse: 3 callbacks suppressed
[  214.933454][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'.
[  214.951018][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.025281][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2442'.
[  215.025912][T11050] loop1: detected capacity change from 0 to 1024
[  215.034709][T11048] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2442'.
[  215.034732][T11048] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2442'.
[  215.074739][T11050] EXT4-fs: Ignoring removed nobh option
[  215.093226][T11050] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  215.113784][T11048] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2442'.
[  215.123812][T11048] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2442'.
[  215.163032][T11055] loop5: detected capacity change from 0 to 1024
[  215.204972][T11055] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.239770][T11056] loop1: detected capacity change from 0 to 1024
[  215.246964][T11055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102]
[  215.267078][T11055] System zones: 0-1, 3-12
[  215.267707][T11055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.276104][T11055] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2444: bg 0: block 88: padding at end of block bitmap is not set
[  215.312289][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.413574][T11062] veth0: entered promiscuous mode
[  215.473789][T11069] loop5: detected capacity change from 0 to 512
[  215.490349][T11071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  215.493808][T11069] EXT4-fs: Ignoring removed oldalloc option
[  215.493836][T11069] EXT4-fs: inline encryption not supported
[  215.493857][T11069] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.494594][T11069] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  215.527270][T11069] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2446: bg 0: block 64: padding at end of block bitmap is not set
[  215.554262][T11056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.579249][T11069] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2446: Failed to acquire dquot type 0
[  215.579598][T11069] EXT4-fs (loop5): 1 truncate cleaned up
[  215.579942][T11069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.584697][T11061] veth0: left promiscuous mode
[  215.595610][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.757008][T11056] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2443: Allocating blocks 449-513 which overlap fs metadata
[  215.787570][T11056] EXT4-fs (loop1): pa ffff888107207d20: logic 48, phys. 177, len 21
[  215.787601][T11056] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  215.922594][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.088328][T11088] loop1: detected capacity change from 0 to 128
[  216.098462][T11088] FAT-fs (loop1): Directory bread(block 162) failed
[  216.109063][T11088] FAT-fs (loop1): Directory bread(block 163) failed
[  216.116652][T11088] FAT-fs (loop1): Directory bread(block 164) failed
[  216.124038][T11088] FAT-fs (loop1): Directory bread(block 165) failed
[  216.131781][T11088] FAT-fs (loop1): Directory bread(block 166) failed
[  216.138612][T11088] FAT-fs (loop1): Directory bread(block 167) failed
[  216.145636][T11088] FAT-fs (loop1): Directory bread(block 168) failed
[  216.152430][T11088] FAT-fs (loop1): Directory bread(block 169) failed
[  216.286713][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'.
[  216.350902][T11099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  216.690297][T11115] loop5: detected capacity change from 0 to 1764
[  216.744168][T11120] IPv6: Can't replace route, no match found
[  216.805894][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'.
[  216.902710][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'.
[  216.912807][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'.
[  217.043231][T11137] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.100514][T11137] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.160674][T11141] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.194893][T11139] lo speed is unknown, defaulting to 1000
[  217.433221][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.537143][T11137] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.635121][T11137] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.690878][ T4945] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.716141][ T4945] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.773030][ T4945] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.789413][ T4945] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.887204][T11157] SELinux: ebitmap: truncated map
[  217.895727][T11157] SELinux: failed to load policy
[  218.047632][T11168] veth0: entered promiscuous mode
[  218.145089][T11176] loop2: detected capacity change from 0 to 512
[  218.154168][T11176] EXT4-fs: Ignoring removed oldalloc option
[  218.160727][T11176] EXT4-fs: inline encryption not supported
[  218.167615][T11176] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.178192][T11176] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  218.232874][T11176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2479: bg 0: block 64: padding at end of block bitmap is not set
[  218.251054][T11176] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2479: Failed to acquire dquot type 0
[  218.263745][T11176] EXT4-fs (loop2): 1 truncate cleaned up
[  218.270384][T11176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.287679][T11166] veth0: left promiscuous mode
[  218.302819][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.681088][T11193] loop3: detected capacity change from 0 to 512
[  218.697510][T11193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.716322][T11193] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.791850][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.801719][T11189] syz.2.2482 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  218.819054][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.2.2482 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  218.819122][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  218.819193][T11189] Call Trace:
[  218.819200][T11189]  <TASK>
[  218.819208][T11189]  __dump_stack+0x1d/0x30
[  218.819234][T11189]  dump_stack_lvl+0xe8/0x140
[  218.819255][T11189]  dump_stack+0x15/0x1b
[  218.819271][T11189]  dump_header+0x81/0x220
[  218.819303][T11189]  oom_kill_process+0x342/0x400
[  218.819419][T11189]  out_of_memory+0x979/0xb80
[  218.819475][T11189]  try_charge_memcg+0x5e6/0x9e0
[  218.819506][T11189]  obj_cgroup_charge_pages+0xa6/0x150
[  218.819553][T11189]  __memcg_kmem_charge_page+0x9f/0x170
[  218.819587][T11189]  __alloc_frozen_pages_noprof+0x188/0x360
[  218.819629][T11189]  alloc_pages_mpol+0x1e0/0x250
[  218.819739][T11189]  alloc_pages_noprof+0x90/0x130
[  218.819768][T11189]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  218.819806][T11189]  __kvmalloc_node_noprof+0x30f/0x4e0
[  218.819944][T11189]  ? ip_set_alloc+0x1f/0x30
[  218.819964][T11189]  ? ip_set_alloc+0x1f/0x30
[  218.820087][T11189]  ip_set_alloc+0x1f/0x30
[  218.820105][T11189]  hash_netiface_create+0x282/0x740
[  218.820127][T11189]  ? __pfx_hash_netiface_create+0x10/0x10
[  218.820148][T11189]  ip_set_create+0x3cc/0x960
[  218.820186][T11189]  ? __nla_parse+0x40/0x60
[  218.820384][T11189]  nfnetlink_rcv_msg+0x4c6/0x590
[  218.820402][T11189]  ? rep_movs_alternative+0xf/0x90
[  218.820440][T11189]  netlink_rcv_skb+0x120/0x220
[  218.820488][T11189]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  218.820511][T11189]  nfnetlink_rcv+0x16b/0x1690
[  218.820529][T11189]  ? nlmon_xmit+0x4f/0x60
[  218.820562][T11189]  ? consume_skb+0x49/0x150
[  218.820587][T11189]  ? nlmon_xmit+0x4f/0x60
[  218.820638][T11189]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  218.820664][T11189]  ? __dev_queue_xmit+0x1200/0x2000
[  218.820695][T11189]  ? __dev_queue_xmit+0x182/0x2000
[  218.820791][T11189]  ? ref_tracker_free+0x37d/0x3e0
[  218.820817][T11189]  ? __netlink_deliver_tap+0x4dc/0x500
[  218.820843][T11189]  netlink_unicast+0x5c0/0x690
[  218.820864][T11189]  netlink_sendmsg+0x58b/0x6b0
[  218.820925][T11189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.820949][T11189]  __sock_sendmsg+0x145/0x180
[  218.820978][T11189]  ____sys_sendmsg+0x31e/0x4e0
[  218.821038][T11189]  ___sys_sendmsg+0x17b/0x1d0
[  218.821153][T11189]  __x64_sys_sendmsg+0xd4/0x160
[  218.821186][T11189]  x64_sys_call+0x191e/0x2ff0
[  218.821237][T11189]  do_syscall_64+0xd2/0x200
[  218.821265][T11189]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  218.821288][T11189]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.821327][T11189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.821347][T11189] RIP: 0033:0x7fdcba80eec9
[  218.821364][T11189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.821462][T11189] RSP: 002b:00007fdcb9277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.821549][T11189] RAX: ffffffffffffffda RBX: 00007fdcbaa65fa0 RCX: 00007fdcba80eec9
[  218.821618][T11189] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  218.821630][T11189] RBP: 00007fdcba891f91 R08: 0000000000000000 R09: 0000000000000000
[  218.821642][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.821654][T11189] R13: 00007fdcbaa66038 R14: 00007fdcbaa65fa0 R15: 00007ffc599e7ff8
[  218.821673][T11189]  </TASK>
[  218.821791][T11189] memory: usage 307200kB, limit 307200kB, failcnt 2973
[  218.838153][T11197] loop5: detected capacity change from 0 to 1024
[  218.844293][T11189] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0
[  218.844318][T11189] kmem: usage 266224kB, limit 9007199254740988kB, failcnt 0
[  218.906823][T11197] EXT4-fs: Ignoring removed nobh option
[  218.907258][T11189] Memory cgroup stats for 
[  218.946070][T11197] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  218.950647][T11189] /syz2:
[  218.951446][T11189] cache 41943040
[  219.093733][T11202] loop5: detected capacity change from 0 to 1024
[  219.097983][T11189] rss 0
[  219.126310][T11202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.130163][T11189] shmem 41943040
[  219.153870][T11202] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2484: Allocating blocks 449-513 which overlap fs metadata
[  219.155259][T11189] mapped_file 0
[  219.166689][T11202] EXT4-fs (loop5): pa ffff88810724acb0: logic 48, phys. 177, len 21
[  219.172013][T11189] dirty 0
[  219.172026][T11189] writeback 8192
[  219.172034][T11189] workingset_refault_anon 474
[  219.172042][T11189] workingset_refault_file 3820
[  219.172050][T11189] swap 249856
[  219.172056][T11189] swapcached 16384
[  219.172063][T11189] pgpgin 116656
[  219.172070][T11189] pgpgout 106412
[  219.172086][T11189] pgfault 148590
[  219.172092][T11189] pgmajfault 314
[  219.172100][T11189] inactive_anon 8192
[  219.180774][T11202] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, 
[  219.183980][T11189] active_anon 8192
[  219.183995][T11189] inactive_file 0
[  219.184004][T11189] active_file 0
[  219.191392][T11202] free 0, pa_free 4
[  219.198019][T11189] unevictable 41943040
[  219.198035][T11189] hierarchical_memory_limit 314572800
[  219.380943][T11189] hierarchical_memsw_limit 9223372036854771712
[  219.380960][T11189] total_cache 41943040
[  219.380970][T11189] total_rss 0
[  219.380979][T11189] total_shmem 41943040
[  219.401347][T11189] total_mapped_file 0
[  219.405898][T11189] total_dirty 0
[  219.405911][T11189] total_writeback 8192
[  219.405922][T11189] total_workingset_refault_anon 474
[  219.405972][T11189] total_workingset_refault_file 3820
[  219.405980][T11189] total_swap 249856
[  219.405987][T11189] total_swapcached 16384
[  219.436250][T11189] total_pgpgin 116656
[  219.440436][T11189] total_pgpgout 106412
[  219.444531][T11189] total_pgfault 148590
[  219.449498][T11189] total_pgmajfault 314
[  219.454019][T11189] total_inactive_anon 8192
[  219.458856][T11189] total_active_anon 8192
[  219.463587][T11189] total_inactive_file 0
[  219.467935][T11189] total_active_file 0
[  219.472127][T11189] total_unevictable 41943040
[  219.476969][T11189] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2482,pid=11188,uid=0
[  219.492535][T11189] Memory cgroup out of memory: Killed process 11188 (syz.2.2482) total-vm:93824kB, anon-rss:1136kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  219.512822][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.540928][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  219.540946][   T29] audit: type=1326 audit(1758705526.165:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.545666][T11207] loop5: detected capacity change from 0 to 512
[  219.547827][   T29] audit: type=1326 audit(1758705526.165:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.603966][   T29] audit: type=1326 audit(1758705526.165:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.629135][   T29] audit: type=1326 audit(1758705526.165:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.654570][   T29] audit: type=1326 audit(1758705526.165:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.682400][   T29] audit: type=1326 audit(1758705526.165:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.708139][   T29] audit: type=1326 audit(1758705526.165:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.732751][   T29] audit: type=1326 audit(1758705526.165:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.759951][   T29] audit: type=1326 audit(1758705526.165:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.764625][T11207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.785864][   T29] audit: type=1326 audit(1758705526.165:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.5.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfdcd4eec9 code=0x7ffc0000
[  219.814648][T11207] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.847869][T11211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.850847][T11207] FAULT_INJECTION: forcing a failure.
[  219.850847][T11207] name failslab, interval 1, probability 0, space 0, times 0
[  219.873686][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.5.2486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  219.873715][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  219.873727][T11207] Call Trace:
[  219.873736][T11207]  <TASK>
[  219.873746][T11207]  __dump_stack+0x1d/0x30
[  219.873770][T11207]  dump_stack_lvl+0xe8/0x140
[  219.873792][T11207]  dump_stack+0x15/0x1b
[  219.873824][T11207]  should_fail_ex+0x265/0x280
[  219.873848][T11207]  should_failslab+0x8c/0xb0
[  219.873871][T11207]  kmem_cache_alloc_noprof+0x50/0x310
[  219.873930][T11207]  ? audit_log_start+0x365/0x6c0
[  219.873967][T11207]  audit_log_start+0x365/0x6c0
[  219.873996][T11207]  audit_seccomp+0x48/0x100
[  219.874080][T11207]  ? __seccomp_filter+0x68c/0x10d0
[  219.874107][T11207]  __seccomp_filter+0x69d/0x10d0
[  219.874202][T11207]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  219.874241][T11207]  ? vfs_write+0x7e8/0x960
[  219.874274][T11207]  ? __rcu_read_unlock+0x4f/0x70
[  219.874299][T11207]  ? __fget_files+0x184/0x1c0
[  219.874328][T11207]  __secure_computing+0x82/0x150
[  219.874349][T11207]  syscall_trace_enter+0xcf/0x1e0
[  219.874393][T11207]  do_syscall_64+0xac/0x200
[  219.874431][T11207]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  219.874454][T11207]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  219.874484][T11207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.874538][T11207] RIP: 0033:0x7fbfdcd4eec9
[  219.874556][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.874578][T11207] RSP: 002b:00007fbfdb7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  219.874602][T11207] RAX: ffffffffffffffda RBX: 00007fbfdcfa5fa0 RCX: 00007fbfdcd4eec9
[  219.874618][T11207] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012
[  219.874630][T11207] RBP: 00007fbfdb7b7090 R08: 0000000000000000 R09: 0000000000000000
[  219.874691][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.874717][T11207] R13: 00007fbfdcfa6038 R14: 00007fbfdcfa5fa0 R15: 00007ffc10494d68
[  219.874734][T11207]  </TASK>
[  220.129788][ T5910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.183579][T11222] veth0: entered promiscuous mode
[  220.206643][T11223] __nla_validate_parse: 3 callbacks suppressed
[  220.206661][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'.
[  220.222868][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'.
[  220.248926][T11226] loop2: detected capacity change from 0 to 512
[  220.256231][T11226] EXT4-fs: Ignoring removed oldalloc option
[  220.262841][T11226] EXT4-fs: inline encryption not supported
[  220.262942][T11226] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.271215][T11226] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  220.316545][T11231] veth0: entered promiscuous mode
[  220.326327][T11226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2492: bg 0: block 64: padding at end of block bitmap is not set
[  220.349277][T11227] loop5: detected capacity change from 0 to 8192
[  220.359828][T11226] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2492: Failed to acquire dquot type 0
[  220.373900][T11226] EXT4-fs (loop2): 1 truncate cleaned up
[  220.381306][T11226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.398307][T11221] veth0: left promiscuous mode
[  220.413473][ T6671]  loop5: p1 p2 < > p3 p4 < p5 >
[  220.418966][ T6671] loop5: partition table partially beyond EOD, truncated
[  220.426686][ T6671] loop5: p1 size 100663296 extends beyond EOD, truncated
[  220.427237][T11233] loop4: detected capacity change from 0 to 512
[  220.435746][ T6671] loop5: p2 start 591104 is beyond EOD, truncated
[  220.441838][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.447542][ T6671] loop5: p3 start 33572980 is beyond EOD, truncated
[  220.464569][ T6671] loop5: p5 size 100663296 extends beyond EOD, truncated
[  220.478086][T11227]  loop5: p1 p2 < > p3 p4 < p5 >
[  220.482322][T11233] EXT4-fs: Ignoring removed oldalloc option
[  220.483384][T11227] loop5: partition table partially beyond EOD, truncated
[  220.490267][T11233] EXT4-fs: inline encryption not supported
[  220.505173][T11233] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.512677][T11235] loop2: detected capacity change from 0 to 512
[  220.520227][T11227] loop5: p1 size 100663296 extends beyond EOD, truncated
[  220.522655][T11233] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  220.545139][T11235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  220.552316][T11227] loop5: p2 start 591104 is beyond EOD, truncated
[  220.561808][T11233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2494: bg 0: block 64: padding at end of block bitmap is not set
[  220.562590][T11227] loop5: p3 start 33572980 is beyond EOD, truncated
[  220.588125][T11227] loop5: p5 size 100663296 extends beyond EOD, 
[  220.588125][T11233] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2494: Failed to acquire dquot type 0
[  220.588244][T11227] ==================================================================
[  220.588281][T11227] BUG: KCSAN: data-race in data_push_tail / string
[  220.588324][T11227] 
[  220.588333][T11227] write to 0xffffffff88e546f8 of 1 bytes by task 11233 on cpu 0:
[  220.588354][T11227]  string+0x187/0x220
[  220.588379][T11227]  vsnprintf+0x532/0x890
[  220.588404][T11227]  vscnprintf+0x41/0x90
[  220.588429][T11227]  printk_sprint+0x30/0x2d0
[  220.588448][T11227]  vprintk_store+0x599/0x860
[  220.588468][T11227]  vprintk_emit+0x178/0x650
[  220.588489][T11227]  vprintk_default+0x26/0x30
[  220.588511][T11227]  vprintk+0x1d/0x30
[  220.588538][T11227]  _printk+0x79/0xa0
[  220.588569][T11227]  __ext4_error+0x248/0x320
[  220.588604][T11227]  ext4_acquire_dquot+0x1bb/0x200
[  220.588631][T11227]  dqget+0x535/0x8d0
[  220.588659][T11227]  __dquot_initialize+0x27f/0x7c0
[  220.588688][T11227]  dquot_initialize+0x1a/0x30
[  220.588718][T11227]  ext4_process_orphan+0x32/0x1c0
[  220.588741][T11227]  ext4_orphan_cleanup+0x6a8/0xa00
[  220.588765][T11227]  ext4_fill_super+0x3260/0x35d0
[  220.588800][T11227]  get_tree_bdev_flags+0x28e/0x300
[  220.588827][T11227]  get_tree_bdev+0x1f/0x30
[  220.588853][T11227]  ext4_get_tree+0x1c/0x30
[  220.588890][T11227]  vfs_get_tree+0x57/0x1d0
[  220.588915][T11227]  do_new_mount+0x207/0x5e0
[  220.588940][T11227]  path_mount+0x4a4/0xb20
[  220.588961][T11227]  __se_sys_mount+0x28f/0x2e0
[  220.588982][T11227]  __x64_sys_mount+0x67/0x80
[  220.589006][T11227]  x64_sys_call+0x2b4d/0x2ff0
[  220.589028][T11227]  do_syscall_64+0xd2/0x200
[  220.589059][T11227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.589082][T11227] 
[  220.589091][T11227] read to 0xffffffff88e546f8 of 8 bytes by task 11227 on cpu 1:
[  220.589111][T11227]  data_push_tail+0xfd/0x420
[  220.589150][T11227]  data_alloc+0xbf/0x2b0
[  220.589180][T11227]  prb_reserve+0x808/0xaf0
[  220.589220][T11227]  vprintk_store+0x56d/0x860
[  220.589242][T11227]  vprintk_emit+0x178/0x650
[  220.589263][T11227]  vprintk_default+0x26/0x30
[  220.589285][T11227]  vprintk+0x1d/0x30
[  220.589312][T11227]  _printk+0x79/0xa0
[  220.589341][T11227]  bdev_disk_changed+0x874/0xcb0
[  220.589366][T11227]  loop_set_status+0x5d2/0x6a0
[  220.589389][T11227]  lo_ioctl+0x671/0x12b0
[  220.589407][T11227]  blkdev_ioctl+0x34f/0x440
[  220.589431][T11227]  __se_sys_ioctl+0xce/0x140
[  220.589452][T11227]  __x64_sys_ioctl+0x43/0x50
[  220.589472][T11227]  x64_sys_call+0x1816/0x2ff0
[  220.589497][T11227]  do_syscall_64+0xd2/0x200
[  220.589561][T11227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.589587][T11227] 
[  220.589594][T11227] value changed: 0x00000000fffff8b9 -> 0x746f7571645f6572
[  220.589610][T11227] 
[  220.589617][T11227] Reported by Kernel Concurrency Sanitizer on:
[  220.589631][T11227] CPU: 1 UID: 0 PID: 11227 Comm: syz.5.2493 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  220.589662][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  220.589678][T11227] ==================================================================
[  220.600227][T11233] EXT4-fs (loop4): 1 truncate cleaned up
[  220.608809][T11227] truncated
[  220.617803][T11233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.625394][T11235] EXT4-fs (loop2): 1 truncate cleaned up
[  220.949309][T11235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.964461][T11230] veth0: left promiscuous mode
[  221.023361][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.046706][T11235] netlink: 60 bytes leftover after parsing attributes in process `wÞ¡ÿ'.
[  221.069206][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.